$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa File: 84b980dc-1b89-371a-8343-16c5dac99a40.roa (raw, json) Hash identifier: Dw0/ZFcYOYemjS4zy0gVBDVVpXJKuvbms5bgcV5oMOY= Subject key identifier: 0D:49:5D:43:07:2E:83:85:C0:BC:E7:22:18:84:CA:DB:09:39:65:73 Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F432858490021595160BEDB037BA1F380 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 58580 IP address blocks: 168.245.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:59:51:60:be:db:03:7b:a1:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=d53439c0-3d59-4c6c-b67e-eb2ef7119a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:70:ec:2d:04:00:0f:91:79:58:8d:33:a6: 3e:7c:3d:43:19:9c:bd:75:c0:79:6a:a5:3d:b5:06: 48:f5:3f:a3:58:55:c6:fb:f7:1c:57:7c:0d:6f:04: a7:72:b0:e5:27:68:eb:00:67:d8:c1:bd:67:20:b2: 84:77:41:d2:37:c2:8e:4e:1c:ca:4e:7f:46:4d:0d: ef:cc:e3:1d:e6:42:d2:de:91:d7:c6:b7:90:75:d0: 32:ed:a8:be:22:9a:4c:dc:e3:af:f7:b9:bf:61:71: 60:08:99:9b:0c:eb:c1:3f:b4:68:27:d3:2f:68:31: 31:7f:00:8f:9e:b9:b8:76:aa:f7:7a:7d:cc:28:c4: 69:d0:7b:8a:0e:f2:88:76:ea:e5:23:6f:92:7f:3f: e6:57:11:c0:a8:1f:7c:9a:83:1f:2d:f1:ff:ad:92: 35:ca:65:b4:0a:a8:a1:f0:17:61:6e:61:d2:39:91: 0b:1e:38:af:51:6d:70:88:be:e5:8b:56:b4:6f:93: 2b:1c:69:fc:14:e8:73:c3:45:40:b4:fd:67:36:10: dc:fe:d0:ff:86:cb:42:fa:86:3f:d3:00:f5:65:b4: 52:3c:f1:19:83:8c:12:f3:19:c0:3a:63:b5:27:85: b1:27:8b:21:93:b6:7a:8b:25:34:98:5d:1c:72:63: 98:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:49:5D:43:07:2E:83:85:C0:BC:E7:22:18:84:CA:DB:09:39:65:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 168.245.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:4e:43:27:cf:7e:f7:95:4d:7d:40:39:4c:1c:10:e1:fb:7e: ee:7e:dc:20:4b:13:5a:e3:66:ad:bd:a2:47:02:8b:2c:54:e1: 06:03:32:11:25:e6:9f:3d:22:28:2e:6e:66:e0:08:ea:33:b0: 4a:98:69:7f:09:da:62:75:11:fe:08:d0:f0:82:d1:56:b2:f7: c2:b5:11:da:70:ca:03:6b:69:5b:3a:5f:7c:d2:00:21:0a:0a: 4e:f2:13:a1:77:0b:9b:8f:f7:5f:57:af:30:31:46:84:dc:83: 77:81:12:0e:2e:c8:12:eb:06:c2:a3:99:2a:b7:ed:6d:2b:08: 34:04:17:5e:14:09:48:4d:a3:88:9b:9a:59:38:c2:98:83:69: 5e:3e:a2:27:0a:9f:2e:fc:bf:93:5d:9a:3d:97:85:60:87:97: 4a:2d:43:2c:53:e6:b9:87:97:39:32:78:40:a7:67:5f:4e:45: a4:25:60:26:d5:de:f6:31:7c:0b:30:a9:15:b2:d7:a0:5d:b5: da:53:2c:e5:9f:95:56:9d:98:f0:f5:6a:a8:03:19:bd:2c:26: 22:fc:ef:78:dc:46:51:b5:e0:b3:02:b4:17:3a:e2:68:6f:46: d9:c7:36:aa:db:8a:14:53:cc:55:0d:9c:3d:31:9a:3c:b2:ed: 5c:28:60:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVlRYL7bA3uh84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZDUzNDM5YzAtM2Q1OS00YzZjLWI2N2UtZWIyZWY3MTE5YTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4elw7C0EAA+ReViNM6Y+fD1DGZy9dcB5aqU9 tQZI9T+jWFXG+/ccV3wNbwSncrDlJ2jrAGfYwb1nILKEd0HSN8KOThzKTn9GTQ3v zOMd5kLS3pHXxreQddAy7ai+IppM3OOv97m/YXFgCJmbDOvBP7RoJ9MvaDExfwCP nrm4dqr3en3MKMRp0HuKDvKIdurlI2+Sfz/mVxHAqB98moMfLfH/rZI1ymW0Cqih 8BdhbmHSOZELHjivUW1wiL7li1a0b5MrHGn8FOhzw0VAtP1nNhDc/tD/hstC+oY/ 0wD1ZbRSPPEZg4wS8xnAOmO1J4WxJ4shk7Z6iyU0mF0ccmOY7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1JXUMHLoOFwLznIhiEytsJOWVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvODRiOTgwZGMtMWI4OS0z NzFhLTgzNDMtMTZjNWRhYzk5YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqPXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtOQyfPfveVTX1AOUwcEOH7fu5+3CBLE1rjZq29okcCiyxU4QYDMhEl 5p89IigubmbgCOozsEqYaX8J2mJ1Ef4I0PCC0Vay98K1EdpwygNraVs6X3zSACEK Ck7yE6F3C5uP919XrzAxRoTcg3eBEg4uyBLrBsKjmSq37W0rCDQEF14UCUhNo4ib mlk4wpiDaV4+oicKny78v5Ndmj2XhWCHl0otQyxT5rmHlzkyeECnZ19ORaQlYCbV 3vYxfAswqRWy16BdtdpTLOWflVadmPD1aqgDGb0sJiL873jcRlG14LMCtBc64mhv RtnHNqrbihRTzFUNnD0xmjyy7VwoYOo= -----END CERTIFICATE-----Generated at Fri Mar 14 11:21:31 2025 by rpki-client