$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa File: ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa (raw, json) Hash identifier: M8MXNk99KblgPRE6G7szq2QVqS9AQM6SzQ4np11PQvU= Subject key identifier: 3C:54:F4:87:04:50:FF:94:36:CB:61:31:56:09:C6:D2:D4:95:1A:88 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F43285849350E95092E9203E299E69880 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 30383 IP address blocks: 198.208.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:95:09:2e:92:03:e2:99:e6:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=bb9a3965-3e1d-4fea-acaa-6ae53fed2479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d1:ca:9f:2b:9d:f0:61:1b:91:ce:05:f7:86: db:8e:cf:97:ec:58:87:17:ce:e5:5d:e2:b1:0e:76: 7e:7a:d2:c7:58:3c:17:e5:45:eb:98:1d:a0:a1:58: 8b:c4:c4:65:e5:08:3b:6b:95:8b:0c:8d:2c:ff:c5: 71:6b:50:a1:57:fa:af:eb:ef:91:07:35:01:11:29: 6c:e4:33:a6:64:ff:b1:ae:7e:95:b8:a7:ee:71:36: 9e:84:fa:c3:e4:96:dc:3f:46:c3:c1:f8:16:d6:4d: fd:df:5d:b0:ef:fc:62:fa:e3:36:dc:fb:dd:06:55: a3:e7:94:07:f0:b5:9e:29:cd:84:de:dc:f9:78:74: 36:04:a4:f0:4a:88:8d:58:34:f8:2f:c0:8a:c1:27: a4:3a:68:e8:36:0f:cb:8b:2e:80:d8:05:8b:1e:05: 2b:83:c4:d0:71:87:af:67:b0:25:48:fa:90:fe:cf: 08:93:a0:cc:22:19:d2:79:29:93:b1:9b:f2:80:c8: 67:44:9d:04:8e:60:1f:59:b4:37:80:f1:f3:4e:49: 24:0f:01:68:bf:e0:e7:fe:22:cc:13:7b:2f:11:20: 77:fa:f0:5b:c0:a9:5e:4c:d8:6d:09:bf:31:d7:40: 22:a4:32:8b:6a:35:bc:f9:ab:ef:f2:f0:2d:7b:a2: c4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:54:F4:87:04:50:FF:94:36:CB:61:31:56:09:C6:D2:D4:95:1A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:06:52:1b:b3:26:13:23:9f:fe:24:84:f0:aa:80:f1:df:e4: 00:76:03:b1:8c:dd:aa:e2:40:68:5e:4b:e4:58:7e:4e:b8:c6: 44:98:5b:35:f9:91:0d:90:1d:98:17:55:af:46:f7:25:42:62: be:5b:09:28:3b:4e:e6:f4:36:70:d9:08:c8:07:e0:41:b2:39: 2d:c8:67:0b:e6:65:0e:2f:9f:ff:82:e3:0b:a3:8d:31:1a:d1: 25:2f:d9:de:d6:28:8b:1b:2a:ca:63:7e:fe:f9:ab:2d:10:b4: f6:fb:5d:45:47:dc:3a:3e:b6:12:f7:e9:d5:c1:d6:c7:6e:fb: 85:6c:32:8c:4a:38:b3:73:b9:94:0c:da:21:fc:88:62:f6:5b: e0:eb:0a:54:30:c4:b4:8a:48:50:59:ec:21:4b:8c:4e:ca:11: 53:f8:97:4c:3f:a8:78:f2:21:35:57:d0:e2:95:96:4b:81:95: c6:00:40:2b:e9:08:9d:7b:86:79:68:14:d5:54:90:12:6c:ea: 3a:77:e3:b6:9d:8c:61:6a:88:cd:f6:af:9f:d5:2b:4a:65:39: 75:b9:ab:d7:b1:69:a8:4d:fa:0f:98:8b:c0:4a:93:a3:54:54: 79:f1:5b:7a:b4:96:35:8c:d8:45:b2:9b:53:9f:a6:96:d2:4d: 30:fb:54:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpUJLpID4pnmmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YmI5YTM5NjUtM2UxZC00ZmVhLWFjYWEtNmFlNTNmZWQyNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtHKnyud8GEbkc4F94bbjs+X7FiHF87lXeKx DnZ+etLHWDwX5UXrmB2goViLxMRl5Qg7a5WLDI0s/8Vxa1ChV/qv6++RBzUBESls 5DOmZP+xrn6VuKfucTaehPrD5JbcP0bDwfgW1k39312w7/xi+uM23PvdBlWj55QH 8LWeKc2E3tz5eHQ2BKTwSoiNWDT4L8CKwSekOmjoNg/Liy6A2AWLHgUrg8TQcYev Z7AlSPqQ/s8Ik6DMIhnSeSmTsZvygMhnRJ0EjmAfWbQ3gPHzTkkkDwFov+Dn/iLM E3svESB3+vBbwKleTNhtCb8x10AipDKLajW8+avv8vAte6LE6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxU9IcEUP+UNsthMVYJxtLUlRqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvZWJjMjRkYWMtZDA4ZS0z MzY3LWE2ZDEtNmJhMjI5NzBlMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEGUhuzJhMjn/4khPCqgPHf5AB2A7GM3ariQGheS+RYfk64xkSYWzX5 kQ2QHZgXVa9G9yVCYr5bCSg7Tub0NnDZCMgH4EGyOS3IZwvmZQ4vn/+C4wujjTEa 0SUv2d7WKIsbKspjfv75qy0QtPb7XUVH3Do+thL36dXB1sdu+4VsMoxKOLNzuZQM 2iH8iGL2W+DrClQwxLSKSFBZ7CFLjE7KEVP4l0w/qHjyITVX0OKVlkuBlcYAQCvp CJ17hnloFNVUkBJs6jp347adjGFqiM32r5/VK0plOXW5q9exaahN+g+Yi8BKk6NU VHnxW3q0ljWM2EWym1OfppbSTTD7VOY= -----END CERTIFICATE-----Generated at Sun Apr 6 00:01:56 2025 by rpki-client