$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa File: 844a9f17-b00f-3490-8954-09544703c001.roa (raw, json) Hash identifier: FY/FwViYlcWqyyhQbhJO0WBa8ZGzTif+A4wr+qyfbVA= Subject key identifier: 16:83:39:88:02:8A:99:85:BD:48:67:3A:04:3F:4F:A8:E4:36:49:50 Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F432858495C243A7BCD75A4E7B5DF4000 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 13629 IP address blocks: 208.94.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:3a:7b:cd:75:a4:e7:b5:df:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=eee9d7aa-5f50-453c-a09c-25a990ecfabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8a:f3:1d:40:32:94:04:a6:a4:9c:41:c5:8f: d9:bb:f9:69:5a:9b:fd:30:4e:c8:7f:a2:b3:53:28: e0:e7:f8:c7:fd:40:84:e1:d8:37:c9:ad:b7:9c:7e: 96:4e:6f:25:91:4a:0d:56:9b:b9:4b:8a:33:69:e9: 4a:6b:73:7a:91:02:9d:67:28:91:64:d4:ee:6f:55: 4e:0e:d7:26:b3:2d:b7:bf:e7:28:ad:84:4e:ae:ff: 0d:b1:8e:b0:69:40:c7:c3:7b:8c:2d:60:55:42:2a: f6:1d:de:8d:df:25:0a:0d:44:fa:07:67:c9:b5:83: f2:23:11:48:21:5d:a1:6c:e4:43:e0:c5:0d:de:01: c8:ea:31:8a:64:eb:57:33:10:d5:2c:ec:70:e5:e2: 6d:33:b7:b2:af:9c:43:00:69:dd:c3:e0:bd:2c:04: f2:96:73:e7:4a:18:46:6f:bc:6a:6c:96:02:90:96: fe:a3:97:0d:3f:0e:76:3e:80:08:f4:c6:99:a7:f5: b4:2f:f3:2a:5f:c4:1f:15:d9:66:99:0c:77:e1:d0: b2:2c:f4:41:f9:9f:f1:0e:be:a4:41:f1:57:18:da: 40:f0:82:8d:5e:7c:24:0f:a6:b5:ae:6f:c5:de:48: 26:58:58:42:e6:de:42:76:6b:36:1f:c9:c9:a6:ba: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:83:39:88:02:8A:99:85:BD:48:67:3A:04:3F:4F:A8:E4:36:49:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:29:1e:27:14:be:62:48:20:96:ff:47:a9:82:7d:88:d9:36: 1f:7e:d3:c3:c8:e7:77:42:60:ec:33:b0:85:0a:c2:8c:a3:bf: 78:ae:71:cf:ba:86:e3:cb:8b:12:97:7b:45:c9:ae:4e:6f:ab: f1:81:fe:aa:29:2b:85:f1:64:00:d1:bf:78:22:ee:7d:2d:73: 92:d6:0c:67:6c:d8:06:50:af:d3:42:ee:f0:f2:0d:4e:f3:87: 3c:9c:dd:7f:32:02:c1:f9:cf:d3:7f:e8:90:2f:d0:cb:b1:b5: 59:b0:56:32:79:96:01:b8:64:10:cd:d2:e2:d6:41:03:f1:da: 8b:67:14:b0:02:90:7d:cc:80:f1:69:8f:b4:bf:d6:9b:9a:5c: 77:33:16:36:81:59:15:bf:11:25:8a:71:43:e9:85:8d:d8:4b: 6d:d1:87:e7:fa:ba:b2:09:42:9e:5f:43:de:8f:3e:91:bd:14: de:64:9a:96:65:9a:e3:85:57:ed:77:2a:af:72:8b:6f:10:4c: 0c:ec:9e:c0:08:4b:16:e8:ba:04:35:3f:a1:29:81:0b:3e:20: 6c:89:7e:6c:ea:31:0a:a9:7b:e7:ed:b5:ef:52:c8:b1:4b:bc: 43:19:22:a4:99:de:9a:8a:5e:d9:77:11:73:64:9b:f0:65:e4: 60:17:61:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDp7zXWk57XfQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk ZWVlOWQ3YWEtNWY1MC00NTNjLWEwOWMtMjVhOTkwZWNmYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIrzHUAylASmpJxBxY/Zu/lpWpv9ME7If6Kz Uyjg5/jH/UCE4dg3ya23nH6WTm8lkUoNVpu5S4ozaelKa3N6kQKdZyiRZNTub1VO Dtcmsy23v+corYROrv8NsY6waUDHw3uMLWBVQir2Hd6N3yUKDUT6B2fJtYPyIxFI IV2hbORD4MUN3gHI6jGKZOtXMxDVLOxw5eJtM7eyr5xDAGndw+C9LATylnPnShhG b7xqbJYCkJb+o5cNPw52PoAI9MaZp/W0L/MqX8QfFdlmmQx34dCyLPRB+Z/xDr6k QfFXGNpA8IKNXnwkD6a1rm/F3kgmWFhC5t5Cdms2H8nJprrMkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaDOYgCipmFvUhnOgQ/T6jkNklQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvODQ0YTlmMTctYjAwZi0z NDkwLTg5NTQtMDk1NDQ3MDNjMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHApHicUvmJIIJb/R6mCfYjZNh9+08PI53dCYOwzsIUKwoyjv3iucc+6 huPLixKXe0XJrk5vq/GB/qopK4XxZADRv3gi7n0tc5LWDGds2AZQr9NC7vDyDU7z hzyc3X8yAsH5z9N/6JAv0MuxtVmwVjJ5lgG4ZBDN0uLWQQPx2otnFLACkH3MgPFp j7S/1puaXHczFjaBWRW/ESWKcUPphY3YS23Rh+f6urIJQp5fQ96PPpG9FN5kmpZl muOFV+13Kq9yi28QTAzsnsAISxbougQ1P6EpgQs+IGyJfmzqMQqpe+ftte9SyLFL vEMZIqSZ3pqKXtl3EXNkm/Bl5GAXYcA= -----END CERTIFICATE-----Generated at Fri Apr 11 21:52:09 2025 by rpki-client