$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa File: 2d29c9cc-f352-359a-a680-78348c95a6e1.roa (raw, json) Hash identifier: 3VM50gCollgZs2kh10sb71FYILci8xdLUMCiYtAAuek= Subject key identifier: 46:62:6E:B8:93:B9:2A:C5:FC:60:B0:16:DA:4D:F5:F5:68:77:B8:53 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F43285849287E60BE52F1D25C9D70D300 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 32788 IP address blocks: 208.88.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:60:be:52:f1:d2:5c:9d:70:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=97a12087-b65c-4b5f-a81a-73fdefdcf67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:ac:e9:90:1c:fa:11:88:9b:92:88:dd:1e: eb:04:bb:a4:7c:dc:97:16:3b:ea:df:95:23:da:0c: ae:84:85:76:82:1e:d4:b9:0a:b2:1e:f2:95:12:3d: e9:12:ac:23:6d:98:3f:aa:9c:f0:29:50:59:41:7d: a5:9d:ee:95:91:db:54:e3:7e:82:23:dc:51:68:ab: f2:8f:8c:11:03:1c:e1:01:64:71:23:55:d8:1c:2a: 8c:c2:91:21:95:1e:f6:68:37:a1:a5:33:c1:d5:2e: 18:18:d3:c7:33:fc:44:54:e6:24:14:3d:5e:f0:ba: 63:4f:de:0a:3a:20:52:24:7b:e6:46:02:41:5c:9d: 1a:26:26:c6:83:4e:cc:76:1e:23:36:cc:d0:2f:73: d8:da:fe:83:ae:2f:42:77:bd:6f:6c:6e:5a:c7:c4: 31:23:94:20:10:eb:ac:9d:b4:bc:29:1b:1d:aa:59: 1e:a2:77:f5:f0:25:f6:53:3e:57:80:1f:88:85:ff: 0c:e2:be:5b:f1:7e:c2:63:4c:eb:3e:46:6d:3c:99: a7:54:53:38:68:b1:a8:e8:d7:57:ec:c7:3c:31:98: 46:9b:6a:fd:d5:6b:18:7f:b1:22:5d:a5:e5:5d:bc: 87:b0:14:61:a2:6f:11:1b:72:75:33:56:78:fd:0c: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:62:6E:B8:93:B9:2A:C5:FC:60:B0:16:DA:4D:F5:F5:68:77:B8:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f1:0a:11:66:db:6e:3f:1f:ef:1b:a6:3f:6b:59:e8:8b:ef: 66:59:20:9c:68:c1:e2:4e:e6:e9:0c:c9:7e:1f:00:d7:28:1d: e7:45:4f:ca:b5:6f:2d:fe:2a:2e:4b:5d:87:87:c3:2b:86:60: 7d:58:0d:1e:b7:3d:dc:6d:4f:76:18:c7:36:6a:22:31:7f:17: 90:8c:e2:bf:38:c5:3f:59:96:bd:25:9c:17:5d:7e:28:58:8c: 93:55:27:89:c0:13:a8:93:36:cd:92:21:cc:1c:13:59:06:ff: 3a:42:5c:16:4b:62:ec:ef:37:9a:a7:24:44:61:6c:04:82:72: 13:6d:f0:98:47:2b:43:23:00:48:79:d7:23:e6:af:e2:4d:ed: 1c:d9:12:ef:47:62:9d:d9:ee:ef:7f:4e:c7:89:0d:f3:a0:36: cc:0a:37:24:ec:ec:56:ed:97:b0:bf:97:0e:59:50:a7:21:21: 71:4a:16:4d:ec:5c:2f:fd:fd:63:0a:1b:08:29:c4:6c:93:90: 7c:4e:b3:a2:67:60:f7:d2:3e:17:0c:99:be:05:fb:f8:c6:0d: 81:cd:fe:0d:02:f8:7e:68:df:0c:b9:c9:16:31:69:bc:67:b2: 45:18:e1:20:a0:a8:bf:d2:68:96:dc:6d:f4:75:20:1d:c5:23: 5b:42:2b:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmC+UvHSXJ1w0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk OTdhMTIwODctYjY1Yy00YjVmLWE4MWEtNzNmZGVmZGNmNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm6s6ZAc+hGIm5KI3R7rBLukfNyXFjvq35Uj 2gyuhIV2gh7UuQqyHvKVEj3pEqwjbZg/qpzwKVBZQX2lne6VkdtU436CI9xRaKvy j4wRAxzhAWRxI1XYHCqMwpEhlR72aDehpTPB1S4YGNPHM/xEVOYkFD1e8LpjT94K OiBSJHvmRgJBXJ0aJibGg07Mdh4jNszQL3PY2v6Dri9Cd71vbG5ax8QxI5QgEOus nbS8KRsdqlkeonf18CX2Uz5XgB+Ihf8M4r5b8X7CY0zrPkZtPJmnVFM4aLGo6NdX 7Mc8MZhGm2r91WsYf7EiXaXlXbyHsBRhom8RG3J1M1Z4/QxYzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZibriTuSrF/GCwFtpN9fVod7hTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMmQyOWM5Y2MtZjM1Mi0z NTlhLWE2ODAtNzgzNDhjOTVhNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FgeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7xChFm224/H+8bpj9rWeiL72ZZIJxoweJO5ukMyX4fANcoHedFT8q1 by3+Ki5LXYeHwyuGYH1YDR63PdxtT3YYxzZqIjF/F5CM4r84xT9Zlr0lnBddfihY jJNVJ4nAE6iTNs2SIcwcE1kG/zpCXBZLYuzvN5qnJERhbASCchNt8JhHK0MjAEh5 1yPmr+JN7RzZEu9HYp3Z7u9/TseJDfOgNswKNyTs7Fbtl7C/lw5ZUKchIXFKFk3s XC/9/WMKGwgpxGyTkHxOs6JnYPfSPhcMmb4F+/jGDYHN/g0C+H5o3wy5yRYxabxn skUY4SCgqL/SaJbcbfR1IB3FI1tCK/U= -----END CERTIFICATE-----Generated at Mon Apr 7 15:48:39 2025 by rpki-client