$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/3baae0c4-63e8-3640-b573-a9277c99d98b.roa File: 3baae0c4-63e8-3640-b573-a9277c99d98b.roa (raw, json) Hash identifier: K9Ya6U2M5aQKBgYJQbvax5xEcERyUsDa4ZZ8OoNac8k= Subject key identifier: E4:7A:E4:1F:FE:8D:60:C5:3A:78:3B:6C:4E:09:12:94:AA:76:46:6F Certificate issuer: /CN=7895ee85-2a16-4e54-9c5b-a9a05908877e Certificate serial: 010D0C9F43285849276A47A0CA2A84D72BF66880 Authority key identifier: B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/3baae0c4-63e8-3640-b573-a9277c99d98b.roa Signing time: Tue 11 Mar 2025 15:44:29 +0000 ROA not before: Tue 11 Mar 2025 15:44:29 +0000 ROA not after: Mon 09 Jun 2025 15:44:29 +0000 asID: 53903 IP address blocks: 208.123.141.0/24 maxlen: 24 208.123.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:27:6a:47:a0:ca:2a:84:d7:2b:f6:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7895ee85-2a16-4e54-9c5b-a9a05908877e Validity Not Before: Mar 11 15:44:29 2025 GMT Not After : Jun 9 15:44:29 2025 GMT Subject: CN=c92a1a90-8e27-41f7-a324-e391fb7f441a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:a7:10:af:4c:7c:48:df:77:19:33:ca:84: f7:31:89:75:03:dd:a0:65:ef:e2:bc:3a:2c:13:8e: fa:8e:b1:27:7b:fc:e6:a1:3e:e4:fe:33:12:c3:9d: d7:e5:41:8e:78:86:8e:3e:e8:62:a9:6d:be:06:40: 08:ae:73:ce:41:48:08:bb:de:9c:05:bb:68:66:ae: 21:9b:ce:16:c6:35:59:b4:52:a6:23:44:9f:1a:fd: c5:31:9b:7b:0a:e0:2b:70:27:71:94:12:0f:45:49: 5c:7d:79:98:9a:f5:b9:9f:15:a2:c2:97:5e:c5:fc: a4:db:b8:d2:8d:c0:a1:53:ca:96:f8:2f:70:0d:1c: 3f:25:46:9e:64:53:81:eb:5f:f2:df:c6:83:29:79: ff:bc:e6:88:04:28:78:48:a6:18:98:36:23:63:6b: 5e:97:aa:26:74:7e:e7:b7:94:1e:c4:6d:64:79:fc: 57:3b:94:4a:42:aa:da:ad:36:b5:c2:6f:e4:06:18: b7:f0:5f:44:a1:34:7b:50:9d:b0:ac:a8:99:73:e8: 5d:ac:e5:f9:4d:e8:c0:73:a8:51:35:97:44:65:1f: 11:e9:d6:c0:c2:6a:4f:02:fe:5c:a5:c9:6e:08:8f: 7c:59:38:03:1b:58:4d:7a:ea:d0:31:f5:ac:a4:ca: 6a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7A:E4:1F:FE:8D:60:C5:3A:78:3B:6C:4E:09:12:94:AA:76:46:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/3baae0c4-63e8-3640-b573-a9277c99d98b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.crl X509v3 Authority Key Identifier: keyid:B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer sbgp-ipAddrBlock: critical IPv4: 208.123.141.0-208.123.142.