$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/f6a5e7b9-a8d5-3907-960a-a9ad18fe1b3c.roa File: f6a5e7b9-a8d5-3907-960a-a9ad18fe1b3c.roa (raw, json) Hash identifier: yA0aRa8CdmNCJC4Os/UXExk7unVYQe4swmgdl6NVaBU= Subject key identifier: DD:46:6C:9C:99:CD:99:B1:8C:B4:FC:16:80:EB:FD:07:CE:B6:FD:CB Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F432858495ABEC3B41CEFA9F6A0462A80 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/f6a5e7b9-a8d5-3907-960a-a9ad18fe1b3c.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 23465 IP address blocks: 208.187.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c3:b4:1c:ef:a9:f6:a0:46:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=d2a5fac4-5e9c-41d2-826e-ef11bef799a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a8:b9:0b:c7:a4:d4:88:da:89:88:80:2c:d0: d0:fa:9a:5d:d0:a0:ee:00:c9:68:50:4c:33:f3:99: 12:70:e8:ea:a2:f2:ce:7e:d7:9d:22:67:50:c8:f7: ee:56:6f:3b:fb:72:16:15:43:39:09:c9:25:97:bf: 57:6b:83:bf:79:9f:e1:b6:5f:bd:32:44:16:f8:1c: ca:99:ef:48:f2:8e:52:19:5c:9a:51:1e:e4:f5:6e: 90:6d:24:0a:de:b9:c7:37:7e:3f:8a:85:be:c0:8a: 55:e5:64:95:2d:9f:8a:64:68:41:da:48:b0:2b:79: 5f:e5:90:90:d1:21:fa:b5:19:95:43:78:c7:63:81: 20:ff:01:19:16:a7:f5:59:18:07:e6:a6:7c:bf:e4: 8a:4c:1a:14:58:af:92:87:8c:c7:08:d9:c9:93:ac: 21:d7:9a:20:a3:08:c3:2b:c3:12:0e:f3:a0:8b:5c: a6:5b:b8:cd:e6:39:7e:86:70:97:5b:f6:1b:8c:df: ad:1f:16:c3:b5:72:39:54:ae:68:6b:fd:b6:18:bc: 40:c2:af:3c:b9:b5:3d:8c:72:90:9c:45:0c:a4:54: d5:5c:55:43:c6:08:2e:f8:f5:fd:dd:6c:6b:82:6e: db:5f:12:eb:34:86:84:08:5c:0c:fe:34:c9:38:c3: 06:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:46:6C:9C:99:CD:99:B1:8C:B4:FC:16:80:EB:FD:07:CE:B6:FD:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/f6a5e7b9-a8d5-3907-960a-a9ad18fe1b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 208.187.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:63:2c:b0:cd:42:95:e1:ba:14:06:83:11:14:0e:39:43:94: 54:b9:10:67:92:99:85:0e:a6:84:f4:97:9b:a8:12:53:9a:f6: b5:92:71:e3:61:6b:06:06:d2:ee:df:ca:2a:72:e6:ce:f0:83: ea:1c:ee:18:69:af:ac:55:55:c9:bc:0b:55:e5:2b:a7:5b:c1: 4b:40:7a:0b:1a:47:db:cb:98:75:79:a2:09:aa:ad:d1:e1:93: 50:e8:1a:e9:d9:0a:0d:45:03:66:fc:e9:9a:5f:a5:37:dd:cd: 9e:0e:e6:26:07:1e:69:79:e6:c2:d9:f9:18:e0:c2:24:6c:fa: 92:a4:1f:72:d8:1c:c6:cb:65:73:d9:5d:57:b2:4b:e6:67:24: a8:ba:49:e2:90:b4:28:27:15:88:3d:cb:1d:37:cd:d2:4f:f3: b8:ab:f7:fd:7c:41:dc:ee:34:48:22:59:12:50:d9:02:79:eb: 18:f6:72:62:4b:f1:fe:4c:1f:a4:55:73:d5:72:08:b1:ab:3e: d1:ac:12:8d:7c:e7:b2:42:d4:34:f4:78:38:71:9d:80:32:8e: 09:39:a0:0f:12:02:cc:c4:bf:e4:ad:44:e2:04:62:0e:57:68: fc:17:78:57:1f:84:82:97:74:b2:08:30:bf:78:37:55:73:2e: 0f:32:9e:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavsO0HO+p9qBGKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZDJhNWZhYzQtNWU5Yy00MWQyLTgyNmUtZWYxMWJlZjc5OWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKi5C8ek1IjaiYiALNDQ+ppd0KDuAMloUEwz 85kScOjqovLOftedImdQyPfuVm87+3IWFUM5Cckll79Xa4O/eZ/htl+9MkQW+BzK me9I8o5SGVyaUR7k9W6QbSQK3rnHN34/ioW+wIpV5WSVLZ+KZGhB2kiwK3lf5ZCQ 0SH6tRmVQ3jHY4Eg/wEZFqf1WRgH5qZ8v+SKTBoUWK+Sh4zHCNnJk6wh15ogowjD K8MSDvOgi1ymW7jN5jl+hnCXW/YbjN+tHxbDtXI5VK5oa/22GLxAwq88ubU9jHKQ nEUMpFTVXFVDxggu+PX93Wxrgm7bXxLrNIaECFwM/jTJOMMG5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1GbJyZzZmxjLT8FoDr/QfOtv3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvZjZhNWU3YjktYThkNS0z OTA3LTk2MGEtYTlhZDE4ZmUxYjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Lt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFjLLDNQpXhuhQGgxEUDjlDlFS5EGeSmYUOpoT0l5uoElOa9rWSceNh awYG0u7fyipy5s7wg+oc7hhpr6xVVcm8C1XlK6dbwUtAegsaR9vLmHV5ogmqrdHh k1DoGunZCg1FA2b86ZpfpTfdzZ4O5iYHHml55sLZ+RjgwiRs+pKkH3LYHMbLZXPZ XVeyS+ZnJKi6SeKQtCgnFYg9yx03zdJP87ir9/18QdzuNEgiWRJQ2QJ56xj2cmJL 8f5MH6RVc9VyCLGrPtGsEo1857JC1DT0eDhxnYAyjgk5oA8SAszEv+StROIEYg5X aPwXeFcfhIKXdLIIML94N1VzLg8ynrI= -----END CERTIFICATE-----Generated at Mon Apr 7 16:52:33 2025 by rpki-client