$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1952612d-7136-3e3a-854d-34dea87c21a3.roa File: 1952612d-7136-3e3a-854d-34dea87c21a3.roa (raw, json) Hash identifier: ZKDGzqTjziAZFdr/XQFDFXTAMv/dMCB7K+y3eZNMsHY= Subject key identifier: B0:05:7E:1C:B2:DD:B9:88:3B:45:1C:3F:91:5C:56:9D:BF:58:7E:CF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C24439B29C8304A86C90740 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1952612d-7136-3e3a-854d-34dea87c21a3.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 26558 IP address blocks: 208.36.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:43:9b:29:c8:30:4a:86:c9:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=5f12bbe7-1bcf-43cd-bafd-bd8dec48c1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:8c:74:f0:f4:a9:f4:e8:4e:ce:63:ae:3d: c0:2d:40:fb:33:55:65:05:18:46:29:ad:89:39:e8: d3:84:f4:9c:c3:b6:00:e5:1c:aa:99:ec:f1:4c:07: 12:69:b2:72:b9:a4:90:3a:c6:ce:84:ba:6a:63:9c: 49:75:9d:f8:55:15:a8:56:63:8f:5a:94:3a:5c:68: d7:28:43:6a:8a:8c:ff:db:a9:bc:4e:36:35:78:b8: 79:27:0e:5f:c5:72:57:db:8f:4e:c4:64:56:68:90: c0:be:37:b5:9a:56:64:82:1f:ce:ef:91:96:bb:a8: ef:7b:f1:af:e4:9f:90:b8:50:d7:3c:a0:77:a7:a3: 54:52:83:8c:b3:0d:7e:60:5f:1f:af:fe:1e:d2:1e: ef:40:de:6c:93:4e:83:74:8a:66:8e:d1:72:41:7c: 4d:ee:89:8c:8e:d7:85:4b:01:82:d9:d2:99:78:bc: 23:ef:d6:34:c9:ec:d5:5f:83:d1:c4:2d:1e:06:12: c9:96:1c:cb:ac:7c:fe:fb:30:c8:d9:fe:8d:e5:4f: df:59:e2:ba:d8:01:b0:ba:14:e0:4e:46:b2:5b:f9: 03:9f:cd:62:ea:a8:37:70:48:b7:09:fc:ce:1e:e9: b9:dd:51:18:86:c0:a4:f2:18:d1:52:64:7b:46:db: 6b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:05:7E:1C:B2:DD:B9:88:3B:45:1C:3F:91:5C:56:9D:BF:58:7E:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1952612d-7136-3e3a-854d-34dea87c21a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.36.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ec:ce:8b:76:c0:80:a8:95:a6:dd:b0:cd:3a:dc:d8:44:5b: 45:ed:11:1d:17:4a:9a:75:4c:0c:22:0e:a3:9d:fe:d3:03:a6: 24:84:a8:be:ba:4f:77:e2:63:e8:24:c0:c1:7c:3d:af:00:96: 41:7b:c6:1a:b0:8b:d6:db:dc:2e:24:ed:ff:3c:81:6c:e1:ce: 55:e3:32:0f:9b:8b:18:87:ea:28:27:97:87:d5:c1:fc:cc:12: 20:42:2d:d3:26:12:87:65:01:95:8d:b2:a4:43:93:ca:27:fe: ee:3f:d2:a3:a8:c9:a5:eb:22:2c:f0:ed:6a:23:e0:2c:6b:4e: ef:1c:d5:bc:c8:2e:21:5e:65:25:76:01:91:6a:b3:4d:1b:ec: 9a:65:0e:e1:22:12:41:07:33:0e:a7:f5:63:ea:e5:a5:04:88: d0:61:a4:e3:25:84:72:84:ee:d9:e3:1d:07:bc:d9:ae:7a:0e: c7:1d:6a:96:a5:e1:50:58:57:5c:45:65:fc:1b:46:a8:5b:e4: 50:9d:88:e9:c2:f3:ae:46:3d:59:9d:d0:7f:fc:ce:8c:9b:39: 17:c5:01:3b:d0:35:4e:0e:62:b3:fa:8c:fc:6f:c9:bb:b8:d9: bf:a0:27:f5:a6:ca:5d:ab:74:fe:f0:f2:81:e2:70:70:1d:f4: f0:2a:0a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEObKcgwSobJB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NWYxMmJiZTctMWJjZi00M2NkLWJhZmQtYmQ4ZGVjNDhjMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7yMdPD0qfToTs5jrj3ALUD7M1VlBRhGKa2J OejThPScw7YA5RyqmezxTAcSabJyuaSQOsbOhLpqY5xJdZ34VRWoVmOPWpQ6XGjX KENqioz/26m8TjY1eLh5Jw5fxXJX249OxGRWaJDAvje1mlZkgh/O75GWu6jve/Gv 5J+QuFDXPKB3p6NUUoOMsw1+YF8fr/4e0h7vQN5sk06DdIpmjtFyQXxN7omMjteF SwGC2dKZeLwj79Y0yezVX4PRxC0eBhLJlhzLrHz++zDI2f6N5U/fWeK62AGwuhTg TkayW/kDn81i6qg3cEi3CfzOHum53VEYhsCk8hjRUmR7RttrywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAFfhyy3bmIO0UcP5FcVp2/WH7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTk1MjYxMmQtNzEzNi0z ZTNhLTg1NGQtMzRkZWE4N2MyMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0CSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnszot2wIColabdsM063NhEW0XtER0XSpp1TAwiDqOd/tMDpiSEqL66 T3fiY+gkwMF8Pa8AlkF7xhqwi9bb3C4k7f88gWzhzlXjMg+bixiH6ignl4fVwfzM EiBCLdMmEodlAZWNsqRDk8on/u4/0qOoyaXrIizw7Woj4CxrTu8c1bzILiFeZSV2 AZFqs00b7JplDuEiEkEHMw6n9WPq5aUEiNBhpOMlhHKE7tnjHQe82a56Dscdapal 4VBYV1xFZfwbRqhb5FCdiOnC865GPVmd0H/8zoybORfFATvQNU4OYrP6jPxvybu4 2b+gJ/Wmyl2rdP7w8oHicHAd9PAqCnA= -----END CERTIFICATE-----Generated at Sun Apr 6 08:43:51 2025 by rpki-client