$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa File: b689c60f-db70-33f5-924b-db12bc459442.roa (raw, json) Hash identifier: vw9qveSZQDuLC3SlaBKwgk1QqHOUVwumTwTdFKe1Zrs= Subject key identifier: 3D:03:F0:16:D0:EF:6D:6A:C7:74:0A:62:EC:81:72:4A:E5:3B:CD:86 Certificate issuer: /CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Certificate serial: 010D0C9F43285848FEBBD7D5EBA3BA5BEBE02800 Authority key identifier: 0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa Signing time: Tue 25 Feb 2025 02:00:39 +0000 ROA not before: Tue 25 Feb 2025 02:00:39 +0000 ROA not after: Mon 26 May 2025 01:00:39 +0000 asID: 399277 IP address blocks: 204.188.242.0/24 maxlen: 24 204.188.254.0/24 maxlen: 24 208.98.6.0/24 maxlen: 24 208.98.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:bb:d7:d5:eb:a3:ba:5b:eb:e0:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Validity Not Before: Feb 25 02:00:39 2025 GMT Not After : May 26 01:00:39 2025 GMT Subject: CN=467a25bf-c0b8-451c-ba7a-0550956d92cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:82:40:c9:59:17:fb:91:cc:71:3f:21:bf:b7: 14:8d:22:93:15:10:84:ea:b0:c8:bc:2f:14:69:43: 1f:c4:28:91:2a:3f:af:64:9f:8d:f2:4e:75:d1:52: a3:b5:3b:52:12:f1:ab:73:4a:4e:45:c2:15:15:46: 4d:96:aa:e0:5f:bc:0b:08:e5:c0:ef:c4:90:8a:44: ab:0a:05:55:01:98:47:81:f9:46:bc:25:ca:36:16: 55:7a:2c:df:da:f9:c3:82:da:60:b5:91:20:a1:35: 2f:24:3c:58:32:56:54:3c:30:22:6d:1e:df:a6:80: 49:f4:1e:ad:c9:2e:e4:c4:b8:51:fb:3d:61:2b:c3: b6:ff:bc:9b:2f:26:50:6f:f6:1c:4f:d4:53:e4:dc: a2:e8:fc:ca:f4:2c:b5:41:a9:c0:f3:39:39:bf:d3: 6d:f4:3a:40:5b:dd:40:da:75:ed:d3:bf:67:d5:6c: 40:24:5c:46:cb:87:4f:38:53:5f:52:a4:29:12:3a: 7e:e3:19:4b:28:89:df:39:ba:a2:3e:1f:b9:75:df: f2:4e:d9:0c:e0:99:b7:88:c1:06:a1:4a:32:75:c5: 3a:58:99:ba:9d:5c:fe:64:7f:49:59:b3:39:4a:4c: c7:68:71:a3:6a:7f:18:f8:a6:9b:94:41:9e:18:ff: 27:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:03:F0:16:D0:EF:6D:6A:C7:74:0A:62:EC:81:72:4A:E5:3B:CD:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl X509v3 Authority Key Identifier: keyid:0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer sbgp-ipAddrBlock: critical IPv4: 204.188.242.0/24 204.188.254.0/24 208.98.