$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/d5575d96-e6b2-3cc9-b1a5-45e11588cd0a.roa File: d5575d96-e6b2-3cc9-b1a5-45e11588cd0a.roa (raw, json) Hash identifier: PIqORHAWcJ6IQjdrFL7G59M/CJpuM8YGz7uhSsyMQRA= Subject key identifier: 44:1A:8C:38:D3:CF:F0:D0:6A:10:71:AA:6B:F2:04:CA:EC:5B:DA:03 Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F43285849C20A1E632F129DD858191400 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/d5575d96-e6b2-3cc9-b1a5-45e11588cd0a.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 22418 IP address blocks: 208.96.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:1e:63:2f:12:9d:d8:58:19:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=56931aca-7d0c-435e-bea5-190a9e633704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f6:b2:d5:75:3a:4c:25:84:fb:0f:91:51:32: 03:2b:83:a8:72:e0:ad:d2:c1:fa:0c:ad:0a:ca:0b: ac:34:4f:de:d1:f7:ee:95:13:9b:ff:a4:8b:81:91: 00:59:bd:03:c2:64:16:c7:9b:43:85:ca:66:80:2d: 51:d1:35:73:35:32:66:2f:0f:75:59:48:85:94:c8: d9:b6:9a:d5:5d:be:60:ee:60:f6:48:f7:5e:34:68: 22:ea:57:e0:ec:b8:35:1d:12:ca:15:b0:2f:54:7f: d4:5c:c2:37:a7:78:61:cf:2e:ed:45:ca:15:54:ec: 86:39:e5:1f:b1:56:89:1e:b4:c8:0a:98:e8:e9:20: 1a:fa:32:ad:28:60:c5:9e:6e:e8:ff:b9:f2:18:3e: d9:82:47:19:4a:3d:f3:f6:34:7f:55:4e:e6:b6:7d: f1:40:b0:a6:c2:04:8f:0a:f1:bc:19:3a:73:ee:e8: 71:3a:14:37:f8:e9:bc:7a:b5:d1:e3:c8:61:5d:e4: 1d:90:70:55:82:3b:15:32:63:41:49:27:33:52:d7: a6:df:52:e9:2a:84:ac:b1:2f:44:ac:31:d4:69:5f: 02:fd:78:cc:62:31:c8:1a:dc:87:7c:7b:44:79:0a: b3:5d:21:cb:c7:39:15:0b:aa:08:33:88:58:ce:17: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1A:8C:38:D3:CF:F0:D0:6A:10:71:AA:6B:F2:04:CA:EC:5B:DA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/d5575d96-e6b2-3cc9-b1a5-45e11588cd0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 208.96.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:25:ce:74:c9:b2:44:58:0b:07:2b:48:0c:37:99:2b:28:54: 4e:13:2f:4c:3e:b6:32:70:c9:01:3d:41:ac:23:4a:58:ec:39: 31:45:ba:34:1b:85:d0:ce:8a:fa:18:6a:fc:26:d8:5b:25:56: 33:f9:2d:68:d9:d7:fe:d9:fd:f3:2d:63:d3:51:8d:63:6b:fb: 22:c7:3d:35:2e:e6:96:6e:a7:47:17:af:81:d6:12:04:9f:b3: 4f:4e:47:32:ec:01:68:02:9e:d6:c1:80:36:09:9b:8a:52:4c: f8:40:75:c3:59:8f:25:1e:6e:04:4e:66:1a:13:ad:2f:58:dc: 42:42:6f:5a:85:40:da:75:40:3f:61:b8:17:e4:f6:5c:c9:16: 39:5f:08:39:a5:f3:7c:86:f8:6a:cb:3d:a2:2a:0d:d9:fb:e8: 54:87:66:4c:21:09:cb:4d:22:57:a8:fb:a3:2d:24:95:5a:c1: 84:b0:0a:cb:1a:f4:89:9a:d5:a2:20:0a:fa:86:62:72:b1:7c: b4:65:a8:9f:d0:6c:e9:e8:cc:46:6d:cb:00:42:68:80:8b:3b: 94:44:bb:44:63:81:30:2c:44:2b:3a:c6:aa:7d:bc:32:49:8f: 35:b2:e7:89:41:39:1a:81:fe:b4:ee:2c:02:92:5e:4a:36:5c: 6c:de:e1:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCh5jLxKd2FgZFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NTY5MzFhY2EtN2QwYy00MzVlLWJlYTUtMTkwYTllNjMzNzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPay1XU6TCWE+w+RUTIDK4OocuCt0sH6DK0K ygusNE/e0ffulROb/6SLgZEAWb0DwmQWx5tDhcpmgC1R0TVzNTJmLw91WUiFlMjZ tprVXb5g7mD2SPdeNGgi6lfg7Lg1HRLKFbAvVH/UXMI3p3hhzy7tRcoVVOyGOeUf sVaJHrTICpjo6SAa+jKtKGDFnm7o/7nyGD7ZgkcZSj3z9jR/VU7mtn3xQLCmwgSP CvG8GTpz7uhxOhQ3+Om8erXR48hhXeQdkHBVgjsVMmNBSSczUtem31LpKoSssS9E rDHUaV8C/XjMYjHIGtyHfHtEeQqzXSHLxzkVC6oIM4hYzhfVDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQajDjTz/DQahBxqmvyBMrsW9oDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvZDU1NzVkOTYtZTZiMi0z Y2M5LWIxYTUtNDVlMTE1ODhjZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GCmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUlznTJskRYCwcrSAw3mSsoVE4TL0w+tjJwyQE9QawjSljsOTFFujQb hdDOivoYavwm2FslVjP5LWjZ1/7Z/fMtY9NRjWNr+yLHPTUu5pZup0cXr4HWEgSf s09ORzLsAWgCntbBgDYJm4pSTPhAdcNZjyUebgROZhoTrS9Y3EJCb1qFQNp1QD9h uBfk9lzJFjlfCDml83yG+GrLPaIqDdn76FSHZkwhCctNIleo+6MtJJVawYSwCssa 9Ima1aIgCvqGYnKxfLRlqJ/QbOnozEZtywBCaICLO5REu0RjgTAsRCs6xqp9vDJJ jzWy54lBORqB/rTuLAKSXko2XGze4XE= -----END CERTIFICATE-----Generated at Fri May 9 19:54:26 2025 by rpki-client