$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/b874dedc-9a39-3c5b-8eb0-fe349f0e60c9.roa File: b874dedc-9a39-3c5b-8eb0-fe349f0e60c9.roa (raw, json) Hash identifier: dB70ZjPTzaYdXNXus/tCNkr+jrOFgBW1MnTrwdnDC3k= Subject key identifier: 51:AA:53:83:14:6A:1B:97:A5:FC:3B:11:BD:3A:E0:DD:C5:EB:C7:70 Certificate issuer: /CN=0dca6695-752f-4d90-822c-1351355a562e Certificate serial: 010D0C9F43285849218403D6EDBCB9C016C92880 Authority key identifier: 4A:DB:D3:45:21:9E:7E:95:81:10:A0:AC:82:EB:5E:D1:9A:46:0C:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/b874dedc-9a39-3c5b-8eb0-fe349f0e60c9.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 46189 IP address blocks: 208.92.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:03:d6:ed:bc:b9:c0:16:c9:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dca6695-752f-4d90-822c-1351355a562e Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=4b6a02d8-6196-4264-a9dc-970207ed8d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:92:fb:00:8c:b2:20:2f:75:91:38:cd:bb:4f: ae:81:8b:9d:14:67:67:f5:3d:f3:83:03:51:f6:5e: d1:df:77:5d:03:42:a2:2f:65:ed:8e:5b:b9:34:ed: f9:a3:d9:1b:17:d3:0c:32:ae:33:81:67:6f:0c:bd: 10:d0:db:7a:25:ec:e5:87:49:2f:38:f6:25:d6:ca: 53:a5:22:33:d1:bd:06:f4:66:21:0f:a4:f5:14:e0: 5d:53:40:65:b5:5f:59:34:05:ad:5c:3e:88:25:60: 94:d6:09:f1:48:11:e4:0a:b2:a8:1a:d0:7a:25:ec: 8e:f0:1b:0b:73:1f:f7:42:af:22:31:89:be:6f:a2: 34:1e:c9:5f:5b:80:38:c6:80:c0:9c:c8:52:eb:79: ba:eb:22:b3:91:e7:f6:ed:6e:0d:a5:16:17:0e:0a: b9:0f:4f:35:e1:d5:32:1e:87:b5:e3:c3:c5:99:83: 35:04:48:9e:e9:71:be:1d:a4:c3:af:66:33:cc:2b: 94:ab:d3:88:99:cd:1d:0d:79:9a:7a:6f:b2:e7:55: 50:15:7d:e1:9a:cc:32:99:38:7b:fd:7a:52:21:ac: 52:f9:7c:1f:5e:32:f1:28:74:8e:74:8b:7e:98:0b: 8e:f1:13:0a:65:af:f2:0a:43:86:9d:a4:48:6d:c7: 2d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AA:53:83:14:6A:1B:97:A5:FC:3B:11:BD:3A:E0:DD:C5:EB:C7:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/b874dedc-9a39-3c5b-8eb0-fe349f0e60c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.crl X509v3 Authority Key Identifier: keyid:4A:DB:D3:45:21:9E:7E:95:81:10:A0:AC:82:EB:5E:D1:9A:46:0C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e.cer sbgp-ipAddrBlock: critical IPv4: 208.92.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:40:37:2b:b4:00:41:05:c6:46:f7:59:f2:0c:6d:9b:3d:24: 44:92:62:d9:4e:18:cf:60:9a:a2:7f:a7:de:aa:0e:a8:aa:0f: fc:68:16:00:e3:ca:00:8f:d7:94:db:6f:24:90:98:5b:8b:a3: f8:f0:7d:9d:4e:12:83:b9:89:94:e6:1d:31:e4:25:1a:dd:0a: 83:18:f8:66:58:95:ea:d9:2d:f1:26:69:ff:9a:fa:18:fb:6a: 85:42:7c:fb:14:bf:45:38:b5:14:e1:53:2f:5b:ff:3b:f6:28: 56:e7:82:30:f2:ac:0d:f5:d7:4e:97:da:00:a7:d8:91:10:f9: cd:62:d1:e5:5a:57:ff:13:e0:8b:23:9f:f5:fc:2d:f4:e2:eb: 36:fc:ae:03:ea:79:16:0e:ec:71:1e:52:b1:32:0b:1b:a5:f0: ad:75:12:ed:ed:7e:c1:85:fa:5b:32:7f:c9:4d:97:01:9e:f8: 7f:af:bc:67:d1:73:8d:6c:9c:a0:8f:9e:cb:3d:10:41:9c:00: 7e:41:79:bf:1d:80:e6:b6:6b:ae:79:bf:4a:b1:10:47:7c:3f: de:c4:44:03:95:1a:89:4e:b2:c5:56:56:9c:a0:d4:3d:30:1b: 37:23:4e:b2:a4:19:0a:b2:7b:8c:c2:5c:a1:0a:b7:a3:83:dc: 08:2b:86:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAPW7by5wBbJKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjYTY2OTUtNzUyZi00ZDkwLTgyMmMtMTM1MTM1NWE1 NjJlMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NGI2YTAyZDgtNjE5Ni00MjY0LWE5ZGMtOTcwMjA3ZWQ4ZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5L7AIyyIC91kTjNu0+ugYudFGdn9T3zgwNR 9l7R33ddA0KiL2Xtjlu5NO35o9kbF9MMMq4zgWdvDL0Q0Nt6Jezlh0kvOPYl1spT pSIz0b0G9GYhD6T1FOBdU0BltV9ZNAWtXD6IJWCU1gnxSBHkCrKoGtB6JeyO8BsL cx/3Qq8iMYm+b6I0HslfW4A4xoDAnMhS63m66yKzkef27W4NpRYXDgq5D0814dUy Hoe148PFmYM1BEie6XG+HaTDr2YzzCuUq9OImc0dDXmaem+y51VQFX3hmswymTh7 /XpSIaxS+XwfXjLxKHSOdIt+mAuO8RMKZa/yCkOGnaRIbcctZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGqU4MUahuXpfw7Eb064N3F68dwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZGNh NjY5NS03NTJmLTRkOTAtODIyYy0xMzUxMzU1YTU2MmUvYjg3NGRlZGMtOWEzOS0z YzViLThlYjAtZmUzNDlmMGU2MGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGRjYTY2OTUtNzUyZi00ZDkwLTgy MmMtMTM1MTM1NWE1NjJlLzBkY2E2Njk1LTc1MmYtNGQ5MC04MjJjLTEzNTEzNTVh NTYyZS5jcmwwHwYDVR0jBBgwFoAUStvTRSGefpWBEKCsgute0ZpGDHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZGNhNjY5NS03NTJmLTRkOTAtODIyYy0xMzUx MzU1YTU2MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZANyu0AEEFxkb3WfIMbZs9JESSYtlOGM9gmqJ/p96qDqiqD/xoFgDj ygCP15TbbySQmFuLo/jwfZ1OEoO5iZTmHTHkJRrdCoMY+GZYlerZLfEmaf+a+hj7 aoVCfPsUv0U4tRThUy9b/zv2KFbngjDyrA31106X2gCn2JEQ+c1i0eVaV/8T4Isj n/X8LfTi6zb8rgPqeRYO7HEeUrEyCxul8K11Eu3tfsGF+lsyf8lNlwGe+H+vvGfR c41snKCPnss9EEGcAH5Beb8dgOa2a655v0qxEEd8P97ERAOVGolOssVWVpyg1D0w GzcjTrKkGQqye4zCXKEKt6OD3Agrhgo= -----END CERTIFICATE-----Generated at Sat Apr 5 10:07:53 2025 by rpki-client