$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa13d4bf-c6bc-30e9-ada4-250e51a107eb.roa File: fa13d4bf-c6bc-30e9-ada4-250e51a107eb.roa (raw, json) Hash identifier: hOKp6nWDdM+jYQioCN4lsPtr48SIlKexmS8Yhp+r13E= Subject key identifier: 90:9A:66:F9:E1:3D:64:71:AC:4A:B8:7B:32:46:D1:5A:96:E1:68:8E Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F43285849287E60B149B462042BDF0640 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa13d4bf-c6bc-30e9-ada4-250e51a107eb.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 395157 IP address blocks: 208.88.24.0/24 maxlen: 24 208.88.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:60:b1:49:b4:62:04:2b:df:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=ce749fb9-d3ab-412e-9678-a4ff16205072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0b:8d:b3:e4:11:70:8a:91:1c:3e:d6:a2:fc: f2:a4:51:36:ae:f7:97:c7:ac:8f:b7:50:bf:fa:49: ef:06:bc:60:ba:d0:8c:1c:3e:5a:1e:27:f0:1e:cb: 90:50:d3:89:55:f4:a2:4e:a1:a6:db:f4:01:74:34: 8f:1d:ea:f9:b0:ee:26:a7:7f:6c:ef:e4:8e:1f:bf: f2:62:a7:5e:98:41:66:39:69:6d:08:b9:f2:5a:93: 6d:ba:bc:ad:12:8e:4f:8d:8e:e5:60:69:98:29:1e: 8e:30:fc:02:7b:10:f8:f4:d9:7d:46:b8:9f:1d:20: 67:66:24:0d:cc:50:ec:4e:da:73:ca:3a:5f:82:7c: 60:0b:ad:d6:59:b3:54:04:71:2e:b3:b7:56:07:4f: a5:10:c7:13:e1:f5:19:9b:07:f1:ad:55:9e:9c:e5: 18:8a:79:96:67:b2:c5:6c:3f:99:0c:bb:5c:4b:61: 0c:29:be:d4:01:dd:62:4d:0c:b5:0e:9a:b3:54:8f: 91:b8:07:90:a8:35:c2:d9:e5:f1:fb:40:51:08:28: 11:d8:30:d8:94:d9:13:0a:e3:c8:8c:17:c0:4b:5b: 5e:34:c5:2e:5e:29:11:27:59:55:01:aa:c1:b9:8a: 4a:f5:aa:f1:3d:cd:98:8a:59:fa:bd:06:aa:34:cd: 4e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9A:66:F9:E1:3D:64:71:AC:4A:B8:7B:32:46:D1:5A:96:E1:68:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa13d4bf-c6bc-30e9-ada4-250e51a107eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:59:99:79:c8:3c:69:c5:26:5f:47:e5:dc:28:48:38:fd:ea: 4a:32:84:83:ae:15:30:fb:31:1e:12:1e:c0:4b:05:f2:1d:dd: 4a:a7:4e:35:13:6b:0d:91:9e:89:4d:46:18:7d:9a:57:b8:77: ff:cf:90:06:85:de:b9:13:f3:04:3d:d2:cc:b7:15:61:43:93: 70:59:fb:e8:04:99:3c:13:d3:a9:3a:a8:0d:0d:94:03:19:09: 71:fc:f7:e3:fb:fb:1d:18:b8:fe:1d:bf:04:de:e9:c2:69:95: f4:d9:cb:93:f6:1c:4d:22:74:f0:51:0d:7b:9e:e2:86:7e:94: 1e:55:2c:ad:98:69:09:16:f6:34:64:d6:c6:f3:98:d1:ed:37: 1d:05:6b:68:9a:48:ba:95:18:dc:a4:0f:3e:8e:b0:04:d4:75: af:94:8f:83:93:8d:63:7c:de:82:d4:83:ef:4e:f8:b8:13:82: 85:b3:8d:8b:5d:96:48:11:22:af:3e:62:e9:1a:3d:25:89:fd: 39:f7:29:76:05:78:f3:fd:b9:e0:c7:a8:4c:27:c6:53:ce:2f: 20:93:dd:83:aa:d4:b5:ce:34:22:c5:fb:f4:96:d7:3e:be:2c: a3:53:2a:21:60:8b:6d:61:62:57:1b:d1:9e:ac:0f:87:cf:c8: 77:f9:a7:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmCxSbRiBCvfBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk Y2U3NDlmYjktZDNhYi00MTJlLTk2NzgtYTRmZjE2MjA1MDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhguNs+QRcIqRHD7WovzypFE2rveXx6yPt1C/ +knvBrxgutCMHD5aHifwHsuQUNOJVfSiTqGm2/QBdDSPHer5sO4mp39s7+SOH7/y YqdemEFmOWltCLnyWpNturytEo5PjY7lYGmYKR6OMPwCexD49Nl9RrifHSBnZiQN zFDsTtpzyjpfgnxgC63WWbNUBHEus7dWB0+lEMcT4fUZmwfxrVWenOUYinmWZ7LF bD+ZDLtcS2EMKb7UAd1iTQy1DpqzVI+RuAeQqDXC2eXx+0BRCCgR2DDYlNkTCuPI jBfAS1teNMUuXikRJ1lVAarBuYpK9arxPc2Yiln6vQaqNM1OtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCaZvnhPWRxrEq4ezJG0VqW4WiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvZmExM2Q0YmYtYzZiYy0z MGU5LWFkYTQtMjUwZTUxYTEwN2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpZmXnIPGnFJl9H5dwoSDj96koyhIOuFTD7MR4SHsBLBfId3UqnTjUT aw2RnolNRhh9mle4d//PkAaF3rkT8wQ90sy3FWFDk3BZ++gEmTwT06k6qA0NlAMZ CXH89+P7+x0YuP4dvwTe6cJplfTZy5P2HE0idPBRDXue4oZ+lB5VLK2YaQkW9jRk 1sbzmNHtNx0Fa2iaSLqVGNykDz6OsATUda+Uj4OTjWN83oLUg+9O+LgTgoWzjYtd lkgRIq8+YukaPSWJ/Tn3KXYFePP9ueDHqEwnxlPOLyCT3YOq1LXONCLF+/SW1z6+ LKNTKiFgi21hYlcb0Z6sD4fPyHf5p24= -----END CERTIFICATE-----Generated at Mon Apr 7 15:34:40 2025 by rpki-client