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a6:f8:3c:34:47:97:6f:c1:65:3f:d0:1d:bf:41:9f:c9:99: 33:8c:99:ca:53:e1:0e:99:36:b3:5e:61:95:52:93:ee:e4:54: ab:43:79:72:00:71:ed:71:92:90:bc:c7:2c:66:65:6a:a3:fa: 09:90:45:7a:dd:d6:1b:f1:2e:2a:3e:8b:94:38:7b:d5:b5:a6: c6:2c:c4:5f:e7:ca:47:da:68:a8:5e:27:14:53:b8:62:d5:22: 1e:8a:7a:7e:05:76:7b:0f:28:79:50:d3:d1:13:b9:60:b6:a1: 85:e5:fb:83:88:cd:23:12:d3:cb:a2:2a:e2:6a:a2:b8:80:cd: 62:7a:07:35:e9:05:00:24:6a:8b:65:ec:74:fb:1a:30:c0:6d: 3c:ab:92:82:a0:9a:20:04:92:47:35:19:ae:10:fe:42:af:bf: 4c:97:19:6f:d0:ba:cc:40:ff:39:67:53:f6:00:27:f5:54:54: 2d:6b:48:eb:86:26:e9:91:b6:61:ab:5a:82:7e:17:d7:0b:48: c2:ee:2c:2b:97:d6:2b:56:c8:2d:85:d0:3d:97:48:95:cc:14: e0:cd:93:67:8f:e1:39:3e:9d:e5:72:52:42:54:30:26:d1:c6: e5:23:cb:80:ff:ea:4b:f6:3c:1f:60:d2:98:ab:9a:c6:d5:ba: 91:8e:1a:9c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEj+u9fV66O6W+vgKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRmODNmMmUtZTRiNC00OTUzLThhY2MtNzgxNmIzMzNk MzMyMB4XDTI1MDIyNTAyMDAzOVoXDTI1MDUyNjAxMDAzOVowLzEtMCsGA1UEAxMk NDY3YTI1YmYtYzBiOC00NTFjLWJhN2EtMDU1MDk1NmQ5MmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoJAyVkX+5HMcT8hv7cUjSKTFRCE6rDIvC8U aUMfxCiRKj+vZJ+N8k510VKjtTtSEvGrc0pORcIVFUZNlqrgX7wLCOXA78SQikSr CgVVAZhHgflGvCXKNhZVeizf2vnDgtpgtZEgoTUvJDxYMlZUPDAibR7fpoBJ9B6t yS7kxLhR+z1hK8O2/7ybLyZQb/YcT9RT5Nyi6PzK9Cy1QanA8zk5v9Nt9DpAW91A 2nXt079n1WxAJFxGy4dPOFNfUqQpEjp+4xlLKInfObqiPh+5dd/yTtkM4Jm3iMEG oUoydcU6WJm6nVz+ZH9JWbM5SkzHaHGjan8Y+KablEGeGP8nAwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFD0D8BbQ721qx3QKYuyBckrlO82GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGY4 M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2YjMzM2QzMzIvYjY4OWM2MGYtZGI3MC0z M2Y1LTkyNGItZGIxMmJjNDU5NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRmODNmMmUtZTRiNC00OTUzLThh Y2MtNzgxNmIzMzNkMzMyLzhkZjgzZjJlLWU0YjQtNDk1My04YWNjLTc4MTZiMzMz ZDMzMi5jcmwwHwYDVR0jBBgwFoAUDaYqxupoTrLFfVvi9T8jMGOP5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZGY4M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2 YjMzM2QzMzIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAzLzyAwQA zLz+AwQB0GIGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHym+Dw0R5dvwWU/0B2/QZ/JmTOMmcpT4Q6ZNrNe YZVSk+7kVKtDeXIAce1xkpC8xyxmZWqj+gmQRXrd1hvxLio+i5Q4e9W1psYsxF/n ykfaaKheJxRTuGLVIh6Ken4FdnsPKHlQ09ETuWC2oYXl+4OIzSMS08uiKuJqoriA zWJ6BzXpBQAkaotl7HT7GjDAbTyrkoKgmiAEkkc1Ga4Q/kKvv0yXGW/QusxA/zln U/YAJ/VUVC1rSOuGJumRtmGrWoJ+F9cLSMLuLCuX1itWyC2F0D2XSJXMFODNk2eP 4Tk+neVyUkJUMCbRxuUjy4D/6kv2PB9g0pirmsbVupGOGpw= -----END CERTIFICATE-----Generated at Fri Apr 4 18:54:52 2025 by rpki-client