$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/208b91d4-30b6-3828-81b6-51f68d93e7a5.roa File: 208b91d4-30b6-3828-81b6-51f68d93e7a5.roa (raw, json) Hash identifier: jJgrN6dnZzxttzAbUDlg4kMurESR5oXIKj83I2vdHOY= Subject key identifier: 6A:C9:EE:48:F4:28:E5:BB:97:DF:8E:52:A3:E8:26:96:0E:25:A3:40 Certificate issuer: /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Certificate serial: 010D0C9F43285849D63125A9A7333CEAADA88A00 Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/208b91d4-30b6-3828-81b6-51f68d93e7a5.roa Signing time: Tue 13 May 2025 06:15:50 +0000 ROA not before: Tue 13 May 2025 06:15:50 +0000 ROA not after: Mon 11 Aug 2025 06:15:50 +0000 asID: 25655 IP address blocks: 173.241.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:31:25:a9:a7:33:3c:ea:ad:a8:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Validity Not Before: May 13 06:15:50 2025 GMT Not After : Aug 11 06:15:50 2025 GMT Subject: CN=d68f4cd1-05bb-4dcb-bd47-89a511fe3c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:4d:98:44:2c:e3:03:60:97:67:b5:27:15: 31:5e:4f:7b:ca:32:ff:fc:f1:16:f9:1d:38:cf:7f: 18:3f:27:93:e2:bd:73:67:30:99:d8:0a:5b:88:01: 34:5d:25:64:91:f7:c0:f9:fd:65:46:db:64:74:67: a7:2d:38:66:88:9c:09:18:d0:24:43:31:cd:77:0c: 69:29:dd:f1:b0:9f:bb:78:64:90:d4:b3:52:76:14: 69:a9:a9:6a:f5:b6:75:e9:22:2e:28:1a:bf:43:84: 54:2e:68:86:6c:51:b3:81:0c:80:9c:66:15:ce:b9: 52:6f:e6:df:c8:3a:2f:4b:33:42:ac:38:c2:53:8c: 54:40:90:1f:90:e3:b0:02:57:ac:b7:7c:e0:10:2a: d9:75:0c:44:0e:fd:64:72:3d:9f:6f:bb:bc:cd:a9: 7a:38:bf:99:54:cf:31:bb:8f:dc:8f:f3:aa:57:c4: 38:f8:9b:41:96:13:35:b7:e5:b9:f5:39:4d:7b:36: b2:1f:90:06:56:99:dd:30:13:8e:4f:2d:67:36:3b: f5:11:c4:bd:15:7b:9c:04:0c:28:aa:32:46:c3:42: 2e:d3:5e:fb:0a:70:7f:23:e6:64:3d:35:1a:9a:02: f3:5c:6e:e0:14:f8:d0:2b:5a:50:d5:d8:40:59:e9: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C9:EE:48:F4:28:E5:BB:97:DF:8E:52:A3:E8:26:96:0E:25:A3:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/208b91d4-30b6-3828-81b6-51f68d93e7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl X509v3 Authority Key Identifier: keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer sbgp-ipAddrBlock: critical IPv4: 173.241.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:58:5b:e9:b9:85:9b:49:62:81:a3:49:b6:c1:b7:09:49:6e: 01:ed:81:07:4d:d7:07:26:8d:f7:d5:22:fd:a2:d3:eb:7b:f9: f4:6f:dd:40:96:e3:26:a6:f8:56:24:a7:57:b7:1c:88:14:d9: 03:83:5f:b3:4b:c9:72:e5:fe:87:a5:e2:65:0f:a6:ee:07:e1: 3b:99:59:9b:f9:29:b3:54:1c:54:20:aa:b6:f0:46:78:47:ec: 03:ee:61:1c:85:c8:06:dd:ba:93:95:53:90:4f:77:54:e4:42: 14:0a:9e:1e:99:eb:bf:ab:c8:38:e6:3a:e0:c3:08:3e:5f:c6: a4:09:5d:c4:76:2e:65:9b:02:5c:12:44:10:c5:51:21:1f:4a: 2e:9c:a4:c6:89:06:93:5e:04:25:2d:d7:19:e6:96:b9:93:78: cf:e7:ca:cd:aa:93:cc:f5:04:49:d7:af:c7:6f:e5:a9:1f:fb: 8b:0e:fe:5f:25:f3:68:52:36:1f:d7:41:c0:36:d8:05:b0:35: 43:a8:11:81:bd:f6:cf:21:f0:9d:b3:a0:57:a8:a6:9b:fe:ee: 72:66:45:b9:bd:3d:3b:c1:8a:7b:e3:f9:2a:8b:7d:8d:ea:f1: 41:09:11:6c:92:42:60:04:f0:c9:4d:7f:69:7e:7d:d8:89:95: ae:60:15:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnWMSWppzM86q2oigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOTQ0Y2QtNTFhOC00ZDEwLWFlNTctNzI0ZGUyNmEx ZDYyMB4XDTI1MDUxMzA2MTU1MFoXDTI1MDgxMTA2MTU1MFowLzEtMCsGA1UEAxMk ZDY4ZjRjZDEtMDViYi00ZGNiLWJkNDctODlhNTExZmUzYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXhNmEQs4wNgl2e1JxUxXk97yjL//PEW+R04 z38YPyeT4r1zZzCZ2ApbiAE0XSVkkffA+f1lRttkdGenLThmiJwJGNAkQzHNdwxp Kd3xsJ+7eGSQ1LNSdhRpqalq9bZ16SIuKBq/Q4RULmiGbFGzgQyAnGYVzrlSb+bf yDovSzNCrDjCU4xUQJAfkOOwAlest3zgECrZdQxEDv1kcj2fb7u8zal6OL+ZVM8x u4/cj/OqV8Q4+JtBlhM1t+W59TlNezayH5AGVpndMBOOTy1nNjv1EcS9FXucBAwo qjJGw0Iu0177CnB/I+ZkPTUamgLzXG7gFPjQK1pQ1dhAWekSdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrJ7kj0KOW7l9+OUqPoJpYOJaNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5 NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRkZTI2YTFkNjIvMjA4YjkxZDQtMzBiNi0z ODI4LTgxYjYtNTFmNjhkOTNlN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzNhOTQ0Y2QtNTFhOC00ZDEwLWFl NTctNzI0ZGUyNmExZDYyL2MzYTk0NGNkLTUxYTgtNGQxMC1hZTU3LTcyNGRlMjZh MWQ2Mi5jcmwwHwYDVR0jBBgwFoAUqGCfuRfF6i7M/i9bQ1PRwl+tfbUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRk ZTI2YTFkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9YW+m5hZtJYoGjSbbBtwlJbgHtgQdN1wcmjffVIv2i0+t7+fRv3UCW 4yam+FYkp1e3HIgU2QODX7NLyXLl/oel4mUPpu4H4TuZWZv5KbNUHFQgqrbwRnhH 7APuYRyFyAbdupOVU5BPd1TkQhQKnh6Z67+ryDjmOuDDCD5fxqQJXcR2LmWbAlwS RBDFUSEfSi6cpMaJBpNeBCUt1xnmlrmTeM/nys2qk8z1BEnXr8dv5akf+4sO/l8l 82hSNh/XQcA22AWwNUOoEYG99s8h8J2zoFeoppv+7nJmRbm9PTvBinvj+SqLfY3q 8UEJEWySQmAE8MlNf2l+fdiJla5gFTk= -----END CERTIFICATE-----Generated at Tue May 13 13:24:56 2025 by rpki-client