$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa File: 1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa (raw, json) Hash identifier: CE+w52/UaPq6F+4B/AWRakl+U2kg6jVqdJJjLJAPO94= Subject key identifier: 35:6E:77:03:F3:97:60:46:C7:24:01:81:03:29:12:2C:82:52:89:04 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F432858483B500A29B09BC7B6AEBAC5A0 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 16509 IP address blocks: 208.71.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:50:0a:29:b0:9b:c7:b6:ae:ba:c5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=f074b709-f663-4d1d-a6af-bc15ea5092ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e2:af:77:74:63:1f:9e:24:e1:12:32:85:16: 79:96:1c:6a:cb:c9:7b:7a:3d:30:f1:2a:cd:fe:a1: 59:23:cc:e2:d7:94:ab:05:09:8d:72:c2:2a:19:b4: 23:92:bf:64:50:62:75:ee:83:02:ae:84:b2:2e:f1: 38:e4:77:95:08:34:6a:e3:ee:c3:0d:a5:6a:32:c2: 78:9d:70:26:c2:86:43:74:6f:6d:7b:70:31:27:4a: 2f:45:76:9b:d1:1b:79:ea:cb:89:e4:92:e8:a8:d5: db:58:f4:74:6d:2d:f4:ce:fc:69:5e:d4:77:6c:e1: 4c:13:7b:50:6f:69:25:59:e4:7b:f8:2d:03:1e:94: a7:9f:4e:96:e9:f4:ef:17:76:96:87:2f:b0:86:a0: f5:9b:8f:93:ad:63:87:8e:d2:2f:31:97:2d:c5:96: 2a:94:22:5d:8b:f2:09:a7:09:36:67:db:64:2a:98: f8:97:97:bd:75:c4:3b:2d:ad:f8:5e:e5:26:55:56: 7f:d1:72:3e:ee:d5:23:fe:0c:f6:22:f4:a9:65:9c: 40:d2:26:eb:12:b7:b2:9f:82:7c:c7:79:2c:2f:1c: 0a:1f:23:4e:d3:7c:51:cf:79:6f:86:f7:d1:09:34: 10:c2:33:7b:d4:a2:59:96:1f:4d:ed:fb:d1:76:6a: 38:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6E:77:03:F3:97:60:46:C7:24:01:81:03:29:12:2C:82:52:89:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4f:8b:9b:9f:a0:98:dd:5b:67:b6:bd:fd:5d:46:19:6d:a6: 88:0b:03:82:ee:31:95:f1:20:bb:92:34:30:48:2b:cf:4d:62: 1b:a3:5a:c1:cc:16:df:d2:4a:0d:b4:cf:87:50:85:08:07:af: d9:78:a7:2c:a6:67:78:1f:35:89:6f:59:c5:86:19:56:69:51: f6:47:31:76:b6:e6:15:de:08:de:3d:01:b9:d2:f6:12:14:ba: 25:7a:18:ff:4e:88:bf:85:76:54:cd:7e:81:dc:87:77:81:95: 13:44:a1:4d:2d:78:ad:60:d0:5f:28:e7:eb:40:00:7e:99:e4: a5:14:28:fa:da:4c:f5:69:4c:28:82:81:c7:a8:59:19:89:87: 6d:f5:fa:2e:a8:47:f9:1c:fa:2e:ac:3a:04:d3:62:06:f1:96: 7a:ec:10:59:b2:6b:0a:ea:67:1e:78:cc:f0:ae:ce:dd:0a:cd: e7:61:a4:c8:87:b1:c9:33:1e:1a:0a:38:f5:05:0b:67:6e:fb: 72:61:05:59:e6:d7:dc:e3:1b:c8:af:f1:e9:66:86:20:0e:20: 14:b1:54:c8:0b:b2:fc:db:3a:35:97:b4:ea:d4:db:31:3f:06: e1:50:35:79:e5:cb:2f:31:3b:6e:da:a3:3a:10:79:b9:17:24: 1c:c7:c0:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UAopsJvHtq66xaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk ZjA3NGI3MDktZjY2My00ZDFkLWE2YWYtYmMxNWVhNTA5MmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+Kvd3RjH54k4RIyhRZ5lhxqy8l7ej0w8SrN /qFZI8zi15SrBQmNcsIqGbQjkr9kUGJ17oMCroSyLvE45HeVCDRq4+7DDaVqMsJ4 nXAmwoZDdG9te3AxJ0ovRXab0Rt56suJ5JLoqNXbWPR0bS30zvxpXtR3bOFME3tQ b2klWeR7+C0DHpSnn06W6fTvF3aWhy+whqD1m4+TrWOHjtIvMZctxZYqlCJdi/IJ pwk2Z9tkKpj4l5e9dcQ7La34XuUmVVZ/0XI+7tUj/gz2IvSpZZxA0ibrEreyn4J8 x3ksLxwKHyNO03xRz3lvhvfRCTQQwjN71KJZlh9N7fvRdmo4vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVudwPzl2BGxyQBgQMpEiyCUokEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMTgzOWQ2ZWEtYmEyZi0z ZjAzLTg5ZGEtZDUwZGQ0ZWYwOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdPi5ufoJjdW2e2vf1dRhltpogLA4LuMZXxILuSNDBIK89NYhujWsHM Ft/SSg20z4dQhQgHr9l4pyymZ3gfNYlvWcWGGVZpUfZHMXa25hXeCN49AbnS9hIU uiV6GP9OiL+FdlTNfoHch3eBlRNEoU0teK1g0F8o5+tAAH6Z5KUUKPraTPVpTCiC gceoWRmJh231+i6oR/kc+i6sOgTTYgbxlnrsEFmyawrqZx54zPCuzt0KzedhpMiH sckzHhoKOPUFC2du+3JhBVnm19zjG8iv8elmhiAOIBSxVMgLsvzbOjWXtOrU2zE/ BuFQNXnlyy8xO27aozoQebkXJBzHwJo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:14 2025 by rpki-client