$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa File: 4bd7e0b7-2238-33c8-a229-20f0948809be.roa (raw, json) Hash identifier: GdFCIYSf3EJ5H0OdQcVcWbI4wb1Tn2mTNypf/7nfFzM= Subject key identifier: DE:B9:89:C9:47:F3:87:C2:04:D6:E7:4D:A7:2B:4D:99:C7:0C:F8:58 Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Certificate serial: 010D0C9F4328584A146578715A4AFC40159E90F0 Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 3257 IP address blocks: 208.72.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:78:71:5a:4a:fc:40:15:9e:90:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=fa54f8f8-6c39-410c-8dcf-3bd943745d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1c:18:41:31:16:d4:ef:15:4b:76:d0:27:34: 09:8d:77:e8:76:d0:2b:58:1e:74:dd:53:d8:4e:ba: 78:37:61:73:70:12:39:d1:84:a4:ca:64:8f:f0:81: f1:f0:70:f2:3c:84:8c:b2:3c:e3:ce:ca:04:ae:74: e4:9b:b2:5f:7b:47:1e:0a:67:6d:0c:d9:20:0c:91: 37:c6:6d:bd:b9:ae:f4:16:96:76:49:1e:b1:9a:1b: 6c:90:9b:41:8d:81:bc:2d:d9:05:a4:c6:53:2e:b7: b7:a1:4f:11:1f:61:07:a9:2a:ac:2c:24:fe:c1:d0: 0e:16:19:32:a7:eb:8d:55:b3:c9:da:3d:f3:7d:bc: 3d:9c:7f:d6:77:bf:09:1b:86:c0:4a:26:e7:93:0b: 22:07:1d:23:fd:6e:ff:1d:79:bf:de:4e:68:c0:6b: 58:a1:b0:c5:f9:1b:53:a4:1f:0e:94:0e:f0:b3:19: 22:7a:21:e6:15:ce:19:29:1e:10:c4:38:99:c5:1c: 35:2d:fe:38:92:4e:1a:33:1a:bd:6a:78:9e:f8:ba: bd:d8:44:37:12:3b:7e:ac:be:8a:2b:7d:cd:5b:c0: 60:79:97:6b:29:df:c2:a3:13:18:68:6e:00:25:88: 56:fc:58:9a:76:63:10:94:db:18:0c:5b:36:b4:e4: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B9:89:C9:47:F3:87:C2:04:D6:E7:4D:A7:2B:4D:99:C7:0C:F8:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl X509v3 Authority Key Identifier: keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer sbgp-ipAddrBlock: critical IPv4: 208.72.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:9e:37:5a:76:ad:07:04:4a:3b:ed:e7:3a:47:1e:35:bc:f9: f8:fe:c3:8b:2d:cb:1f:89:66:71:e1:fc:30:3b:94:a8:c0:17: 2e:b1:b6:22:53:01:11:03:62:0a:57:4c:01:87:6b:18:49:10: 2f:32:8d:f0:4e:9a:31:bf:dc:72:2e:c1:93:d7:a6:89:ed:ba: 33:64:d2:ae:f3:11:b6:43:3e:86:b3:99:5d:88:7a:76:26:56: 87:0f:54:3b:9b:03:97:45:19:fc:90:8e:19:24:a4:28:87:6e: f6:e7:9a:53:fd:41:a6:8f:60:6d:e0:f2:75:6a:87:28:c1:88: 12:95:b9:4b:f4:34:75:fa:19:b3:18:b5:c0:ac:6c:07:94:5d: 4e:11:1f:c1:f4:63:51:e7:97:c8:98:91:e4:a6:7a:08:87:cb: fa:d6:72:a4:4c:7a:ee:9a:ef:58:33:f6:c1:be:19:f4:95:19: 14:f5:7e:eb:3b:87:0f:e1:2f:d4:c5:0e:51:b8:bc:3d:c0:7d: e7:24:bc:61:77:2a:c2:5f:06:29:8d:9a:d4:66:cf:09:75:4e: 11:ae:d6:b6:9f:27:44:d1:35:b1:b5:2d:fb:3e:83:1b:06:e3: b0:35:32:15:81:3b:e8:b7:e2:cc:c4:43:e1:b1:16:a2:43:02: 2a:d8:5a:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXhxWkr8QBWekPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw YzhiMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmE1NGY4ZjgtNmMzOS00MTBjLThkY2YtM2JkOTQzNzQ1ZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxwYQTEW1O8VS3bQJzQJjXfodtArWB503VPY Trp4N2FzcBI50YSkymSP8IHx8HDyPISMsjzjzsoErnTkm7Jfe0ceCmdtDNkgDJE3 xm29ua70FpZ2SR6xmhtskJtBjYG8LdkFpMZTLre3oU8RH2EHqSqsLCT+wdAOFhky p+uNVbPJ2j3zfbw9nH/Wd78JG4bASibnkwsiBx0j/W7/HXm/3k5owGtYobDF+RtT pB8OlA7wsxkieiHmFc4ZKR4QxDiZxRw1Lf44kk4aMxq9anie+Lq92EQ3Ejt+rL6K K33NW8BgeZdrKd/CoxMYaG4AJYhW/FiadmMQlNsYDFs2tOSh3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN65iclH84fCBNbnTacrTZnHDPhYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvNGJkN2UwYjctMjIzOC0z M2M4LWEyMjktMjBmMDk0ODgwOWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0 NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCeN1p2rQcESjvt5zpHHjW8+fj+w4styx+JZnHh/DA7lKjAFy6xtiJT AREDYgpXTAGHaxhJEC8yjfBOmjG/3HIuwZPXpontujNk0q7zEbZDPoazmV2IenYm VocPVDubA5dFGfyQjhkkpCiHbvbnmlP9QaaPYG3g8nVqhyjBiBKVuUv0NHX6GbMY tcCsbAeUXU4RH8H0Y1Hnl8iYkeSmegiHy/rWcqRMeu6a71gz9sG+GfSVGRT1fus7 hw/hL9TFDlG4vD3AfeckvGF3KsJfBimNmtRmzwl1ThGu1rafJ0TRNbG1Lfs+gxsG 47A1MhWBO+i34szEQ+GxFqJDAirYWs8= -----END CERTIFICATE-----Generated at Fri Jun 6 14:02:16 2025 by rpki-client