$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa File: b1c86e78-67c7-333a-928e-a0cff3179bb3.roa (raw, json) Hash identifier: MJAtcdbFETynUjOVVuzZPrOa/hLWQLwT2t6jvPYhfpU= Subject key identifier: CB:E1:3C:33:2F:14:41:1B:03:7F:78:40:61:F8:B2:47:E2:5F:59:72 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584925B3A7EC924A9B8160855100 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 13576 IP address blocks: 208.53.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:a7:ec:92:4a:9b:81:60:85:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=0fc43376-13e5-41ea-beee-8eb422df2f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4e:f7:53:4d:8c:98:3d:96:56:ce:97:b5:8f: 6d:eb:06:6b:a2:ae:64:c2:5a:46:e1:77:5a:e4:be: 5b:9d:93:7e:10:38:5f:32:b9:12:c4:c0:90:df:cd: 4c:cb:cc:e7:61:0e:24:bb:a3:a1:7b:de:09:05:4d: e0:23:e7:6a:57:f4:7f:44:88:a4:37:b7:18:f0:c0: 8f:a8:7f:d8:4c:91:0b:67:17:eb:34:79:15:52:0e: 59:21:6f:35:57:af:69:da:ee:f9:c1:73:5c:cb:de: 74:16:9e:05:f4:03:0b:96:f7:a5:1d:17:dc:e4:38: 01:df:e2:b1:8b:7f:51:47:0f:cb:4b:9c:f1:cf:52: 1b:54:e0:ed:3e:15:ca:3b:cf:c8:80:9b:dc:ff:0c: bb:94:3d:01:c7:ea:0d:84:1f:ae:46:7c:a3:60:d8: 94:ba:59:a2:d7:39:67:67:04:3a:7e:3c:a9:7b:af: 58:a3:3b:a5:08:bc:fa:fd:94:b9:f2:2a:22:fa:89: cf:c2:0c:fd:ad:66:26:57:93:79:e6:e1:6f:25:6b: 37:13:43:a3:69:d4:41:bf:6c:fd:1e:17:f8:f7:88: bd:07:34:6c:4c:05:9c:16:04:61:c1:52:f4:a2:c7: 52:d6:08:df:50:e5:8a:d0:8d:33:eb:b9:10:a8:40: cb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E1:3C:33:2F:14:41:1B:03:7F:78:40:61:F8:B2:47:E2:5F:59:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:23:3c:8e:ee:36:a5:3e:a6:a7:01:f1:2e:a9:74:1d:01:2c: f2:67:26:3c:c1:1c:14:ee:6f:d1:2a:1b:ee:8a:77:51:ba:44: 98:d4:b5:56:aa:c9:09:03:74:ec:f5:d0:82:62:ca:8d:ed:dd: 9f:b4:00:92:02:92:e3:f5:03:43:af:12:79:84:55:55:3b:49: fd:05:33:ad:32:f9:6c:b4:3c:db:d8:39:a8:c5:e9:49:a0:7c: b6:0b:74:b0:d2:9c:c6:d2:a2:8a:65:bc:a8:8a:be:b6:ff:c4: 50:e5:0c:e5:b3:03:f1:8d:b6:de:ca:a5:ed:ae:a0:f2:3d:aa: a6:f2:e0:c9:2f:05:eb:4c:1f:38:76:9a:e9:77:11:53:e4:15: 26:f3:24:2c:db:f5:0a:0f:29:26:08:4e:46:49:1e:55:5c:24: 85:0f:65:21:48:7b:9a:ba:50:ca:32:a9:4d:7c:3a:bb:9e:21: 48:17:b8:c7:d5:3b:d7:03:ae:07:e7:fb:0a:96:bb:36:53:a2: b5:d7:0d:f6:e8:82:ce:6e:4c:9f:d6:e3:96:1d:7d:86:e8:24: a5:44:85:02:36:85:03:39:7a:52:c3:1d:62:4c:04:7c:01:42: d1:f1:c4:0a:40:87:da:fb:80:65:6d:51:a6:02:8f:83:b2:57: 2c:03:91:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6fskkqbgWCFUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk MGZjNDMzNzYtMTNlNS00MWVhLWJlZWUtOGViNDIyZGYyZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU73U02MmD2WVs6XtY9t6wZroq5kwlpG4Xda 5L5bnZN+EDhfMrkSxMCQ381My8znYQ4ku6Ohe94JBU3gI+dqV/R/RIikN7cY8MCP qH/YTJELZxfrNHkVUg5ZIW81V69p2u75wXNcy950Fp4F9AMLlvelHRfc5DgB3+Kx i39RRw/LS5zxz1IbVODtPhXKO8/IgJvc/wy7lD0Bx+oNhB+uRnyjYNiUulmi1zln ZwQ6fjype69YozulCLz6/ZS58ioi+onPwgz9rWYmV5N55uFvJWs3E0OjadRBv2z9 Hhf494i9BzRsTAWcFgRhwVL0osdS1gjfUOWK0I0z67kQqEDLIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvhPDMvFEEbA394QGH4skfiX1lyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjFjODZlNzgtNjdjNy0z MzNhLTkyOGUtYTBjZmYzMTc5YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0jPI7uNqU+pqcB8S6pdB0BLPJnJjzBHBTub9EqG+6Kd1G6RJjUtVaq yQkDdOz10IJiyo3t3Z+0AJICkuP1A0OvEnmEVVU7Sf0FM60y+Wy0PNvYOajF6Umg fLYLdLDSnMbSooplvKiKvrb/xFDlDOWzA/GNtt7Kpe2uoPI9qqby4MkvBetMHzh2 mul3EVPkFSbzJCzb9QoPKSYITkZJHlVcJIUPZSFIe5q6UMoyqU18OrueIUgXuMfV O9cDrgfn+wqWuzZTorXXDfbogs5uTJ/W45YdfYboJKVEhQI2hQM5elLDHWJMBHwB QtHxxApAh9r7gGVtUaYCj4OyVywDkcE= -----END CERTIFICATE-----Generated at Mon May 5 04:17:09 2025 by rpki-client