$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa File: 82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa (raw, json) Hash identifier: Fywi/6gQhr2V7ZbLD7GnJXYOyiR3ANjDLvFk9E25Q0U= Subject key identifier: D1:F6:2E:F3:E2:88:44:40:43:9E:DF:59:DB:3C:C3:A8:0E:DF:39:55 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F432858495ABEC3C79E75D347B64BF0D0 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 23465 IP address blocks: 208.187.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c3:c7:9e:75:d3:47:b6:4b:f0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=b122f9d9-f3a9-43ac-8d66-3f377e78d110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:9c:4b:a0:3e:10:bc:f8:b1:1a:0e:65:04: e5:57:e4:67:43:fb:1f:0f:0e:83:c7:e9:53:54:94: 5d:ed:c8:e4:d0:62:6f:a0:12:17:8c:2c:56:cc:4c: a5:4e:ea:ea:a7:fc:43:a5:97:b6:14:3c:6d:35:fc: bf:af:17:fb:a0:64:62:2d:ff:f1:85:b5:b7:a7:ea: 8c:ac:88:81:af:90:9d:0b:dc:ca:e4:64:ad:c8:1b: ae:8e:ef:a5:4e:92:b6:30:13:20:e2:04:bf:f8:84: 2f:3d:09:fb:4f:6f:4e:31:a6:ec:f0:d8:de:63:0b: f7:58:2c:d3:97:35:80:72:ea:38:0e:68:79:37:25: 69:16:31:f4:1a:1e:13:5b:d1:31:ad:c6:5c:46:9a: 1e:3e:42:b2:b1:14:14:f8:5e:19:dc:b2:f8:bf:c2: 99:3e:bb:b0:21:71:ee:cf:c3:4e:ea:e9:44:d8:47: da:d0:d8:f5:85:7a:31:b7:a7:10:12:46:d9:da:3c: 80:89:0e:d8:4f:0e:b0:a3:c9:0c:03:55:94:ee:e8: ff:32:08:af:5a:7d:fb:28:f8:70:63:39:25:0b:be: bd:8d:41:7a:34:99:7d:09:09:77:2f:78:29:e8:1c: 21:85:c0:6c:a0:62:71:1c:be:95:88:4b:bd:be:47: 75:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F6:2E:F3:E2:88:44:40:43:9E:DF:59:DB:3C:C3:A8:0E:DF:39:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 208.187.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:22:7b:fa:11:f3:18:81:82:82:30:99:ce:4a:2d:f4:b5:3b: 85:a6:df:ce:3c:d1:32:3e:61:98:49:9d:14:c8:c3:c7:43:7f: af:87:cc:02:70:41:7e:53:aa:53:bd:cb:64:f1:9f:bd:50:b5: 2c:6d:dc:cf:ca:03:b3:23:11:0d:d8:bb:38:8f:5b:85:d8:80: a5:b2:66:c9:4d:47:af:1e:ab:15:18:83:8b:ac:e2:1c:4c:50: 88:d8:c5:60:c7:8a:a5:b2:86:e4:cb:4d:07:c8:4f:f7:a5:aa: c5:a2:f1:75:04:d0:25:93:6e:ec:b2:26:73:02:02:b3:c6:1f: d0:2b:7e:ac:6b:c0:c5:9a:e6:e0:08:3c:4b:0d:da:a9:cf:18: 4e:8d:fd:14:89:d9:28:8f:8b:16:0e:7b:99:45:98:ee:d1:af: e9:db:30:e0:d5:3a:c4:a6:58:f7:87:a8:cc:b1:8d:6d:84:cf: 46:66:6b:56:a8:7c:b7:53:8b:7f:49:9d:73:be:b3:ea:51:7f: 6f:c3:61:45:35:b3:15:20:ab:6a:84:c5:d6:6d:d0:9f:c7:ed: 31:3f:43:6f:5e:8b:07:d7:b9:3d:14:c0:a3:12:8f:a8:c0:86: 19:ea:ca:64:7e:f0:cb:44:52:ed:20:7c:1a:c3:5b:f1:cd:09: 02:f4:a5:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavsPHnnXTR7ZL8NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk YjEyMmY5ZDktZjNhOS00M2FjLThkNjYtM2YzNzdlNzhkMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopKcS6A+ELz4sRoOZQTlV+RnQ/sfDw6Dx+lT VJRd7cjk0GJvoBIXjCxWzEylTurqp/xDpZe2FDxtNfy/rxf7oGRiLf/xhbW3p+qM rIiBr5CdC9zK5GStyBuuju+lTpK2MBMg4gS/+IQvPQn7T29OMabs8NjeYwv3WCzT lzWAcuo4Dmh5NyVpFjH0Gh4TW9ExrcZcRpoePkKysRQU+F4Z3LL4v8KZPruwIXHu z8NO6ulE2Efa0Nj1hXoxt6cQEkbZ2jyAiQ7YTw6wo8kMA1WU7uj/MgivWn37KPhw YzklC769jUF6NJl9CQl3L3gp6BwhhcBsoGJxHL6ViEu9vkd13QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH2LvPiiERAQ57fWds8w6gO3zlVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvODJiNjFjNzgtMDY5Yy0z MDQ2LTgyZDctN2VjZWE4YTRmYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Lt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcie/oR8xiBgoIwmc5KLfS1O4Wm38480TI+YZhJnRTIw8dDf6+HzAJw QX5TqlO9y2Txn71QtSxt3M/KA7MjEQ3YuziPW4XYgKWyZslNR68eqxUYg4us4hxM UIjYxWDHiqWyhuTLTQfIT/elqsWi8XUE0CWTbuyyJnMCArPGH9ArfqxrwMWa5uAI PEsN2qnPGE6N/RSJ2SiPixYOe5lFmO7Rr+nbMODVOsSmWPeHqMyxjW2Ez0Zma1ao fLdTi39JnXO+s+pRf2/DYUU1sxUgq2qExdZt0J/H7TE/Q29eiwfXuT0UwKMSj6jA hhnqymR+8MtEUu0gfBrDW/HNCQL0pSA= -----END CERTIFICATE-----Generated at Mon Apr 7 16:50:57 2025 by rpki-client