$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa File: a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa (raw, json) Hash identifier: LuAqRqcYhtWGm3jhmh5eTmr4mcTQVZLJbRpemqoh46w= Subject key identifier: 1D:CD:A0:96:A0:C3:3F:D6:B0:A0:5A:20:59:E3:C3:4D:E7:08:39:99 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584A0C07227267048837F5E521C0 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 398465 IP address blocks: 208.58.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:22:72:67:04:88:37:f5:e5:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=4c44b3c5-d6a7-4137-b725-fe05766a6ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:3c:19:69:3b:ba:66:eb:84:51:87:49:8d: c4:9a:1c:8e:79:af:c8:d5:bc:ca:b9:f8:d5:a4:97: d6:b3:33:fb:5b:dd:85:05:6d:3f:52:5b:8d:e7:cf: 61:56:25:c4:99:74:e1:c7:a4:e3:fe:a7:31:4b:39: 89:c2:32:a8:93:b5:c2:43:04:65:0e:14:33:d3:fd: a8:90:8c:c9:af:3f:43:46:f1:89:2c:6d:14:7c:55: 3f:6b:04:69:b6:cd:6e:2c:af:68:22:5f:60:11:10: 91:5a:1f:1f:41:28:55:10:a0:7e:45:92:01:37:5a: 0b:60:e8:fd:2d:da:79:14:b9:1e:92:5c:f5:e9:4b: 17:dd:6c:ae:f6:54:e7:9d:63:00:f7:d6:5e:79:9b: 0c:68:db:99:15:e4:f5:3c:da:2c:83:35:75:a4:e2: 3d:03:8f:3e:a8:e8:1c:7f:43:c3:72:c6:15:38:af: aa:9c:65:94:c8:0c:c5:16:0a:a1:da:5a:b4:08:c6: d4:4f:52:f3:95:ee:be:cb:c8:06:52:b6:9a:eb:1d: 25:b7:a0:86:ef:7b:83:6d:e2:d9:d7:4a:d0:5f:5f: c3:0e:69:74:4f:6e:96:78:5b:81:ed:ed:d1:f9:1a: 6e:b4:dd:5a:65:31:53:e9:6f:2e:8e:3a:4b:df:0d: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CD:A0:96:A0:C3:3F:D6:B0:A0:5A:20:59:E3:C3:4D:E7:08:39:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 208.58.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:05:5a:fc:8a:88:90:77:b2:54:b5:f5:6d:61:7a:e6:4e:5f: c7:98:7b:41:81:77:9a:40:64:26:ea:43:df:45:45:ee:d4:59: 4a:28:64:85:2b:5f:d2:23:17:da:38:db:ac:32:a2:24:c7:b7: ff:d4:db:7b:29:4a:bc:06:5e:e6:34:82:32:48:7a:82:65:7e: 6f:8f:39:3a:bd:61:de:f3:2b:ae:d6:d1:cf:3b:c0:0d:ad:92: fa:03:6d:f6:00:c8:b7:a7:ce:2d:8c:09:15:d5:02:90:b8:ec: 57:56:6c:2c:e3:d1:0e:57:75:d1:5c:d0:ad:78:c8:5a:e9:85: 3f:e7:fe:e6:b1:7d:c6:15:19:15:82:1d:a3:bb:c2:09:af:d2: 7f:53:d5:af:09:22:0c:ac:51:7e:0d:9b:84:14:17:88:8e:9d: d4:8f:31:00:05:00:c2:21:6b:c9:0d:eb:9b:c6:ef:da:19:ff: 76:e2:6c:e3:d8:32:6b:08:37:22:79:86:a7:cf:5e:6d:26:f6: 04:f0:c0:c6:30:0e:41:75:62:c4:45:65:8f:8b:6e:f1:83:f6: 31:54:76:15:eb:c6:ca:76:cd:87:92:9d:e4:cd:3a:6c:71:22: be:4b:09:fa:de:84:4e:8d:dd:68:6a:ae:34:95:77:24:18:ca: cb:ff:0f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMByJyZwSIN/XlIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NGM0NGIzYzUtZDZhNy00MTM3LWI3MjUtZmUwNTc2NmE2YmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4g8GWk7umbrhFGHSY3EmhyOea/I1bzKufjV pJfWszP7W92FBW0/UluN589hViXEmXThx6Tj/qcxSzmJwjKok7XCQwRlDhQz0/2o kIzJrz9DRvGJLG0UfFU/awRpts1uLK9oIl9gERCRWh8fQShVEKB+RZIBN1oLYOj9 Ldp5FLkeklz16UsX3Wyu9lTnnWMA99ZeeZsMaNuZFeT1PNosgzV1pOI9A48+qOgc f0PDcsYVOK+qnGWUyAzFFgqh2lq0CMbUT1Lzle6+y8gGUraa6x0lt6CG73uDbeLZ 10rQX1/DDml0T26WeFuB7e3R+RputN1aZTFT6W8ujjpL3w0kPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3NoJagwz/WsKBaIFnjw03nCDmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYTdjYjQxNDktZWE4Yi0z ZDBlLTgwNzItMWU1ZmNlMjdjNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEFWvyKiJB3slS19W1heuZOX8eYe0GBd5pAZCbqQ99FRe7UWUooZIUr X9IjF9o426wyoiTHt//U23spSrwGXuY0gjJIeoJlfm+POTq9Yd7zK67W0c87wA2t kvoDbfYAyLenzi2MCRXVApC47FdWbCzj0Q5XddFc0K14yFrphT/n/uaxfcYVGRWC HaO7wgmv0n9T1a8JIgysUX4Nm4QUF4iOndSPMQAFAMIha8kN65vG79oZ/3bibOPY MmsINyJ5hqfPXm0m9gTwwMYwDkF1YsRFZY+LbvGD9jFUdhXrxsp2zYeSneTNOmxx Ir5LCfrehE6N3WhqrjSVdyQYysv/Dzs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:27 2025 by rpki-client