$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa File: 352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa (raw, json) Hash identifier: QSPnAnLUXwLXl3VNdfBX89cBFWVtVrwCd4QHCL2xsxg= Subject key identifier: 39:EF:95:B3:51:14:00:87:9A:F1:A3:B0:90:6B:DF:B0:5F:D0:F9:25 Certificate issuer: /CN=f509b96c-10eb-4731-ae65-8d698aade657 Certificate serial: 010D0C9F432858494B641232026312A47457BB40 Authority key identifier: 88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 8075 IP address blocks: 208.66.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:12:32:02:63:12:a4:74:57:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f509b96c-10eb-4731-ae65-8d698aade657 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=815bb469-13ed-40f2-aaa9-38863b2cd862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:73:bf:f2:75:02:4a:4e:30:72:a8:e7:a1:5a: 1a:fb:29:f9:8d:ef:39:03:b6:de:d7:7d:ce:91:11: 3e:68:22:07:98:0e:b3:b0:9f:4c:5e:f3:df:6b:c4: ef:c3:88:92:d8:68:b3:fe:c1:b5:b1:27:e2:cb:7d: 02:88:a0:05:59:f9:82:8c:26:a4:b7:5b:64:f6:01: 46:3e:af:8c:39:7a:43:47:52:7d:e2:31:92:bc:fc: f6:ba:5b:2f:e7:cd:39:0b:ce:b2:f1:e7:8f:cc:8b: 24:72:d1:51:01:d8:82:6d:b3:b9:e3:1b:cb:67:c9: 00:d3:60:63:cc:b3:99:0f:8c:85:39:cd:85:c8:ea: de:2f:4e:25:9b:85:cf:09:ef:04:b5:4b:db:e1:21: ce:fe:6f:27:d8:fc:4c:0b:8c:7b:49:eb:62:e0:dd: 59:a8:82:f3:b0:1f:99:91:c8:2c:15:b3:fc:c8:dd: 25:a7:67:52:dc:f0:dc:06:28:3c:06:03:86:41:30: 5f:94:8e:28:b8:5a:d0:92:d2:7d:84:11:2f:1d:5d: 61:12:52:52:73:cc:74:d6:72:ea:88:a2:d1:6e:9b: f1:4e:70:bc:6f:ce:a9:50:c7:9c:ba:26:41:ab:18: b4:b0:54:f7:5b:b8:a8:40:58:7f:0d:54:3f:9f:5c: f7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EF:95:B3:51:14:00:87:9A:F1:A3:B0:90:6B:DF:B0:5F:D0:F9:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl X509v3 Authority Key Identifier: keyid:88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer sbgp-ipAddrBlock: critical IPv4: 208.66.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:30:38:2b:6d:0e:b0:fe:25:79:01:9a:e7:93:44:d1:1f:1e: 05:77:c5:6e:35:80:40:5d:b9:79:3a:43:8f:5b:13:2f:40:3a: cc:bb:a5:40:a3:f7:fa:32:6f:16:82:ce:8e:39:55:2a:1c:b2: 28:e9:d8:71:b5:96:68:4a:7f:4b:89:d7:e9:ea:d5:a9:72:eb: 7c:e7:52:8b:34:57:48:aa:3a:d2:4b:1f:e0:b3:96:65:ce:0b: 6e:a6:f8:eb:00:9c:3a:ae:99:6f:9a:74:0a:09:ff:05:f9:8b: 50:fe:8a:69:ef:7b:26:db:47:54:da:16:4c:55:2f:53:9a:57: 5e:ae:45:7e:ae:b5:50:9d:58:db:66:19:f0:c1:76:cf:39:b3: 79:17:76:90:27:87:ee:88:a0:c0:f1:35:12:e4:7c:f4:a6:2e: 9a:1e:19:db:be:80:bd:15:18:8a:3f:6e:1b:6c:24:38:38:76: cd:fe:60:c3:21:6b:61:22:7a:86:3e:63:d3:aa:6e:d9:1c:b5: 05:7a:f1:49:50:cc:ef:d4:aa:5a:be:e1:30:2a:f4:85:4d:68: 1b:36:32:4e:37:1e:44:53:8a:d1:ea:2c:97:59:c3:38:b8:ea: fe:53:c4:97:98:96:dc:0e:89:46:36:08:4d:ec:33:fd:35:99: 3b:03:7a:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBIyAmMSpHRXu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUwOWI5NmMtMTBlYi00NzMxLWFlNjUtOGQ2OThhYWRl NjU3MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ODE1YmI0NjktMTNlZC00MGYyLWFhYTktMzg4NjNiMmNkODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnO/8nUCSk4wcqjnoVoa+yn5je85A7be133O kRE+aCIHmA6zsJ9MXvPfa8Tvw4iS2Giz/sG1sSfiy30CiKAFWfmCjCakt1tk9gFG Pq+MOXpDR1J94jGSvPz2ulsv5805C86y8eePzIskctFRAdiCbbO54xvLZ8kA02Bj zLOZD4yFOc2FyOreL04lm4XPCe8EtUvb4SHO/m8n2PxMC4x7Seti4N1ZqILzsB+Z kcgsFbP8yN0lp2dS3PDcBig8BgOGQTBflI4ouFrQktJ9hBEvHV1hElJSc8x01nLq iKLRbpvxTnC8b86pUMecuiZBqxi0sFT3W7ioQFh/DVQ/n1z3rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnvlbNRFACHmvGjsJBr37Bf0PklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNTA5 Yjk2Yy0xMGViLTQ3MzEtYWU2NS04ZDY5OGFhZGU2NTcvMzUyZmVjMWQtYTFlOS0z NGYyLWExOWEtMjdmY2E5ZmQ3ZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjUwOWI5NmMtMTBlYi00NzMxLWFl NjUtOGQ2OThhYWRlNjU3L2Y1MDliOTZjLTEwZWItNDczMS1hZTY1LThkNjk4YWFk ZTY1Ny5jcmwwHwYDVR0jBBgwFoAUiPEsKTw08jE1u7qyI9SATNUFYowwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNTA5Yjk2Yy0xMGViLTQ3MzEtYWU2NS04ZDY5 OGFhZGU2NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ELkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMwOCttDrD+JXkBmueTRNEfHgV3xW41gEBduXk6Q49bEy9AOsy7pUCj 9/oybxaCzo45VSocsijp2HG1lmhKf0uJ1+nq1aly63znUos0V0iqOtJLH+CzlmXO C26m+OsAnDqumW+adAoJ/wX5i1D+imnveybbR1TaFkxVL1OaV16uRX6utVCdWNtm GfDBds85s3kXdpAnh+6IoMDxNRLkfPSmLpoeGdu+gL0VGIo/bhtsJDg4ds3+YMMh a2EieoY+Y9OqbtkctQV68UlQzO/Uqlq+4TAq9IVNaBs2Mk43HkRTitHqLJdZwzi4 6v5TxJeYltwOiUY2CE3sM/01mTsDeus= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:38 2025 by rpki-client