$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa File: d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa (raw, json) Hash identifier: 7rMVtbiBYlY6QwjL61tnVJQ+ryLrgTaTcPBYfR/zT/0= Subject key identifier: 8D:13:F3:8E:F8:04:67:2D:72:40:5F:96:88:F1:E0:67:A2:BC:A1:6A Certificate issuer: /CN=3133c6b3-ff40-49eb-bad3-65967c11dca0 Certificate serial: 010D0C9F432858491246C85827D4032BC4E5F9C0 Authority key identifier: FA:2F:FF:59:90:7F:F5:95:8C:42:8A:11:46:14:08:40:E1:11:05:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 36236 IP address blocks: 208.67.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c8:58:27:d4:03:2b:c4:e5:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3133c6b3-ff40-49eb-bad3-65967c11dca0 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=102dcf05-a5bc-43f7-a51d-208859bc905b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:04:12:14:03:8c:cb:78:23:4f:a3:99:1e:b8: ea:82:c1:9a:d4:64:23:db:f4:f1:80:35:c5:71:89: d3:fa:4f:6a:72:88:18:ae:a3:7e:fe:4b:22:de:5d: b9:0c:b5:80:fd:7f:a1:05:39:0d:8c:24:6a:d8:cc: 35:60:c1:d4:4d:2e:5e:d1:f0:58:4b:71:d1:8a:b5: 8e:7d:7c:eb:b8:c2:f1:c8:ea:96:5c:b6:41:a1:07: 4d:6c:da:8f:5b:b5:23:c8:8a:59:cd:c8:cc:84:33: 09:bd:07:3a:26:9b:c8:ad:dc:2e:cb:87:9c:2c:15: 33:89:a9:95:16:a7:3d:42:fa:a8:36:ef:fd:a9:3a: 49:1a:a2:bf:e9:45:93:4b:10:ca:d8:85:3e:5a:3d: 45:e6:f0:95:ac:04:98:bd:ba:ba:55:3a:74:b4:b0: 60:04:69:75:22:47:79:dc:9a:b0:27:a2:4c:c6:f1: a2:b7:21:a2:a9:01:25:03:f5:ed:c4:03:03:5d:fb: a2:f6:49:18:01:8d:de:ab:9a:81:d9:46:9f:ca:46: d3:e5:e5:e7:0b:a4:fe:6a:cc:02:ab:7e:16:a7:6b: 5d:0d:5c:c0:38:32:c9:27:a0:d7:5b:c2:12:e3:58: 6d:50:44:c8:e7:7d:e4:05:eb:ed:a4:10:67:02:00: b7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:13:F3:8E:F8:04:67:2D:72:40:5F:96:88:F1:E0:67:A2:BC:A1:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.crl X509v3 Authority Key Identifier: keyid:FA:2F:FF:59:90:7F:F5:95:8C:42:8A:11:46:14:08:40:E1:11:05:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0.cer sbgp-ipAddrBlock: critical IPv4: 208.67.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:57:71:7a:45:21:1e:ed:91:af:25:90:35:46:9b:aa:b8:86: ff:5f:e8:e5:87:ec:84:ca:61:a8:66:c2:65:e6:48:83:ce:d4: a1:25:98:c7:b4:dc:52:ac:82:ca:64:02:47:7b:59:00:e2:f2: 86:b5:6b:3f:83:32:b6:e5:33:7e:72:a7:f4:0d:d1:46:d9:6f: 17:28:99:f3:76:dc:f8:c1:ed:10:38:b4:f7:2b:3c:fc:1a:08: b8:99:fc:38:9b:a3:be:4c:cb:1e:e5:97:95:a0:19:14:cc:62: 07:78:b0:42:cd:1b:b6:f8:2a:7e:67:72:ee:df:95:38:23:88: 17:c0:09:b4:28:e0:7a:5e:01:2e:1f:b2:92:67:2e:fc:e6:b3: 09:03:d0:03:b1:9b:f7:25:c3:82:1d:bf:52:e6:e3:ca:12:96: af:26:71:e1:e1:57:ca:d2:32:54:91:72:02:7d:ee:68:90:19: eb:08:37:4b:86:04:e1:e5:4d:93:fb:70:92:2d:3a:67:82:e1: 17:23:7f:2d:99:f8:f5:d5:07:2c:1f:a8:d8:ef:47:3f:89:d1: c0:cf:d2:91:87:ab:b3:58:cf:54:1b:43:e6:20:85:3d:ab:36: db:4f:78:7c:ee:99:dd:cd:03:14:d3:c3:3f:35:e8:6d:df:22: 9e:00:36:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRshYJ9QDK8Tl+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEzM2M2YjMtZmY0MC00OWViLWJhZDMtNjU5NjdjMTFk Y2EwMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MTAyZGNmMDUtYTViYy00M2Y3LWE1MWQtMjA4ODU5YmM5MDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAQSFAOMy3gjT6OZHrjqgsGa1GQj2/TxgDXF cYnT+k9qcogYrqN+/ksi3l25DLWA/X+hBTkNjCRq2Mw1YMHUTS5e0fBYS3HRirWO fXzruMLxyOqWXLZBoQdNbNqPW7UjyIpZzcjMhDMJvQc6JpvIrdwuy4ecLBUziamV Fqc9QvqoNu/9qTpJGqK/6UWTSxDK2IU+Wj1F5vCVrASYvbq6VTp0tLBgBGl1Ikd5 3JqwJ6JMxvGityGiqQElA/XtxAMDXfui9kkYAY3eq5qB2UafykbT5eXnC6T+aswC q34Wp2tdDVzAODLJJ6DXW8IS41htUETI533kBevtpBBnAgC36wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0T8474BGctckBflojx4GeivKFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zMTMz YzZiMy1mZjQwLTQ5ZWItYmFkMy02NTk2N2MxMWRjYTAvZDJmMzc5MmItZDQ3Ni0z ZDRmLWJhYjktNTMxMDRkYzBlMGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzEzM2M2YjMtZmY0MC00OWViLWJh ZDMtNjU5NjdjMTFkY2EwLzMxMzNjNmIzLWZmNDAtNDllYi1iYWQzLTY1OTY3YzEx ZGNhMC5jcmwwHwYDVR0jBBgwFoAU+i//WZB/9ZWMQooRRhQIQOERBYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zMTMzYzZiMy1mZjQwLTQ5ZWItYmFkMy02NTk2 N2MxMWRjYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EPmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVXcXpFIR7tka8lkDVGm6q4hv9f6OWH7ITKYahmwmXmSIPO1KElmMe0 3FKsgspkAkd7WQDi8oa1az+DMrblM35yp/QN0UbZbxcomfN23PjB7RA4tPcrPPwa CLiZ/Dibo75Myx7ll5WgGRTMYgd4sELNG7b4Kn5ncu7flTgjiBfACbQo4HpeAS4f spJnLvzmswkD0AOxm/clw4Idv1Lm48oSlq8mceHhV8rSMlSRcgJ97miQGesIN0uG BOHlTZP7cJItOmeC4Rcjfy2Z+PXVBywfqNjvRz+J0cDP0pGHq7NYz1QbQ+YghT2r NttPeHzumd3NAxTTwz816G3fIp4ANls= -----END CERTIFICATE-----Generated at Tue Apr 8 11:01:07 2025 by rpki-client