$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa File: 2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa (raw, json) Hash identifier: 5UTE5qS/aoYnVvqASL1Tn8Suyt9kIyJenuajNgeZt3s= Subject key identifier: AB:D8:35:A1:FB:B2:86:D4:D2:08:7E:D0:71:E6:D6:DF:95:42:D1:EC Certificate issuer: /CN=0c71d09c-b853-44b9-8b34-8d5283774a5a Certificate serial: 010D0C9F432858497279B7F222C381E94C056760 Authority key identifier: 32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 14721 IP address blocks: 208.86.116.0/22 maxlen: 24 208.91.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:b7:f2:22:c3:81:e9:4c:05:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c71d09c-b853-44b9-8b34-8d5283774a5a Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=c889feff-b61e-45c6-97d3-9b0ffc069904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:da:78:66:2e:89:24:c7:dd:1b:a5:5a:77:79: 2d:4e:df:b9:b1:64:8d:67:7b:02:bc:17:8b:0e:01: 15:e6:e0:b7:80:6a:dd:fc:65:9a:f3:31:44:ac:81: d9:4d:8a:d9:1e:94:b9:06:ca:6a:24:b0:dd:4f:28: 8c:3e:fe:e9:73:99:bd:35:30:85:f5:e4:ec:20:52: 64:f4:e7:61:5f:43:43:3e:f0:b1:ff:0b:bc:08:0b: b8:85:79:85:97:7d:e3:4c:7f:05:39:34:27:1a:d2: 92:a9:2d:2b:19:75:44:8d:0d:1a:63:8a:87:a7:c3: 29:1c:f1:78:e1:06:fd:28:51:51:ed:39:00:96:7a: 57:14:45:36:9b:05:e7:5d:31:bf:8f:5a:65:fd:0c: d2:23:d2:6b:7a:7c:d0:e8:98:89:7c:6a:9b:e4:7e: e3:29:92:f9:a2:dc:14:2b:af:e3:11:26:52:58:8a: fe:a8:ac:65:50:43:98:06:d9:a1:38:38:b5:11:bf: ab:4c:45:8a:06:62:60:b1:44:ad:94:d1:c2:e5:21: 2d:2b:43:d4:77:05:cc:57:3c:3f:d6:b1:39:42:f2: 42:43:0f:f9:f7:82:5c:b0:bf:b6:27:2b:a4:40:c4: 40:4e:40:2b:64:6a:10:5e:c9:4e:5c:e3:f9:2b:eb: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D8:35:A1:FB:B2:86:D4:D2:08:7E:D0:71:E6:D6:DF:95:42:D1:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl X509v3 Authority Key Identifier: keyid:32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer sbgp-ipAddrBlock: critical IPv4: 208.86.116.0/22 208.91.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:cd:09:97:16:ce:1c:9a:e2:a9:8f:3a:c9:72:6e:1c:5b:0d: f6:94:82:02:7b:2a:59:ff:57:46:d3:40:10:0f:ac:e2:39:61: 1a:83:a7:46:a5:ed:05:6d:98:29:4c:ab:ce:4e:be:18:f8:aa: 3b:25:e5:9f:b1:64:64:22:e1:2c:a9:22:30:c4:f3:10:ad:84: 48:37:9a:5e:15:69:cb:ef:42:a5:23:bf:8f:e6:85:35:94:df: 05:1a:09:d7:ae:42:e8:f8:e1:92:a2:2d:5c:1e:a1:e5:b9:9b: b1:21:37:2d:b0:52:8c:44:bc:52:27:b1:53:96:86:d3:2d:ee: c6:76:c8:0b:53:f2:f9:0e:7d:d8:d8:33:6f:d8:48:54:8c:02: 21:73:f0:3f:eb:4f:31:2a:8d:0c:0e:4d:fc:8c:9c:33:f1:4e: 67:d0:5a:cd:be:17:57:90:03:2f:6c:79:82:16:d6:f0:fd:6b: 11:a0:d2:9d:01:45:33:ff:54:ac:72:2f:90:2a:c5:82:3c:79: a7:15:5b:c5:29:fc:4d:b7:98:e2:f7:94:a6:f6:f9:9b:ee:23: 37:37:2f:ab:74:4a:80:fb:07:85:12:72:07:7f:b3:4e:39:2a: 75:8d:71:82:a2:39:a7:ae:da:b5:ef:56:45:f4:12:8e:c2:8f: 81:d2:6d:6d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElyebfyIsOB6UwFZ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3MWQwOWMtYjg1My00NGI5LThiMzQtOGQ1MjgzNzc0 YTVhMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk Yzg4OWZlZmYtYjYxZS00NWM2LTk3ZDMtOWIwZmZjMDY5OTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9p4Zi6JJMfdG6Vad3ktTt+5sWSNZ3sCvBeL DgEV5uC3gGrd/GWa8zFErIHZTYrZHpS5BspqJLDdTyiMPv7pc5m9NTCF9eTsIFJk 9OdhX0NDPvCx/wu8CAu4hXmFl33jTH8FOTQnGtKSqS0rGXVEjQ0aY4qHp8MpHPF4 4Qb9KFFR7TkAlnpXFEU2mwXnXTG/j1pl/QzSI9JrenzQ6JiJfGqb5H7jKZL5otwU K6/jESZSWIr+qKxlUEOYBtmhODi1Eb+rTEWKBmJgsUStlNHC5SEtK0PUdwXMVzw/ 1rE5QvJCQw/594JcsL+2JyukQMRATkArZGoQXslOXOP5K+veNQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKvYNaH7sobU0gh+0HHm1t+VQtHsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcx ZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUyODM3NzRhNWEvMmEyZjA1OWQtZTE4MS0z M2JmLThiYmQtMmM0YTVkMDkwODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM3MWQwOWMtYjg1My00NGI5LThi MzQtOGQ1MjgzNzc0YTVhLzBjNzFkMDljLWI4NTMtNDRiOS04YjM0LThkNTI4Mzc3 NGE1YS5jcmwwHwYDVR0jBBgwFoAUMjrJJt0I/JfknfYqpMDA+iarQNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcxZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUy ODM3NzRhNWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC0FZ0AwQC 0FuYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIDNCZcWzhya4qmPOslybhxbDfaUggJ7Kln/V0bTQBAPrOI5 YRqDp0al7QVtmClMq85Ovhj4qjsl5Z+xZGQi4SypIjDE8xCthEg3ml4VacvvQqUj v4/mhTWU3wUaCdeuQuj44ZKiLVweoeW5m7EhNy2wUoxEvFInsVOWhtMt7sZ2yAtT 8vkOfdjYM2/YSFSMAiFz8D/rTzEqjQwOTfyMnDPxTmfQWs2+F1eQAy9seYIW1vD9 axGg0p0BRTP/VKxyL5AqxYI8eacVW8Up/E23mOL3lKb2+ZvuIzc3L6t0SoD7B4US cgd/s045KnWNcYKiOaeu2rXvVkX0Eo7Cj4HSbW0= -----END CERTIFICATE-----Generated at Sat Apr 12 15:16:40 2025 by rpki-client