$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/918523ba-c151-3f99-b377-2e0bfbd7897c.roa File: 918523ba-c151-3f99-b377-2e0bfbd7897c.roa (raw, json) Hash identifier: OygL7NfHTDr+asmf9s0f/rWYy5+81dMu1YD7nEI2eDo= Subject key identifier: 20:CE:35:90:CC:93:74:94:7B:D9:27:B3:09:DE:54:CA:6B:4F:05:E6 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285849C20A248CB0C9E6D839A00600 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/918523ba-c151-3f99-b377-2e0bfbd7897c.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 46687 IP address blocks: 208.93.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:24:8c:b0:c9:e6:d8:39:a0:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=50b04f81-38d0-4350-bbba-14a4241af5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bc:20:bf:1c:ac:35:eb:a3:78:e9:c8:bb:22: 5c:6f:2d:70:ab:d0:68:00:ae:45:40:6c:83:6f:58: e2:c8:8b:f3:b7:25:04:8f:da:d0:c3:b7:1f:15:f0: b7:cb:c9:e6:6f:c5:07:24:74:9c:8d:c5:6c:71:0d: c5:04:6b:64:61:1c:ee:a9:d0:a6:3d:6d:62:61:f9: 5e:a6:ba:1b:d3:50:49:34:f0:12:72:a5:28:6f:9a: 40:b5:20:a5:ac:b5:de:43:72:b7:c3:2f:fc:f0:2b: 7a:8a:14:e4:1c:82:e8:15:ac:8c:99:11:de:a0:fc: 4b:9a:39:13:5a:2c:b4:11:cd:11:dc:9b:9f:ed:61: b0:a7:e4:04:15:11:eb:1f:10:ee:e4:87:a4:06:07: 31:54:5f:a4:60:58:d5:58:57:04:ae:8c:13:4f:e2: dd:1c:14:1f:44:f8:83:ee:97:55:5e:4f:dd:25:1d: a3:20:37:6d:f5:30:3b:5c:61:d7:17:4f:70:bd:16: 1e:6e:53:42:b5:6d:1a:98:cb:48:ac:92:5a:4b:4e: 38:97:dd:f6:06:53:ad:3c:12:21:c7:8c:ee:30:ef: 46:73:83:8a:fc:c9:06:71:24:29:fa:1d:17:99:4b: c7:1d:98:4a:ca:be:cb:42:6b:24:45:11:ea:d0:ed: 4e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CE:35:90:CC:93:74:94:7B:D9:27:B3:09:DE:54:CA:6B:4F:05:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/918523ba-c151-3f99-b377-2e0bfbd7897c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 208.93.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:eb:1c:eb:ae:6d:cc:8f:61:ae:2c:38:53:19:44:13:14:3f: 8e:15:54:38:b6:7a:ab:cf:ad:e7:ca:cf:c0:54:e6:5d:c4:15: 80:79:a5:f9:c1:7d:4b:96:64:27:d5:95:cc:2a:19:e0:c3:12: de:53:fa:9a:8b:c9:81:1a:27:3f:bd:a9:56:3c:54:da:1c:19: 8a:61:6b:71:e0:72:c6:30:a5:8d:5f:b1:b5:f4:1b:cf:68:fb: 55:09:35:d1:23:7e:13:1c:4f:00:11:05:ff:f8:9a:1a:2e:4f: 7c:8d:15:54:86:6b:81:aa:5a:7c:09:e3:9a:ba:9c:64:02:d4: 79:3d:93:ef:f1:03:8f:92:e7:39:31:e5:2a:a0:54:92:c5:ff: 47:0f:75:5f:0b:57:9c:d5:e4:47:66:29:60:d1:0c:e1:8e:d5: b2:dd:53:11:fd:a5:ac:f8:ba:40:4f:88:a3:bc:a4:1f:77:6b: 91:8d:4c:f9:c9:48:d1:43:35:e5:77:42:36:b4:45:36:d7:d3: e7:13:43:6c:0a:0c:25:d9:1d:9d:68:2f:90:ce:c9:5b:65:48: b2:b5:56:51:a2:18:13:ca:bd:80:79:0a:95:41:3b:eb:c6:33: 2d:bf:45:51:fc:c7:e2:3a:a3:5b:0d:01:23:12:64:ea:32:a6: 96:f5:60:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiSMsMnm2DmgBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NTBiMDRmODEtMzhkMC00MzUwLWJiYmEtMTRhNDI0MWFmNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrwgvxysNeujeOnIuyJcby1wq9BoAK5FQGyD b1jiyIvztyUEj9rQw7cfFfC3y8nmb8UHJHScjcVscQ3FBGtkYRzuqdCmPW1iYfle prob01BJNPAScqUob5pAtSClrLXeQ3K3wy/88Ct6ihTkHILoFayMmRHeoPxLmjkT Wiy0Ec0R3Juf7WGwp+QEFRHrHxDu5IekBgcxVF+kYFjVWFcErowTT+LdHBQfRPiD 7pdVXk/dJR2jIDdt9TA7XGHXF09wvRYeblNCtW0amMtIrJJaS044l932BlOtPBIh x4zuMO9Gc4OK/MkGcSQp+h0XmUvHHZhKyr7LQmskRRHq0O1O+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDONZDMk3SUe9knswneVMprTwXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvOTE4NTIzYmEtYzE1MS0z Zjk5LWIzNzctMmUwYmZiZDc4OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0F1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbrHOuubcyPYa4sOFMZRBMUP44VVDi2eqvPrefKz8BU5l3EFYB5pfnB fUuWZCfVlcwqGeDDEt5T+pqLyYEaJz+9qVY8VNocGYpha3HgcsYwpY1fsbX0G89o +1UJNdEjfhMcTwARBf/4mhouT3yNFVSGa4GqWnwJ45q6nGQC1Hk9k+/xA4+S5zkx 5SqgVJLF/0cPdV8LV5zV5EdmKWDRDOGO1bLdUxH9paz4ukBPiKO8pB93a5GNTPnJ SNFDNeV3Qja0RTbX0+cTQ2wKDCXZHZ1oL5DOyVtlSLK1VlGiGBPKvYB5CpVBO+vG My2/RVH8x+I6o1sNASMSZOoyppb1YNI= -----END CERTIFICATE-----Generated at Mon May 12 05:17:15 2025 by rpki-client