$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e486e50d-fed0-3c65-bc76-ee930b7793a1.roa File: e486e50d-fed0-3c65-bc76-ee930b7793a1.roa (raw, json) Hash identifier: Sue/eWFUmnSssV72QzQGHkMsQR8s97oNGCsrththdOc= Subject key identifier: 66:89:B4:2C:C7:12:71:2E:FA:4F:04:5C:E4:AD:74:3B:97:71:6E:44 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584925B3A885FB696867F8EB1D80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e486e50d-fed0-3c65-bc76-ee930b7793a1.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 13576 IP address blocks: 208.53.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:a8:85:fb:69:68:67:f8:eb:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=cd08542e-e647-4f72-8f0c-312eb5f59093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:42:95:0d:57:4e:20:1f:39:4b:77:b2:eb: a5:cd:c6:7a:ec:22:a8:30:f6:50:58:f1:db:29:da: 96:7a:63:9f:bc:3c:6e:cd:ee:c0:51:9d:eb:aa:4d: fd:38:05:d7:80:a8:69:20:ed:eb:7c:fd:fc:d0:4e: cd:63:cf:d8:c7:4f:d9:50:e0:ae:5d:bb:fc:4e:82: 4a:70:e3:55:08:d4:31:97:42:1a:3b:33:64:f5:ae: 2f:07:cb:59:f7:2a:4a:c2:65:94:ef:9b:fd:85:ed: 0d:a2:ef:3f:87:e4:4e:0c:1a:d4:b8:96:21:db:eb: 95:c3:10:78:f8:24:fe:87:84:c7:0a:31:81:8d:ac: 39:17:ae:5f:ea:0d:22:eb:b6:63:f8:a6:78:76:9e: 4c:2c:6a:4b:cb:88:2c:97:c3:7d:dc:d9:36:c1:6e: f3:31:9c:09:b2:72:6f:ae:77:e5:86:25:a8:45:26: d3:3a:c5:ac:47:88:63:90:27:25:1b:14:24:0e:65: 94:ff:82:6f:72:54:62:66:32:c1:f2:95:95:55:71: 59:57:74:cb:38:20:a6:14:4f:d3:cc:5c:15:02:87: f7:54:6b:82:ac:74:24:5e:8b:20:4f:de:fa:2a:be: d2:b6:0c:bf:2e:fe:bf:8d:ac:a9:e8:1d:27:37:f6: 00:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:89:B4:2C:C7:12:71:2E:FA:4F:04:5C:E4:AD:74:3B:97:71:6E:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e486e50d-fed0-3c65-bc76-ee930b7793a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:44:a5:15:b2:3e:f4:46:4f:f0:0b:b5:08:db:c0:b1:d8:11: 6a:e2:68:70:58:6b:c4:1c:76:67:2f:89:c0:2a:73:82:b0:59: 5f:13:e4:97:59:3d:8b:96:d4:80:44:40:41:cc:d4:67:85:34: 3c:cc:c9:82:94:43:2c:53:28:c5:12:db:8f:74:cd:d6:97:5b: 60:df:fa:8c:a0:71:fd:df:fc:75:51:f3:d6:23:9b:40:80:a9: 64:0f:e4:ca:fd:69:9a:77:8b:d9:98:d4:38:19:e3:c0:fc:e5: 8b:01:d1:cc:5c:b7:c1:66:78:b4:c5:2c:44:63:a1:65:ce:f0: 98:f5:d4:83:46:fb:f5:4c:3d:52:89:c4:f7:6a:7d:bf:02:ef: 31:f0:1d:88:d2:9d:41:e0:3c:08:93:8f:81:43:3f:3f:06:c9: 5b:27:95:af:b6:0a:ef:66:8a:03:65:a3:f6:ed:65:03:bc:ce: 2e:d8:66:77:13:64:1c:54:c4:4d:50:80:64:6f:1e:32:b8:f2: 58:43:f9:97:29:e0:a1:3d:05:15:37:0d:4c:29:b7:ce:21:3e: 04:12:e3:c2:16:70:df:a7:19:29:a9:05:2e:3a:86:e1:d3:32: b2:24:25:76:e9:bd:ab:67:f2:a9:f2:85:42:e1:67:06:4e:d4: a1:f0:96:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6iF+2loZ/jrHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk Y2QwODU0MmUtZTY0Ny00ZjcyLThmMGMtMzEyZWI1ZjU5MDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDJClQ1XTiAfOUt3suulzcZ67CKoMPZQWPHb KdqWemOfvDxuze7AUZ3rqk39OAXXgKhpIO3rfP380E7NY8/Yx0/ZUOCuXbv8ToJK cONVCNQxl0IaOzNk9a4vB8tZ9ypKwmWU75v9he0Nou8/h+RODBrUuJYh2+uVwxB4 +CT+h4THCjGBjaw5F65f6g0i67Zj+KZ4dp5MLGpLy4gsl8N93Nk2wW7zMZwJsnJv rnflhiWoRSbTOsWsR4hjkCclGxQkDmWU/4JvclRiZjLB8pWVVXFZV3TLOCCmFE/T zFwVAof3VGuCrHQkXosgT976Kr7Stgy/Lv6/jayp6B0nN/YARwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaJtCzHEnEu+k8EXOStdDuXcW5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZTQ4NmU1MGQtZmVkMC0z YzY1LWJjNzYtZWU5MzBiNzc5M2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJEpRWyPvRGT/ALtQjbwLHYEWriaHBYa8QcdmcvicAqc4KwWV8T5JdZ PYuW1IBEQEHM1GeFNDzMyYKUQyxTKMUS2490zdaXW2Df+oygcf3f/HVR89Yjm0CA qWQP5Mr9aZp3i9mY1DgZ48D85YsB0cxct8FmeLTFLERjoWXO8Jj11ING+/VMPVKJ xPdqfb8C7zHwHYjSnUHgPAiTj4FDPz8GyVsnla+2Cu9migNlo/btZQO8zi7YZncT ZBxUxE1QgGRvHjK48lhD+Zcp4KE9BRU3DUwpt84hPgQS48IWcN+nGSmpBS46huHT MrIkJXbpvatn8qnyhULhZwZO1KHwlv0= -----END CERTIFICATE-----Generated at Sun Apr 6 17:39:10 2025 by rpki-client