$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa File: 507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa (raw, json) Hash identifier: 0Sf3s30KzQZsEN+7byoCVu23N5gP1z05ElNg6rubFAw= Subject key identifier: 85:25:16:AE:96:26:7F:5B:B3:2C:19:EE:80:BF:12:96:BA:F2:99:46 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584979744586D3143B73ABBB1C00 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 398420 IP address blocks: 208.89.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:45:86:d3:14:3b:73:ab:bb:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=a40cdeac-0a5f-4290-8829-630f5f3593be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:dd:4c:67:a5:7f:67:f3:10:91:5a:74:35: c4:11:8d:92:9a:fb:ad:26:3a:0f:a4:08:03:d9:2e: e5:4c:cc:e1:19:c2:56:b8:55:cb:f9:b5:0c:19:3c: 0e:a4:59:63:dc:31:07:34:14:e7:46:a4:4b:47:31: 97:e9:4f:50:92:5d:bd:3a:52:e0:e4:52:da:9d:d1: c5:61:60:a2:96:74:d6:41:35:7b:d2:21:68:fe:b6: 8a:59:6e:66:1a:e9:9f:0f:de:0e:ca:86:4e:90:44: c7:29:21:86:cd:53:28:9d:38:bc:c8:f7:32:ea:4b: 70:d9:99:f5:11:3e:74:d4:8a:e6:bf:ab:6f:f6:51: 1e:2a:48:9e:4a:a5:9b:d6:b8:79:64:a6:a1:a8:15: 86:e3:ea:ce:66:cc:32:52:5c:1c:b1:30:35:b5:f4: 15:1a:39:f6:a4:93:3e:91:22:88:4f:f5:fd:01:10: 88:d1:90:86:4d:59:09:f0:77:15:70:44:dc:ef:01: 38:93:57:78:c3:36:d4:61:fc:c2:f7:2e:9d:53:f1: 10:d4:92:9d:05:99:a5:7c:5b:d8:08:db:67:0c:9c: 83:34:e6:88:a7:55:cc:64:1e:39:2e:58:80:08:cd: f2:45:bf:a4:ba:23:42:2f:b3:02:c7:45:34:a2:a7: 8d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:25:16:AE:96:26:7F:5B:B3:2C:19:EE:80:BF:12:96:BA:F2:99:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ed:f7:d5:1a:c7:42:10:38:ff:cd:ea:79:3f:a9:53:aa:73: 19:df:ef:b7:13:f3:67:be:a7:3e:bc:8f:0b:49:5f:f5:47:02: 86:54:4a:b7:dd:4f:28:01:57:0c:a0:c8:f6:f6:fb:98:be:92: b7:54:7b:d8:30:3f:a3:db:70:2e:aa:0c:8d:6f:3f:77:ee:5f: b1:5d:7e:12:ed:db:87:d1:13:32:f3:a1:12:78:47:f9:72:a5: a3:96:2f:95:9b:11:e3:7a:3d:58:1b:a2:98:76:3e:16:1d:cf: d6:e1:54:96:db:be:2c:d9:d9:6b:7b:93:b6:36:bc:d5:c6:96: e4:0b:7f:2a:8c:a7:eb:61:23:cb:c6:4e:62:3c:ed:80:b0:5e: 42:05:ee:08:ef:52:78:79:f2:c7:90:65:b3:46:52:0b:c9:c9: 90:18:73:f4:5f:37:9d:5b:45:8d:1f:ef:5e:7a:7a:d8:21:59: c6:c1:e1:27:ee:61:71:94:e5:9a:74:6e:d0:58:62:4b:c6:7a: eb:91:69:70:70:5f:9b:76:5f:aa:ce:9f:52:af:f3:ed:87:60: 79:cc:2e:ce:b6:2a:9d:fb:c5:33:5c:93:5c:77:17:a4:3d:dc: 9a:1c:cd:92:91:fc:6a:32:cb:3a:fb:47:fe:9a:cf:3a:1d:06: 0f:38:c0:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEWG0xQ7c6u7HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk YTQwY2RlYWMtMGE1Zi00MjkwLTg4MjktNjMwZjVmMzU5M2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZXdTGelf2fzEJFadDXEEY2SmvutJjoPpAgD 2S7lTMzhGcJWuFXL+bUMGTwOpFlj3DEHNBTnRqRLRzGX6U9Qkl29OlLg5FLandHF YWCilnTWQTV70iFo/raKWW5mGumfD94OyoZOkETHKSGGzVMonTi8yPcy6ktw2Zn1 ET501Irmv6tv9lEeKkieSqWb1rh5ZKahqBWG4+rOZswyUlwcsTA1tfQVGjn2pJM+ kSKIT/X9ARCI0ZCGTVkJ8HcVcETc7wE4k1d4wzbUYfzC9y6dU/EQ1JKdBZmlfFvY CNtnDJyDNOaIp1XMZB45LliACM3yRb+kuiNCL7MCx0U0oqeN/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUlFq6WJn9bsywZ7oC/Epa68plGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNTA3YmQ4NjktNmE5Ni0z Y2RmLWIzZTMtMjlhNjJlYTkwYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Fk2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzt99Uax0IQOP/N6nk/qVOqcxnf77cT82e+pz68jwtJX/VHAoZUSrfd TygBVwygyPb2+5i+krdUe9gwP6PbcC6qDI1vP3fuX7FdfhLt24fREzLzoRJ4R/ly paOWL5WbEeN6PVgboph2PhYdz9bhVJbbvizZ2Wt7k7Y2vNXGluQLfyqMp+thI8vG TmI87YCwXkIF7gjvUnh58seQZbNGUgvJyZAYc/RfN51bRY0f7156etghWcbB4Sfu YXGU5Zp0btBYYkvGeuuRaXBwX5t2X6rOn1Kv8+2HYHnMLs62Kp37xTNck1x3F6Q9 3JoczZKR/Goyyzr7R/6azzodBg84wEs= -----END CERTIFICATE-----Generated at Sat Apr 12 00:25:29 2025 by rpki-client