$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa File: 38baa28c-5f18-3003-b482-8efaa6947bef.roa (raw, json) Hash identifier: ggGn5DZwA4tD6CmCeAuMpHhI0v9Kk5Ej4Hhxb1Iw2f4= Subject key identifier: 87:38:F4:0C:F0:88:50:65:7D:55:05:CD:77:D3:F7:9E:37:D8:BA:0C Certificate issuer: /CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Certificate serial: 010D0C9F4328584964844A2D7343F623DE6ADB00 Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 12022 IP address blocks: 208.83.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:4a:2d:73:43:f6:23:de:6a:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=294e67bd-eefd-445b-bc27-87a5c71fba8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:b9:8f:a2:6c:fd:79:72:ac:9b:dc:63:3d: fe:b9:96:1a:45:3d:08:d4:67:f5:4c:58:ee:83:14: 91:99:e5:7c:ba:a0:1a:0d:03:53:3a:82:a8:43:72: e7:5a:d4:74:a9:90:1f:ef:58:ba:34:e6:9f:6b:93: 4e:de:58:51:60:d8:8a:f4:a0:f7:bc:b7:3f:56:87: b9:ad:04:b8:f1:65:09:53:72:88:6c:90:78:69:e5: 49:b9:35:f6:ca:4f:5a:52:a0:f6:24:4c:aa:1b:15: 1e:fd:50:08:4d:26:de:8b:c4:44:bb:c7:01:4b:6c: 05:56:9f:50:1d:b2:87:4d:00:0a:2d:9c:21:45:f2: 09:c1:54:d3:65:62:a7:0a:ad:a2:1e:ab:1c:bf:88: 49:a8:a1:b3:a3:a8:30:eb:37:0b:b2:e9:8c:d5:fc: e7:27:32:3e:2b:21:da:51:78:1d:60:ee:95:cc:e0: 6f:74:41:a6:20:11:5d:5f:07:63:42:88:aa:a4:5b: d0:05:e5:b5:46:d6:62:64:32:a0:ae:1f:48:b3:58: d8:94:2d:9b:1e:ff:a3:bd:9c:1a:38:95:73:7c:27: 1e:65:f0:aa:fc:0a:23:ad:61:1f:43:ab:2a:87:b0: 30:12:83:34:6b:b7:88:2a:95:5f:01:10:32:af:f2: 2b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:38:F4:0C:F0:88:50:65:7D:55:05:CD:77:D3:F7:9E:37:D8:BA:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl X509v3 Authority Key Identifier: keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer sbgp-ipAddrBlock: critical IPv4: 208.83.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:9e:d5:fd:d8:d8:4f:03:17:1b:ed:50:cb:50:4e:57:ca:02: ab:c1:2f:56:90:5c:e0:e4:6e:24:6c:99:93:73:c6:2d:04:9f: 1d:20:ff:db:3e:5e:44:92:dc:ad:07:26:85:08:0e:3c:d9:8a: 19:a8:19:38:10:c0:cf:80:69:e5:1f:8b:02:87:f9:83:db:74: 52:23:f0:9f:eb:c9:d0:dd:aa:e7:06:67:8e:c6:8e:7b:74:be: a0:5c:2b:bc:9c:81:90:df:29:10:66:0c:2b:81:dc:ac:63:f0: 76:3b:a1:01:c4:ba:98:5b:49:3a:58:5e:ae:25:c6:f2:17:ee: e7:2a:c8:aa:20:65:cb:22:7e:4f:77:28:41:c1:b5:3e:de:ab: aa:57:1f:11:ae:a1:4a:e4:5a:81:0a:1c:32:e6:15:79:95:34: 5e:9c:95:1d:8c:46:52:2f:a8:2e:9b:c5:e5:27:32:19:ff:41: 99:91:83:5a:f1:e2:54:19:d2:19:16:9b:8e:3c:83:78:2d:ff: d6:47:4c:7c:46:7d:90:2e:69:e3:33:7c:02:bb:6d:01:45:26: 11:7b:0f:51:be:2c:ea:f7:f4:59:a7:e3:15:02:e2:9e:12:21: d4:23:39:89:17:e0:72:d2:53:9f:85:13:46:e4:2d:3b:43:dd: 7e:89:02:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEotc0P2I95q2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhNjY2OWItNmQyNS00MTg2LWE3NTctM2MyODliZGM4 MDMxMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk Mjk0ZTY3YmQtZWVmZC00NDViLWJjMjctODdhNWM3MWZiYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdu5j6Js/XlyrJvcYz3+uZYaRT0I1Gf1TFju gxSRmeV8uqAaDQNTOoKoQ3LnWtR0qZAf71i6NOafa5NO3lhRYNiK9KD3vLc/Voe5 rQS48WUJU3KIbJB4aeVJuTX2yk9aUqD2JEyqGxUe/VAITSbei8REu8cBS2wFVp9Q HbKHTQAKLZwhRfIJwVTTZWKnCq2iHqscv4hJqKGzo6gw6zcLsumM1fznJzI+KyHa UXgdYO6VzOBvdEGmIBFdXwdjQoiqpFvQBeW1RtZiZDKgrh9Is1jYlC2bHv+jvZwa OJVzfCceZfCq/AojrWEfQ6sqh7AwEoM0a7eIKpVfARAyr/Ir/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc49AzwiFBlfVUFzXfT95432LoMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2 NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4OWJkYzgwMzEvMzhiYWEyOGMtNWYxOC0z MDAzLWI0ODItOGVmYWE2OTQ3YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDlhNjY2OWItNmQyNS00MTg2LWE3 NTctM2MyODliZGM4MDMxL2Q5YTY2NjliLTZkMjUtNDE4Ni1hNzU3LTNjMjg5YmRj ODAzMS5jcmwwHwYDVR0jBBgwFoAU7lIQLy5n25yXT3T+levfSezkaxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4 OWJkYzgwMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqe1f3Y2E8DFxvtUMtQTlfKAqvBL1aQXODkbiRsmZNzxi0Enx0g/9s+ XkSS3K0HJoUIDjzZihmoGTgQwM+AaeUfiwKH+YPbdFIj8J/rydDdqucGZ47Gjnt0 vqBcK7ycgZDfKRBmDCuB3Kxj8HY7oQHEuphbSTpYXq4lxvIX7ucqyKogZcsifk93 KEHBtT7eq6pXHxGuoUrkWoEKHDLmFXmVNF6clR2MRlIvqC6bxeUnMhn/QZmRg1rx 4lQZ0hkWm448g3gt/9ZHTHxGfZAuaeMzfAK7bQFFJhF7D1G+LOr39Fmn4xUC4p4S IdQjOYkX4HLSU5+FE0bkLTtD3X6JAtY= -----END CERTIFICATE-----Generated at Thu Apr 17 22:54:24 2025 by rpki-client