$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa File: 890756c8-89bc-3860-9d7e-6e5218522bfe.roa (raw, json) Hash identifier: CEvXj/Ynf/UJxLbrBVrl4Uc+OeEamtgYFV+mvd5F3rw= Subject key identifier: B4:F1:76:A8:3E:DF:02:7E:66:03:67:F1:E1:A5:AE:B3:10:69:7C:4F Certificate issuer: /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Certificate serial: 010D0C9F43285848E9CBE0B0A050C66C432556C0 Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 397444 IP address blocks: 208.68.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e0:b0:a0:50:c6:6c:43:25:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=fc77d844-0051-448f-add6-d68d09b04964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:71:f0:06:c0:88:05:d5:4e:86:9c:f5:8a: 81:f7:8e:3d:04:ed:f7:5f:0e:af:29:fb:90:c7:66: 92:0a:22:f1:3e:16:f6:03:7a:d0:42:d1:b9:9a:41: cf:a9:fb:44:a5:0a:f9:b3:eb:a7:47:29:51:71:8f: 17:f5:9c:88:5c:3e:40:a6:cf:48:0d:fd:74:8a:62: c0:51:41:fd:37:4e:e4:bd:0d:ce:fe:ba:f7:10:af: f3:5f:f8:1d:c5:2f:1e:70:ec:80:d5:b2:1b:f7:36: f9:01:2a:01:35:c1:29:ec:10:0f:2c:bf:ff:d5:1d: 74:d7:8e:85:06:9f:64:b5:6d:16:9f:2d:32:6c:7e: 34:61:c3:c6:8f:68:d7:6a:f1:89:16:f9:b9:bb:16: 0b:8d:fc:7f:24:6f:c3:87:f6:cf:7e:65:59:aa:be: 13:79:dc:bf:14:5f:7e:58:87:ab:a2:ac:60:72:26: e5:5d:6f:b5:ae:a7:97:41:49:3a:5f:d8:c1:07:79: 8b:01:85:3b:96:37:20:2a:9d:c2:23:30:cc:e9:5e: 36:de:56:2f:e6:cc:2e:6f:fb:94:25:83:1b:04:ac: 05:bc:aa:5c:8f:57:97:fe:2a:2a:0a:5b:54:d6:b7: 7d:b3:04:8f:32:52:57:9f:bc:b7:05:f1:52:0e:3a: bb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F1:76:A8:3E:DF:02:7E:66:03:67:F1:E1:A5:AE:B3:10:69:7C:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl X509v3 Authority Key Identifier: keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer sbgp-ipAddrBlock: critical IPv4: 208.68.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:03:ae:62:b4:30:29:04:cd:b9:aa:26:4f:a0:28:c4:43:61: 78:27:3e:03:87:83:c6:10:d6:58:e5:a5:c0:ce:cd:d2:10:46: fd:15:d8:1c:9a:d9:19:ef:39:ee:af:d4:8d:78:d8:f6:1f:9a: e5:e8:fe:b5:6c:f2:11:67:7f:85:5b:9c:d1:b8:bf:e1:a7:7e: ce:a3:97:d7:80:d0:b4:92:ea:71:f7:fe:e1:27:7c:62:9e:c1: 49:2c:4e:3f:81:61:dc:1a:3f:8e:52:41:00:64:a1:c9:b2:20: 33:63:5d:dd:ec:52:63:96:1c:a9:15:61:10:75:d2:ee:13:26: ec:d0:a1:7b:a8:b3:14:cd:ad:46:8e:a9:37:29:cb:ac:a6:eb: 1b:f5:ca:3f:60:07:1d:20:54:1d:11:4b:7a:9d:b5:e9:1e:60: 08:ee:df:fd:28:cd:2d:ea:e3:33:80:b2:c1:28:d5:7f:27:f4: c0:9d:64:2f:90:21:aa:a0:fe:65:8d:49:ac:2e:8a:78:ec:5b: 6e:71:39:02:7a:ce:e9:c5:c8:6c:09:c2:82:16:42:bc:f6:e6: 6b:76:f4:87:79:f0:cf:bf:e8:8d:65:98:f1:54:a3:c1:53:cd: 44:30:cc:2b:84:01:0a:1a:ac:e0:0e:11:be:0f:17:13:9a:01: c3:07:e0:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+CwoFDGbEMlVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmMGI0ODQtOTRkMi00OTBmLThhNjgtZDc1ODhkMWYz NjgzMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk ZmM3N2Q4NDQtMDA1MS00NDhmLWFkZDYtZDY4ZDA5YjA0OTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Rx8AbAiAXVToac9YqB9449BO33Xw6vKfuQ x2aSCiLxPhb2A3rQQtG5mkHPqftEpQr5s+unRylRcY8X9ZyIXD5Aps9IDf10imLA UUH9N07kvQ3O/rr3EK/zX/gdxS8ecOyA1bIb9zb5ASoBNcEp7BAPLL//1R10146F Bp9ktW0Wny0ybH40YcPGj2jXavGJFvm5uxYLjfx/JG/Dh/bPfmVZqr4Tedy/FF9+ WIeroqxgciblXW+1rqeXQUk6X9jBB3mLAYU7ljcgKp3CIzDM6V423lYv5swub/uU JYMbBKwFvKpcj1eX/ioqCltU1rd9swSPMlJXn7y3BfFSDjq7HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTxdqg+3wJ+ZgNn8eGlrrMQaXxPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YmYw YjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4OGQxZjM2ODMvODkwNzU2YzgtODliYy0z ODYwLTlkN2UtNmU1MjE4NTIyYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmJmMGI0ODQtOTRkMi00OTBmLThh NjgtZDc1ODhkMWYzNjgzLzZiZjBiNDg0LTk0ZDItNDkwZi04YTY4LWQ3NTg4ZDFm MzY4My5jcmwwHwYDVR0jBBgwFoAULH8ekiqWuUwTXutcOEV3l0rGXlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YmYwYjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4 OGQxZjM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoDrmK0MCkEzbmqJk+gKMRDYXgnPgOHg8YQ1ljlpcDOzdIQRv0V2Bya 2RnvOe6v1I142PYfmuXo/rVs8hFnf4VbnNG4v+Gnfs6jl9eA0LSS6nH3/uEnfGKe wUksTj+BYdwaP45SQQBkocmyIDNjXd3sUmOWHKkVYRB10u4TJuzQoXuosxTNrUaO qTcpy6ym6xv1yj9gBx0gVB0RS3qdtekeYAju3/0ozS3q4zOAssEo1X8n9MCdZC+Q Iaqg/mWNSawuinjsW25xOQJ6zunFyGwJwoIWQrz25mt29Id58M+/6I1lmPFUo8FT zUQwzCuEAQoarOAOEb4PFxOaAcMH4J4= -----END CERTIFICATE-----Generated at Sat Apr 12 00:25:52 2025 by rpki-client