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:46:5f:4e:f8:f4:b5:b4:67:4b:e0:6d:b6:ed:b7:7c:90:7a: c8:f3:0b:12:72:ad:f5:ed:76:56:15:26:55:14:11:01:76:20: 38:35:a5:cf:15:82:45:04:45:c2:45:ef:c1:a7:7c:7c:0b:63: e2:25:dc:59:15:f2:99:2a:7f:b1:f1:09:94:df:aa:23:bb:77: d2:cf:22:d3:29:3a:5f:ff:f4:52:a6:09:e0:c8:ac:48:cd:b2: b9:78:06:eb:b0:43:6b:3b:2b:61:e4:b1:bb:3e:a1:40:18:da: 7c:0f:aa:9d:d1:61:e3:f1:90:80:aa:e4:f9:ea:12:ee:6f:8e: 56:6c:c5:07:fc:90:f5:e0:af:c2:83:79:a4:64:4c:5c:6f:dc: c6:eb:70:51:c3:25:db:67:fc:1b:b9:ef:df:99:13:44:0e:f5: 53:94:a8:8a:89:d2:23:66:24:47:a1:a0:aa:69:79:52:9d:ec: ab:94:75:60:f0:32:d6:5f:c6:83:de:61:79:2f:57:fe:ac:c5: 54:70:4e:01:3a:d5:df:42:67:c5:4f:9a:a3:35:04:ce:1e:c8: 48:67:13:3c:f0:ce:fd:8f:55:c1:65:54:7d:86:81:64:44:1d: 35:d6:06:f0:0a:0c:6a:29:12:48:a0:8a:34:a6:0e:37:c9:5d: 60:67:3f:3d -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEknakegyiqE1yv2aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg5NWVlODUtMmExNi00ZTU0LTljNWItYTlhMDU5MDg4 NzdlMB4XDTI1MDMxMTE1NDQyOVoXDTI1MDYwOTE1NDQyOVowLzEtMCsGA1UEAxMk YzkyYTFhOTAtOGUyNy00MWY3LWEzMjQtZTM5MWZiN2Y0NDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsninEK9MfEjfdxkzyoT3MYl1A92gZe/ivDos E476jrEne/zmoT7k/jMSw53X5UGOeIaOPuhiqW2+BkAIrnPOQUgIu96cBbtoZq4h m84WxjVZtFKmI0SfGv3FMZt7CuArcCdxlBIPRUlcfXmYmvW5nxWiwpdexfyk27jS jcChU8qW+C9wDRw/JUaeZFOB61/y38aDKXn/vOaIBCh4SKYYmDYjY2tel6omdH7n t5QexG1kefxXO5RKQqrarTa1wm/kBhi38F9EoTR7UJ2wrKiZc+hdrOX5TejAc6hR NZdEZR8R6dbAwmpPAv5cpcluCI98WTgDG1hNeurQMfWspMpqeQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOR65B/+jWDFOng7bE4JEpSqdkZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ODk1 ZWU4NS0yYTE2LTRlNTQtOWM1Yi1hOWEwNTkwODg3N2UvM2JhYWUwYzQtNjNlOC0z NjQwLWI1NzMtYTkyNzdjOTlkOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzg5NWVlODUtMmExNi00ZTU0LTlj NWItYTlhMDU5MDg4NzdlLzc4OTVlZTg1LTJhMTYtNGU1NC05YzViLWE5YTA1OTA4 ODc3ZS5jcmwwHwYDVR0jBBgwFoAUs6GjrSqK+NRV7x3nqCV+EXmy9SowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ODk1ZWU4NS0yYTE2LTRlNTQtOWM1Yi1hOWEw NTkwODg3N2UuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADQe40D BADQe44wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAdkZfTvj0tbRnS+Bttu23fJB6yPMLEnKt9e12VhUmVRQR AXYgODWlzxWCRQRFwkXvwad8fAtj4iXcWRXymSp/sfEJlN+qI7t30s8i0yk6X//0 UqYJ4MisSM2yuXgG67BDazsrYeSxuz6hQBjafA+qndFh4/GQgKrk+eoS7m+OVmzF B/yQ9eCvwoN5pGRMXG/cxutwUcMl22f8G7nv35kTRA71U5SoionSI2YkR6Ggqml5 Up3sq5R1YPAy1l/Gg95heS9X/qzFVHBOATrV30JnxU+aozUEzh7ISGcTPPDO/Y9V wWVUfYaBZEQdNdYG8AoMaikSSKCKNKYON8ldYGc/PQ== -----END CERTIFICATE-----Generated at Sat Apr 12 00:06:33 2025 by rpki-client