$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd0e1a98-eebe-346b-b7b4-caf260a235e7.roa File: bd0e1a98-eebe-346b-b7b4-caf260a235e7.roa (raw, json) Hash identifier: iMridnNIAlvwb22Fw1gZ+XdO5OMUR/hsJAWddymgLo4= Subject key identifier: 8E:1B:80:F9:C1:C2:93:2B:C9:FC:3C:15:88:7C:BD:0B:B6:4A:0D:64 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848AF2BBA2D7BA4622EBAA7D700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd0e1a98-eebe-346b-b7b4-caf260a235e7.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 23097 IP address blocks: 208.236.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:ba:2d:7b:a4:62:2e:ba:a7:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=72a7698c-ad12-4274-822c-a2e0b351ce94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fe:f4:4e:c7:d3:ac:29:87:d4:a7:08:11:6e: 21:7b:d8:ef:78:77:a2:68:74:c0:03:9b:09:6e:d0: 26:3d:dd:9f:86:3e:03:ca:3d:2c:be:7f:07:49:2d: fd:bd:30:3a:26:b0:c9:e6:22:70:d7:5b:7a:16:69: 48:db:60:04:54:6e:04:32:40:a8:15:e9:c1:08:d5: b6:98:09:61:a8:6d:b2:45:45:6f:a9:ed:5d:62:ad: d6:90:d3:34:a7:a9:2f:e5:43:e5:2a:c8:9a:9a:13: 53:22:2a:97:65:2b:3d:ec:4c:99:eb:fd:10:9e:b6: 6a:54:13:33:44:cd:8c:72:2c:04:83:18:b3:7e:1e: d9:d5:22:f9:a5:dc:d5:b8:11:fa:02:71:29:4a:a8: 8e:f9:40:76:d1:34:c0:6d:dc:a9:c9:08:08:90:e1: dc:33:cf:d0:98:4c:84:f2:6e:7b:7c:a7:b5:8d:21: 86:a4:13:5d:d7:0c:d3:f8:06:89:c7:cf:d6:d8:f9: 22:e3:a7:d9:1e:b1:2f:46:81:68:ed:54:af:a6:20: eb:48:ca:33:57:a2:45:76:8b:ee:c0:7c:f6:05:4d: f3:40:fc:95:54:3c:d6:00:6a:f8:97:18:fb:41:b2: ae:75:59:19:6f:47:22:68:ce:b6:0e:9e:d3:19:99: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1B:80:F9:C1:C2:93:2B:C9:FC:3C:15:88:7C:BD:0B:B6:4A:0D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd0e1a98-eebe-346b-b7b4-caf260a235e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.236.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:bd:00:b7:a3:b5:b5:5e:e6:80:2a:f3:9f:1a:07:51:ab:7b: 48:5c:78:45:12:52:18:b3:90:09:fc:c0:0d:8b:08:b6:e9:4b: 30:ad:76:3b:f2:d1:8f:5b:35:85:4b:91:f9:8a:a9:91:84:dc: 0d:af:6c:eb:ff:d2:f2:46:c8:9f:8f:0d:2f:ca:bb:15:6e:3b: be:09:ef:91:f2:73:ac:ac:4a:bb:4d:e6:02:83:c9:66:e7:8b: f5:ec:0b:ba:83:34:0c:49:d7:a0:2d:12:7f:46:db:a1:be:8e: 36:7b:ef:58:be:65:cb:7d:20:68:bf:6a:55:83:a7:1e:e5:ed: 8c:14:c7:75:80:08:71:1e:a1:66:63:20:6f:c6:a3:73:a3:7b: 8f:9c:4d:07:3b:d9:18:12:81:2d:15:c2:e5:5d:3c:30:81:02: ed:a9:6f:46:48:1a:da:fa:3b:30:1f:aa:f1:8b:d7:69:d1:78: e9:fb:39:c4:65:a2:08:68:d0:0e:58:93:c7:88:21:5c:f6:06: 29:cc:17:0e:97:30:42:af:83:02:93:c6:67:03:a0:bb:93:d5: 8c:21:f1:d4:f3:c6:94:df:56:22:90:74:1a:9c:1b:f9:38:87: 62:72:89:a3:ae:33:6d:08:a0:d3:a0:c7:e9:40:c1:cc:69:3a: e5:45:5e:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK7ote6RiLrqn1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk NzJhNzY5OGMtYWQxMi00Mjc0LTgyMmMtYTJlMGIzNTFjZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf70TsfTrCmH1KcIEW4he9jveHeiaHTAA5sJ btAmPd2fhj4Dyj0svn8HSS39vTA6JrDJ5iJw11t6FmlI22AEVG4EMkCoFenBCNW2 mAlhqG2yRUVvqe1dYq3WkNM0p6kv5UPlKsiamhNTIiqXZSs97EyZ6/0QnrZqVBMz RM2MciwEgxizfh7Z1SL5pdzVuBH6AnEpSqiO+UB20TTAbdypyQgIkOHcM8/QmEyE 8m57fKe1jSGGpBNd1wzT+AaJx8/W2Pki46fZHrEvRoFo7VSvpiDrSMozV6JFdovu wHz2BU3zQPyVVDzWAGr4lxj7QbKudVkZb0ciaM62Dp7TGZkx1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4bgPnBwpMryfw8FYh8vQu2Sg1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmQwZTFhOTgtZWViZS0z NDZiLWI3YjQtY2FmMjYwYTIzNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0OxrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG29ALejtbVe5oAq858aB1Gre0hceEUSUhizkAn8wA2LCLbpSzCtdjvy 0Y9bNYVLkfmKqZGE3A2vbOv/0vJGyJ+PDS/KuxVuO74J75Hyc6ysSrtN5gKDyWbn i/XsC7qDNAxJ16AtEn9G26G+jjZ771i+Zct9IGi/alWDpx7l7YwUx3WACHEeoWZj IG/Go3Oje4+cTQc72RgSgS0VwuVdPDCBAu2pb0ZIGtr6OzAfqvGL12nReOn7OcRl ogho0A5Yk8eIIVz2BinMFw6XMEKvgwKTxmcDoLuT1Ywh8dTzxpTfViKQdBqcG/k4 h2JyiaOuM20IoNOgx+lAwcxpOuVFXtQ= -----END CERTIFICATE-----Generated at Thu Apr 10 04:10:46 2025 by rpki-client