$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa File: a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa (raw, json) Hash identifier: Y5G8DJ7MSypo+1rbHPn39bOXsA9vCv+79LYmcQdKlrs= Subject key identifier: F3:35:F9:47:7B:B2:66:04:71:F4:F1:2C:32:1F:3A:3C:49:F6:7C:27 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F432858492CB22EFEA2789F2C2E498680 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 398465 IP address blocks: 208.58.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:2e:fe:a2:78:9f:2c:2e:49:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a4b43879-356f-471e-8bf0-e419c8bed72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:9d:b4:86:e6:16:10:b3:ed:f1:48:04:88: 97:c0:27:76:a2:36:ad:75:de:0c:51:d0:af:06:ba: 2f:31:c7:58:81:4a:bb:49:ac:69:87:37:54:b0:e8: 0f:57:4f:f7:6f:5b:bd:7a:64:df:cb:de:88:82:a1: 9e:a3:c9:df:0d:e5:44:18:c4:72:17:41:be:1e:13: cf:ee:36:f1:d5:fc:32:d8:b4:9c:ee:e2:e7:2b:ec: 2f:08:7e:6a:cd:93:1a:43:a7:6e:e1:68:98:67:f5: 60:82:1d:b9:ca:a5:2f:1d:74:89:62:6e:28:ce:d3: 56:61:19:64:ac:cd:96:0b:37:82:2f:04:24:45:e4: 96:e1:b9:f9:76:d7:f5:af:34:b4:44:a0:fd:36:ac: ee:a1:b5:90:e9:47:ef:1b:0c:ae:e0:61:77:de:f4: 42:c0:c3:c6:84:93:47:18:8e:51:b2:c8:80:87:cd: b5:f7:70:5e:c9:bd:f0:bb:f6:5e:0b:27:a8:ec:99: 47:e1:08:41:59:24:f3:f7:6a:2c:41:d4:90:f3:89: 6d:b1:6e:b3:2e:97:fb:29:90:d7:81:0c:3d:1e:31: 72:19:4c:3c:ca:d6:9b:1d:29:1c:a7:eb:5a:b4:20: ac:f7:b1:0c:ae:eb:e6:22:d9:24:b7:64:02:41:89: e7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:35:F9:47:7B:B2:66:04:71:F4:F1:2C:32:1F:3A:3C:49:F6:7C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 208.58.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:83:e1:03:0c:38:4b:49:5b:73:2c:bd:a0:be:29:3d:b5:fa: 86:72:76:7b:07:00:04:d6:e3:cd:bd:c1:39:46:58:80:45:13: 63:7c:e1:04:9c:2c:62:b0:4d:e2:ea:47:59:df:22:71:c3:ba: 63:b0:fe:18:ec:83:dd:06:b0:86:c4:93:cc:30:64:45:ed:78: 6f:a6:69:f6:28:bf:aa:40:cd:74:f8:fe:d0:68:e0:95:af:d1: 5d:03:78:04:22:ee:e0:72:53:5f:d8:cb:9c:d5:5a:62:68:bb: 97:a0:79:95:61:70:a3:e4:3c:79:0e:05:e1:01:0e:d9:01:33: e3:c4:f0:cb:5d:a9:8d:ed:ab:47:e4:49:87:9a:27:d3:56:3a: 9f:5e:e6:97:df:3e:c3:cd:6a:6f:26:6a:c5:11:23:58:0d:8b: f0:1b:7e:94:41:45:db:a6:f5:d2:d4:45:e4:8d:52:f0:af:7f: 8c:8a:e1:3b:40:51:8e:02:a3:d9:83:be:c7:9e:1b:3a:18:4d: 16:4a:41:ba:0b:d0:bf:78:17:5b:aa:5a:5b:a0:5a:6f:6d:ba: 1c:f5:02:ee:eb:4c:a8:a2:c7:d9:f3:e1:51:a0:3c:52:bb:33: f4:d1:23:3e:4a:2c:46:dc:20:e0:c7:d3:3b:a8:d7:00:e5:ac: 98:07:1e:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssi7+onifLC5JhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTRiNDM4NzktMzU2Zi00NzFlLThiZjAtZTQxOWM4YmVkNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFmdtIbmFhCz7fFIBIiXwCd2ojatdd4MUdCv BrovMcdYgUq7SaxphzdUsOgPV0/3b1u9emTfy96IgqGeo8nfDeVEGMRyF0G+HhPP 7jbx1fwy2LSc7uLnK+wvCH5qzZMaQ6du4WiYZ/Vggh25yqUvHXSJYm4oztNWYRlk rM2WCzeCLwQkReSW4bn5dtf1rzS0RKD9NqzuobWQ6UfvGwyu4GF33vRCwMPGhJNH GI5RssiAh82193Beyb3wu/ZeCyeo7JlH4QhBWSTz92osQdSQ84ltsW6zLpf7KZDX gQw9HjFyGUw8ytabHSkcp+tatCCs97EMruvmItkkt2QCQYnnpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM1+Ud7smYEcfTxLDIfOjxJ9nwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYTdjYjQxNDktZWE4Yi0z ZDBlLTgwNzItMWU1ZmNlMjdjNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyD4QMMOEtJW3MsvaC+KT21+oZydnsHAATW4829wTlGWIBFE2N84QSc LGKwTeLqR1nfInHDumOw/hjsg90GsIbEk8wwZEXteG+mafYov6pAzXT4/tBo4JWv 0V0DeAQi7uByU1/Yy5zVWmJou5egeZVhcKPkPHkOBeEBDtkBM+PE8MtdqY3tq0fk SYeaJ9NWOp9e5pffPsPNam8masURI1gNi/AbfpRBRdum9dLUReSNUvCvf4yK4TtA UY4Co9mDvseeGzoYTRZKQboL0L94F1uqWlugWm9tuhz1Au7rTKiix9nz4VGgPFK7 M/TRIz5KLEbcIODH0zuo1wDlrJgHHn8= -----END CERTIFICATE-----Generated at Fri Mar 14 10:23:23 2025 by rpki-client