$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/00ea4238-793c-3ca7-9a51-330cb7f4b941.roa File: 00ea4238-793c-3ca7-9a51-330cb7f4b941.roa (raw, json) Hash identifier: pwj4wc6I0ocNP3CDKIT3ZZDxCxhc7jy7vTWtXad5ILg= Subject key identifier: 9C:32:0A:87:BC:99:62:AA:55:A3:05:81:C4:8E:08:52:F1:8E:12:60 Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Certificate serial: 010D0C9F43285849393E76BBCADC919E16D01600 Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/00ea4238-793c-3ca7-9a51-330cb7f4b941.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 6079 IP address blocks: 208.72.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:76:bb:ca:dc:91:9e:16:d0:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=23b4dc8c-8266-4855-8993-81202900b99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:0a:89:1e:63:7e:a3:e7:34:b7:73:99:45: 43:bd:9f:73:0d:36:62:2f:37:a3:5f:ba:89:73:05: 1b:46:a4:c8:e4:8e:55:77:32:6a:bb:5d:0b:50:df: 4d:1d:b6:66:b3:47:ce:3c:7b:3d:72:50:f3:68:cf: 5c:63:5b:8d:6c:c4:7f:45:d3:27:2a:40:b8:62:b7: f2:8d:34:9b:a2:c8:de:1b:28:c7:97:ca:3c:bb:8a: 32:b5:62:36:da:0b:44:1e:4e:08:3e:89:87:d5:95: bc:49:c0:2b:a8:0c:b3:0a:eb:0a:db:74:d4:ff:93: 37:07:d0:fc:27:97:bd:a5:5a:a3:ad:bf:c6:2c:ed: 96:0b:33:f6:21:95:6a:bc:2e:67:33:05:9b:0f:1b: 52:97:37:54:af:e6:f4:47:49:42:c3:d2:04:0c:ba: 08:82:5b:30:45:fa:5a:b5:d9:55:a7:b7:3c:1c:99: 07:78:0f:69:43:9f:75:82:17:12:f3:16:30:ca:2e: 89:1b:f2:e2:60:e6:3a:13:90:83:b9:cf:95:a0:de: e0:0a:ba:9f:e5:16:54:db:e8:70:a2:21:9c:2e:a7: ff:d6:68:45:60:18:ec:0b:41:fb:80:d8:31:31:bc: 54:40:5e:b7:be:a1:91:45:17:d5:ba:c5:f6:47:d9: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:32:0A:87:BC:99:62:AA:55:A3:05:81:C4:8E:08:52:F1:8E:12:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/00ea4238-793c-3ca7-9a51-330cb7f4b941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl X509v3 Authority Key Identifier: keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer sbgp-ipAddrBlock: critical IPv4: 208.72.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d2:3a:20:a9:2f:e3:99:60:62:e1:6f:f3:b8:c7:2e:72:95: 60:cc:82:ef:2e:00:91:ad:98:29:c1:08:27:f3:80:b0:92:da: 34:5e:7f:61:c4:f1:e2:65:1b:4f:ae:51:cb:01:fe:78:58:3b: f0:1e:45:c5:cf:15:8e:04:36:75:c7:05:9d:20:47:40:c6:48: 58:5d:5a:96:22:d7:e0:33:b4:f7:4e:00:b7:17:77:9e:4e:5f: d0:b3:e5:3c:cc:6a:04:f2:af:a2:48:66:05:e0:9d:41:fd:e3: 4c:7f:38:55:6d:19:35:6c:c0:57:8b:bb:9c:74:84:a4:7c:85: 26:fd:60:05:04:05:98:e4:92:10:ed:11:a2:30:9e:a4:aa:b0: e6:02:86:f0:5c:49:59:ce:10:e7:8c:ba:26:32:fe:93:82:2e: 56:1b:d6:26:21:81:69:ee:7c:ba:ac:91:3e:7e:6c:56:0d:e2: 9b:b2:4f:60:da:cb:b9:fe:f6:c8:b2:1a:71:98:35:e0:98:ab: 82:c8:27:f0:1c:48:1d:c7:54:30:7f:a9:b6:61:a7:68:da:68: 9b:15:d1:5d:d1:10:32:75:51:ea:e4:c8:7a:9f:11:53:41:82: f2:16:a7:52:85:fc:e4:6f:51:79:4d:12:63:89:23:3c:8f:b2: 2a:12:bf:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5Pna7ytyRnhbQFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw YzhiMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MjNiNGRjOGMtODI2Ni00ODU1LTg5OTMtODEyMDI5MDBiOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzQKiR5jfqPnNLdzmUVDvZ9zDTZiLzejX7qJ cwUbRqTI5I5VdzJqu10LUN9NHbZms0fOPHs9clDzaM9cY1uNbMR/RdMnKkC4Yrfy jTSbosjeGyjHl8o8u4oytWI22gtEHk4IPomH1ZW8ScArqAyzCusK23TU/5M3B9D8 J5e9pVqjrb/GLO2WCzP2IZVqvC5nMwWbDxtSlzdUr+b0R0lCw9IEDLoIglswRfpa tdlVp7c8HJkHeA9pQ591ghcS8xYwyi6JG/LiYOY6E5CDuc+VoN7gCrqf5RZU2+hw oiGcLqf/1mhFYBjsC0H7gNgxMbxUQF63vqGRRRfVusX2R9lwIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwyCoe8mWKqVaMFgcSOCFLxjhJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvMDBlYTQyMzgtNzkzYy0z Y2E3LTlhNTEtMzMwY2I3ZjRiOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0 NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EjSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfSOiCpL+OZYGLhb/O4xy5ylWDMgu8uAJGtmCnBCCfzgLCS2jRef2HE 8eJlG0+uUcsB/nhYO/AeRcXPFY4ENnXHBZ0gR0DGSFhdWpYi1+AztPdOALcXd55O X9Cz5TzMagTyr6JIZgXgnUH940x/OFVtGTVswFeLu5x0hKR8hSb9YAUEBZjkkhDt EaIwnqSqsOYChvBcSVnOEOeMuiYy/pOCLlYb1iYhgWnufLqskT5+bFYN4puyT2Da y7n+9siyGnGYNeCYq4LIJ/AcSB3HVDB/qbZhp2jaaJsV0V3REDJ1UerkyHqfEVNB gvIWp1KF/ORvUXlNEmOJIzyPsioSvxc= -----END CERTIFICATE-----Generated at Fri Apr 4 19:35:37 2025 by rpki-client