$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa File: 80176c29-2db4-33cf-b400-b52a4a80cd03.roa (raw, json) Hash identifier: utpeCY2Vu4GMgiueIWTCQchUPRjJf2if5j9jPdzPtjo= Subject key identifier: EC:87:35:60:B2:35:A7:2D:02:BF:FC:0F:FB:B0:77:5B:27:99:93:D9 Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F43285849244E7E39E1D1DA18BCE22F40 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 208.71.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7e:39:e1:d1:da:18:bc:e2:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=46a520d2-0e7b-4401-91b2-306cc2f08905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ce:a2:34:14:fd:01:bc:62:d1:2b:1c:73:c8: 6d:12:d0:f4:84:d4:34:98:77:e3:4c:6f:4c:e7:aa: 7c:7e:91:13:3c:8a:07:08:33:e0:0b:c9:0a:45:00: 54:f5:52:05:b8:41:96:53:10:d2:a1:84:8a:66:04: e0:ce:51:f9:78:b3:8d:bb:65:94:f2:15:06:48:0e: c1:85:e3:65:4e:48:e7:b5:b4:85:f5:cb:64:fc:92: 94:b8:9b:a4:05:be:7a:21:11:d4:99:da:fb:f4:6e: bd:99:14:26:67:b9:e3:87:f5:43:b6:a8:75:4c:f0: 7e:12:ea:08:17:92:bd:80:af:24:ac:73:42:5b:21: d4:7d:56:1d:97:5e:58:02:fe:77:63:f1:b3:c3:d5: 64:04:fc:c9:ca:4d:5c:64:13:6b:be:b5:10:da:57: 04:60:12:92:a8:cd:64:77:61:ec:4a:27:ae:9a:be: 39:40:38:81:66:db:19:f1:65:38:a0:36:19:08:f0: b3:17:50:bf:cd:a8:0f:d0:e2:1e:e0:a7:b6:1f:7f: d5:88:2a:35:66:df:ac:bd:af:ba:76:21:db:fa:7b: bd:d8:43:83:78:94:c7:b6:38:1a:ce:15:9a:57:5a: 7c:bf:be:a5:b4:50:ab:78:6d:bc:60:49:6e:ef:7d: df:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:87:35:60:B2:35:A7:2D:02:BF:FC:0F:FB:B0:77:5B:27:99:93:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: 208.71.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a8:5d:db:cf:ea:c1:80:d8:94:97:5c:93:1c:83:11:79:6d: 73:7f:58:c2:22:83:38:36:db:e7:6f:af:7f:22:55:ef:73:0b: ae:c1:26:13:56:a1:bc:ff:56:30:4f:42:a3:06:93:dd:d9:18: 96:44:51:68:4d:99:e3:87:e0:ba:3a:81:86:d8:7c:1b:28:71: 46:ed:ae:37:c5:47:cc:d0:a9:63:09:a5:57:0b:bb:42:54:6c: da:aa:39:dd:52:56:4a:25:ae:00:ee:9f:ed:00:69:19:2e:fb: f9:d4:c5:9c:81:d0:c5:2c:ef:a1:d3:6c:8d:f0:8b:ed:4a:79: fd:d3:c3:e6:19:4e:cf:bf:c1:70:bd:46:39:d9:5a:63:e4:ea: ce:74:34:a7:56:2c:71:c4:28:72:04:b3:b5:e5:0d:be:bd:67: a4:ae:8a:81:87:8e:77:6c:7e:1d:62:7b:42:3e:de:1f:36:42: a7:e4:1d:44:54:4c:d6:77:b2:99:b1:04:65:e4:d0:0b:1d:a7: c6:4c:89:64:68:a6:f1:9d:37:ad:95:79:37:9b:94:13:b0:5f: c5:bf:8d:0d:75:e3:a0:b5:5e:9b:93:7a:16:a8:4a:ad:d4:1a: b8:9b:8a:04:03:e1:a6:54:ac:ab:b6:bf:7c:0d:a7:c6:e4:fb: 98:0e:fb:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTn454dHaGLziL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NDZhNTIwZDItMGU3Yi00NDAxLTkxYjItMzA2Y2MyZjA4OTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi86iNBT9Abxi0Sscc8htEtD0hNQ0mHfjTG9M 56p8fpETPIoHCDPgC8kKRQBU9VIFuEGWUxDSoYSKZgTgzlH5eLONu2WU8hUGSA7B heNlTkjntbSF9ctk/JKUuJukBb56IRHUmdr79G69mRQmZ7njh/VDtqh1TPB+EuoI F5K9gK8krHNCWyHUfVYdl15YAv53Y/Gzw9VkBPzJyk1cZBNrvrUQ2lcEYBKSqM1k d2HsSieumr45QDiBZtsZ8WU4oDYZCPCzF1C/zagP0OIe4Ke2H3/ViCo1Zt+sva+6 diHb+nu92EODeJTHtjgazhWaV1p8v76ltFCreG28YElu733fbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyHNWCyNactAr/8D/uwd1snmZPZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvODAxNzZjMjktMmRiNC0z M2NmLWI0MDAtYjUyYTRhODBjZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EcWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOoXdvP6sGA2JSXXJMcgxF5bXN/WMIigzg22+dvr38iVe9zC67BJhNW obz/VjBPQqMGk93ZGJZEUWhNmeOH4Lo6gYbYfBsocUbtrjfFR8zQqWMJpVcLu0JU bNqqOd1SVkolrgDun+0AaRku+/nUxZyB0MUs76HTbI3wi+1Kef3Tw+YZTs+/wXC9 RjnZWmPk6s50NKdWLHHEKHIEs7XlDb69Z6SuioGHjndsfh1ie0I+3h82QqfkHURU TNZ3spmxBGXk0Asdp8ZMiWRopvGdN62VeTeblBOwX8W/jQ1146C1XpuTehaoSq3U GribigQD4aZUrKu2v3wNp8bk+5gO+1U= -----END CERTIFICATE-----Generated at Mon May 5 08:43:44 2025 by rpki-client