$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa File: a665e37a-2264-3b19-b8a4-ae270c10d73a.roa (raw, json) Hash identifier: nI+FGu9uort3H7zn2FM9qVMoi7sFZ+YTPeZ3wI0svIk= Subject key identifier: 47:71:36:CB:87:96:A8:32:4A:59:8F:0B:FF:64:FD:86:D2:32:C1:C9 Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624 Certificate serial: 010D0C9F432858491246C7B58969B6487D6EC4C0 Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3565 IP address blocks: 208.68.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c7:b5:89:69:b6:48:7d:6e:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=2a6b5e2f-f5d5-4b68-b6ee-a43a0728d1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:aa:5d:12:11:26:51:a6:26:2c:4c:c2:d4: 59:4c:23:6c:7b:14:38:e1:78:6a:0b:7a:50:78:2a: b8:f6:68:1d:60:c4:5a:ee:80:4c:70:92:f5:00:4c: c6:a8:4b:7f:f4:1d:83:96:a8:55:8f:0a:89:de:2d: 1a:7f:8b:b0:5e:f4:e1:2f:a8:af:c3:d4:2f:d6:eb: 1e:2e:a7:13:dc:d1:0f:4f:bc:cf:b0:f4:f4:dd:df: f1:ea:39:07:6e:2b:05:51:64:a7:0b:fb:ed:29:30: ba:d2:5e:d2:2a:24:6b:99:71:21:10:48:c3:8b:ef: 6b:0d:af:4f:bb:c9:8c:e6:83:d4:25:2f:cc:93:2d: 48:d3:2e:b5:5f:34:52:05:67:3b:27:67:fc:f6:a9: 38:75:4f:22:5b:13:7b:10:d0:c5:b5:a4:92:ff:a9: 63:4b:2d:d9:df:0d:a9:f0:49:6d:41:2c:ab:47:a8: 7b:ae:ae:e7:42:74:b8:d2:cc:1c:6f:b2:ff:f0:bf: b5:d1:9e:99:c7:d6:9c:09:14:cc:ba:61:7d:73:d1: 32:96:7e:f0:63:80:9f:61:cf:8e:e5:23:3e:7c:ed: 9e:0c:a0:54:87:34:1c:2e:24:24:e1:1b:e7:1e:52: c9:42:ee:63:2d:21:54:8e:d7:be:36:0a:bd:7e:db: ee:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:71:36:CB:87:96:A8:32:4A:59:8F:0B:FF:64:FD:86:D2:32:C1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl X509v3 Authority Key Identifier: keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer sbgp-ipAddrBlock: critical IPv4: 208.68.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ef:8d:86:16:2f:8e:bf:45:3d:8d:36:0b:57:a9:c3:df:a4: dc:02:a7:0c:b8:ba:12:1d:f3:05:69:d5:71:f8:0a:06:e8:36: d9:a4:18:11:0f:e4:4e:88:8e:36:69:67:f4:40:d1:d5:b7:95: 50:a4:fd:5b:09:d0:08:38:59:f2:d1:e7:df:80:17:53:31:73: 48:2c:2b:92:41:83:c5:72:0b:e0:f0:a5:70:b8:26:1e:9d:85: 10:4e:99:b9:43:fc:63:fc:1b:bd:dc:e2:7b:76:da:a9:27:64: 4e:69:0a:05:11:e3:e9:c6:68:75:3c:e3:fe:78:ca:8d:b6:80: b9:5e:0f:14:5b:d7:5e:bb:01:3d:b5:cb:87:51:2e:1c:25:e9: 6c:34:6c:14:0e:1e:f0:d2:71:4f:e3:7b:cf:e4:7e:35:79:c7: 19:be:b5:2f:5a:aa:0f:c8:c9:a3:fa:ff:1f:c5:8f:9b:97:2f: a6:40:54:24:be:cb:9b:be:d6:98:2f:26:3c:b2:ce:46:ec:9e: c4:cc:19:f0:a3:5d:39:4c:6c:38:af:3a:96:8d:49:18:7b:62: da:a6:1b:37:a0:59:70:88:bb:de:5d:ed:1c:b9:30:0c:52:95: d8:81:3d:fa:78:c5:23:cd:28:27:fc:f2:12:e4:87:59:15:a5: 63:8b:24:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRse1iWm2SH1uxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzNjc1NmUtZTQzMy00NzMyLWE3MDctYTlmYTEzOTY1 NjI0MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MmE2YjVlMmYtZjVkNS00YjY4LWI2ZWUtYTQzYTA3MjhkMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocOqXRIRJlGmJixMwtRZTCNsexQ44XhqC3pQ eCq49mgdYMRa7oBMcJL1AEzGqEt/9B2DlqhVjwqJ3i0af4uwXvThL6ivw9Qv1use LqcT3NEPT7zPsPT03d/x6jkHbisFUWSnC/vtKTC60l7SKiRrmXEhEEjDi+9rDa9P u8mM5oPUJS/Mky1I0y61XzRSBWc7J2f89qk4dU8iWxN7ENDFtaSS/6ljSy3Z3w2p 8EltQSyrR6h7rq7nQnS40swcb7L/8L+10Z6Zx9acCRTMumF9c9Eyln7wY4CfYc+O 5SM+fO2eDKBUhzQcLiQk4RvnHlLJQu5jLSFUjte+Ngq9ftvuBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdxNsuHlqgySlmPC/9k/YbSMsHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjM2 NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZhMTM5NjU2MjQvYTY2NWUzN2EtMjI2NC0z YjE5LWI4YTQtYWUyNzBjMTBkNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWIzNjc1NmUtZTQzMy00NzMyLWE3 MDctYTlmYTEzOTY1NjI0L2ViMzY3NTZlLWU0MzMtNDczMi1hNzA3LWE5ZmExMzk2 NTYyNC5jcmwwHwYDVR0jBBgwFoAUiA349Y8cCk5qFJhNT4/nj8QP0TIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjM2NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZh MTM5NjU2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ETcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3vjYYWL46/RT2NNgtXqcPfpNwCpwy4uhId8wVp1XH4CgboNtmkGBEP 5E6IjjZpZ/RA0dW3lVCk/VsJ0Ag4WfLR59+AF1Mxc0gsK5JBg8VyC+DwpXC4Jh6d hRBOmblD/GP8G73c4nt22qknZE5pCgUR4+nGaHU84/54yo22gLleDxRb1167AT21 y4dRLhwl6Ww0bBQOHvDScU/je8/kfjV5xxm+tS9aqg/IyaP6/x/Fj5uXL6ZAVCS+ y5u+1pgvJjyyzkbsnsTMGfCjXTlMbDivOpaNSRh7YtqmGzegWXCIu95d7Ry5MAxS ldiBPfp4xSPNKCf88hLkh1kVpWOLJME= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:10 2025 by rpki-client