$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3dec2bd-6e0f-3bc9-901d-0cf8ec36a814.roa File: c3dec2bd-6e0f-3bc9-901d-0cf8ec36a814.roa (raw, json) Hash identifier: XAIzdMF3Ykn+rlY7jlWZtsrJxwhvC93y0SzYIEKgiQo= Subject key identifier: 5F:82:D5:D2:94:3C:61:03:C5:B8:12:1E:AA:39:81:1D:12:1D:01:A7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848ED4C6AFADD545DCA2C9B5800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3dec2bd-6e0f-3bc9-901d-0cf8ec36a814.roa Signing time: Tue 18 Feb 2025 20:07:26 +0000 ROA not before: Tue 18 Feb 2025 20:07:26 +0000 ROA not after: Mon 19 May 2025 19:07:26 +0000 asID: 14618 IP address blocks: 208.214.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:4c:6a:fa:dd:54:5d:ca:2c:9b:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 18 20:07:26 2025 GMT Not After : May 19 19:07:26 2025 GMT Subject: CN=92f66af7-b1cf-4f9a-bd47-4c27e1280b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:96:37:1b:eb:0b:53:68:f7:70:3c:50:74: ba:98:cc:63:f3:23:a0:da:bd:90:7b:f6:e2:a1:c2: 13:31:03:76:45:60:b5:38:ab:eb:b4:b5:7d:92:f3: 15:de:68:e9:b1:1f:1f:17:a4:bd:0d:97:44:3c:97: b2:6d:75:82:81:a6:dd:38:32:d5:35:e7:e1:fd:94: 4a:7a:3f:b0:5d:72:a2:e9:e8:77:ac:8d:4d:33:78: fe:a4:1f:0f:9a:f3:74:71:71:68:61:d8:73:12:1b: a0:bc:f7:91:0b:0b:13:cb:a5:9c:8f:94:25:21:39: 10:f3:d0:a3:8e:e3:68:13:db:c2:b6:44:36:9c:cb: 3d:bc:66:23:78:27:11:87:a7:cf:16:af:48:52:1f: 23:ab:df:1b:2a:82:7d:43:bb:e1:85:f6:c7:cf:3b: 35:4e:6b:86:c3:f8:6b:00:1a:2d:96:c4:5d:70:88: 34:0d:92:06:2f:94:74:79:3b:c6:65:b2:ed:83:5c: 66:36:dc:d8:48:c7:d8:1b:59:53:57:df:fa:74:5d: b6:62:55:f3:28:3c:d1:60:01:84:98:38:95:19:a3: bf:8a:29:ee:16:0d:3f:d3:79:47:eb:cc:0c:66:fb: d7:1d:d8:5c:ea:39:b8:45:d8:2a:83:cb:83:8e:64: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:82:D5:D2:94:3C:61:03:C5:B8:12:1E:AA:39:81:1D:12:1D:01:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3dec2bd-6e0f-3bc9-901d-0cf8ec36a814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.214.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:57:e9:2d:ce:61:11:c6:c3:44:93:3b:18:f8:1d:74:3d:8d: c1:8a:2f:a6:95:44:59:83:e4:ed:c4:c7:74:a1:4f:2d:0f:4b: 39:a0:95:0c:01:7e:0f:71:50:2a:ef:d8:9a:6a:42:bb:fb:5c: 87:3a:ca:81:09:8b:7a:ee:8a:ba:85:87:af:4f:04:d2:02:72: ec:0c:f6:6f:2e:e0:f9:f0:6f:ca:16:e6:fb:2d:c9:c9:d5:bf: d9:e8:fb:41:97:c9:e8:b6:63:b9:74:ee:0b:f0:75:4e:ed:42: f0:06:ae:8a:b3:b3:a7:2b:f3:04:01:db:c2:5a:2a:a7:bc:74: 86:7b:79:80:47:1f:f8:89:1a:ec:b2:d3:9b:96:a8:54:9b:f8: 69:f0:50:3a:d3:ca:98:ed:4c:0c:7a:54:e0:10:dc:03:e8:81: a4:21:cb:d6:5d:05:b6:41:58:d3:92:22:2b:57:18:ef:bd:56: ea:87:32:c3:40:f4:4c:d5:22:b4:48:9b:3b:71:d5:c2:8f:fd: 0a:d9:d7:7a:17:55:dc:2a:82:fe:5c:f3:2f:db:7d:38:80:c2: 84:31:30:50:f4:ed:01:0e:62:87:f7:ff:80:d1:e2:71:a5:5c: db:ac:22:64:6a:85:7f:40:d0:7c:3d:f4:6a:70:02:74:97:26: 6a:a0:e5:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjtTGr63VRdyiybWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxODIwMDcyNloXDTI1MDUxOTE5MDcyNlowLzEtMCsGA1UEAxMk OTJmNjZhZjctYjFjZi00ZjlhLWJkNDctNGMyN2UxMjgwYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWqWNxvrC1No93A8UHS6mMxj8yOg2r2Qe/bi ocITMQN2RWC1OKvrtLV9kvMV3mjpsR8fF6S9DZdEPJeybXWCgabdODLVNefh/ZRK ej+wXXKi6eh3rI1NM3j+pB8PmvN0cXFoYdhzEhugvPeRCwsTy6Wcj5QlITkQ89Cj juNoE9vCtkQ2nMs9vGYjeCcRh6fPFq9IUh8jq98bKoJ9Q7vhhfbHzzs1TmuGw/hr ABotlsRdcIg0DZIGL5R0eTvGZbLtg1xmNtzYSMfYG1lTV9/6dF22YlXzKDzRYAGE mDiVGaO/iinuFg0/03lH68wMZvvXHdhc6jm4Rdgqg8uDjmRMUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+C1dKUPGEDxbgSHqo5gR0SHQGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzNkZWMyYmQtNmUwZi0z YmM5LTkwMWQtMGNmOGVjMzZhODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5X6S3OYRHGw0STOxj4HXQ9jcGKL6aVRFmD5O3Ex3ShTy0PSzmglQwB fg9xUCrv2JpqQrv7XIc6yoEJi3ruirqFh69PBNICcuwM9m8u4Pnwb8oW5vstycnV v9no+0GXyei2Y7l07gvwdU7tQvAGroqzs6cr8wQB28JaKqe8dIZ7eYBHH/iJGuyy 05uWqFSb+GnwUDrTypjtTAx6VOAQ3APogaQhy9ZdBbZBWNOSIitXGO+9VuqHMsNA 9EzVIrRImztx1cKP/QrZ13oXVdwqgv5c8y/bfTiAwoQxMFD07QEOYof3/4DR4nGl XNusImRqhX9A0Hw99GpwAnSXJmqg5To= -----END CERTIFICATE-----Generated at Fri Apr 4 23:42:06 2025 by rpki-client