$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa File: 1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa (raw, json) Hash identifier: qq0/LWVkvc4DyBHksUyRL/70DGVof/Twrjre34TcEbc= Subject key identifier: A4:FD:B9:90:77:70:98:88:3F:F1:D4:21:E1:25:B2:5A:09:F5:5E:A5 Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F43285848BE8625859534A872737E96E0 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 8075 IP address blocks: 208.64.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:25:85:95:34:a8:72:73:7e:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=0955c838-7e3d-4f9e-b62d-2a87b2d4fe1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:52:b6:94:0f:e5:94:51:c6:20:57:fa:7d:37: 64:98:8a:75:b8:1f:71:96:0d:19:13:6e:0b:54:6f: 53:5f:e4:d2:2a:c0:0e:65:d1:d9:9e:b1:37:4f:fc: 8b:a3:46:e4:37:21:fe:49:a2:2f:0f:fd:c7:e3:af: 59:6a:88:a7:80:81:dc:e5:26:b3:bd:d9:98:6f:28: c7:a2:b9:34:da:3e:1e:f7:15:84:60:72:3b:00:5a: 23:eb:b0:6a:b3:04:15:8d:17:2e:e3:a0:9f:41:ce: 6d:e9:4d:4b:96:b0:e7:d2:ae:46:c9:ab:6b:43:24: 9b:62:7d:db:ba:eb:12:38:16:93:f4:fc:77:a0:0d: 3a:60:6d:08:66:d0:b0:0b:23:27:4a:91:76:ee:19: 75:5f:42:3b:25:5a:82:22:f5:ad:af:a7:09:31:ea: d5:0a:c8:08:a4:83:36:0e:62:66:a2:5f:ce:43:c7: 7e:76:82:72:9c:36:e2:20:e5:46:db:20:fd:70:d8: 69:29:1f:69:21:c8:a6:6e:db:96:b6:00:7e:d2:c1: 61:58:88:60:7a:b4:a5:98:2c:63:75:7c:4a:a4:72: 62:33:0e:d0:ac:59:f5:0b:21:ee:9f:a0:46:d3:88: 01:41:58:81:a9:0e:01:31:e7:8e:78:e5:ad:83:f1: f8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FD:B9:90:77:70:98:88:3F:F1:D4:21:E1:25:B2:5A:09:F5:5E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:bc:e5:8b:c0:86:5a:95:95:ea:23:9f:71:7f:b3:21:39:27: a7:f5:9c:0a:1f:ae:44:7c:9a:49:83:67:d0:5d:de:15:a7:07: 18:e5:32:f9:67:bb:80:4b:0c:46:21:b5:d4:13:7c:fb:e8:50: 3e:8a:ac:49:cf:2b:21:80:5b:1e:2d:bd:62:bc:2a:c3:64:c9: ea:dd:7b:37:b8:a0:e4:64:58:83:4e:ee:e2:56:c5:5b:13:cf: 1d:a6:1a:9f:47:a6:7b:f8:52:64:03:dc:1d:7c:7a:41:fc:3b: a4:10:8f:cc:3a:9c:cc:88:a7:7a:e1:77:5d:d7:2f:64:52:98: bf:78:88:c8:22:aa:70:18:ad:98:03:8c:b8:23:89:d7:4f:7c: 07:4e:ed:cc:e6:f0:56:58:fd:7e:4f:6b:38:3d:8f:78:37:20: 1f:d8:7b:60:9a:20:fc:58:08:af:a6:08:84:dc:e4:17:cc:04: d5:10:fd:e8:b2:14:35:a5:99:2f:60:60:da:08:72:c1:3c:c4: 35:0b:8c:19:1a:5d:a8:e3:2c:e6:81:eb:b4:45:4a:9e:24:6e: 31:e6:6f:ef:af:bf:ae:81:1e:49:b8:35:f0:3b:f1:a0:03:32: f3:d2:40:57:a8:e3:50:e4:23:29:a9:f5:25:b5:e0:02:bf:b6: 77:8b:50:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hiWFlTSocnN+luAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MDk1NWM4MzgtN2UzZC00ZjllLWI2MmQtMmE4N2IyZDRmZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllK2lA/llFHGIFf6fTdkmIp1uB9xlg0ZE24L VG9TX+TSKsAOZdHZnrE3T/yLo0bkNyH+SaIvD/3H469ZaoingIHc5SazvdmYbyjH ork02j4e9xWEYHI7AFoj67BqswQVjRcu46CfQc5t6U1LlrDn0q5GyatrQySbYn3b uusSOBaT9Px3oA06YG0IZtCwCyMnSpF27hl1X0I7JVqCIvWtr6cJMerVCsgIpIM2 DmJmol/OQ8d+doJynDbiIOVG2yD9cNhpKR9pIcimbtuWtgB+0sFhWIhgerSlmCxj dXxKpHJiMw7QrFn1CyHun6BG04gBQViBqQ4BMeeOeOWtg/H4OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT9uZB3cJiIP/HUIeElsloJ9V6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvMWMyZDc2OWUtYjIxMC0z ZTZiLTkwOTUtZjA2NmI5Y2IzNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu85YvAhlqVleojn3F/syE5J6f1nAofrkR8mkmDZ9Bd3hWnBxjlMvln u4BLDEYhtdQTfPvoUD6KrEnPKyGAWx4tvWK8KsNkyerdeze4oORkWINO7uJWxVsT zx2mGp9Hpnv4UmQD3B18ekH8O6QQj8w6nMyIp3rhd13XL2RSmL94iMgiqnAYrZgD jLgjiddPfAdO7czm8FZY/X5Pazg9j3g3IB/Ye2CaIPxYCK+mCITc5BfMBNUQ/eiy FDWlmS9gYNoIcsE8xDULjBkaXajjLOaB67RFSp4kbjHmb++vv66BHkm4NfA78aAD MvPSQFeo41DkIymp9SW14AK/tneLUCo= -----END CERTIFICATE-----Generated at Fri Apr 4 22:50:59 2025 by rpki-client