$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa File: 3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa (raw, json) Hash identifier: J2xranhgWukZVE2YsqPPCU6ra/XEeBDM6uwyLDaoUlw= Subject key identifier: 31:6A:C5:08:8A:F1:37:ED:9D:E8:72:6F:71:FD:BC:B8:EB:93:22:D8 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F43285849244E76C63DE3330C6FD3BB40 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 14061 IP address blocks: 192.81.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:76:c6:3d:e3:33:0c:6f:d3:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=36f9c4f5-54f8-4924-a3f2-ad864b786bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c7:38:06:ea:95:80:ef:e0:9f:d0:14:74:12: 2c:de:8a:a9:f3:38:6b:9a:9a:d6:81:23:e5:d7:ee: d0:e6:e1:9b:74:80:74:ed:1f:9c:7c:d5:d6:92:c5: e3:fb:39:d3:5b:69:fa:3b:e8:87:c4:18:d4:db:4a: e4:6a:11:53:8d:5e:0d:76:26:4c:2d:ce:78:3b:00: b7:81:47:80:ad:17:a8:90:08:32:79:7c:1f:80:cd: 50:9c:e0:45:60:e6:f3:66:2f:25:05:4c:0a:c4:25: 36:79:69:26:e5:f8:7b:de:92:65:26:89:fc:bc:5d: f5:22:1a:1c:22:2a:01:70:f8:9c:42:05:b1:aa:9e: a4:c3:78:a7:28:6f:96:2c:3d:5c:9b:97:37:65:5b: 53:1e:6c:97:89:20:e9:54:b9:4c:8f:98:59:b8:c7: 9d:fe:0a:e2:10:8d:78:fb:be:9c:14:3b:78:ba:2a: a6:5d:d1:c7:11:56:a1:84:46:56:5f:fe:8d:2c:60: 07:19:4e:f2:5e:50:de:46:2b:5e:5f:82:ed:bb:b7: 40:ca:25:94:12:20:50:2e:56:e2:29:b9:27:2c:14: ea:8c:b1:23:9e:4c:5e:90:89:fa:b5:e6:f5:01:13: 2c:82:56:2e:7d:0d:83:06:e5:73:f4:f3:43:04:76: 11:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6A:C5:08:8A:F1:37:ED:9D:E8:72:6F:71:FD:BC:B8:EB:93:22:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 192.81.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:52:90:66:85:63:19:56:df:10:18:17:b8:32:46:e7:85:ae: 55:28:d7:94:4d:2e:cd:13:36:e6:90:02:a6:46:cf:95:c6:f8: 5e:3b:21:e7:d2:a5:35:be:c2:4e:aa:76:e2:1b:d7:b5:c3:80: 71:6f:92:aa:d9:28:89:b9:5d:bd:22:17:5f:ac:d5:f5:cd:0d: 4a:94:26:7a:72:89:93:2c:ff:f5:90:15:70:55:1e:9d:06:74: ef:bb:bd:66:b2:31:1a:84:23:59:b5:bb:a1:27:8f:9b:e8:2b: fb:9b:08:62:08:96:e1:e0:2d:83:95:41:57:e0:ea:9f:89:bd: 58:7d:c3:cc:14:7e:23:c2:f0:09:f1:c5:c7:2d:e4:89:67:e6: 41:3d:79:fc:4d:61:3c:99:84:38:0a:e8:d8:e0:83:23:19:24: 5a:75:49:8b:27:81:8a:00:c9:fb:66:11:05:58:12:2e:49:5d: c2:c5:20:b7:3f:34:5f:c2:24:7f:a2:44:a4:3e:a3:c6:8e:46: a8:38:92:05:f6:d8:e2:62:6e:a1:e9:8a:04:3e:8f:3b:bb:e9: ae:51:7a:20:79:e8:71:c8:82:e3:d3:37:c7:d0:cc:eb:43:da: 1e:e5:9c:d2:67:69:46:80:4d:52:38:ff:4d:04:11:73:10:37: 27:5a:05:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnbGPeMzDG/Tu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MzZmOWM0ZjUtNTRmOC00OTI0LWEzZjItYWQ4NjRiNzg2YmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsc4BuqVgO/gn9AUdBIs3oqp8zhrmprWgSPl 1+7Q5uGbdIB07R+cfNXWksXj+znTW2n6O+iHxBjU20rkahFTjV4NdiZMLc54OwC3 gUeArReokAgyeXwfgM1QnOBFYObzZi8lBUwKxCU2eWkm5fh73pJlJon8vF31Ihoc IioBcPicQgWxqp6kw3inKG+WLD1cm5c3ZVtTHmyXiSDpVLlMj5hZuMed/griEI14 +76cFDt4uiqmXdHHEVahhEZWX/6NLGAHGU7yXlDeRiteX4Ltu7dAyiWUEiBQLlbi KbknLBTqjLEjnkxekIn6teb1ARMsglYufQ2DBuVz9PNDBHYRuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFqxQiK8Tftnehyb3H9vLjrkyLYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvM2QwYzk2NGUtYTg4Ny0z ZmRjLWFlYzAtMGI3ZWMyNDk4MDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwFHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVSkGaFYxlW3xAYF7gyRueFrlUo15RNLs0TNuaQAqZGz5XG+F47IefS pTW+wk6qduIb17XDgHFvkqrZKIm5Xb0iF1+s1fXNDUqUJnpyiZMs//WQFXBVHp0G dO+7vWayMRqEI1m1u6Enj5voK/ubCGIIluHgLYOVQVfg6p+JvVh9w8wUfiPC8Anx xcct5Iln5kE9efxNYTyZhDgK6NjggyMZJFp1SYsngYoAyftmEQVYEi5JXcLFILc/ NF/CJH+iRKQ+o8aORqg4kgX22OJibqHpigQ+jzu76a5ReiB56HHIguPTN8fQzOtD 2h7lnNJnaUaATVI4/00EEXMQNydaBbQ= -----END CERTIFICATE-----Generated at Sun Apr 6 00:08:03 2025 by rpki-client