$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa File: 4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa (raw, json) Hash identifier: wp0w2ae3bkSKx/kbEZCzrsvfwM8Y17Po2jbjIlFv+JY= Subject key identifier: 86:9C:9A:1E:60:A7:F8:FA:75:ED:BC:9D:63:8C:C9:9C:E0:28:87:7A Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F43285848FBF12C360814A1344D846E00 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa Signing time: Mon 24 Feb 2025 02:00:38 +0000 ROA not before: Mon 24 Feb 2025 02:00:38 +0000 ROA not after: Sun 25 May 2025 01:00:38 +0000 asID: 16437 IP address blocks: 208.88.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:f1:2c:36:08:14:a1:34:4d:84:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Feb 24 02:00:38 2025 GMT Not After : May 25 01:00:38 2025 GMT Subject: CN=d420078d-ac57-4d04-a1b4-abba77e1a94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2e:30:b9:81:9b:84:43:4a:52:16:ff:8b:a2: 36:92:21:46:0e:0d:3a:36:6b:1e:b4:c9:d0:59:df: 52:49:54:36:c7:0c:ae:aa:93:3a:d4:61:bf:cc:a4: 79:01:e7:6a:c0:b1:91:b3:74:07:34:42:cd:2f:87: a7:09:17:db:9b:e9:af:bf:55:55:c3:c8:dc:32:f8: 5f:0a:6b:a0:45:05:63:fe:dd:6a:9f:4e:9b:6f:6e: a3:0f:ec:47:a6:f1:6f:b1:44:bb:04:d5:9d:8a:25: 63:b5:b5:7a:cb:ac:3c:f1:2d:6d:c3:d4:2f:f8:91: ce:53:39:67:af:81:1e:ea:19:37:21:c1:9f:55:81: 74:54:ea:ca:73:58:1b:30:e4:2b:1b:57:96:46:d3: 12:3f:4c:c0:ff:d8:89:81:ef:07:1f:c0:2d:d9:88: 30:1b:f0:f1:76:ce:6f:e7:75:aa:16:16:42:0e:8a: 2b:12:5c:ba:fd:cb:75:46:08:36:dd:d7:46:e4:7d: 9e:ce:19:07:e8:1b:6d:25:81:b5:5e:36:62:6b:9c: 1f:55:07:65:83:0c:83:9b:33:6c:fc:79:32:ea:69: 6c:50:90:ee:f0:99:50:fb:8e:c6:55:32:06:fb:81: 12:2b:5f:49:37:99:86:b9:07:2f:ae:19:ee:b9:13: af:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9C:9A:1E:60:A7:F8:FA:75:ED:BC:9D:63:8C:C9:9C:E0:28:87:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:dd:62:7d:cb:c0:ea:5d:f2:c6:6a:a4:5d:8c:b2:f4:98:00: 9c:91:5d:2c:a8:f0:aa:4b:09:81:c3:c4:aa:87:dd:4b:99:e6: 2b:5d:ed:6e:2b:3a:56:a4:5a:75:1c:45:cd:83:45:c6:99:02: 0f:15:38:dc:de:8f:bd:87:fb:68:f6:cc:18:78:28:6e:6f:31: d4:47:18:14:f7:5f:77:0d:5d:04:7a:23:06:9b:64:f2:15:8f: 45:2d:c9:b9:65:6a:50:70:fe:4d:7c:8d:b5:d4:2a:10:95:cb: ea:c1:a3:7a:f7:39:b7:f0:dd:83:7d:75:58:50:a4:7b:b5:f0: 63:a4:34:d0:44:be:9e:35:54:ca:e0:09:d5:bc:0e:62:2c:d9: 27:f8:41:7d:82:bf:81:fc:61:bb:a6:b9:76:60:ff:40:12:73: d3:a3:9c:03:ba:f4:36:dd:3e:2e:02:bd:f3:63:e2:ac:7b:cc: e4:6d:fa:3d:c2:c5:63:a1:70:b1:11:cb:54:3f:e3:67:67:e4: d9:a2:d8:72:53:5d:05:83:9c:1d:23:88:67:f3:35:1c:c6:51: 59:1d:8d:06:ad:53:67:eb:1f:89:3f:8f:5a:3f:c4:6a:35:a0: 35:e0:96:2f:b5:be:0e:d3:33:cd:58:38:2a:34:08:c8:18:37: a3:07:87:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj78Sw2CBShNE2EbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk ZDQyMDA3OGQtYWM1Ny00ZDA0LWExYjQtYWJiYTc3ZTFhOTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC4wuYGbhENKUhb/i6I2kiFGDg06NmsetMnQ Wd9SSVQ2xwyuqpM61GG/zKR5AedqwLGRs3QHNELNL4enCRfbm+mvv1VVw8jcMvhf CmugRQVj/t1qn06bb26jD+xHpvFvsUS7BNWdiiVjtbV6y6w88S1tw9Qv+JHOUzln r4Ee6hk3IcGfVYF0VOrKc1gbMOQrG1eWRtMSP0zA/9iJge8HH8At2YgwG/Dxds5v 53WqFhZCDoorEly6/ct1Rgg23ddG5H2ezhkH6BttJYG1XjZia5wfVQdlgwyDmzNs /Hky6mlsUJDu8JlQ+47GVTIG+4ESK19JN5mGuQcvrhnuuROv0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIacmh5gp/j6de28nWOMyZzgKId6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNGE3ZTFkYmQtNDcwNC0z NDJiLWI3NDEtNTZiMGM4ZTc1OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzdYn3LwOpd8sZqpF2MsvSYAJyRXSyo8KpLCYHDxKqH3UuZ5itd7W4r OlakWnUcRc2DRcaZAg8VONzej72H+2j2zBh4KG5vMdRHGBT3X3cNXQR6IwabZPIV j0UtybllalBw/k18jbXUKhCVy+rBo3r3Obfw3YN9dVhQpHu18GOkNNBEvp41VMrg CdW8DmIs2Sf4QX2Cv4H8YbumuXZg/0ASc9OjnAO69DbdPi4CvfNj4qx7zORt+j3C xWOhcLERy1Q/42dn5Nmi2HJTXQWDnB0jiGfzNRzGUVkdjQatU2frH4k/j1o/xGo1 oDXgli+1vg7TM81YOCo0CMgYN6MHhz0= -----END CERTIFICATE-----Generated at Wed Apr 16 17:13:22 2025 by rpki-client