$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa File: 4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa (raw, json) Hash identifier: A8pqbkJY886ijOO+VHw+2sG/Gij8mjMFHPeym6GL4W4= Subject key identifier: DE:61:0C:B0:A2:8F:13:64:B3:10:64:ED:59:2B:FB:F2:B9:E7:1C:B3 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285848F4F696E02B41AF7DEED11400 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 25649 IP address blocks: 208.86.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:96:e0:2b:41:af:7d:ee:d1:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=02fcc360-1f4c-48cb-9e03-538a46e08d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:60:64:c3:d7:00:34:a8:7b:d5:db:bb:72: 6e:34:40:60:54:e0:3f:f9:20:58:aa:ac:d6:42:45: c3:45:95:22:8e:b6:12:53:8e:db:26:9c:b3:e3:ac: c4:25:77:7a:bf:f8:fe:9f:e3:5f:a9:af:65:64:d8: 8a:31:06:40:44:24:bb:e2:41:f6:47:28:95:89:6c: 4f:01:09:10:4e:c0:d1:63:50:10:cd:4b:cd:c6:8d: 1c:d0:d5:84:ed:cf:a3:1a:02:2d:6e:13:07:f9:f6: e8:57:3f:df:a9:aa:16:15:5d:11:71:05:ea:14:c4: bc:b1:a2:e2:7f:4a:3d:28:22:8d:53:9b:cc:e6:18: a9:ca:37:5f:b6:56:63:ca:fc:fd:58:51:64:cf:10: f5:9c:db:b1:a3:1f:21:1d:09:03:da:35:24:ff:16: f4:ea:83:a7:0d:df:0b:9e:22:ec:1a:b8:03:81:fe: a1:e5:9d:dd:cd:ff:46:f4:0c:79:3c:47:11:78:84: ad:24:cb:f4:e1:33:30:be:47:57:06:34:39:2b:38: 2b:57:1e:d9:c2:87:0f:15:1a:31:fb:40:dd:fe:b2: cb:7a:4a:fd:98:11:ff:b6:8c:99:61:cb:57:04:34: 7b:df:fe:22:f9:9b:f1:e0:a8:d6:b9:4b:5c:f3:a1: 0c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:61:0C:B0:A2:8F:13:64:B3:10:64:ED:59:2B:FB:F2:B9:E7:1C:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b5:bc:fa:cc:eb:b6:17:81:3d:0b:81:ce:39:76:7d:a5:ac: 53:43:d8:70:39:73:eb:b6:65:f6:34:e9:5d:a0:2d:f6:12:aa: a6:ca:98:7e:95:a1:c4:4c:fc:4c:34:22:8d:93:15:8d:55:1c: 56:e6:a5:e0:e1:51:56:9e:f8:be:e7:fc:0a:30:d6:8f:f2:57: 3e:7d:9c:d7:69:ed:3f:55:42:11:39:7e:de:52:5d:f7:e1:d8: 04:8e:81:e5:77:67:06:e3:21:12:4a:bd:a4:5f:c0:32:2d:cc: b5:26:65:fb:a5:de:3f:92:fe:50:b8:1d:e2:63:2f:8c:5b:24: de:8c:e9:ed:0e:3e:1d:89:f2:5b:4d:67:a7:f6:79:9b:c7:c5: e6:b4:b4:38:6c:af:0a:a7:49:9d:38:b3:1d:1a:c8:64:1c:8d: 05:98:40:20:28:1c:b7:86:22:fa:db:22:db:12:3b:78:3e:b5: 68:d7:e8:67:b8:f3:5f:72:eb:b4:ae:54:cb:0e:8a:f5:7e:97: 77:bb:88:09:1f:d1:2b:39:9b:29:9f:84:12:6b:03:ac:9b:0a: 4c:a7:52:4c:90:b4:d3:f1:a1:b9:2b:34:47:29:4d:72:b9:09: 23:34:79:5e:ea:78:bb:fe:8f:2f:52:e1:a7:d8:03:e2:fd:48: 88:f1:bd:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pbgK0Gvfe7RFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MDJmY2MzNjAtMWY0Yy00OGNiLTllMDMtNTM4YTQ2ZTA4ZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLpgZMPXADSoe9Xbu3JuNEBgVOA/+SBYqqzW QkXDRZUijrYSU47bJpyz46zEJXd6v/j+n+Nfqa9lZNiKMQZARCS74kH2RyiViWxP AQkQTsDRY1AQzUvNxo0c0NWE7c+jGgItbhMH+fboVz/fqaoWFV0RcQXqFMS8saLi f0o9KCKNU5vM5hipyjdftlZjyvz9WFFkzxD1nNuxox8hHQkD2jUk/xb06oOnDd8L niLsGrgDgf6h5Z3dzf9G9Ax5PEcReIStJMv04TMwvkdXBjQ5KzgrVx7ZwocPFRox +0Dd/rLLekr9mBH/toyZYctXBDR73/4i+Zvx4KjWuUtc86EMMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5hDLCijxNksxBk7Vkr+/K55xyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNGRmYjJlYTctMmMxNC0z MWFkLTk4ZGEtMGFlNzY0MGUyZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi1vPrM67YXgT0Lgc45dn2lrFND2HA5c+u2ZfY06V2gLfYSqqbKmH6V ocRM/Ew0Io2TFY1VHFbmpeDhUVae+L7n/Aow1o/yVz59nNdp7T9VQhE5ft5SXffh 2ASOgeV3ZwbjIRJKvaRfwDItzLUmZful3j+S/lC4HeJjL4xbJN6M6e0OPh2J8ltN Z6f2eZvHxea0tDhsrwqnSZ04sx0ayGQcjQWYQCAoHLeGIvrbItsSO3g+tWjX6Ge4 819y67SuVMsOivV+l3e7iAkf0Ss5mymfhBJrA6ybCkynUkyQtNPxobkrNEcpTXK5 CSM0eV7qeLv+jy9S4afYA+L9SIjxvaM= -----END CERTIFICATE-----Generated at Fri Mar 14 11:16:32 2025 by rpki-client