$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/82e10d1e-ea45-3733-8bf7-5d26e3a7d954.roa File: 82e10d1e-ea45-3733-8bf7-5d26e3a7d954.roa (raw, json) Hash identifier: 5ZG7lckuHHn/ypfGI2Q1GfSLxBfdlTkXid6Ok4EKfHs= Subject key identifier: 67:99:A8:61:F7:B9:B0:89:9E:1C:5C:F1:EF:48:D9:B8:6B:AD:7E:91 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584925B3A8C9B9C7ED3006789400 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/82e10d1e-ea45-3733-8bf7-5d26e3a7d954.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 13576 IP address blocks: 208.53.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:a8:c9:b9:c7:ed:30:06:78:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=626e247e-c32e-4d10-80a3-4a164b8714c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:65:6c:c7:0b:81:07:ff:87:bb:e2:2f:de:1c: d6:58:dc:32:9d:28:3c:d9:c9:7f:a9:3a:32:19:c3: 23:8d:43:1d:e5:19:4d:e6:fe:52:bf:02:12:60:3d: 3b:45:56:aa:6b:24:3a:65:eb:32:86:18:dc:ff:ec: c2:3b:f8:77:d5:c3:c3:3b:34:28:c6:6f:d6:27:45: 08:04:b2:4c:e4:ad:b8:96:28:4c:7e:18:74:98:2b: 03:78:b3:88:ef:72:30:ef:47:82:b8:9c:44:d2:d9: 0a:40:d7:2c:68:bd:4f:cb:8e:63:03:a7:dd:3d:03: fc:cd:45:58:9d:0f:f3:13:16:b7:e4:f1:79:76:47: 04:13:06:26:f0:89:76:bc:0f:c8:68:52:1f:95:53: 5c:41:ac:bd:88:3d:0a:9a:57:e6:c4:ac:b9:14:9b: 58:22:bf:03:c8:b6:3f:cb:d0:65:0b:92:36:ca:c4: b7:d7:26:90:2b:9b:da:08:e4:29:a0:8a:49:e7:03: 66:73:76:df:4d:9b:71:fa:c1:77:cb:94:43:da:8a: 67:e4:e2:60:be:cc:32:4a:72:0a:c5:c1:f4:b6:2d: ed:bc:99:e4:9a:b5:c1:d1:4f:4c:8f:95:b9:3a:5c: 15:e3:65:fd:80:3a:1a:f2:90:91:a4:40:3c:69:2d: 93:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:99:A8:61:F7:B9:B0:89:9E:1C:5C:F1:EF:48:D9:B8:6B:AD:7E:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/82e10d1e-ea45-3733-8bf7-5d26e3a7d954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:94:dc:20:f9:bd:62:50:f2:f8:6b:ac:33:7b:30:95:dc:2e: c7:7f:17:35:80:2a:7a:40:0f:48:47:dc:54:58:fe:c2:bc:e6: 6b:23:d1:0e:6d:81:5c:fc:68:af:86:98:17:19:5f:e0:fc:37: b2:96:8f:30:f4:ea:7d:b7:db:20:6b:59:29:52:b2:b1:54:31: a4:63:82:6b:d8:9e:37:db:96:76:4d:1a:5d:54:2e:67:c3:68: b9:bc:e8:80:0b:05:c4:63:4b:81:dc:94:ee:b4:ac:93:d3:48: a5:3b:b0:37:ad:0e:8e:4f:4d:82:88:6d:ac:fd:bf:7a:b8:ba: 9e:52:d3:0b:59:47:e5:f9:68:9c:1f:1b:61:6b:52:f9:10:f9: ae:35:37:38:35:22:35:63:e1:1f:0e:f8:c7:4b:54:5b:1e:d1: a3:a4:2b:17:de:5d:5b:37:2e:40:93:f0:08:82:c5:9a:f0:3f: 39:d7:82:af:cf:38:f2:9c:db:65:4a:03:1f:0e:07:b3:66:a9: ef:32:5d:f4:4a:56:0c:08:5e:f6:58:73:2b:2d:ff:98:0b:df: 61:c9:6c:c9:3b:82:57:09:1f:69:51:03:33:09:56:e2:a4:47: 29:b0:c4:63:79:95:1e:99:a1:cd:57:21:6c:b9:8c:a8:bd:2a: 0d:3b:ce:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6jJucftMAZ4lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk NjI2ZTI0N2UtYzMyZS00ZDEwLTgwYTMtNGExNjRiODcxNGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mVsxwuBB/+Hu+Iv3hzWWNwynSg82cl/qToy GcMjjUMd5RlN5v5SvwISYD07RVaqayQ6Zesyhhjc/+zCO/h31cPDOzQoxm/WJ0UI BLJM5K24lihMfhh0mCsDeLOI73Iw70eCuJxE0tkKQNcsaL1Py45jA6fdPQP8zUVY nQ/zExa35PF5dkcEEwYm8Il2vA/IaFIflVNcQay9iD0KmlfmxKy5FJtYIr8DyLY/ y9BlC5I2ysS31yaQK5vaCOQpoIpJ5wNmc3bfTZtx+sF3y5RD2opn5OJgvswySnIK xcH0ti3tvJnkmrXB0U9Mj5W5OlwV42X9gDoa8pCRpEA8aS2ToQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeZqGH3ubCJnhxc8e9I2bhrrX6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODJlMTBkMWUtZWE0NS0z NzMzLThiZjctNWQyNmUzYTdkOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWU3CD5vWJQ8vhrrDN7MJXcLsd/FzWAKnpAD0hH3FRY/sK85msj0Q5t gVz8aK+GmBcZX+D8N7KWjzD06n232yBrWSlSsrFUMaRjgmvYnjfblnZNGl1ULmfD aLm86IALBcRjS4HclO60rJPTSKU7sDetDo5PTYKIbaz9v3q4up5S0wtZR+X5aJwf G2FrUvkQ+a41Nzg1IjVj4R8O+MdLVFse0aOkKxfeXVs3LkCT8AiCxZrwPznXgq/P OPKc22VKAx8OB7Nmqe8yXfRKVgwIXvZYcyst/5gL32HJbMk7glcJH2lRAzMJVuKk RymwxGN5lR6Zoc1XIWy5jKi9Kg07zn4= -----END CERTIFICATE-----Generated at Sun Apr 6 19:05:09 2025 by rpki-client