$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/18393493-e621-3412-b61f-128e8405bd3e.roa File: 18393493-e621-3412-b61f-128e8405bd3e.roa (raw, json) Hash identifier: AwcoGLZnXKz7ehkAPeMh1OtODd7mT8bHtZaPFE1DNRU= Subject key identifier: 38:42:93:6C:C1:D3:29:FB:8C:A6:43:81:ED:49:A5:A5:DA:B4:25:7C Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F43285849287E60D14C71BD157A83FE00 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/18393493-e621-3412-b61f-128e8405bd3e.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 6597 IP address blocks: 208.88.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:60:d1:4c:71:bd:15:7a:83:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=20d1d0d8-cafc-4af8-9275-03cadfc4c08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:78:24:5b:75:4f:b9:d0:bd:15:0d:4b:05:94: 4c:43:c5:fc:4e:a4:d8:50:f4:b8:c8:f6:bb:7c:5f: cd:2a:4e:4f:93:99:d8:02:f8:2a:04:b4:38:39:6f: 46:81:9c:59:ed:8a:6d:bd:51:75:6b:e9:d8:3c:93: f9:4f:7e:07:d3:97:cb:87:2f:6b:1e:45:33:56:24: 76:3b:d7:b6:53:da:ef:28:fe:61:6a:30:96:04:3a: 24:6e:ef:c5:aa:89:24:29:5d:e1:c9:17:9c:53:93: a7:e4:ec:51:47:a1:79:5a:bb:f7:20:78:82:96:87: 95:09:0b:29:76:92:31:fd:83:f6:1e:83:ad:6d:98: 0b:5b:13:44:14:40:de:dc:23:c4:ca:d9:f6:fd:6b: 56:e5:d7:16:9f:fc:52:00:fa:eb:62:ef:d7:4a:55: d5:7d:e5:ca:1e:9f:be:af:d1:09:ef:cb:ae:d1:a3: 5b:4f:f6:48:0c:c6:cc:de:7d:7c:3b:7d:a2:36:d9: 44:b9:21:8b:e6:25:94:7b:7b:82:a3:a1:ab:41:4b: f4:46:3c:eb:35:d4:2d:3b:12:5a:ec:4b:f6:75:27: a9:8a:e0:8f:af:2d:ca:24:f8:91:4b:b0:83:de:a0: a9:b6:73:52:ec:cd:bd:b0:ed:33:a1:a5:80:cc:a9: 61:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:42:93:6C:C1:D3:29:FB:8C:A6:43:81:ED:49:A5:A5:DA:B4:25:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/18393493-e621-3412-b61f-128e8405bd3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:16:14:d5:f6:4d:ec:77:27:8a:2c:73:1c:c3:41:69:7f:31: fa:a7:7c:5e:1c:b5:45:18:3f:6f:80:fa:ed:4c:1d:b6:4a:17: f4:ad:1c:5d:3f:1d:cd:6d:4d:06:a2:dd:fc:14:00:d8:c6:b8: b7:b0:4b:4b:5c:47:e6:69:95:8c:0c:be:4d:38:44:85:d2:d8: 15:f7:52:d4:fd:ee:d8:7f:e6:06:38:d4:22:72:a2:5a:75:81: bc:f2:68:3a:45:94:99:14:47:91:fc:62:ac:f4:ea:db:80:0f: dc:4e:87:e7:6f:30:da:46:d5:9b:e9:8a:c5:3c:3e:19:9a:7b: 5a:c9:f3:bb:36:33:cc:18:94:68:c8:72:1b:3c:31:48:d5:ea: 63:1e:db:b7:3a:1a:8a:be:01:9d:b7:06:fb:78:2b:d0:68:b5: 26:60:61:a1:b0:31:17:61:30:66:23:5d:e3:f0:0e:41:f4:cb: 08:2b:6f:fa:27:52:02:2b:13:7a:6e:1d:e5:52:6b:67:b9:30: ac:2c:8b:d7:a5:f0:87:7f:95:87:68:8e:4c:f6:1c:90:dd:10: 6d:3a:45:c1:02:4c:29:8c:19:4b:f4:06:11:52:b1:c4:bc:5e: e5:83:93:27:5e:76:3e:d9:16:48:29:d6:33:7c:50:94:a0:7a: 2b:0a:d1:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmDRTHG9FXqD/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjBkMWQwZDgtY2FmYy00YWY4LTkyNzUtMDNjYWRmYzRjMDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjngkW3VPudC9FQ1LBZRMQ8X8TqTYUPS4yPa7 fF/NKk5Pk5nYAvgqBLQ4OW9GgZxZ7YptvVF1a+nYPJP5T34H05fLhy9rHkUzViR2 O9e2U9rvKP5hajCWBDokbu/FqokkKV3hyRecU5On5OxRR6F5Wrv3IHiCloeVCQsp dpIx/YP2HoOtbZgLWxNEFEDe3CPEytn2/WtW5dcWn/xSAPrrYu/XSlXVfeXKHp++ r9EJ78uu0aNbT/ZIDMbM3n18O32iNtlEuSGL5iWUe3uCo6GrQUv0RjzrNdQtOxJa 7Ev2dSepiuCPry3KJPiRS7CD3qCptnNS7M29sO0zoaWAzKlh3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhCk2zB0yn7jKZDge1JpaXatCV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMTgzOTM0OTMtZTYyMS0z NDEyLWI2MWYtMTI4ZTg0MDViZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIWFNX2Tex3J4oscxzDQWl/MfqnfF4ctUUYP2+A+u1MHbZKF/StHF0/ Hc1tTQai3fwUANjGuLewS0tcR+ZplYwMvk04RIXS2BX3UtT97th/5gY41CJyolp1 gbzyaDpFlJkUR5H8Yqz06tuAD9xOh+dvMNpG1ZvpisU8Phmae1rJ87s2M8wYlGjI chs8MUjV6mMe27c6Goq+AZ23Bvt4K9BotSZgYaGwMRdhMGYjXePwDkH0ywgrb/on UgIrE3puHeVSa2e5MKwsi9el8Id/lYdojkz2HJDdEG06RcECTCmMGUv0BhFSscS8 XuWDkydedj7ZFkgp1jN8UJSgeisK0Xc= -----END CERTIFICATE-----Generated at Sun Apr 6 12:14:41 2025 by rpki-client