$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa File: f912ae62-732c-3124-96ce-77eea87e00a5.roa (raw, json) Hash identifier: WN4+hSmzpQtcwdF2j1MwN/TvZ6MJCLNuu51Gv8e/nR0= Subject key identifier: 10:43:A9:D7:98:AB:C6:FB:3F:6C:BC:75:B7:06:68:EB:69:2E:5D:E3 Certificate issuer: /CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Certificate serial: 010D0C9F432858492CAE87540671D9BCBF539500 Authority key identifier: 38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 398125 IP address blocks: 208.71.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:87:54:06:71:d9:bc:bf:53:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=90e733fd-7184-437b-a064-e43b1246ca3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:84:ef:46:c1:af:e8:12:20:cd:81:51:e4:d8: 8b:91:b2:e8:e5:7e:e6:9b:c4:44:bb:7e:0d:e0:e0: 8e:df:5d:9b:78:ed:22:e0:54:85:bc:3c:34:fb:e6: 68:81:75:42:e3:24:34:fd:ce:b5:a0:9c:e4:93:7f: 32:94:ea:52:00:71:b3:28:84:9f:f6:67:0f:1a:64: de:a6:8d:71:c9:d8:78:5a:3a:47:99:80:41:08:f5: af:aa:22:09:2e:51:f4:c4:81:6d:5d:b4:79:43:26: 97:89:20:5d:68:d2:b1:ef:9b:89:8d:df:26:20:fa: cf:97:4e:0e:1a:1a:5e:ab:9e:76:1f:06:61:dd:b1: ae:1d:7a:75:e6:a3:8a:58:78:da:9d:92:8b:99:06: b6:35:57:bb:08:4b:f3:00:83:f6:26:6e:83:e6:49: ad:63:ac:79:c8:0e:9e:f5:b5:b7:00:8a:38:1d:63: f0:b0:c3:c7:82:cd:9c:0b:ce:2e:4d:a6:bb:12:60: b6:55:c2:bb:2a:0b:b7:e9:1e:a9:24:cb:21:48:be: b6:b0:47:bb:0d:fd:53:6a:1a:0a:c8:c4:ff:59:4f: 68:a1:d6:c3:da:d1:9f:6a:8b:85:6e:f4:08:86:3e: 08:c6:be:35:76:a8:7f:51:32:13:1b:a5:c6:fa:f2: f6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:43:A9:D7:98:AB:C6:FB:3F:6C:BC:75:B7:06:68:EB:69:2E:5D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl X509v3 Authority Key Identifier: keyid:38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer sbgp-ipAddrBlock: critical IPv4: 208.71.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:cc:1b:10:c6:c1:d6:49:cf:cc:51:f6:63:08:28:1c:55:65: e4:0b:98:cb:1b:bd:66:d5:cc:04:88:c2:53:bb:a9:f3:88:9c: 18:68:19:a7:8f:37:a9:7f:b2:ab:5c:b8:17:0a:6a:b0:d7:96: e6:ce:0e:66:69:44:11:ca:72:c9:bc:c0:db:00:04:ad:94:42: bb:be:f6:ae:68:e7:17:c0:a7:2d:8b:6b:4b:d1:51:c6:0d:c5: 8b:f6:0a:7e:ac:dd:4a:03:42:a4:fa:3f:20:8c:50:04:d1:c3: 9f:53:8e:d6:f6:93:18:aa:10:18:cc:1f:b0:82:c5:1b:02:d5: 7b:c1:2d:81:cc:24:e3:06:36:b8:86:38:0e:82:e4:60:d3:4b: 09:d0:19:e2:d3:b2:c9:99:ec:67:8c:ba:77:05:47:73:af:ac: eb:07:f8:4b:2f:6c:1c:27:51:e3:da:0b:57:02:7d:ac:aa:04: 1a:63:a5:c1:05:9a:fd:9e:42:ce:7f:c7:36:67:67:ef:d7:9b: 63:56:c3:5c:bd:80:79:43:64:0b:1f:0a:6f:da:a9:07:f2:1a: 42:5d:f6:40:ff:01:c1:ed:3e:ed:55:48:a1:57:55:e2:97:4b: 6a:72:cf:62:ae:a7:27:a2:7d:f6:76:a6:8f:c0:99:aa:f0:36: 32:02:58:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrodUBnHZvL9TlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjNjVjYmItNDBhOC00YmU4LTljMzUtNDE5ZjlkYzM2 ZDcxMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTBlNzMzZmQtNzE4NC00MzdiLWEwNjQtZTQzYjEyNDZjYTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oTvRsGv6BIgzYFR5NiLkbLo5X7mm8REu34N 4OCO312beO0i4FSFvDw0++ZogXVC4yQ0/c61oJzkk38ylOpSAHGzKISf9mcPGmTe po1xydh4WjpHmYBBCPWvqiIJLlH0xIFtXbR5QyaXiSBdaNKx75uJjd8mIPrPl04O Ghpeq552HwZh3bGuHXp15qOKWHjanZKLmQa2NVe7CEvzAIP2Jm6D5kmtY6x5yA6e 9bW3AIo4HWPwsMPHgs2cC84uTaa7EmC2VcK7Kgu36R6pJMshSL62sEe7Df1TahoK yMT/WU9oodbD2tGfaouFbvQIhj4Ixr41dqh/UTITG6XG+vL2ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBDqdeYq8b7P2y8dbcGaOtpLl3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2 NWNiYi00MGE4LTRiZTgtOWMzNS00MTlmOWRjMzZkNzEvZjkxMmFlNjItNzMyYy0z MTI0LTk2Y2UtNzdlZWE4N2UwMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjNjVjYmItNDBhOC00YmU4LTlj MzUtNDE5ZjlkYzM2ZDcxLzNiYzY1Y2JiLTQwYTgtNGJlOC05YzM1LTQxOWY5ZGMz NmQ3MS5jcmwwHwYDVR0jBBgwFoAUOBhgLEnhhtTnYbFpKTFGPpNKPqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2NWNiYi00MGE4LTRiZTgtOWMzNS00MTlm OWRjMzZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjMGxDGwdZJz8xR9mMIKBxVZeQLmMsbvWbVzASIwlO7qfOInBhoGaeP N6l/sqtcuBcKarDXlubODmZpRBHKcsm8wNsABK2UQru+9q5o5xfApy2La0vRUcYN xYv2Cn6s3UoDQqT6PyCMUATRw59Tjtb2kxiqEBjMH7CCxRsC1XvBLYHMJOMGNriG OA6C5GDTSwnQGeLTssmZ7GeMuncFR3OvrOsH+EsvbBwnUePaC1cCfayqBBpjpcEF mv2eQs5/xzZnZ+/Xm2NWw1y9gHlDZAsfCm/aqQfyGkJd9kD/AcHtPu1VSKFXVeKX S2pyz2KupyeiffZ2po/AmarwNjICWMk= -----END CERTIFICATE-----Generated at Sat Apr 5 10:02:06 2025 by rpki-client