$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa File: 528a072d-fb5e-3209-b0b6-eff453de4aaf.roa (raw, json) Hash identifier: z/XaKzBWTdn+atgcR+TvVN+u2t8ljpO+61n9GZyLaiY= Subject key identifier: 2A:B5:9F:D1:3C:C0:03:8C:08:F1:40:B5:CF:98:56:82:F1:D3:54:7C Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F43285848EF615573B9A05353B89FD340 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 6639 IP address blocks: 208.168.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:55:73:b9:a0:53:53:b8:9f:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=46b31881-0223-4f88-8e0d-9e3eaaf14c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:af:f9:c7:73:79:4b:84:1c:3b:fb:67:f2:86: 0e:38:59:0d:04:43:4b:59:cc:b4:d3:6b:5c:e1:65: e9:bb:b1:fc:e4:24:b2:d7:73:11:9c:be:1a:f5:43: d3:0f:15:85:cc:32:f4:1a:88:37:a8:97:ea:d0:01: da:2b:b7:a4:82:af:54:a2:5e:0c:54:b9:50:52:58: 3c:a4:fd:e7:ac:f9:1b:16:a5:96:5d:0f:ce:99:e2: 2a:33:c5:e4:5f:85:63:5c:36:c6:47:c2:07:93:d2: 11:1f:d2:95:32:77:79:d4:63:26:28:da:6e:9c:30: 00:6f:0a:2e:08:16:f5:f1:fc:13:79:34:ad:e5:bd: aa:1f:3d:8d:bf:f4:45:35:b4:49:17:1e:2d:af:ea: df:b8:6e:d2:15:4d:47:62:fa:81:1c:01:67:4f:39: 97:e9:30:0f:56:c3:2a:e1:3a:5f:c0:bd:60:01:c3: 85:8e:7c:74:7a:6c:fd:fd:97:92:93:cc:ee:dd:27: 18:1a:1a:f3:ce:ee:73:b6:77:f7:72:80:82:af:0b: df:d8:4c:63:d4:1c:80:d9:88:9f:ed:a4:e6:47:bb: 0a:18:75:0a:a3:a4:1e:87:ff:e9:19:6f:25:83:48: 80:1d:dc:35:ea:03:bb:79:be:04:20:60:b2:16:de: 84:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B5:9F:D1:3C:C0:03:8C:08:F1:40:B5:CF:98:56:82:F1:D3:54:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 208.168.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d1:dc:a6:25:27:44:18:92:e4:ba:74:fb:9f:f7:45:62:7c: 3c:03:3f:05:eb:89:dc:5e:00:47:7c:96:73:91:2c:b2:b6:22: 89:8a:66:fc:28:4d:bc:aa:78:0c:ce:8f:90:b9:00:44:e9:12: 8f:62:05:ac:d3:ea:e4:54:90:be:ed:03:0b:97:e3:bc:60:78: b3:cf:28:3f:98:b3:d0:9c:a0:21:d8:c9:a7:d3:3a:e1:ea:9a: 6b:7a:a2:8c:52:cd:30:7a:6b:36:f8:3e:6a:b1:a7:e9:f7:d6: 62:d0:74:15:84:f8:7e:b0:d8:0d:fd:26:91:e7:b4:b5:9c:49: 2a:da:16:1e:fd:c7:03:f0:f7:84:25:3b:d0:3d:35:4d:68:e0: 91:ec:19:0e:e0:d2:5c:43:5c:98:92:45:ad:b4:c7:8d:c6:a0: 30:70:ea:6b:7b:f9:26:89:87:76:ec:2a:f9:11:92:15:33:8d: fa:be:a7:0b:12:bc:9d:49:3f:b8:6a:5d:47:23:eb:93:09:33: 59:7d:2c:20:df:d6:96:69:d3:83:39:ae:81:ad:f8:92:79:24: 1a:f6:1c:22:2a:a1:c5:29:ad:c4:76:dc:07:f6:9c:7e:db:b7: 52:f3:4e:74:6c:e0:3f:c1:71:b9:ac:47:b0:21:c8:63:b6:7e: 95:2d:10:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVVzuaBTU7if00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NDZiMzE4ODEtMDIyMy00Zjg4LThlMGQtOWUzZWFhZjE0YzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq/5x3N5S4QcO/tn8oYOOFkNBENLWcy002tc 4WXpu7H85CSy13MRnL4a9UPTDxWFzDL0Gog3qJfq0AHaK7ekgq9Uol4MVLlQUlg8 pP3nrPkbFqWWXQ/OmeIqM8XkX4VjXDbGR8IHk9IRH9KVMnd51GMmKNpunDAAbwou CBb18fwTeTSt5b2qHz2Nv/RFNbRJFx4tr+rfuG7SFU1HYvqBHAFnTzmX6TAPVsMq 4TpfwL1gAcOFjnx0emz9/ZeSk8zu3ScYGhrzzu5ztnf3coCCrwvf2Exj1ByA2Yif 7aTmR7sKGHUKo6Qeh//pGW8lg0iAHdw16gO7eb4EIGCyFt6EwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq1n9E8wAOMCPFAtc+YVoLx01R8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvNTI4YTA3MmQtZmI1ZS0z MjA5LWIwYjYtZWZmNDUzZGU0YWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0KjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPR3KYlJ0QYkuS6dPuf90VifDwDPwXridxeAEd8lnORLLK2IomKZvwo TbyqeAzOj5C5AETpEo9iBazT6uRUkL7tAwuX47xgeLPPKD+Ys9CcoCHYyafTOuHq mmt6ooxSzTB6azb4Pmqxp+n31mLQdBWE+H6w2A39JpHntLWcSSraFh79xwPw94Ql O9A9NU1o4JHsGQ7g0lxDXJiSRa20x43GoDBw6mt7+SaJh3bsKvkRkhUzjfq+pwsS vJ1JP7hqXUcj65MJM1l9LCDf1pZp04M5roGt+JJ5JBr2HCIqocUprcR23Af2nH7b t1LzTnRs4D/BcbmsR7AhyGO2fpUtEGo= -----END CERTIFICATE-----Generated at Fri Apr 11 21:44:19 2025 by rpki-client