$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa File: 4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa (raw, json) Hash identifier: 1Qkw4dw+YY+y4tE/q0UuMq1dlzXSpKBx5YwKVQthT8Q= Subject key identifier: E9:BD:85:2E:96:EC:F5:F2:6C:98:AA:B4:B1:7C:99:0B:FA:10:13:74 Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F4328584894A5E6526355A293E7368DC0 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 46878 IP address blocks: 208.81.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:e6:52:63:55:a2:93:e7:36:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=12f558d2-f356-463c-bafb-c61495324f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:66:41:56:a6:a7:29:6a:6d:21:01:22:ed:98: 1e:ef:5e:6c:ba:c0:f5:c4:e9:08:9e:f2:c9:6b:c6: ff:9b:26:d8:cd:06:9b:c5:a0:dd:7a:b3:b9:e4:41: f3:00:e7:29:e8:78:bc:bf:0c:15:d0:d0:62:75:93: bb:41:f9:c6:a0:1f:83:6e:cd:d3:29:9a:b5:4e:0d: e5:76:90:6d:31:2f:02:36:83:93:f5:bf:02:da:0e: ef:9b:db:73:b2:15:f0:d1:90:12:b8:35:7b:b5:6a: 2e:40:7b:90:92:b1:aa:15:9e:e6:0a:79:07:d5:9d: 13:5b:0d:c6:07:ed:b0:37:d2:6a:a7:58:2b:53:5b: d7:41:7e:f5:62:dd:3c:0e:28:73:48:b0:50:18:4d: 8e:42:4b:a0:a5:ef:74:74:95:56:9d:89:2c:b1:f3: c6:af:bb:33:d9:09:c5:80:65:ff:25:5c:c7:78:c4: 37:41:cf:6e:54:60:b8:e5:83:ab:43:39:d7:56:c5: ff:b0:20:58:70:65:e2:25:d5:b1:66:92:ef:45:70: 43:31:b4:dd:9b:65:f3:fb:7f:10:ee:7d:7c:ac:e4: c9:79:83:f7:a1:ae:dd:9f:3a:a4:6e:1c:d2:2f:47: e5:d8:a8:a4:ec:10:83:d9:25:f9:75:48:ba:37:51: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BD:85:2E:96:EC:F5:F2:6C:98:AA:B4:B1:7C:99:0B:FA:10:13:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 208.81.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:46:c8:e3:f4:5b:70:72:f0:53:35:d9:8b:f7:76:c5:b2:1a: fa:85:25:e4:55:42:74:cd:ae:4c:20:9c:64:4f:77:5a:56:ba: 92:ad:64:69:d1:1a:11:ed:02:22:cd:a2:a2:e7:e7:ae:fa:2c: d1:ee:0c:66:51:27:5e:70:7d:74:60:8f:4a:35:3d:8c:8e:58: 89:4f:2f:0a:d7:f5:83:b9:1b:67:db:8d:9f:54:b8:45:30:86: 09:dd:c1:b5:3d:75:6e:c8:16:e9:c1:8a:6d:1f:38:33:52:67: 5b:e7:02:54:57:b8:2f:46:45:fc:24:64:68:c1:da:04:bc:33: d3:4a:38:d4:0a:43:bb:c8:2a:61:ed:70:19:f3:87:25:7f:38: 9a:79:fb:30:5b:c4:e9:11:39:92:c6:c9:b2:67:eb:85:72:49: 36:44:3b:58:9d:69:40:71:b7:5f:2c:25:45:88:cc:8e:ca:de: c1:e2:5e:47:a4:94:f5:ce:b1:22:26:e9:eb:42:28:b9:48:7c: 5d:34:94:8f:32:e2:77:46:71:1d:76:41:47:8f:b9:b5:b0:dd: 1f:34:3a:44:b2:ed:61:35:a2:af:f7:91:65:bd:39:3f:93:a3: 6f:bd:85:93:04:62:17:84:08:de:8f:26:90:a5:b7:95:4d:d2: 7e:f9:d9:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpeZSY1Wik+c2jcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk MTJmNTU4ZDItZjM1Ni00NjNjLWJhZmItYzYxNDk1MzI0ZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWZBVqanKWptIQEi7Zge715susD1xOkInvLJ a8b/mybYzQabxaDderO55EHzAOcp6Hi8vwwV0NBidZO7QfnGoB+Dbs3TKZq1Tg3l dpBtMS8CNoOT9b8C2g7vm9tzshXw0ZASuDV7tWouQHuQkrGqFZ7mCnkH1Z0TWw3G B+2wN9Jqp1grU1vXQX71Yt08DihzSLBQGE2OQkugpe90dJVWnYkssfPGr7sz2QnF gGX/JVzHeMQ3Qc9uVGC45YOrQznXVsX/sCBYcGXiJdWxZpLvRXBDMbTdm2Xz+38Q 7n18rOTJeYP3oa7dnzqkbhzSL0fl2Kik7BCD2SX5dUi6N1HuGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOm9hS6W7PXybJiqtLF8mQv6EBN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvNGJmMDJiOGYtMzMyOS0z ZjI1LWFmOWQtMmQ2NDFhNWE5NTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdGyOP0W3By8FM12Yv3dsWyGvqFJeRVQnTNrkwgnGRPd1pWupKtZGnR GhHtAiLNoqLn5676LNHuDGZRJ15wfXRgj0o1PYyOWIlPLwrX9YO5G2fbjZ9UuEUw hgndwbU9dW7IFunBim0fODNSZ1vnAlRXuC9GRfwkZGjB2gS8M9NKONQKQ7vIKmHt cBnzhyV/OJp5+zBbxOkROZLGybJn64VySTZEO1idaUBxt18sJUWIzI7K3sHiXkek lPXOsSIm6etCKLlIfF00lI8y4ndGcR12QUePubWw3R80OkSy7WE1oq/3kWW9OT+T o2+9hZMEYheECN6PJpClt5VN0n752dk= -----END CERTIFICATE-----Generated at Sat Apr 5 21:50:15 2025 by rpki-client