$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3f6a5fee-ec64-301f-a0e5-14c1947ec0b0.roa File: 3f6a5fee-ec64-301f-a0e5-14c1947ec0b0.roa (raw, json) Hash identifier: T1p5/rAvkW/Om/yF5HRhcS7PSnpM0xjBVo/c5L4emgk= Subject key identifier: 2B:C2:D7:00:92:51:34:3D:8C:0C:F9:0F:96:C9:00:57:70:52:01:BA Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285848A049111879EE45EB6CCD98C0 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3f6a5fee-ec64-301f-a0e5-14c1947ec0b0.roa Signing time: Wed 22 Jan 2025 06:03:27 +0000 ROA not before: Wed 22 Jan 2025 06:03:27 +0000 ROA not after: Tue 22 Apr 2025 05:03:27 +0000 asID: 19165 IP address blocks: 208.87.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:49:11:18:79:ee:45:eb:6c:cd:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jan 22 06:03:27 2025 GMT Not After : Apr 22 05:03:27 2025 GMT Subject: CN=ef465de8-a8fb-44c6-a289-cc3df63019f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:92:97:f2:87:79:a3:06:89:fd:bb:80:12: 87:c9:79:30:4a:76:33:52:64:04:74:6a:1a:8e:75: 77:9b:11:48:c4:83:9b:15:78:51:3d:54:7e:65:0c: e3:97:62:54:2a:8f:f1:d2:dd:68:d1:66:a3:72:c7: 47:16:6d:25:3f:84:69:c6:9b:ee:80:2f:b6:bf:d5: 62:9f:77:04:f2:db:64:95:d1:28:73:77:9a:e2:8c: e1:ef:1a:c1:17:d1:2a:62:1a:db:f3:a2:8b:a8:38: bc:d3:74:16:76:34:06:79:7c:bf:bc:46:9c:af:69: 2d:ac:86:58:47:e3:72:8c:0f:1c:12:dc:23:d3:c8: 4e:26:e3:72:b5:99:75:e6:98:3b:88:5d:91:6b:90: 48:bc:1c:73:77:b1:fb:cc:b8:62:0c:eb:23:12:e4: 3f:8e:e9:01:ae:7a:3a:6d:40:6d:c6:2f:7d:75:ad: ad:9d:29:da:fc:0d:20:38:ee:f6:a2:a9:2a:7e:b9: fd:bd:86:33:ce:15:3a:cb:37:fd:cf:0d:03:d8:a2: ac:ce:e7:f9:55:dd:24:61:57:79:79:5d:7d:46:94: 35:1d:98:01:5c:5b:2d:7a:bc:25:5d:2c:85:86:ba: 54:bb:fc:45:f2:0b:b7:ec:33:7c:eb:1b:fe:36:2a: 10:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C2:D7:00:92:51:34:3D:8C:0C:F9:0F:96:C9:00:57:70:52:01:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3f6a5fee-ec64-301f-a0e5-14c1947ec0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 208.87.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cc:d4:4a:60:7f:90:a5:03:65:f9:04:16:87:f8:cf:5a:98: 20:91:84:40:3c:5b:d0:cc:4e:e7:c8:e5:07:53:d3:34:05:98: 20:6d:28:39:5f:27:26:45:5f:9a:4d:37:ec:73:47:19:ef:4d: 3e:d6:01:b2:5e:aa:c3:24:9a:e4:29:1f:3b:7f:e6:0f:c3:89: 1b:0e:93:f2:fd:71:68:be:b0:b2:a7:22:d8:40:55:92:5a:15: 81:4d:e4:f1:b4:1c:50:85:94:f9:ab:8a:e1:19:8c:39:a6:68: 1c:2c:02:69:c5:a4:72:74:79:e4:e2:2a:fd:6e:e4:9c:85:ef: 11:06:5f:6d:20:ee:d9:03:89:8c:dd:b2:34:6a:c3:ba:35:72: 32:c5:6c:d9:33:ca:a8:4c:6a:f9:f1:7a:3e:83:a9:42:2c:0a: 74:2a:53:5d:da:45:03:ba:79:08:af:34:7a:b8:09:fb:d6:f2: 5f:7d:c3:6b:82:6b:30:d4:fb:19:14:d5:96:3f:14:eb:1d:c5: 8a:1d:6f:59:04:d9:34:3d:03:95:79:16:6d:71:b4:f8:dc:89: 20:b2:21:38:3e:fe:f7:2c:98:20:62:e7:53:0a:fc:1b:93:9e: bf:e8:42:52:a3:43:6d:3d:0b:46:29:4e:78:46:3f:74:a6:06: 3f:88:8a:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigSREYee5F62zNmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDEyMjA2MDMyN1oXDTI1MDQyMjA1MDMyN1owLzEtMCsGA1UEAxMk ZWY0NjVkZTgtYThmYi00NGM2LWEyODktY2MzZGY2MzAxOWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrySl/KHeaMGif27gBKHyXkwSnYzUmQEdGoa jnV3mxFIxIObFXhRPVR+ZQzjl2JUKo/x0t1o0WajcsdHFm0lP4RpxpvugC+2v9Vi n3cE8ttkldEoc3ea4ozh7xrBF9EqYhrb86KLqDi803QWdjQGeXy/vEacr2ktrIZY R+NyjA8cEtwj08hOJuNytZl15pg7iF2Ra5BIvBxzd7H7zLhiDOsjEuQ/jukBrno6 bUBtxi99da2tnSna/A0gOO72oqkqfrn9vYYzzhU6yzf9zw0D2KKszuf5Vd0kYVd5 eV19RpQ1HZgBXFsterwlXSyFhrpUu/xF8gu37DN86xv+NioQlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvC1wCSUTQ9jAz5D5bJAFdwUgG6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvM2Y2YTVmZWUtZWM2NC0z MDFmLWEwZTUtMTRjMTk0N2VjMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Fc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHM1Epgf5ClA2X5BBaH+M9amCCRhEA8W9DMTufI5QdT0zQFmCBtKDlf JyZFX5pNN+xzRxnvTT7WAbJeqsMkmuQpHzt/5g/DiRsOk/L9cWi+sLKnIthAVZJa FYFN5PG0HFCFlPmriuEZjDmmaBwsAmnFpHJ0eeTiKv1u5JyF7xEGX20g7tkDiYzd sjRqw7o1cjLFbNkzyqhMavnxej6DqUIsCnQqU13aRQO6eQivNHq4CfvW8l99w2uC azDU+xkU1ZY/FOsdxYodb1kE2TQ9A5V5Fm1xtPjciSCyITg+/vcsmCBi51MK/BuT nr/oQlKjQ209C0YpTnhGP3SmBj+IihI= -----END CERTIFICATE-----Generated at Sun Apr 6 04:34:59 2025 by rpki-client