$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/cf9e080d-5220-3f48-8b51-39615620115f.roa File: cf9e080d-5220-3f48-8b51-39615620115f.roa (raw, json) Hash identifier: xFYaePHZ8dkznMAtsKjY8dgSAcIuRIB/TOGWuPUeMOc= Subject key identifier: E3:A3:AF:BF:8E:E4:89:3C:9C:03:D8:C1:2A:25:F7:70:D7:69:E0:34 Certificate issuer: /CN=af93a26c-49ee-415a-bda7-07e781689339 Certificate serial: 010D0C9F432858490F7BF24883D0365723A62520 Authority key identifier: 72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/cf9e080d-5220-3f48-8b51-39615620115f.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 33191 IP address blocks: 208.103.161.0/24 maxlen: 24 2602:f79a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:f2:48:83:d0:36:57:23:a6:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af93a26c-49ee-415a-bda7-07e781689339 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=569870c6-72b6-4ba1-b65f-6dd785b7735f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:82:47:d1:82:39:ef:ea:59:86:89:56:66: b5:33:d4:5f:10:85:d1:b7:4f:70:ee:22:27:56:ba: f8:e5:fd:8a:b5:98:98:4e:f4:bb:31:49:0d:4a:0e: e7:70:cc:d0:da:ee:3a:21:ba:e3:44:5d:e4:83:d1: 83:9c:06:ee:73:f3:99:2d:7a:67:07:d2:11:b6:bf: d2:4a:f8:ab:c4:65:c9:72:6b:1b:cf:be:69:1a:99: 39:8a:cd:15:f3:51:e4:cb:f0:c8:b5:a2:ab:78:57: ef:dc:1f:af:ad:df:9f:a4:67:69:a1:cf:86:ae:b8: 00:89:22:ee:b2:09:10:e7:e5:2c:90:94:d1:e3:3c: e2:da:be:26:ec:5f:2d:05:ed:83:53:70:3a:57:24: b4:48:ef:67:50:be:e1:ee:e3:38:fe:2e:4e:c3:60: b6:ab:2c:93:94:bf:a2:97:67:b6:41:d1:68:36:9d: e6:da:b7:8b:d0:3a:44:84:fe:94:f2:6c:c4:e8:cf: 23:a7:76:fc:b0:bb:f0:9b:df:26:86:f2:2a:f7:e4: 52:8d:09:06:c0:de:d6:32:79:71:27:07:bf:a4:17: 5d:f8:63:72:79:e4:89:2b:12:6e:ca:5a:17:fc:94: 64:2c:fb:06:2f:dc:2f:f5:cb:f2:6f:49:17:66:c9: cc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A3:AF:BF:8E:E4:89:3C:9C:03:D8:C1:2A:25:F7:70:D7:69:E0:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/cf9e080d-5220-3f48-8b51-39615620115f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl X509v3 Authority Key Identifier: keyid:72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer sbgp-ipAddrBlock: critical IPv4: 208.103.161.0/24 IPv6: 2602:f79a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:fe:d2:b3:0a:ba:65:97:6b:94:dc:f6:2e:c7:3a:35:2d:4f: b8:4d:a6:cc:ba:cb:ef:60:97:65:48:fa:4a:44:22:84:ea:f8: 8c:8b:07:21:4d:cb:f9:78:37:7d:e2:2e:42:71:5e:4b:47:82: 61:b3:5b:51:e0:0a:2e:6a:30:7e:1d:18:8e:32:fc:d7:44:b7: c6:dc:60:f9:6f:16:44:d8:bc:a7:d9:31:34:2c:37:3e:95:b6: 57:9e:5f:47:ce:23:6e:1b:c8:40:ad:21:1d:0f:2b:ed:e7:b8: e8:04:13:8d:a1:64:d2:63:98:7d:c2:79:96:07:bd:43:d0:ea: 36:06:9e:f7:61:73:1c:a7:8e:a2:16:66:0f:bd:a3:c6:e2:56: b8:cc:d9:79:91:36:76:66:78:0e:59:b4:e5:b4:fe:a9:84:8e: fa:8b:2a:d0:f0:7e:4a:56:e3:a9:0b:cd:6d:d6:b7:a3:26:e4: 2a:71:83:46:27:f5:cc:c5:b4:e3:c5:64:bd:f8:f9:fe:7e:5e: fb:42:52:86:df:9e:fa:53:70:93:3d:2b:61:bc:2f:be:8b:d2: e1:a9:1d:11:a3:5b:5b:0f:fb:0d:e9:05:60:66:fb:5e:3a:a9: 37:ad:c2:5b:96:78:b2:af:1f:63:26:0e:85:4d:30:36:df:2c: 7a:a5:4b:44 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkPe/JIg9A2VyOmJSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY5M2EyNmMtNDllZS00MTVhLWJkYTctMDdlNzgxNjg5 MzM5MB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk NTY5ODcwYzYtNzJiNi00YmExLWI2NWYtNmRkNzg1Yjc3MzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxyCR9GCOe/qWYaJVma1M9RfEIXRt09w7iIn Vrr45f2KtZiYTvS7MUkNSg7ncMzQ2u46IbrjRF3kg9GDnAbuc/OZLXpnB9IRtr/S SvirxGXJcmsbz75pGpk5is0V81Hky/DItaKreFfv3B+vrd+fpGdpoc+GrrgAiSLu sgkQ5+UskJTR4zzi2r4m7F8tBe2DU3A6VyS0SO9nUL7h7uM4/i5Ow2C2qyyTlL+i l2e2QdFoNp3m2reL0DpEhP6U8mzE6M8jp3b8sLvwm98mhvIq9+RSjQkGwN7WMnlx Jwe/pBdd+GNyeeSJKxJuyloX/JRkLPsGL9wv9cvyb0kXZsnMnQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOOjr7+O5Ik8nAPYwSol93DXaeA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZjkz YTI2Yy00OWVlLTQxNWEtYmRhNy0wN2U3ODE2ODkzMzkvY2Y5ZTA4MGQtNTIyMC0z ZjQ4LThiNTEtMzk2MTU2MjAxMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWY5M2EyNmMtNDllZS00MTVhLWJk YTctMDdlNzgxNjg5MzM5L2FmOTNhMjZjLTQ5ZWUtNDE1YS1iZGE3LTA3ZTc4MTY4 OTMzOS5jcmwwHwYDVR0jBBgwFoAUchiRnAE1sOqwtDdoL9a9M7GGnCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZjkzYTI2Yy00OWVlLTQxNWEtYmRhNy0wN2U3 ODE2ODkzMzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA0GehMA8E AgACMAkDBwAmAveaAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlf7Sswq6ZZdrlNz2Lsc6NS1PuE2mzLrL 72CXZUj6SkQihOr4jIsHIU3L+Xg3feIuQnFeS0eCYbNbUeAKLmowfh0YjjL810S3 xtxg+W8WRNi8p9kxNCw3PpW2V55fR84jbhvIQK0hHQ8r7ee46AQTjaFk0mOYfcJ5 lge9Q9DqNgae92FzHKeOohZmD72jxuJWuMzZeZE2dmZ4Dlm05bT+qYSO+osq0PB+ SlbjqQvNbda3oybkKnGDRif1zMW048Vkvfj5/n5e+0JSht+e+lNwkz0rYbwvvovS 4akdEaNbWw/7DekFYGb7XjqpN63CW5Z4sq8fYyYOhU0wNt8seqVLRA== -----END CERTIFICATE-----Generated at Fri Apr 11 21:02:20 2025 by rpki-client