$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa File: 38cff7ac-79e5-37d1-8a91-3327b27ea983.roa (raw, json) Hash identifier: cgNAKOUXmsRp8J0mo/ig6MV7RqFErwsIlKvpMfX63d8= Subject key identifier: A8:A4:7A:0E:F3:26:C8:96:73:9B:46:12:0B:9B:4A:8E:47:54:00:51 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F43285848EF61561F0798917849E82CC0 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 46408 IP address blocks: 208.84.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:56:1f:07:98:91:78:49:e8:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=92131437-5874-4197-81ad-a21d48f6f212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:26:f5:0b:de:e4:c6:09:d8:02:37:51:97: 63:d3:69:86:f9:b5:94:91:a6:4a:25:ed:ab:6b:63: d8:9e:1c:1a:a7:54:12:25:be:7c:59:dd:ff:f7:87: bd:0c:d7:ca:78:b4:94:49:c4:de:51:9c:74:32:0a: 0f:d3:9d:e4:5a:57:5c:4b:2d:d3:05:9a:1a:c2:d7: cc:ae:14:4b:ac:e9:59:d8:86:a2:0c:9c:da:23:62: fa:43:27:39:4c:ce:67:56:92:f1:70:11:f3:4f:39: 36:45:c3:f4:14:51:d0:b8:33:54:1a:fe:d5:02:df: d4:d7:a5:dd:1b:27:9a:5a:ef:ee:b6:05:4e:0a:91: 9f:ff:06:d0:3f:d3:fe:68:0d:37:67:ac:f2:de:78: 3d:69:fb:ea:37:71:84:ce:5e:0c:78:8a:c6:e4:22: 7b:50:fe:ea:ef:fb:9f:95:05:20:3d:d8:96:4e:6b: db:ac:7c:4f:70:18:78:d5:a7:27:db:cb:46:cd:d7: 15:79:47:8b:1c:45:b9:2d:2a:63:22:33:0a:8e:63: b0:fe:96:2f:d8:8b:22:fa:c6:1b:6e:be:b1:ac:00: 0b:f2:90:0d:4f:d8:b1:9f:f1:f8:97:7a:33:56:e8: 0c:29:08:09:93:8b:e2:ac:6e:07:39:90:59:b3:d4: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A4:7A:0E:F3:26:C8:96:73:9B:46:12:0B:9B:4A:8E:47:54:00:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 208.84.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:75:51:48:cd:55:02:55:44:0b:4a:ec:eb:da:0b:41:86:12: 8e:46:a0:c1:9d:65:3c:7a:0b:63:7f:9a:8b:30:31:98:15:73: 31:75:c4:2c:99:6a:64:2f:18:22:e3:a5:9b:4d:c8:eb:bf:ca: 79:1e:07:9a:77:43:80:c7:15:46:af:b4:24:86:c9:57:3b:20: d1:b3:c6:f6:40:4d:3d:49:db:27:41:e4:5f:e5:43:75:6c:63: d1:cd:85:1d:bd:5c:0c:bc:32:ba:f6:25:e3:d5:b9:d8:ea:55: 8b:e1:e3:7d:bb:fe:d9:2a:fd:2c:02:02:40:fc:6c:f4:05:f6: 1e:7f:99:b9:9e:cc:9a:d9:d5:ee:80:c3:ea:c2:aa:af:12:f7: 7b:1e:08:d6:c4:4a:c1:ab:b9:95:93:9a:8c:cf:63:54:f6:a5: 7f:ab:12:3b:b8:39:47:22:c0:5e:02:b3:9b:1c:8f:90:89:86: 79:89:0a:bb:b2:01:75:1d:19:99:58:f9:38:a7:ff:e5:27:87: 82:97:5e:94:8d:6c:38:fe:22:32:18:a4:b7:96:40:0d:bf:4f: 04:16:8e:63:83:5f:dd:86:b8:c3:b9:01:64:84:5a:4e:43:41: a8:6b:dc:1b:be:cd:62:1c:ba:ca:0a:8c:cc:76:38:98:01:7e: 14:fa:f3:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVYfB5iReEnoLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk OTIxMzE0MzctNTg3NC00MTk3LTgxYWQtYTIxZDQ4ZjZmMjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9Em9Qve5MYJ2AI3UZdj02mG+bWUkaZKJe2r a2PYnhwap1QSJb58Wd3/94e9DNfKeLSUScTeUZx0MgoP053kWldcSy3TBZoawtfM rhRLrOlZ2IaiDJzaI2L6Qyc5TM5nVpLxcBHzTzk2RcP0FFHQuDNUGv7VAt/U16Xd GyeaWu/utgVOCpGf/wbQP9P+aA03Z6zy3ng9afvqN3GEzl4MeIrG5CJ7UP7q7/uf lQUgPdiWTmvbrHxPcBh41acn28tGzdcVeUeLHEW5LSpjIjMKjmOw/pYv2Isi+sYb br6xrAAL8pANT9ixn/H4l3ozVugMKQgJk4virG4HOZBZs9TVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKikeg7zJsiWc5tGEgubSo5HVABRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvMzhjZmY3YWMtNzllNS0z N2QxLThhOTEtMzMyN2IyN2VhOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALp1UUjNVQJVRAtK7OvaC0GGEo5GoMGdZTx6C2N/moswMZgVczF1xCyZ amQvGCLjpZtNyOu/ynkeB5p3Q4DHFUavtCSGyVc7INGzxvZATT1J2ydB5F/lQ3Vs Y9HNhR29XAy8Mrr2JePVudjqVYvh4327/tkq/SwCAkD8bPQF9h5/mbmezJrZ1e6A w+rCqq8S93seCNbESsGruZWTmozPY1T2pX+rEju4OUciwF4Cs5scj5CJhnmJCruy AXUdGZlY+Tin/+Unh4KXXpSNbDj+IjIYpLeWQA2/TwQWjmODX92GuMO5AWSEWk5D Qahr3Bu+zWIcusoKjMx2OJgBfhT6830= -----END CERTIFICATE-----Generated at Sat Apr 12 18:34:32 2025 by rpki-client