$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa File: 3cd4923c-6128-376c-8446-baffa366fd39.roa (raw, json) Hash identifier: 7UTY+1dR/QdzZZPqKP5YuGkOy8w/k152wn+r9oQkBcg= Subject key identifier: 48:06:1E:92:E1:B4:00:23:F5:DA:ED:7E:0B:CE:E7:92:B4:67:BD:80 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F43285849287E602C7F6C4BCC5E774380 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 208.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:60:2c:7f:6c:4b:cc:5e:77:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=c23f540c-62da-44f0-bdd9-108fb40cb45c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:45:66:99:4d:40:5f:b7:4f:36:ac:b4:ba: 38:e3:b5:d1:c2:d9:14:ae:35:75:78:2e:7c:94:a7: b0:0b:f2:96:2a:e8:eb:57:41:d0:58:70:9d:e8:3d: 13:0b:09:dd:37:f5:98:ed:9b:b1:13:14:76:24:3c: 5e:04:90:7b:ea:63:b6:c2:28:22:17:db:36:16:9c: 53:5c:14:88:4a:87:d1:fc:51:5c:f2:65:06:ec:84: bc:ba:a2:1d:e0:9c:e6:ec:fa:05:b0:bc:04:53:ab: 7e:58:f6:5e:5b:71:57:6c:3c:7f:4a:ec:e7:d1:66: 74:c1:66:9f:b4:f0:2c:be:c9:d2:54:96:5e:90:c5: 54:af:f6:2a:b1:1c:74:2f:51:01:88:0b:1d:14:e2: f6:ad:93:fd:81:9f:39:f4:fa:62:99:9c:12:07:bd: 33:f1:7f:99:c8:8d:73:c9:04:07:05:cd:0e:a4:20: 93:15:03:39:f5:54:52:f4:8e:d1:3f:11:3c:a9:29: 8a:d3:0a:cb:3b:0f:d0:94:a9:79:d0:97:b3:78:d0: c2:f5:f3:98:85:13:b8:2f:4c:d5:d2:13:5b:0f:46: 9b:a5:cc:f4:65:82:08:0a:9e:59:ff:6e:b7:3c:84: db:2c:29:36:a3:af:f2:52:d9:b0:d3:e1:59:ea:38: ae:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:06:1E:92:E1:B4:00:23:F5:DA:ED:7E:0B:CE:E7:92:B4:67:BD:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:34:e8:b0:34:52:05:53:20:a6:83:d8:44:bf:e4:b6:96:a4: 23:8c:ed:1b:ea:9c:a3:c3:ad:88:50:43:c0:43:3b:23:8a:b3: 8e:99:37:33:6c:69:c0:4f:d9:a5:b5:cd:42:5f:92:1c:fb:21: 38:80:a1:25:65:74:1e:31:bb:52:4c:77:18:b1:e6:a9:02:f8: 61:2e:3b:b1:d7:1c:0d:4a:91:e5:1d:31:2e:74:de:5e:ae:7d: 2c:a6:b0:8d:fa:c8:b7:83:20:d5:25:28:81:17:62:e8:7f:38: 77:a5:85:54:5d:9f:79:d4:c4:38:24:36:73:ea:6a:51:fd:4c: b3:be:54:39:1c:e4:d2:7f:c1:33:5e:a4:49:45:4f:95:bf:fa: fe:d4:e6:4b:15:ec:0a:da:d8:77:6c:01:48:5e:ba:00:83:9d: a7:34:f2:89:23:5e:a2:47:53:57:e5:fd:5b:b1:52:60:96:a9: 7d:43:ce:72:c8:8e:2a:4f:df:07:13:00:ed:47:d4:3e:da:1d: 39:8b:a4:01:7a:75:a0:80:96:fc:27:aa:12:73:6f:00:b5:bd: 9b:56:77:d9:8e:76:41:1d:81:c5:19:23:3f:3b:3b:62:e4:09: c1:88:de:c6:c5:0c:2c:44:24:ab:c2:42:2f:11:20:a0:25:64: ee:3b:51:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmAsf2xLzF53Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk YzIzZjU0MGMtNjJkYS00NGYwLWJkZDktMTA4ZmI0MGNiNDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNtFZplNQF+3TzastLo447XRwtkUrjV1eC58 lKewC/KWKujrV0HQWHCd6D0TCwndN/WY7ZuxExR2JDxeBJB76mO2wigiF9s2FpxT XBSISofR/FFc8mUG7IS8uqId4Jzm7PoFsLwEU6t+WPZeW3FXbDx/Suzn0WZ0wWaf tPAsvsnSVJZekMVUr/YqsRx0L1EBiAsdFOL2rZP9gZ859PpimZwSB70z8X+ZyI1z yQQHBc0OpCCTFQM59VRS9I7RPxE8qSmK0wrLOw/QlKl50JezeNDC9fOYhRO4L0zV 0hNbD0abpcz0ZYIICp5Z/263PITbLCk2o6/yUtmw0+FZ6jiuXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgGHpLhtAAj9drtfgvO55K0Z72AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvM2NkNDkyM2MtNjEyOC0z NzZjLTg0NDYtYmFmZmEzNjZmZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFk06LA0UgVTIKaD2ES/5LaWpCOM7RvqnKPDrYhQQ8BDOyOKs46ZNzNs acBP2aW1zUJfkhz7ITiAoSVldB4xu1JMdxix5qkC+GEuO7HXHA1KkeUdMS503l6u fSymsI36yLeDINUlKIEXYuh/OHelhVRdn3nUxDgkNnPqalH9TLO+VDkc5NJ/wTNe pElFT5W/+v7U5ksV7Ara2HdsAUheugCDnac08okjXqJHU1fl/VuxUmCWqX1DznLI jipP3wcTAO1H1D7aHTmLpAF6daCAlvwnqhJzbwC1vZtWd9mOdkEdgcUZIz87O2Lk CcGI3sbFDCxEJKvCQi8RIKAlZO47UdE= -----END CERTIFICATE-----Generated at Fri Mar 14 11:17:40 2025 by rpki-client