$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/af0f2f5c-7f07-33be-bd01-a7960233392f.roa File: af0f2f5c-7f07-33be-bd01-a7960233392f.roa (raw, json) Hash identifier: r8Nhna9FEv4oCK8a3pZhsj9Ykf+dko2kC+HsHgIvV9I= Subject key identifier: DF:2C:AB:46:69:24:C0:36:ED:FC:67:54:C6:04:5E:32:E4:BB:7F:F6 Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F4328584863CB0AE5E76F5C547B57E200 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/af0f2f5c-7f07-33be-bd01-a7960233392f.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 36329 IP address blocks: 208.71.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:0a:e5:e7:6f:5c:54:7b:57:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=3488bb96-0333-4c3e-9429-6de227b0fd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:28:a3:99:b4:62:0e:ac:ae:9f:a8:ad:f2:a4: 7b:b1:2f:70:ca:41:54:19:1a:82:6e:52:95:8c:f5: 78:e8:af:2a:53:b5:73:92:d2:f0:eb:d0:fc:95:81: bd:46:95:6e:bf:bd:f8:ea:64:38:4d:58:3d:af:98: 35:03:be:82:77:6f:29:b2:e5:d4:ba:cd:31:e5:f0: 4e:13:58:0b:e9:4b:a3:fa:64:a2:cb:c2:1f:08:c3: f1:60:40:12:64:85:fa:58:f7:47:7e:0c:69:2c:97: 78:c2:18:d9:1d:07:d8:21:e8:53:cc:66:5e:cf:c5: 62:e4:06:0b:95:33:05:79:7c:b1:e2:55:71:a9:e7: f2:23:cc:4a:9d:08:a8:94:38:c8:65:18:37:39:da: 4e:a4:a9:5f:5a:6e:dc:80:b3:bc:e3:dc:e4:6f:b0: 9e:64:eb:46:ad:88:6c:a9:c1:f7:8d:46:42:9d:a5: 7e:55:74:7a:6a:c5:26:28:35:57:97:a6:9c:43:0d: 80:8f:3d:3c:de:67:d8:56:16:74:7b:7a:2b:89:5d: fe:85:df:3f:64:e7:d0:bc:21:13:e2:4a:79:16:67: ea:4b:f3:4e:b6:9c:a5:6d:4c:84:9b:22:38:ae:bb: 46:33:1d:77:49:2d:e6:c1:58:11:54:87:5b:71:98: a2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2C:AB:46:69:24:C0:36:ED:FC:67:54:C6:04:5E:32:E4:BB:7F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/af0f2f5c-7f07-33be-bd01-a7960233392f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: 208.71.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:14:3f:36:7f:49:b4:ae:f1:a1:e4:9d:8b:dd:4e:d7:59:01: 1a:c9:b1:25:aa:bd:97:a4:74:d0:de:1d:ba:35:94:54:76:19: 9a:18:ac:c5:c8:a2:d9:78:69:f6:47:b0:31:db:54:f4:f6:bd: f7:1b:f4:1c:21:bb:1b:98:fe:36:21:8c:5f:53:7d:42:04:41: 45:be:eb:33:22:1a:98:0b:a3:f2:7f:76:17:0d:96:a3:00:d4: 57:c6:51:7f:f4:6a:64:15:96:7e:f1:c6:a6:d4:95:e0:4f:39: 46:fa:29:1e:8b:c8:13:a8:1b:e5:b3:2b:9f:7e:d5:14:15:68: 6f:d7:22:ac:eb:e8:36:6c:14:fb:b9:32:a4:b9:ab:00:b8:49: 6f:e4:ef:29:bf:3b:e1:fc:f9:20:4a:38:b5:62:e3:e7:58:9e: de:6a:ba:ea:a0:ac:47:b2:ab:d6:f5:76:b6:fd:42:39:f8:83: 63:83:d3:d7:c0:1b:5c:57:90:7b:0f:e4:d3:9a:6d:ed:cd:1d: 43:7d:0b:c0:dd:b4:ee:78:6d:a8:3f:2b:06:58:b8:46:d4:de: ae:a7:8a:a7:42:09:d7:29:26:06:f8:fc:ba:fe:30:6e:08:78: 25:1a:5f:60:d2:cc:cc:a7:ff:cb:20:55:57:c9:d4:63:b0:b5: 25:a2:8b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjywrl529cVHtX4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk MzQ4OGJiOTYtMDMzMy00YzNlLTk0MjktNmRlMjI3YjBmZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyijmbRiDqyun6it8qR7sS9wykFUGRqCblKV jPV46K8qU7VzktLw69D8lYG9RpVuv7346mQ4TVg9r5g1A76Cd28psuXUus0x5fBO E1gL6Uuj+mSiy8IfCMPxYEASZIX6WPdHfgxpLJd4whjZHQfYIehTzGZez8Vi5AYL lTMFeXyx4lVxqefyI8xKnQiolDjIZRg3OdpOpKlfWm7cgLO849zkb7CeZOtGrYhs qcH3jUZCnaV+VXR6asUmKDVXl6acQw2Ajz083mfYVhZ0e3oriV3+hd8/ZOfQvCET 4kp5FmfqS/NOtpylbUyEmyI4rrtGMx13SS3mwVgRVIdbcZiifQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8sq0ZpJMA27fxnVMYEXjLku3/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvYWYwZjJmNWMtN2YwNy0z M2JlLWJkMDEtYTc5NjAyMzMzOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0UPzZ/SbSu8aHknYvdTtdZARrJsSWqvZekdNDeHbo1lFR2GZoYrMXI otl4afZHsDHbVPT2vfcb9BwhuxuY/jYhjF9TfUIEQUW+6zMiGpgLo/J/dhcNlqMA 1FfGUX/0amQVln7xxqbUleBPOUb6KR6LyBOoG+WzK59+1RQVaG/XIqzr6DZsFPu5 MqS5qwC4SW/k7ym/O+H8+SBKOLVi4+dYnt5quuqgrEeyq9b1drb9Qjn4g2OD09fA G1xXkHsP5NOabe3NHUN9C8DdtO54bag/KwZYuEbU3q6niqdCCdcpJgb4/Lr+MG4I eCUaX2DSzMyn/8sgVVfJ1GOwtSWiizA= -----END CERTIFICATE-----Generated at Sun Feb 16 20:12:54 2025 by rpki-client