$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa File: 868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa (raw, json) Hash identifier: G1pLt0rIIj9T87xN8E1JbxxCVKZvTLwLXiuz5K9u9Ow= Subject key identifier: 15:D2:BA:4E:60:5C:0F:8B:8F:4A:1C:F8:05:E4:35:23:7A:D4:E6:06 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F43285849287E64FC2796DF0587985380 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 16671 IP address blocks: 208.88.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:64:fc:27:96:df:05:87:98:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=b92a3e0c-ef0d-46eb-bfbb-da19dae4034f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:c5:60:f6:12:6e:89:18:92:f8:b2:73:4e: 15:a9:a0:a7:97:67:a1:4f:7c:98:32:a2:ca:68:8b: 90:97:fe:19:06:d7:ed:bf:79:d9:88:8b:0f:9f:0b: 0f:9e:89:e5:cb:d1:b8:b3:96:28:2c:63:13:51:ee: 8f:39:8a:21:41:3e:70:c1:f3:5f:1d:7b:de:66:5b: 51:d6:75:f6:96:c0:eb:be:b5:14:94:11:c6:cb:bc: 42:bc:2c:38:76:4c:14:4a:b9:4e:24:96:5b:57:f0: 08:98:00:b4:ec:47:56:61:80:5a:a9:59:92:63:d7: 69:d6:32:b8:4c:1b:0f:58:bd:90:f1:18:a7:c8:eb: 2d:87:79:3a:73:ca:d1:87:23:51:8b:79:e8:46:a7: d6:7e:a7:69:d0:71:e7:6b:67:a7:a9:d5:c2:a3:c9: e2:e0:e5:35:bb:ad:4e:2f:11:06:95:63:33:53:14: c8:80:d5:6b:37:f2:61:82:32:10:30:fa:23:40:a2: a9:38:20:67:ad:7c:ad:08:30:b0:8d:e1:d4:33:bd: aa:0b:47:f7:14:96:84:fd:50:23:43:c2:56:19:a5: 1e:4d:95:6e:1e:e2:9e:f0:a3:bc:2b:4e:9e:60:5f: bd:77:88:d8:9a:25:ff:e2:25:4d:97:1d:ad:83:2f: b3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D2:BA:4E:60:5C:0F:8B:8F:4A:1C:F8:05:E4:35:23:7A:D4:E6:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d3:be:96:69:0e:a3:36:d6:e6:cd:5b:89:6e:69:53:2e:89: 96:ca:d1:ff:59:b2:05:a6:b9:49:68:4f:52:df:fe:43:2b:07: c4:27:f6:ca:00:d5:8d:d3:a8:33:ee:ee:a8:64:ad:92:9e:00: b4:55:be:5c:90:a2:45:35:4d:45:e0:18:4d:e0:71:6a:46:ae: 55:33:32:c6:bf:43:4b:81:82:28:68:a2:3a:ff:d6:72:bd:a6: 1c:ab:6d:9d:41:df:a4:7a:5a:a2:84:ea:b2:3d:73:2f:37:38: f7:9f:8c:da:e3:5b:bc:65:8c:91:8f:22:02:fe:fe:9c:56:ee: f8:50:a6:ea:08:b2:9d:d5:2a:70:3f:09:5a:59:a0:4e:78:db: d3:29:e0:e3:64:bb:16:6b:d9:21:7c:ff:39:1f:a8:16:65:e3: 22:75:2b:62:5e:cf:a5:52:77:d0:ea:67:04:97:5c:db:ff:a4: 2a:31:4a:50:39:c8:95:96:2a:7b:7f:8d:7d:52:2e:ef:9f:6d: 29:94:39:34:60:ce:03:37:0f:10:bb:98:73:dd:fe:3c:14:ca: 02:dd:56:01:32:ac:d7:f1:64:2f:6a:22:29:79:b0:5d:0b:7c: 3f:4a:3d:9b:36:78:a5:5e:53:16:1f:fb:5c:c9:df:db:c7:f7: e7:04:11:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmT8J5bfBYeYU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk YjkyYTNlMGMtZWYwZC00NmViLWJmYmItZGExOWRhZTQwMzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6zFYPYSbokYkviyc04VqaCnl2ehT3yYMqLK aIuQl/4ZBtftv3nZiIsPnwsPnonly9G4s5YoLGMTUe6POYohQT5wwfNfHXveZltR 1nX2lsDrvrUUlBHGy7xCvCw4dkwUSrlOJJZbV/AImAC07EdWYYBaqVmSY9dp1jK4 TBsPWL2Q8RinyOsth3k6c8rRhyNRi3noRqfWfqdp0HHna2enqdXCo8ni4OU1u61O LxEGlWMzUxTIgNVrN/JhgjIQMPojQKKpOCBnrXytCDCwjeHUM72qC0f3FJaE/VAj Q8JWGaUeTZVuHuKe8KO8K06eYF+9d4jYmiX/4iVNlx2tgy+zLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXSuk5gXA+Lj0oc+AXkNSN61OYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvODY4YWE1NDctY2M5My0z MjJmLTlmZDgtOGQ0NTlmMGE4YTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FgfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHTvpZpDqM21ubNW4luaVMuiZbK0f9ZsgWmuUloT1Lf/kMrB8Qn9soA 1Y3TqDPu7qhkrZKeALRVvlyQokU1TUXgGE3gcWpGrlUzMsa/Q0uBgihoojr/1nK9 phyrbZ1B36R6WqKE6rI9cy83OPefjNrjW7xljJGPIgL+/pxW7vhQpuoIsp3VKnA/ CVpZoE5429Mp4ONkuxZr2SF8/zkfqBZl4yJ1K2Jez6VSd9DqZwSXXNv/pCoxSlA5 yJWWKnt/jX1SLu+fbSmUOTRgzgM3DxC7mHPd/jwUygLdVgEyrNfxZC9qIil5sF0L fD9KPZs2eKVeUxYf+1zJ39vH9+cEEds= -----END CERTIFICATE-----Generated at Mon Apr 7 15:45:58 2025 by rpki-client