$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa File: 4049c44a-f808-3c97-bfb6-a323f04f3436.roa (raw, json) Hash identifier: HQbJ0ZCdCG7TDmHCFDCCIe7qgfJ8EZF8k0A6BMCFEfM= Subject key identifier: 97:DB:BB:1B:AA:DE:01:AE:2E:19:99:8A:CD:28:A6:1A:8A:97:D7:2C Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F432858491D717E06AF24FAB63DCC3080 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 395927 IP address blocks: 208.72.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:7e:06:af:24:fa:b6:3d:cc:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=9618524f-a289-4be4-ad4a-4d5d03fb3d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:a1:22:ba:40:a0:1d:10:08:5e:a3:c5:be: 66:dc:d6:5b:57:92:2f:dd:03:e0:7a:bc:1f:8c:59: 1f:ee:5b:a7:4a:e1:08:c2:70:38:f8:18:18:01:bf: 4f:90:c4:71:b4:d1:2c:93:87:88:38:ab:00:13:03: 8c:ba:15:f8:a8:d2:ac:a0:b9:b9:c8:60:46:b8:ca: c2:6e:27:01:0c:4c:3d:2a:f3:9f:37:94:f7:71:0d: 73:de:dd:4e:53:4f:ea:46:ae:b8:98:38:86:49:cd: 8a:cd:79:f4:7a:3b:c1:87:38:51:3a:78:ac:4c:1f: 67:23:bb:6d:3c:ef:d8:ec:60:ef:27:78:f3:e9:2b: 26:87:4a:e7:cf:5f:9e:8e:a5:d4:66:2f:5a:6b:9d: f4:a8:d4:6b:ab:f0:9e:62:95:6f:20:84:4c:a6:64: bf:7d:20:20:60:cc:6c:17:ff:98:21:96:3f:7b:ff: 81:c8:90:98:ed:77:06:d9:af:6d:b9:e0:6a:3f:d8: df:e2:48:2e:37:18:6a:69:f4:cb:c6:5e:d5:db:8a: c5:84:f7:b6:8f:19:1f:86:6d:ba:94:0c:0d:96:70: f7:ec:c6:26:99:b7:fb:58:74:1e:09:cb:10:82:cf: fc:76:1f:0b:b0:e6:81:01:74:93:c2:10:a6:54:49: 99:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DB:BB:1B:AA:DE:01:AE:2E:19:99:8A:CD:28:A6:1A:8A:97:D7:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 208.72.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b0:93:0a:50:cd:0a:13:d0:27:12:61:d3:da:7c:15:45:49: f7:2d:5b:a6:83:79:22:f8:5f:7e:15:e2:f8:43:1d:56:ab:e1: 1a:6a:0a:73:f3:d2:96:13:c2:ac:76:08:0e:a8:1e:9e:f4:00: 16:5b:5f:c9:ea:d4:9c:d7:9c:4d:a4:c3:d9:31:99:93:5d:b1: 12:40:f3:c6:64:17:81:79:66:6c:0b:33:c7:ff:14:b0:f9:52: 83:1b:20:19:d4:ee:da:fd:42:42:d6:12:7f:7e:96:3d:32:32: c9:bc:08:e1:10:29:78:06:e1:fc:50:db:83:53:86:0b:31:a7: f1:e3:f5:c2:e7:79:90:19:62:0d:b8:7e:fb:e2:15:f6:7b:bf: e4:e5:3c:4d:da:e4:9f:3d:5d:0f:54:e0:55:d8:0a:e8:e4:b2: d5:34:e0:eb:9a:41:fe:c2:f7:a8:49:5d:ce:ba:42:5d:8b:09: d8:9c:39:70:8c:37:a9:4c:bf:e2:46:5d:e0:60:0e:12:70:a8: f5:4e:3a:38:03:b7:45:e6:89:14:4c:65:a0:6f:36:f2:1e:b5: 15:74:0c:52:8e:06:67:ed:02:2e:41:22:98:df:ab:9d:f2:1a: 17:72:bf:29:6a:0e:f7:47:fa:de:74:53:e4:0d:76:d5:1a:47: 80:4b:bf:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcX4GryT6tj3MMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk OTYxODUyNGYtYTI4OS00YmU0LWFkNGEtNGQ1ZDAzZmIzZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxChIrpAoB0QCF6jxb5m3NZbV5Iv3QPgerwf jFkf7lunSuEIwnA4+BgYAb9PkMRxtNEsk4eIOKsAEwOMuhX4qNKsoLm5yGBGuMrC bicBDEw9KvOfN5T3cQ1z3t1OU0/qRq64mDiGSc2KzXn0ejvBhzhROnisTB9nI7tt PO/Y7GDvJ3jz6Ssmh0rnz1+ejqXUZi9aa530qNRrq/CeYpVvIIRMpmS/fSAgYMxs F/+YIZY/e/+ByJCY7XcG2a9tueBqP9jf4kguNxhqafTLxl7V24rFhPe2jxkfhm26 lAwNlnD37MYmmbf7WHQeCcsQgs/8dh8LsOaBAXSTwhCmVEmZ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfbuxuq3gGuLhmZis0ophqKl9csMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvNDA0OWM0NGEtZjgwOC0z Yzk3LWJmYjYtYTMyM2YwNGYzNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIewkwpQzQoT0CcSYdPafBVFSfctW6aDeSL4X34V4vhDHVar4RpqCnPz 0pYTwqx2CA6oHp70ABZbX8nq1JzXnE2kw9kxmZNdsRJA88ZkF4F5ZmwLM8f/FLD5 UoMbIBnU7tr9QkLWEn9+lj0yMsm8COEQKXgG4fxQ24NThgsxp/Hj9cLneZAZYg24 fvviFfZ7v+TlPE3a5J89XQ9U4FXYCujkstU04OuaQf7C96hJXc66Ql2LCdicOXCM N6lMv+JGXeBgDhJwqPVOOjgDt0XmiRRMZaBvNvIetRV0DFKOBmftAi5BIpjfq53y GhdyvylqDvdH+t50U+QNdtUaR4BLv5g= -----END CERTIFICATE-----Generated at Fri Apr 4 19:23:37 2025 by rpki-client