$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ac83a659-5e45-34f3-9f76-21fb9045c8a4.roa File: ac83a659-5e45-34f3-9f76-21fb9045c8a4.roa (raw, json) Hash identifier: j9oWPu5mbyUcbSviklD+gx/1J3Bup3tG2rCGjS0Wt8s= Subject key identifier: 14:A5:C2:5B:9C:90:03:7C:AE:91:22:D3:11:AB:31:EA:ED:F8:E8:D7 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F43285848EC96AD8F8A5C5512B0C2DD40 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ac83a659-5e45-34f3-9f76-21fb9045c8a4.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 203724 IP address blocks: 208.81.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:ad:8f:8a:5c:55:12:b0:c2:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=01d76af6-ec0b-4fdc-8453-398ddbc670c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bc:7f:1d:02:59:90:5f:81:38:93:38:77:15: 9e:43:7c:ae:44:e9:08:fa:88:6f:ad:7a:41:db:72: c9:f3:4d:e4:67:d7:61:77:a2:df:cd:a6:d0:ab:cd: de:38:0e:4a:4d:26:44:b3:24:c3:de:a4:e8:45:69: 14:6d:ab:e3:5f:e5:a1:8e:85:a5:a3:dc:e6:e5:ef: 47:a9:49:8c:be:02:c9:1a:93:05:74:9c:34:6f:46: 13:b6:04:7f:c9:d8:7e:35:3f:f7:9a:9b:a2:52:9b: ff:e2:96:ea:1c:ea:1f:0a:e7:c9:43:0b:90:26:b4: 30:aa:c0:c4:9d:3f:75:29:87:84:64:a1:73:a7:c0: f3:6e:44:cb:41:f8:af:6d:f5:dc:05:3f:6d:67:19: 1a:eb:10:ef:c2:f5:77:3e:5d:c2:0e:14:75:95:e7: c5:f6:de:7b:64:7e:3f:d6:3a:88:0f:81:fd:80:1f: 63:dd:7e:c9:88:ef:09:82:f2:59:0c:92:a3:79:44: 57:e7:1d:65:53:17:d4:54:b2:e8:5b:30:bc:ee:bc: cc:11:48:3c:6f:8c:62:5d:4f:d4:2f:9f:64:de:45: b8:4f:5a:19:5d:c9:f1:54:dc:0e:c2:dd:4a:90:50: c1:b5:df:ef:ef:68:60:35:78:26:9d:ac:11:d2:6f: d8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A5:C2:5B:9C:90:03:7C:AE:91:22:D3:11:AB:31:EA:ED:F8:E8:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ac83a659-5e45-34f3-9f76-21fb9045c8a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 208.81.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f0:c4:f4:a6:40:08:47:53:8c:31:f8:ff:e9:9c:f4:8a:87: fa:0c:1b:c8:a9:51:88:87:92:de:09:ea:fa:b4:e2:fa:5d:42: b0:bc:ab:39:a5:f8:a9:7f:27:21:a6:95:33:66:cc:1e:83:93: ef:75:a1:17:0e:c7:97:5d:b0:36:f7:aa:0b:17:74:85:e6:b1: 10:9e:23:a7:bb:e6:af:d3:9f:c3:32:04:fa:71:00:38:28:b1: 5f:0a:7b:64:4e:e9:1f:c2:7a:78:be:8a:47:cb:32:16:48:a1: c2:2c:5c:bc:19:ec:a3:30:c0:be:ce:d2:9a:b9:98:f3:b8:e9: 3f:67:96:a2:a1:48:e9:ff:c4:80:cc:7f:53:e7:e4:9a:54:69: b6:0a:48:99:91:64:37:39:04:b8:11:7c:29:7c:75:25:2b:48: 69:9a:c6:93:cb:37:4a:5d:5a:29:e7:6f:b8:38:43:bd:16:dd: 8f:7e:c9:01:7d:10:1f:8a:8d:f3:6c:d2:8e:56:86:00:58:c1: 7e:17:d2:3c:f9:a9:ee:a0:b3:8b:e0:4d:2c:da:b9:12:f7:1a: 99:63:a7:a6:6a:71:86:13:1c:49:58:c2:32:c3:15:3b:5e:7a: 26:0e:b1:97:e8:76:a1:0b:f5:60:ca:cb:b6:50:68:25:95:dc: 73:d1:36:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslq2PilxVErDC3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MDFkNzZhZjYtZWMwYi00ZmRjLTg0NTMtMzk4ZGRiYzY3MGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7x/HQJZkF+BOJM4dxWeQ3yuROkI+ohvrXpB 23LJ803kZ9dhd6LfzabQq83eOA5KTSZEsyTD3qToRWkUbavjX+WhjoWlo9zm5e9H qUmMvgLJGpMFdJw0b0YTtgR/ydh+NT/3mpuiUpv/4pbqHOofCufJQwuQJrQwqsDE nT91KYeEZKFzp8DzbkTLQfivbfXcBT9tZxka6xDvwvV3Pl3CDhR1lefF9t57ZH4/ 1jqID4H9gB9j3X7JiO8JgvJZDJKjeURX5x1lUxfUVLLoWzC87rzMEUg8b4xiXU/U L59k3kW4T1oZXcnxVNwOwt1KkFDBtd/v72hgNXgmnawR0m/YVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSlwluckAN8rpEi0xGrMert+OjXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYWM4M2E2NTktNWU0NS0z NGYzLTlmNzYtMjFmYjkwNDVjOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXwxPSmQAhHU4wx+P/pnPSKh/oMG8ipUYiHkt4J6vq04vpdQrC8qzml +Kl/JyGmlTNmzB6Dk+91oRcOx5ddsDb3qgsXdIXmsRCeI6e75q/Tn8MyBPpxADgo sV8Ke2RO6R/Ceni+ikfLMhZIocIsXLwZ7KMwwL7O0pq5mPO46T9nlqKhSOn/xIDM f1Pn5JpUabYKSJmRZDc5BLgRfCl8dSUrSGmaxpPLN0pdWinnb7g4Q70W3Y9+yQF9 EB+KjfNs0o5WhgBYwX4X0jz5qe6gs4vgTSzauRL3Gpljp6ZqcYYTHElYwjLDFTte eiYOsZfodqEL9WDKy7ZQaCWV3HPRNoM= -----END CERTIFICATE-----Generated at Sat Apr 12 11:41:00 2025 by rpki-client