$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa File: 0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa (raw, json) Hash identifier: Qm4GUcSRZ7qyrkOQ7LNZpPoiaLE+p+op9HucZ4qTq9Q= Subject key identifier: 10:38:41:C0:15:8B:96:9A:E2:A1:64:D2:EE:B6:2E:9C:98:05:CB:82 Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F43285848EF616A6EDBE25D94892B1040 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 174 IP address blocks: 208.94.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:6a:6e:db:e2:5d:94:89:2b:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=ac7d25b1-8812-4181-bbac-b51bd8ac6d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:58:e8:ef:d4:4a:6a:ba:65:25:fa:74:09:c4: fb:79:65:1e:7d:58:d9:9e:db:79:29:2c:40:c4:dd: 77:ee:4b:d6:ab:a5:81:b6:a1:c5:86:6d:2b:bf:62: 3b:3c:39:cc:42:ac:95:d8:25:e6:39:35:d6:97:55: c1:04:2e:ac:24:73:af:ae:a9:68:f7:5b:61:c6:55: ef:fd:33:db:61:12:ba:a6:d7:13:58:ff:50:03:1b: 32:6e:ef:75:6d:2a:dd:98:0b:cf:2f:4e:2e:3e:3a: 14:d0:78:b6:2a:6b:2e:22:14:06:69:ff:ba:08:c7: ed:ee:bf:81:fe:df:71:f9:fd:61:d4:e0:e0:8a:e0: 52:b7:de:55:a6:06:f3:80:64:6c:64:8b:c6:13:39: fb:8b:60:d3:d4:cb:5e:f9:cc:94:38:32:58:ea:76: b2:51:0f:ef:9b:86:10:3f:96:bc:bc:a3:b6:30:59: ca:8d:c2:04:d2:18:ac:de:f5:03:2e:a5:b0:18:4a: 83:55:ea:e0:e4:ff:98:59:d5:9d:0f:74:2b:0d:12: 90:83:4f:98:d4:46:95:99:6c:4e:9b:5d:95:f4:34: e3:ba:11:14:a7:9d:1c:c7:0e:3b:8a:16:8f:f0:ce: 7c:51:c0:62:fe:7d:02:49:87:c1:35:fb:a6:6e:ab: a4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:38:41:C0:15:8B:96:9A:E2:A1:64:D2:EE:B6:2E:9C:98:05:CB:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 208.94.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a6:48:e4:26:ba:a8:6a:e8:b4:2c:17:52:23:ba:a1:60:1f: 93:b1:d9:e2:d9:9c:16:c7:92:a2:85:bf:ba:47:51:8a:51:9b: d1:b7:42:56:5f:c3:a0:26:b1:57:fa:e9:58:e7:24:84:9b:4d: 2f:a7:00:99:96:6c:62:4b:a5:58:bb:0b:9e:0e:c8:d2:a9:bb: 08:05:a9:92:89:f1:9a:3c:c0:3e:45:60:f6:12:a3:5b:47:af: 81:97:b8:0a:e9:27:b9:1f:1f:30:23:d5:68:9d:4e:ea:76:36: e1:17:9d:f0:02:50:37:d5:68:f9:44:18:09:75:6a:09:bd:94: 44:3c:d5:0a:90:83:36:36:85:08:7a:1a:80:d1:eb:21:9c:15: 8c:03:2c:f2:91:17:a6:b2:bd:35:84:7f:e6:b4:2d:23:ef:1d: fc:08:99:93:11:03:92:b3:f5:c8:7b:29:e0:b4:d1:64:84:e0: 62:12:be:4d:71:57:7d:02:c5:fe:b8:64:af:9d:52:c7:b0:c1: 92:60:25:c4:46:3c:b4:13:a0:d8:c2:9f:7a:08:d5:9d:c6:68: b5:f8:7d:3b:4e:ce:30:1c:d3:19:21:6e:70:51:ce:c4:fa:f8: e0:d4:35:08:74:43:ba:02:b8:8e:74:ce:08:63:3b:4c:50:bf: 71:15:64:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWpu2+JdlIkrEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YWM3ZDI1YjEtODgxMi00MTgxLWJiYWMtYjUxYmQ4YWM2ZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnljo79RKarplJfp0CcT7eWUefVjZntt5KSxA xN137kvWq6WBtqHFhm0rv2I7PDnMQqyV2CXmOTXWl1XBBC6sJHOvrqlo91thxlXv /TPbYRK6ptcTWP9QAxsybu91bSrdmAvPL04uPjoU0Hi2KmsuIhQGaf+6CMft7r+B /t9x+f1h1ODgiuBSt95VpgbzgGRsZIvGEzn7i2DT1Mte+cyUODJY6nayUQ/vm4YQ P5a8vKO2MFnKjcIE0his3vUDLqWwGEqDVerg5P+YWdWdD3QrDRKQg0+Y1EaVmWxO m12V9DTjuhEUp50cxw47ihaP8M58UcBi/n0CSYfBNfumbqukVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA4QcAVi5aa4qFk0u62LpyYBcuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvMGY3YTViY2YtY2RjMy0z YzgzLTg1NTQtMTJlM2Q1MWUzNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqmSOQmuqhq6LQsF1IjuqFgH5Ox2eLZnBbHkqKFv7pHUYpRm9G3QlZf w6AmsVf66VjnJISbTS+nAJmWbGJLpVi7C54OyNKpuwgFqZKJ8Zo8wD5FYPYSo1tH r4GXuArpJ7kfHzAj1WidTup2NuEXnfACUDfVaPlEGAl1agm9lEQ81QqQgzY2hQh6 GoDR6yGcFYwDLPKRF6ayvTWEf+a0LSPvHfwImZMRA5Kz9ch7KeC00WSE4GISvk1x V30Cxf64ZK+dUsewwZJgJcRGPLQToNjCn3oI1Z3GaLX4fTtOzjAc0xkhbnBRzsT6 +ODUNQh0Q7oCuI50zghjO0xQv3EVZL4= -----END CERTIFICATE-----Generated at Sat Apr 12 13:01:50 2025 by rpki-client