$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa File: 6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa (raw, json) Hash identifier: 9omnxQEO1YXk1nu7Uf8rxt7laX2ZTIMGkUaUeU4dd0s= Subject key identifier: 0B:49:AC:E1:03:1B:2A:50:6E:03:FB:12:55:E0:47:FD:21:5F:72:EA Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F43285849002165342AF09DC417234E50 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 394996 IP address blocks: 209.38.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:65:34:2a:f0:9d:c4:17:23:4e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=69af9336-f47b-40a1-87b2-354a14e479b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b4:85:35:38:fd:8d:cc:ee:fd:52:8f:c5:90: f6:d7:d3:53:18:d1:60:58:80:37:c9:73:3c:3e:c5: 50:84:48:e5:ca:4c:8a:94:c6:bb:74:4a:f9:fb:4b: 39:38:da:70:ab:95:af:07:92:08:36:bb:87:8a:06: 25:dc:ac:58:70:fc:f2:81:c1:f2:b7:aa:b2:70:26: c3:c0:af:33:2d:19:01:d5:6d:4c:cc:4a:34:8b:a4: 98:cc:53:e9:eb:15:51:ac:81:0f:64:eb:1b:cd:0d: c1:d5:94:a0:a6:85:f2:dc:db:ef:26:09:84:d4:09: 65:2d:ba:31:64:ce:dd:54:53:20:32:1e:16:40:10: 36:5d:8c:84:6c:46:82:06:1e:54:1f:6e:be:b9:16: 4d:24:14:e4:1e:47:4e:9e:95:35:bd:d9:ae:59:35: 3d:b6:ed:f6:75:52:7b:fd:13:67:76:78:fb:c3:ce: 2e:b3:90:7c:ec:69:3e:67:69:c3:50:5e:a8:e8:b5: 52:55:1e:bb:21:02:6f:4a:ed:3f:60:e6:d3:c9:61: fc:81:97:aa:cb:a5:d9:f0:31:e3:d0:04:39:b5:3d: bb:67:95:56:08:8e:43:26:ea:ca:eb:60:20:74:da: 9c:7e:0a:70:99:f9:38:e2:7d:c8:5a:f1:8d:09:f3: 60:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:49:AC:E1:03:1B:2A:50:6E:03:FB:12:55:E0:47:FD:21:5F:72:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 209.38.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5a:da:5f:db:a1:a7:5e:59:f8:1d:95:64:88:7a:c2:7b:da: 79:2d:47:41:d1:4c:11:96:07:5a:17:1e:9d:71:1c:94:f6:99: e7:51:4d:b1:67:15:5f:14:44:6e:2d:5e:e7:55:40:96:e5:7a: 2a:ed:62:2d:e6:29:8e:7b:37:2a:9e:e2:78:8c:cc:9b:5a:df: 21:19:0d:f1:48:4d:d9:48:10:3b:4f:0a:71:5c:be:8e:26:63: f3:de:89:10:1d:0b:04:4d:ab:63:6b:06:33:c4:2d:b1:7b:f8: 51:2c:3c:bd:21:9d:b3:23:e6:a0:ba:34:ab:17:ce:69:29:87: 2e:78:d3:fc:18:4c:f4:c3:37:97:a9:e4:4f:48:1b:51:ee:96: be:4e:9e:e2:f8:da:55:30:a9:a9:61:f5:ae:7f:ba:6d:fc:7d: f7:fc:7e:8c:a7:bc:c6:1d:bb:e3:5a:03:7f:9e:e9:be:ee:c5: 0d:71:06:9d:a5:e8:76:9e:0a:e5:0b:a0:6c:cc:49:66:ba:d6: 94:4a:a6:e6:f0:ec:43:41:d3:c4:fb:8d:f1:40:93:cb:03:00: d2:e4:5b:91:ff:16:1a:b5:6b:fe:0d:97:07:7d:bb:fd:4d:48: 45:32:5f:57:ac:45:77:57:8b:e9:ad:4d:4a:f8:b8:15:77:01: 71:f5:e6:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWU0KvCdxBcjTlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NjlhZjkzMzYtZjQ3Yi00MGExLTg3YjItMzU0YTE0ZTQ3OWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7SFNTj9jczu/VKPxZD219NTGNFgWIA3yXM8 PsVQhEjlykyKlMa7dEr5+0s5ONpwq5WvB5IINruHigYl3KxYcPzygcHyt6qycCbD wK8zLRkB1W1MzEo0i6SYzFPp6xVRrIEPZOsbzQ3B1ZSgpoXy3NvvJgmE1AllLbox ZM7dVFMgMh4WQBA2XYyEbEaCBh5UH26+uRZNJBTkHkdOnpU1vdmuWTU9tu32dVJ7 /RNndnj7w84us5B87Gk+Z2nDUF6o6LVSVR67IQJvSu0/YObTyWH8gZeqy6XZ8DHj 0AQ5tT27Z5VWCI5DJurK62AgdNqcfgpwmfk44n3IWvGNCfNgEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtJrOEDGypQbgP7ElXgR/0hX3LqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNmMyOWQ5YWQtNGFmMi0z NDljLThkOWQtYWExMWM1M2FhNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SYDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFa2l/boadeWfgdlWSIesJ72nktR0HRTBGWB1oXHp1xHJT2medRTbFn FV8URG4tXudVQJbleirtYi3mKY57Nyqe4niMzJta3yEZDfFITdlIEDtPCnFcvo4m Y/PeiRAdCwRNq2NrBjPELbF7+FEsPL0hnbMj5qC6NKsXzmkphy540/wYTPTDN5ep 5E9IG1Hulr5OnuL42lUwqalh9a5/um38fff8foynvMYdu+NaA3+e6b7uxQ1xBp2l 6HaeCuULoGzMSWa61pRKpubw7ENB08T7jfFAk8sDANLkW5H/Fhq1a/4Nlwd9u/1N SEUyX1esRXdXi+mtTUr4uBV3AXH15tk= -----END CERTIFICATE-----Generated at Fri Mar 14 09:40:41 2025 by rpki-client