$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa File: 408e275f-c077-3b66-9a3f-a4e43e87657a.roa (raw, json) Hash identifier: iEgfTUlsH+e2QKdHQD/SvOQTdlEs4wBCy7gp/gGtWMM= Subject key identifier: DE:66:F3:69:26:96:D7:B8:34:E2:AC:75:D0:7F:DE:93:7C:F3:B8:20 Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F43285849C20A1E5510D141E8A40D1B40 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 22418 IP address blocks: 208.96.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:1e:55:10:d1:41:e8:a4:0d:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=bbdd3be9-3e8d-4ab7-8ad3-b8e83ed2cd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:30:45:16:26:da:38:fc:f2:1b:61:4f:c0: 7d:b1:cf:46:cc:95:1e:26:af:d9:09:a1:c0:05:4f: b6:a1:4e:b5:ed:47:e6:b3:30:62:d1:08:c3:a2:b5: 85:75:fd:16:eb:55:d6:1f:13:ac:a2:d7:88:01:d6: 19:64:a5:1f:f5:58:0b:f9:c6:80:7c:8e:2d:ed:78: 89:9f:5d:b0:c0:b0:46:fb:18:af:1b:70:00:01:fd: 23:a3:e4:1a:cf:aa:38:ae:a4:75:38:76:7f:2b:43: 14:91:26:d9:94:69:3e:34:63:7c:ea:7d:8d:80:cf: f0:0d:eb:b6:a4:fb:a1:0f:b7:da:31:68:ca:ba:e0: 4a:d3:c4:f3:e0:51:d1:58:d2:56:59:77:82:25:df: 5b:be:08:4e:d5:60:54:71:f1:68:b0:0a:be:ef:76: ff:36:55:53:35:96:0c:ea:09:99:94:dc:73:4c:8e: bb:69:4d:91:43:6c:98:7a:24:14:85:10:28:02:ad: 20:98:8a:db:0d:17:58:81:44:1f:24:b9:72:96:4a: ad:1c:ff:71:a9:35:b8:3c:3f:43:4f:56:df:d5:3d: 6f:65:27:fb:0e:73:78:5d:c9:c5:8b:b1:9b:d8:71: 37:53:6c:b5:be:a1:19:a3:ba:9f:f0:1e:91:c4:a2: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:66:F3:69:26:96:D7:B8:34:E2:AC:75:D0:7F:DE:93:7C:F3:B8:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 208.96.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:98:ad:73:19:77:68:b8:9a:a7:43:79:c3:c1:98:17:00:35: a9:2b:dd:da:13:a2:b0:50:eb:3e:5d:d0:8d:e6:89:84:dc:9c: c9:f6:5c:69:c2:15:4f:8e:4e:78:5f:9a:f0:f8:fb:41:49:55: 31:89:68:cd:7d:97:23:42:6d:d6:50:61:33:d5:19:c4:31:3f: da:dc:70:8a:4a:4f:c2:1d:42:c3:5f:62:1d:7b:22:b4:b6:81: 7a:ec:89:85:e8:e5:62:6e:d7:fa:ac:cd:c0:0f:7d:10:0d:eb: c2:61:52:b5:4f:4b:48:d1:a9:df:2c:40:08:3a:c0:5f:42:fe: b6:e6:dd:f1:5f:30:0b:07:37:c9:44:67:da:49:83:0f:ba:57: 01:85:3b:e7:2f:5f:b9:7a:9c:31:b7:99:62:f4:9e:bf:9a:4f: 98:69:8c:9a:3d:ac:80:3e:c9:a7:7f:e9:7c:55:e7:08:60:0b: 2d:eb:8f:53:57:8d:79:9c:d9:d5:28:6d:b7:08:b6:1b:8c:6b: 65:2d:36:40:51:a7:cd:3d:b9:bb:17:a9:f5:1f:69:c1:a8:58: 22:a2:f0:84:d0:f9:e7:91:dd:4c:5c:ad:ef:13:34:24:eb:c1: 48:0a:a0:06:d0:4a:13:d3:e8:34:39:fc:ad:d4:06:62:02:12: bc:a5:b5:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCh5VENFB6KQNG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YmJkZDNiZTktM2U4ZC00YWI3LThhZDMtYjhlODNlZDJjZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLgwRRYm2jj88hthT8B9sc9GzJUeJq/ZCaHA BU+2oU617UfmszBi0QjDorWFdf0W61XWHxOsoteIAdYZZKUf9VgL+caAfI4t7XiJ n12wwLBG+xivG3AAAf0jo+Qaz6o4rqR1OHZ/K0MUkSbZlGk+NGN86n2NgM/wDeu2 pPuhD7faMWjKuuBK08Tz4FHRWNJWWXeCJd9bvghO1WBUcfFosAq+73b/NlVTNZYM 6gmZlNxzTI67aU2RQ2yYeiQUhRAoAq0gmIrbDRdYgUQfJLlylkqtHP9xqTW4PD9D T1bf1T1vZSf7DnN4XcnFi7Gb2HE3U2y1vqEZo7qf8B6RxKLvfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5m82kmlte4NOKsddB/3pN887ggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvNDA4ZTI3NWYtYzA3Ny0z YjY2LTlhM2YtYTRlNDNlODc2NTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKYrXMZd2i4mqdDecPBmBcANakr3doTorBQ6z5d0I3miYTcnMn2XGnC FU+OTnhfmvD4+0FJVTGJaM19lyNCbdZQYTPVGcQxP9rccIpKT8IdQsNfYh17IrS2 gXrsiYXo5WJu1/qszcAPfRAN68JhUrVPS0jRqd8sQAg6wF9C/rbm3fFfMAsHN8lE Z9pJgw+6VwGFO+cvX7l6nDG3mWL0nr+aT5hpjJo9rIA+yad/6XxV5whgCy3rj1NX jXmc2dUobbcIthuMa2UtNkBRp809ubsXqfUfacGoWCKi8ITQ+eeR3Uxcre8TNCTr wUgKoAbQShPT6DQ5/K3UBmICEryltRw= -----END CERTIFICATE-----Generated at Fri May 9 11:31:42 2025 by rpki-client