$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa File: 4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa (raw, json) Hash identifier: UWmo2v0iMiD4HH6nLmnQG3e8HuKTCyVi+jpJfi5QR0s= Subject key identifier: 50:67:0A:7C:E4:3E:F6:07:7B:DE:F1:26:5E:4B:4A:28:92:07:18:5C Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F432858481C0DC30D5A90A1522D15AF00 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa Signing time: Thu 05 Dec 2024 21:17:15 +0000 ROA not before: Thu 05 Dec 2024 21:17:15 +0000 ROA not after: Wed 05 Mar 2025 21:17:15 +0000 asID: 16437 IP address blocks: 208.88.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:0d:c3:0d:5a:90:a1:52:2d:15:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Dec 5 21:17:15 2024 GMT Not After : Mar 5 21:17:15 2025 GMT Subject: CN=7a03c4c9-ab3f-4e73-8e16-2477cc7d538c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c2:28:1a:a7:21:00:e5:7a:29:4c:59:7a:07: 29:be:19:26:3b:b8:a7:4e:41:44:20:43:fa:c6:4e: 94:ef:11:6f:30:f5:0d:d3:c6:5d:54:43:ea:60:08: c0:4f:c3:37:bb:ad:24:fa:65:c4:45:0c:3f:12:33: 9e:20:01:73:42:e8:25:af:c3:0c:ee:5a:74:86:ce: ed:f2:52:2f:0a:58:3c:bb:a5:50:0d:5d:fa:18:ce: 70:a7:c7:31:ab:0c:87:e5:e7:10:51:84:cf:e2:b8: e9:f5:58:8f:22:ff:30:eb:1c:7b:76:fb:98:b9:dc: b8:55:25:80:44:49:bc:ae:0a:35:67:7f:c1:1f:1a: 2b:56:6c:85:1f:e1:ec:bd:f7:2b:72:64:a8:92:39: 9e:ff:d4:47:90:de:2b:10:e6:ae:7b:7a:a4:20:52: 41:f9:3c:83:85:af:41:93:1c:99:10:d3:9a:d0:75: 89:3f:98:94:59:93:6e:aa:6f:51:fd:3f:b8:64:cd: 2b:92:0e:fc:7c:82:c5:cd:e4:93:52:6c:b4:f7:fe: 3c:5f:10:82:85:d2:43:81:3f:79:fa:fe:fb:f0:24: 68:9d:59:a6:e0:f2:91:6a:e5:5f:f8:c8:cf:17:02: 79:54:0c:74:a3:a6:1b:88:ab:92:49:41:31:f4:92: ba:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:67:0A:7C:E4:3E:F6:07:7B:DE:F1:26:5E:4B:4A:28:92:07:18:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2a:9e:ed:e7:c4:47:e0:ec:0e:df:71:92:9f:74:22:e4:67: 2e:0b:56:58:31:d5:ea:59:fa:2c:3f:58:3a:78:1a:f2:13:2b: 5f:e9:db:8f:1c:58:6e:89:a0:a0:eb:ec:c8:5e:c7:93:05:18: 72:b5:e3:5f:8a:c2:73:2e:e8:d3:d7:32:7c:bf:c5:12:fa:32: b6:5e:bc:9f:9b:b5:43:1e:33:9c:bd:ae:a0:70:8c:f9:a1:87: c7:8b:16:db:33:2a:31:3d:3c:d2:32:8c:bb:37:76:b7:6c:a9: 64:55:22:80:a4:51:a8:7c:1a:aa:e5:6f:08:92:36:41:4b:1b: 6a:f1:1d:ee:03:46:96:22:21:a8:99:8c:87:b9:a2:07:85:16: 13:9e:ef:0c:a9:98:d7:77:90:b3:5b:25:e8:7f:18:dd:e7:d8: 52:0f:de:62:32:39:7a:43:ae:dc:c7:47:2a:07:73:4a:ce:f4: 67:ef:30:ce:11:94:36:fe:65:ed:ef:ca:3c:e6:83:68:db:10: 0c:30:a5:98:29:65:b3:ea:da:01:87:85:b3:23:63:dc:c3:d9: 12:40:ce:1d:aa:a2:bc:d4:6a:7c:29:64:6d:23:f3:17:a4:b2: 49:61:a9:94:7f:a3:37:9d:56:3b:c4:73:d9:75:dd:96:f5:ba: 66:b3:3f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcDcMNWpChUi0VrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI0MTIwNTIxMTcxNVoXDTI1MDMwNTIxMTcxNVowLzEtMCsGA1UEAxMk N2EwM2M0YzktYWIzZi00ZTczLThlMTYtMjQ3N2NjN2Q1MzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8IoGqchAOV6KUxZegcpvhkmO7inTkFEIEP6 xk6U7xFvMPUN08ZdVEPqYAjAT8M3u60k+mXERQw/EjOeIAFzQuglr8MM7lp0hs7t 8lIvClg8u6VQDV36GM5wp8cxqwyH5ecQUYTP4rjp9ViPIv8w6xx7dvuYudy4VSWA REm8rgo1Z3/BHxorVmyFH+HsvfcrcmSokjme/9RHkN4rEOaue3qkIFJB+TyDha9B kxyZENOa0HWJP5iUWZNuqm9R/T+4ZM0rkg78fILFzeSTUmy09/48XxCChdJDgT95 +v778CRonVmm4PKRauVf+MjPFwJ5VAx0o6YbiKuSSUEx9JK6rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBnCnzkPvYHe97xJl5LSiiSBxhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNGE3ZTFkYmQtNDcwNC0z NDJiLWI3NDEtNTZiMGM4ZTc1OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUqnu3nxEfg7A7fcZKfdCLkZy4LVlgx1epZ+iw/WDp4GvITK1/p248c WG6JoKDr7Mhex5MFGHK141+KwnMu6NPXMny/xRL6MrZevJ+btUMeM5y9rqBwjPmh h8eLFtszKjE9PNIyjLs3drdsqWRVIoCkUah8GqrlbwiSNkFLG2rxHe4DRpYiIaiZ jIe5ogeFFhOe7wypmNd3kLNbJeh/GN3n2FIP3mIyOXpDrtzHRyoHc0rO9GfvMM4R lDb+Ze3vyjzmg2jbEAwwpZgpZbPq2gGHhbMjY9zD2RJAzh2qorzUanwpZG0j8xek sklhqZR/ozedVjvEc9l13Zb1umazP9E= -----END CERTIFICATE-----Generated at Wed Feb 19 20:34:09 2025 by rpki-client