$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1045fe8d-434a-36b5-a028-7e65810bf0b5.roa File: 1045fe8d-434a-36b5-a028-7e65810bf0b5.roa (raw, json) Hash identifier: oDozrGInn2rJ8Qli0sdue3U4GLwtOhZN3WjTMky5hq4= Subject key identifier: F1:0A:36:D3:28:C5:5A:4F:E1:2A:53:4C:2C:FC:E2:E7:5D:BF:EB:D1 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F432858499829D12C5875521FFE5FE880 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1045fe8d-434a-36b5-a028-7e65810bf0b5.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 393841 IP address blocks: 208.56.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d1:2c:58:75:52:1f:fe:5f:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=319fd6e1-f429-42b5-9ce8-ba25a9d7383c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ea:68:ed:ae:f7:58:c2:a7:4b:85:d1:21:b1: 71:49:21:97:7c:2b:81:77:a5:d5:2d:40:00:1e:58: ec:a3:e9:67:b7:f3:ad:4e:2b:9e:2e:e4:6f:9e:98: 23:06:9e:79:05:47:d2:ce:ab:d0:fa:01:2b:7c:38: 97:9d:3a:84:9e:ea:38:02:fc:d3:79:bf:fa:60:a0: 6f:17:9c:65:4f:20:6e:a2:26:9c:a5:05:25:b6:e7: 28:80:8f:67:67:2b:94:e3:95:42:a7:9e:9d:23:7b: 40:c9:c8:eb:3a:db:a8:ca:cb:99:ee:89:78:7d:06: a1:14:90:37:d5:c0:b0:24:be:3e:c7:39:c5:da:88: 80:20:79:d0:cc:78:54:a1:ad:83:e8:6b:e8:13:89: e3:8e:81:d3:1d:39:1f:19:93:30:0c:91:5f:74:76: 6e:17:32:56:c8:36:52:fb:10:49:3b:9e:89:a0:43: 26:2c:2a:c3:92:82:83:39:56:8a:09:ab:24:fe:03: bc:2a:a3:9c:86:76:a7:4d:5e:6f:fd:a5:15:c4:a0: f0:f9:a4:1b:41:e8:73:31:0c:47:5a:36:b8:fb:1b: 49:2b:e6:ce:4f:c7:da:68:4a:1b:7b:a7:ba:46:2e: d0:ed:a8:b1:b8:f8:06:85:6f:c1:be:d6:1e:30:37: 89:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0A:36:D3:28:C5:5A:4F:E1:2A:53:4C:2C:FC:E2:E7:5D:BF:EB:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1045fe8d-434a-36b5-a028-7e65810bf0b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 208.56.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ed:05:7c:b5:a8:0b:b9:f8:d8:d6:43:6b:c3:dd:26:99:6b: a4:85:da:2f:34:70:88:82:fc:cc:dd:2d:97:fd:36:68:e4:c9: 06:3b:6e:d5:05:25:35:ae:fa:bb:0a:c5:9d:17:d4:7b:13:de: 15:cc:99:bb:48:cb:27:e2:d5:0c:58:0a:f2:1e:7f:01:cb:56: 4f:a4:7f:a9:60:09:d3:01:2a:6b:a0:1a:4a:44:78:cf:0f:e9: d2:42:eb:5b:b1:eb:2f:19:a9:3d:44:6a:30:a0:5e:98:e4:1b: 53:a2:c5:ba:3b:23:06:45:0a:de:64:58:59:72:86:01:74:9a: c8:93:9c:14:8a:cc:46:a8:79:3c:e8:6b:e0:cc:c6:17:bd:e1: 2b:10:f9:6a:a0:88:ed:8a:10:d3:bf:84:04:18:a9:82:3a:1e: fb:78:9e:07:ef:75:0d:22:2b:56:0a:51:73:f4:5e:f1:94:1a: ab:d0:2a:dd:6f:bd:65:39:36:d8:0f:af:e8:be:85:e3:bb:7d: b5:f4:d5:7b:85:bb:32:8b:b8:b5:62:03:ad:a5:05:9c:ae:62: 80:15:58:e4:0f:d1:0b:ab:70:15:f0:fa:fb:0a:0c:e6:26:1c: 69:c5:bb:c5:c0:d4:39:cc:5a:c3:05:dd:5f:09:ab:1c:d5:51: 97:4e:79:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdEsWHVSH/5f6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MzE5ZmQ2ZTEtZjQyOS00MmI1LTljZTgtYmEyNWE5ZDczODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgupo7a73WMKnS4XRIbFxSSGXfCuBd6XVLUAA Hljso+lnt/OtTiueLuRvnpgjBp55BUfSzqvQ+gErfDiXnTqEnuo4AvzTeb/6YKBv F5xlTyBuoiacpQUltucogI9nZyuU45VCp56dI3tAycjrOtuoysuZ7ol4fQahFJA3 1cCwJL4+xznF2oiAIHnQzHhUoa2D6GvoE4njjoHTHTkfGZMwDJFfdHZuFzJWyDZS +xBJO56JoEMmLCrDkoKDOVaKCask/gO8KqOchnanTV5v/aUVxKDw+aQbQehzMQxH Wja4+xtJK+bOT8faaEobe6e6Ri7Q7aixuPgGhW/BvtYeMDeJ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEKNtMoxVpP4SpTTCz84uddv+vRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvMTA0NWZlOGQtNDM0YS0z NmI1LWEwMjgtN2U2NTgxMGJmMGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DjPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDtBXy1qAu5+NjWQ2vD3SaZa6SF2i80cIiC/MzdLZf9NmjkyQY7btUF JTWu+rsKxZ0X1HsT3hXMmbtIyyfi1QxYCvIefwHLVk+kf6lgCdMBKmugGkpEeM8P 6dJC61ux6y8ZqT1EajCgXpjkG1Oixbo7IwZFCt5kWFlyhgF0msiTnBSKzEaoeTzo a+DMxhe94SsQ+WqgiO2KENO/hAQYqYI6Hvt4ngfvdQ0iK1YKUXP0XvGUGqvQKt1v vWU5NtgPr+i+heO7fbX01XuFuzKLuLViA62lBZyuYoAVWOQP0QurcBXw+vsKDOYm HGnFu8XA1DnMWsMF3V8JqxzVUZdOeYU= -----END CERTIFICATE-----Generated at Sun Jun 8 07:29:22 2025 by rpki-client