$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d0999fc-6ff4-35a6-93fa-3979f0432902.roa File: 2d0999fc-6ff4-35a6-93fa-3979f0432902.roa (raw, json) Hash identifier: YaGY3ianhIbsiqB5l5+A0VP3TClsDR9u8UCC0nGtfPU= Subject key identifier: A1:A1:5F:04:EA:F9:6C:10:AE:4C:90:68:8D:54:6E:62:1B:EF:69:9F Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F432858483E1AA146D169875392855260 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d0999fc-6ff4-35a6-93fa-3979f0432902.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 16509 IP address blocks: 208.81.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:a1:46:d1:69:87:53:92:85:52:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=839b4cac-b1ac-4c4b-a736-10e0e519acfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3b:c4:3c:bf:9c:58:df:28:bb:69:6e:ed:2e: d2:8e:bc:35:be:c5:3f:df:c7:40:47:1b:6c:78:0b: b7:fe:b5:74:db:aa:94:31:20:aa:c6:72:56:1b:fa: 02:86:93:c1:76:07:c7:4d:11:13:ae:a2:be:15:93: 26:47:c8:fe:1a:00:7c:b9:3b:8e:4e:ec:7e:2d:17: 15:08:b8:aa:e8:52:1b:8a:97:ff:da:68:9b:49:59: 39:41:89:6c:b5:0b:2c:93:fc:41:3f:d9:e1:a5:88: 22:a5:a8:16:64:6b:be:c6:1f:fb:dc:23:b8:4a:93: 1c:6c:d0:0e:38:92:13:48:26:89:b5:88:75:25:57: 83:5f:94:f6:32:da:ae:d2:82:2d:79:ee:4d:e1:d4: 9d:31:e6:fd:d1:3e:eb:69:36:bb:bf:79:be:47:17: 8a:5b:f4:cd:38:10:3a:31:e2:a8:f5:4e:01:ea:c8: ce:09:82:1d:27:0a:65:26:49:3b:9b:6d:96:d6:17: c1:af:6f:14:6e:05:1a:63:17:53:04:e3:1b:8f:1d: 47:d9:9d:fa:d4:d7:b7:68:77:1a:f1:3f:30:ea:39: f2:2c:5e:dc:07:00:8a:ca:fd:56:67:07:74:96:2b: d5:10:ff:27:57:4c:fb:f7:ea:65:11:bb:bf:64:cd: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A1:5F:04:EA:F9:6C:10:AE:4C:90:68:8D:54:6E:62:1B:EF:69:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d0999fc-6ff4-35a6-93fa-3979f0432902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 208.81.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:7a:4b:8d:ea:0b:ed:04:b3:a1:4a:69:11:79:40:08:74:0b: fe:f8:e2:d2:f0:20:05:90:6e:d2:05:a6:ac:42:04:33:e1:87: b9:e2:99:a4:87:26:ff:76:1d:d4:48:2d:5a:5c:28:d2:c0:3e: 4c:e3:40:d5:fe:c6:32:76:d6:be:2d:74:0e:8b:34:e4:7d:7f: 15:d0:be:2f:23:89:1b:96:2e:27:3f:4f:62:8b:89:2e:e2:97: 3d:ed:5c:e0:ab:de:9d:20:99:77:1f:c8:a1:2c:01:63:1e:ab: 37:73:2c:d3:ec:3a:31:23:85:e8:1d:dd:a5:68:a9:98:7d:bb: dc:c7:2d:c5:70:87:1e:21:55:db:f3:45:20:46:a4:ee:68:6a: a6:40:dc:dc:1f:f1:7a:93:27:e6:c0:56:79:79:ca:8e:3d:9c: db:29:6d:73:6c:2f:cc:9b:8c:51:9c:73:95:bf:ea:ad:99:61: e4:57:fc:99:5a:3d:35:3e:04:da:fc:b2:a3:75:32:c4:36:21: 46:e4:70:6c:45:63:7b:73:e0:56:18:4b:2c:63:98:47:95:b9: e3:f2:ba:2c:a3:c1:75:9d:a7:14:fc:4a:96:95:39:4f:dd:c7: c6:14:14:64:22:31:f5:24:d5:ab:82:d0:33:fc:1c:b6:aa:cf: 60:fa:36:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqFG0WmHU5KFUmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk ODM5YjRjYWMtYjFhYy00YzRiLWE3MzYtMTBlMGU1MTlhY2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijvEPL+cWN8ou2lu7S7Sjrw1vsU/38dARxts eAu3/rV026qUMSCqxnJWG/oChpPBdgfHTRETrqK+FZMmR8j+GgB8uTuOTux+LRcV CLiq6FIbipf/2mibSVk5QYlstQssk/xBP9nhpYgipagWZGu+xh/73CO4SpMcbNAO OJITSCaJtYh1JVeDX5T2Mtqu0oItee5N4dSdMeb90T7raTa7v3m+RxeKW/TNOBA6 MeKo9U4B6sjOCYIdJwplJkk7m22W1hfBr28UbgUaYxdTBOMbjx1H2Z361Ne3aHca 8T8w6jnyLF7cBwCKyv1WZwd0livVEP8nV0z79+plEbu/ZM3FRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGhXwTq+WwQrkyQaI1UbmIb72mfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvMmQwOTk5ZmMtNmZmNC0z NWE2LTkzZmEtMzk3OWYwNDMyOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN6S43qC+0Es6FKaRF5QAh0C/744tLwIAWQbtIFpqxCBDPhh7nimaSH Jv92HdRILVpcKNLAPkzjQNX+xjJ21r4tdA6LNOR9fxXQvi8jiRuWLic/T2KLiS7i lz3tXOCr3p0gmXcfyKEsAWMeqzdzLNPsOjEjhegd3aVoqZh9u9zHLcVwhx4hVdvz RSBGpO5oaqZA3Nwf8XqTJ+bAVnl5yo49nNspbXNsL8ybjFGcc5W/6q2ZYeRX/Jla PTU+BNr8sqN1MsQ2IUbkcGxFY3tz4FYYSyxjmEeVuePyuiyjwXWdpxT8SpaVOU/d x8YUFGQiMfUk1auC0DP8HLaqz2D6Nro= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:10 2025 by rpki-client