$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa File: 4a421b4d-0aa7-395c-9353-3b9096b353b8.roa (raw, json) Hash identifier: DVziHNIlsKZAwtYwpS7jGU8k4IwdwY8pAMY69LFHOs0= Subject key identifier: 49:B3:D8:FD:45:26:23:F1:06:12:D5:FE:C3:A7:58:83:67:BD:A0:02 Certificate issuer: /CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Certificate serial: 010D0C9F432858490B4C230E1CB45783FA738380 Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 29909 IP address blocks: 208.80.204.0/22 maxlen: 22 208.80.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:23:0e:1c:b4:57:83:fa:73:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=f4a28792-a322-43b1-b22b-03d6bf2af3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:cb:6b:5f:26:0d:ef:09:55:47:99:78:4a: 66:36:39:91:9b:b5:47:08:0e:f1:be:9b:ba:5f:f7: 32:0c:de:f6:7a:9a:d5:0e:aa:6b:b3:41:0f:9a:59: 3d:7a:1b:93:bb:bd:22:35:bc:16:35:f3:5b:ca:fc: 9c:b6:6f:49:9b:a0:3d:e0:56:81:80:d6:62:ce:c9: ac:f2:28:37:d9:cb:67:8d:14:2c:df:5d:e3:e3:37: 98:a0:5a:06:ea:fb:e4:09:f1:42:1e:23:87:3c:24: 80:fc:10:ef:e3:53:bb:b3:b8:2a:0e:2b:22:71:27: 81:11:e3:eb:6e:7c:d8:a3:4e:36:0c:cf:7a:ce:67: 17:98:e0:42:a1:07:ba:eb:49:cd:12:40:0f:9f:48: 40:fd:38:6e:95:bd:a5:98:fa:5a:b2:f5:2f:8a:7d: 60:8b:9c:74:3e:ce:5b:4d:12:36:f1:00:3c:a2:b0: 2c:bf:34:d4:0b:62:92:88:86:dd:c6:14:e5:74:96: 79:86:1c:d4:30:55:57:3a:8d:b3:0e:79:36:1c:ea: ae:cd:88:12:36:2f:d0:2a:41:cb:e4:4f:33:f0:59: 8a:72:f7:14:03:c4:a3:8e:ae:01:7e:9d:02:9b:aa: 41:ad:91:c8:86:32:11:09:dc:9d:91:fa:a3:6e:99: 71:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B3:D8:FD:45:26:23:F1:06:12:D5:FE:C3:A7:58:83:67:BD:A0:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl X509v3 Authority Key Identifier: keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer sbgp-ipAddrBlock: critical IPv4: 208.80.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ff:c3:29:69:5c:a7:f9:17:6a:ec:be:8e:4a:ef:fc:ea:cf: 72:50:5c:e4:68:59:fe:7a:a5:0b:a5:b0:37:28:9e:a2:76:c6: 08:fb:48:a3:d9:33:bf:b7:1b:7d:a3:1d:ed:df:73:c1:7c:45: f7:8c:25:c8:ff:6f:c7:df:06:dc:41:c2:87:c0:49:a5:ef:36: f6:62:45:60:c5:7c:d4:3b:48:03:a4:f5:71:36:7c:92:90:e3: 36:e9:5d:af:96:57:3a:9e:46:d2:17:93:7d:9f:01:57:29:b3: 1a:e0:ae:93:5a:01:d8:a1:d8:0f:04:0b:3d:50:cf:99:90:d2: 1a:95:d4:9d:04:29:15:f9:c1:7e:60:a1:d3:c9:39:1c:68:c8: cd:e7:18:51:12:fe:20:d0:19:c0:47:cc:53:ed:0c:e9:07:62: 86:bf:a4:4c:59:2b:1a:36:b0:5f:04:a1:bb:b6:e8:99:4b:0f: 08:7f:89:57:cd:59:45:ef:ee:29:0d:e3:1c:1d:65:dc:b5:1b: 8c:b4:a9:3c:ac:66:aa:f5:1d:6c:13:9d:06:6f:6d:42:74:8e: f4:c4:65:eb:3b:ab:38:46:07:87:ca:75:a7:a7:89:f3:20:ce: 1b:ae:53:41:d4:c7:9b:40:5d:88:ea:79:5c:6f:ff:9f:a0:b2: 00:ef:f0:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCMOHLRXg/pzg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyNWRkYTYtMGRmNy00YzM1LWFmNjUtNGJiNjljZjcx MDUzMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZjRhMjg3OTItYTMyMi00M2IxLWIyMmItMDNkNmJmMmFmM2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvDLa18mDe8JVUeZeEpmNjmRm7VHCA7xvpu6 X/cyDN72eprVDqprs0EPmlk9ehuTu70iNbwWNfNbyvyctm9Jm6A94FaBgNZizsms 8ig32ctnjRQs313j4zeYoFoG6vvkCfFCHiOHPCSA/BDv41O7s7gqDisicSeBEePr bnzYo042DM96zmcXmOBCoQe660nNEkAPn0hA/Thulb2lmPpasvUvin1gi5x0Ps5b TRI28QA8orAsvzTUC2KSiIbdxhTldJZ5hhzUMFVXOo2zDnk2HOquzYgSNi/QKkHL 5E8z8FmKcvcUA8Sjjq4Bfp0Cm6pBrZHIhjIRCdydkfqjbplxrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmz2P1FJiPxBhLV/sOnWINnvaACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1 ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2OWNmNzEwNTMvNGE0MjFiNGQtMGFhNy0z OTVjLTkzNTMtM2I5MDk2YjM1M2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTgyNWRkYTYtMGRmNy00YzM1LWFm NjUtNGJiNjljZjcxMDUzLzk4MjVkZGE2LTBkZjctNGMzNS1hZjY1LTRiYjY5Y2Y3 MTA1My5jcmwwHwYDVR0jBBgwFoAUD1Z9CXLtC8kPPAwfMwEEOGva3FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2 OWNmNzEwNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA//wylpXKf5F2rsvo5K7/zqz3JQXORoWf56pQulsDconqJ2xgj7SKPZ M7+3G32jHe3fc8F8RfeMJcj/b8ffBtxBwofASaXvNvZiRWDFfNQ7SAOk9XE2fJKQ 4zbpXa+WVzqeRtIXk32fAVcpsxrgrpNaAdih2A8ECz1Qz5mQ0hqV1J0EKRX5wX5g odPJORxoyM3nGFES/iDQGcBHzFPtDOkHYoa/pExZKxo2sF8Eobu26JlLDwh/iVfN WUXv7ikN4xwdZdy1G4y0qTysZqr1HWwTnQZvbUJ0jvTEZes7qzhGB4fKdaenifMg zhuuU0HUx5tAXYjqeVxv/5+gsgDv8Ew= -----END CERTIFICATE-----Generated at Fri Apr 11 21:27:56 2025 by rpki-client