$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa File: 08faf29f-43ea-3741-adc8-4b04d7d43597.roa (raw, json) Hash identifier: qop5I4vl4uMcDCTgva9LT5OFzd8hWKLzogghxnfMFgI= Subject key identifier: CF:59:CA:4D:41:3D:3F:19:FB:12:E0:60:0D:50:5F:85:2A:7A:4E:78 Certificate issuer: /CN=bb3e1744-5186-489a-9b86-cb31cef73874 Certificate serial: 010D0C9F43285849244E861A8A8DE62FC44B6580 Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 204.76.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:86:1a:8a:8d:e6:2f:c4:4b:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=85e286ed-bd65-4ba0-94a6-10e2c47f3e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:62:00:eb:68:6a:8c:3c:49:71:9b:9a:b6: ce:c0:83:62:e6:82:f5:37:bc:b1:22:e0:d4:b8:69: 63:7b:b7:c5:48:f2:2e:80:9a:00:ab:3d:27:9d:b4: 49:c8:b0:ab:66:29:2f:77:70:a3:0d:b1:b6:f5:3c: 40:f3:3a:31:28:47:a9:ef:9c:33:1e:50:b8:cc:21: 14:bb:73:c3:31:da:44:96:e1:08:15:a5:86:a7:1f: e1:0f:de:e9:45:0d:fd:26:6b:32:9b:0d:8e:95:b4: f7:53:59:a0:4e:e6:0d:39:f8:5b:6d:03:86:63:db: 23:c5:3f:cb:8a:c5:4d:5b:d7:f3:31:75:18:2d:3e: 9e:d8:2d:d0:ef:7b:0a:e9:c3:fb:98:bd:c5:68:4d: aa:84:fb:dc:13:94:5d:5f:40:1f:73:f2:e0:95:1b: 46:ac:a2:93:e6:10:1e:58:1d:9a:82:8a:87:b6:11: 49:8c:73:ff:bd:4f:e3:cc:cf:56:d4:17:4f:47:a2: 0a:4d:55:52:c6:4d:ca:b0:17:1d:f8:fe:31:52:3f: 58:f9:76:2e:e5:d0:12:13:14:57:fa:3f:eb:1b:38: ed:c7:d6:26:b7:d1:d9:63:3e:d9:f3:bc:13:05:05: 07:a9:77:5d:c2:91:7c:2c:62:32:e2:f5:e0:b8:62: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:59:CA:4D:41:3D:3F:19:FB:12:E0:60:0D:50:5F:85:2A:7A:4E:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl X509v3 Authority Key Identifier: keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer sbgp-ipAddrBlock: critical IPv4: 204.76.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:61:97:cb:43:5f:96:dc:ba:bc:35:5d:16:ad:09:ad:43:7d: 64:89:75:7c:19:89:2e:89:e9:b5:21:e3:ca:33:d3:f0:86:13: 97:9f:a2:e6:79:86:38:06:9a:0f:79:20:d9:6a:7b:dc:fb:3d: 2b:e6:13:aa:48:ba:4d:4f:fc:ba:20:85:43:8e:c7:dc:32:02: 53:7b:df:15:6c:f5:a3:c0:48:d9:18:e3:cb:83:4b:25:c7:f2: f5:28:3a:0e:f9:e1:db:a8:55:83:be:80:6b:9a:6a:ff:26:a9: fb:53:04:43:e1:c2:a9:8c:e5:b3:67:27:bc:35:6f:8f:05:1d: 84:c5:ba:e0:a0:7c:f4:5a:c2:41:d2:a7:ab:56:57:31:7c:ef: 2c:85:f7:2b:0e:46:54:a1:af:bc:95:5c:b6:5a:1b:b8:82:a4: 19:d0:c1:99:b5:60:ce:9f:f5:84:68:bc:20:dd:23:05:4f:b3: 07:2e:4e:04:8c:a6:90:1f:39:f0:9d:be:13:94:1f:42:49:45: f3:b6:91:b0:6a:77:a8:20:55:c9:9d:55:61:94:09:6c:6c:7a: e2:79:2f:e2:06:d4:d9:63:ad:b3:0f:b0:0c:08:b5:d9:a9:2b: 3b:6f:97:e7:83:d0:c8:ef:9a:92:5c:91:54:e9:e4:37:0d:6a: d7:ca:78:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToYaio3mL8RLZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzZTE3NDQtNTE4Ni00ODlhLTliODYtY2IzMWNlZjcz ODc0MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ODVlMjg2ZWQtYmQ2NS00YmEwLTk0YTYtMTBlMmM0N2YzZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz9iAOtoaow8SXGbmrbOwINi5oL1N7yxIuDU uGlje7fFSPIugJoAqz0nnbRJyLCrZikvd3CjDbG29TxA8zoxKEep75wzHlC4zCEU u3PDMdpEluEIFaWGpx/hD97pRQ39Jmsymw2OlbT3U1mgTuYNOfhbbQOGY9sjxT/L isVNW9fzMXUYLT6e2C3Q73sK6cP7mL3FaE2qhPvcE5RdX0Afc/LglRtGrKKT5hAe WB2agoqHthFJjHP/vU/jzM9W1BdPR6IKTVVSxk3KsBcd+P4xUj9Y+XYu5dASExRX +j/rGzjtx9Ymt9HZYz7Z87wTBQUHqXddwpF8LGIy4vXguGJrhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9Zyk1BPT8Z+xLgYA1QX4Uqek54MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNl MTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMxY2VmNzM4NzQvMDhmYWYyOWYtNDNlYS0z NzQxLWFkYzgtNGIwNGQ3ZDQzNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIzZTE3NDQtNTE4Ni00ODlhLTli ODYtY2IzMWNlZjczODc0L2JiM2UxNzQ0LTUxODYtNDg5YS05Yjg2LWNiMzFjZWY3 Mzg3NC5jcmwwHwYDVR0jBBgwFoAUbyzGqshcjILtCQXJ5a0Pmc4eB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNlMTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMx Y2VmNzM4NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9hl8tDX5bcurw1XRatCa1DfWSJdXwZiS6J6bUh48oz0/CGE5efouZ5 hjgGmg95INlqe9z7PSvmE6pIuk1P/LoghUOOx9wyAlN73xVs9aPASNkY48uDSyXH 8vUoOg754duoVYO+gGuaav8mqftTBEPhwqmM5bNnJ7w1b48FHYTFuuCgfPRawkHS p6tWVzF87yyF9ysORlShr7yVXLZaG7iCpBnQwZm1YM6f9YRovCDdIwVPswcuTgSM ppAfOfCdvhOUH0JJRfO2kbBqd6ggVcmdVWGUCWxseuJ5L+IG1NljrbMPsAwItdmp Kztvl+eD0MjvmpJckVTp5DcNatfKeAU= -----END CERTIFICATE-----Generated at Fri Apr 4 16:26:17 2025 by rpki-client