$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa File: 8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa (raw, json) Hash identifier: wqWk856Q9zQzOZolTkTKbfi+ymKxBnS8Jo8C2ne5iy4= Subject key identifier: 0F:33:E1:A7:98:E3:C6:C0:F2:66:48:E1:9E:B3:DF:0A:F6:DD:19:4E Certificate issuer: /CN=e608a4ff-c170-41ea-a454-bf0ecd40f83d Certificate serial: 010D0C9F432858494CC944AB1BDB1DCE6B5733A0 Authority key identifier: 65:BB:53:74:68:07:8D:59:FD:64:C5:0A:81:82:B9:31:28:15:3A:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 11700 IP address blocks: 205.207.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:44:ab:1b:db:1d:ce:6b:57:33:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e608a4ff-c170-41ea-a454-bf0ecd40f83d Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=940de770-a41e-46d3-a547-b1a48840c2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e6:ba:1b:ce:98:dd:6c:85:35:d7:ea:f0:d5: 91:73:19:77:5d:7a:db:10:10:43:3d:6e:95:4b:3a: dd:45:ca:cd:72:2e:6d:71:7f:2c:4e:26:75:32:57: a6:3a:18:fa:58:1f:e6:8f:a1:70:d6:69:b0:1d:d6: 3c:52:c7:16:5f:f5:ec:b9:f0:f8:e2:a6:e0:e2:17: 1f:5c:64:08:f6:a2:40:db:f1:40:0c:34:c6:3e:53: 29:b4:60:7b:3b:eb:af:11:96:7f:61:a2:42:32:d0: 6b:90:55:77:d5:5f:cb:eb:e7:ec:d0:ef:be:58:fa: 99:e6:10:c2:4f:4e:7a:43:10:fd:c8:22:01:02:b0: b3:cd:58:27:55:09:3b:6a:1b:47:f3:05:79:fb:1d: 96:48:c1:d1:ec:ff:6f:83:91:f1:3c:68:e3:43:61: 30:93:10:62:e9:bd:f9:b3:65:7b:ed:ad:7a:cd:2c: e7:5a:0e:de:c1:66:6d:92:32:28:04:66:bf:c8:96: 2d:08:06:0e:96:83:62:66:9d:30:4c:d4:77:99:8a: 45:aa:e0:f5:1b:0c:1d:2c:0d:ae:cf:34:ba:20:34: 1e:67:5a:83:5f:c0:0b:08:c4:ec:ce:72:2d:1e:16: e3:b6:99:04:f7:5b:d0:5d:0d:52:8c:ca:d3:ef:b2: bf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:33:E1:A7:98:E3:C6:C0:F2:66:48:E1:9E:B3:DF:0A:F6:DD:19:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.crl X509v3 Authority Key Identifier: keyid:65:BB:53:74:68:07:8D:59:FD:64:C5:0A:81:82:B9:31:28:15:3A:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer sbgp-ipAddrBlock: critical IPv4: 205.207.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c2:e0:39:94:a8:8f:6e:21:90:fb:ec:ef:60:8a:cd:08:35: 7d:f1:18:84:c4:a9:20:44:bd:96:91:91:0a:13:01:0d:7f:77: 98:8e:27:9a:4a:6f:69:08:54:16:5c:2d:c1:85:68:d0:6b:07: 75:92:60:30:07:a0:49:15:55:34:cb:f1:09:0a:9a:a3:15:da: d2:97:62:0c:d8:97:7a:fa:fe:3e:de:e8:0c:0e:6e:3c:a5:45: 97:13:e0:6e:f0:0e:96:93:d4:1f:4e:2c:8a:4b:18:88:34:e0: bd:b9:84:ba:a0:cd:79:f1:01:fc:cc:35:d4:89:84:d8:c8:9d: 10:5b:6a:ac:ff:b9:7c:cc:34:3d:7b:d6:ec:21:0d:a9:80:e7: 3e:36:08:d4:98:ed:aa:d3:ae:20:ce:dc:29:c0:23:29:4a:c5: 57:7e:ff:1d:1d:12:47:ee:a9:43:c9:a8:4a:73:9d:61:a1:a3: 73:c0:b7:68:3c:fa:32:07:df:7f:e0:3d:37:84:21:1a:10:76: e2:9f:ea:c4:b0:5d:fc:bb:61:60:f5:d8:dc:41:44:42:5d:9d: 81:dc:8d:07:a5:67:18:3a:a9:c5:18:c0:6a:17:77:12:dc:b2: 51:d4:ce:01:b8:86:99:0a:f8:f5:07:30:fe:fd:82:10:75:2c: e0:d8:06:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUSrG9sdzmtXM6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwOGE0ZmYtYzE3MC00MWVhLWE0NTQtYmYwZWNkNDBm ODNkMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk OTQwZGU3NzAtYTQxZS00NmQzLWE1NDctYjFhNDg4NDBjMmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoua6G86Y3WyFNdfq8NWRcxl3XXrbEBBDPW6V SzrdRcrNci5tcX8sTiZ1MlemOhj6WB/mj6Fw1mmwHdY8UscWX/XsufD44qbg4hcf XGQI9qJA2/FADDTGPlMptGB7O+uvEZZ/YaJCMtBrkFV31V/L6+fs0O++WPqZ5hDC T056QxD9yCIBArCzzVgnVQk7ahtH8wV5+x2WSMHR7P9vg5HxPGjjQ2EwkxBi6b35 s2V77a16zSznWg7ewWZtkjIoBGa/yJYtCAYOloNiZp0wTNR3mYpFquD1GwwdLA2u zzS6IDQeZ1qDX8ALCMTsznItHhbjtpkE91vQXQ1SjMrT77K/yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8z4aeY48bA8mZI4Z6z3wr23RlOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lNjA4 YTRmZi1jMTcwLTQxZWEtYTQ1NC1iZjBlY2Q0MGY4M2QvOGI3NmJiZmQtM2ZjYi0z NTAyLWI2ZmUtYzEwODBjZjc4MDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTYwOGE0ZmYtYzE3MC00MWVhLWE0 NTQtYmYwZWNkNDBmODNkL2U2MDhhNGZmLWMxNzAtNDFlYS1hNDU0LWJmMGVjZDQw ZjgzZC5jcmwwHwYDVR0jBBgwFoAUZbtTdGgHjVn9ZMUKgYK5MSgVOicwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lNjA4YTRmZi1jMTcwLTQxZWEtYTQ1NC1iZjBl Y2Q0MGY4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzc/LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvC4DmUqI9uIZD77O9gis0INX3xGITEqSBEvZaRkQoTAQ1/d5iOJ5pK b2kIVBZcLcGFaNBrB3WSYDAHoEkVVTTL8QkKmqMV2tKXYgzYl3r6/j7e6AwObjyl RZcT4G7wDpaT1B9OLIpLGIg04L25hLqgzXnxAfzMNdSJhNjInRBbaqz/uXzMND17 1uwhDamA5z42CNSY7arTriDO3CnAIylKxVd+/x0dEkfuqUPJqEpznWGho3PAt2g8 +jIH33/gPTeEIRoQduKf6sSwXfy7YWD12NxBREJdnYHcjQelZxg6qcUYwGoXdxLc slHUzgG4hpkK+PUHMP79ghB1LODYBuQ= -----END CERTIFICATE-----Generated at Sun Apr 6 00:51:25 2025 by rpki-client