$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa File: 2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa (raw, json) Hash identifier: TK4/i+CUBj8BGkVlcD+IKNSPH+2Twc/hd2sjTZcqPBs= Subject key identifier: 97:C2:B7:F1:C3:4C:50:52:1B:1A:7B:57:AF:77:D8:75:DB:66:28:22 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F432858497974457466F289507277E100 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 398420 IP address blocks: 208.89.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:45:74:66:f2:89:50:72:77:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=c30cfb98-75d5-459b-b0b1-a5c1a496d8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:f8:da:5d:d8:27:78:03:fd:41:25:3d:e9: aa:fe:77:4c:dc:7d:5d:78:73:2a:f9:23:2b:00:6c: c2:c4:7a:fb:b5:ca:ce:10:ac:02:6c:96:e8:fe:57: 3f:f2:17:ab:b2:99:f0:72:bc:e4:fb:37:03:c4:9e: 01:df:cb:55:92:de:1f:32:be:eb:55:26:c1:6a:86: 63:b1:f8:22:7d:b3:d6:20:e0:db:61:4f:9c:54:80: e5:f9:ec:a5:96:dd:6e:df:01:ed:1c:10:f4:36:f3: ec:e4:cc:d3:54:c5:f0:d3:72:5c:31:c8:c1:8a:61: b8:fc:cc:85:b2:57:04:c7:cd:98:79:6c:62:d1:a6: c8:cd:cf:e5:12:d1:52:f4:8b:e1:8e:2c:c6:d8:08: 8d:9e:ae:8b:30:96:90:e0:50:42:06:81:d0:6f:56: 9b:c9:97:6e:0c:99:f0:eb:33:34:71:96:51:e8:5f: 2a:e2:90:c1:27:6e:65:aa:84:1f:e9:64:3a:b2:89: 29:b8:b6:0c:d9:be:36:fa:3e:d4:33:49:6e:15:6d: da:1f:69:ff:60:b1:44:4e:34:f6:0d:55:0f:7f:9d: bd:e2:c6:a6:41:ae:ed:e6:33:eb:5b:de:a0:e8:8b: a7:ef:74:77:c9:75:2d:ae:44:ec:f7:87:e7:7c:97: 8c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C2:B7:F1:C3:4C:50:52:1B:1A:7B:57:AF:77:D8:75:DB:66:28:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:31:7b:0d:94:a5:b0:e5:f8:8c:7a:f4:c3:0c:25:8e:1c:98: 28:34:0c:cf:66:9c:20:35:d6:2a:7f:7c:51:38:ad:54:47:51: 3f:83:7e:26:43:9a:4c:0d:f2:91:4f:ab:9d:f8:35:54:67:20: 80:64:37:1c:64:51:c2:a1:66:d8:d9:91:3e:43:ae:15:4f:69: 76:90:35:84:e7:c4:8a:96:49:72:af:74:c4:fd:f8:d9:ed:18: 69:22:4b:86:a9:a6:21:56:e0:d5:31:44:c4:52:ba:c3:40:2e: d2:6a:b3:f4:c4:01:9e:c8:b6:82:0e:53:70:26:f2:7f:45:3e: 1c:1d:95:86:6c:89:60:01:4b:31:09:f0:bf:0c:db:29:c2:d5: aa:16:50:10:48:e5:67:0a:0d:f2:db:4d:58:c0:d9:41:9b:5f: 38:08:09:48:ad:dd:14:36:65:fc:ad:e8:81:29:af:70:65:36: 45:75:10:2e:da:a8:61:2a:8b:14:2f:f7:ff:9a:45:ca:7a:d7: 07:85:6f:69:9b:5f:63:90:02:d2:d8:9e:fd:f3:ed:c1:a6:41: 29:b7:f9:6d:5d:68:25:77:c2:10:6a:2c:78:96:27:ce:66:83: 18:3d:9d:8b:2f:0f:e0:b2:8d:ae:1e:11:a8:43:a8:86:c1:a3: 3c:a9:97:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEV0ZvKJUHJ34QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk YzMwY2ZiOTgtNzVkNS00NTliLWIwYjEtYTVjMWE0OTZkOGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UD42l3YJ3gD/UElPemq/ndM3H1deHMq+SMr AGzCxHr7tcrOEKwCbJbo/lc/8herspnwcrzk+zcDxJ4B38tVkt4fMr7rVSbBaoZj sfgifbPWIODbYU+cVIDl+eyllt1u3wHtHBD0NvPs5MzTVMXw03JcMcjBimG4/MyF slcEx82YeWxi0abIzc/lEtFS9IvhjizG2AiNnq6LMJaQ4FBCBoHQb1abyZduDJnw 6zM0cZZR6F8q4pDBJ25lqoQf6WQ6sokpuLYM2b42+j7UM0luFW3aH2n/YLFETjT2 DVUPf5294samQa7t5jPrW96g6Iun73R3yXUtrkTs94fnfJeMcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfCt/HDTFBSGxp7V6932HXbZigiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMjMzM2I3ZDgtM2ZiZS0z ODc1LWFkNzQtODE1NzlkNmY1ZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Fk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYxew2UpbDl+Ix69MMMJY4cmCg0DM9mnCA11ip/fFE4rVRHUT+DfiZD mkwN8pFPq534NVRnIIBkNxxkUcKhZtjZkT5DrhVPaXaQNYTnxIqWSXKvdMT9+Nnt GGkiS4appiFW4NUxRMRSusNALtJqs/TEAZ7ItoIOU3Am8n9FPhwdlYZsiWABSzEJ 8L8M2ynC1aoWUBBI5WcKDfLbTVjA2UGbXzgICUit3RQ2Zfyt6IEpr3BlNkV1EC7a qGEqixQv9/+aRcp61weFb2mbX2OQAtLYnv3z7cGmQSm3+W1daCV3whBqLHiWJ85m gxg9nYsvD+Cyja4eEahDqIbBozypl5s= -----END CERTIFICATE-----Generated at Sat Apr 12 00:30:24 2025 by rpki-client