$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f11ad83a-6b7f-36f8-bfc6-e13e23b31ec8.roa File: f11ad83a-6b7f-36f8-bfc6-e13e23b31ec8.roa (raw, json) Hash identifier: mp8TNT0aIDwc473NfaUmTZcXglXPTBjAwZzqPOzYO7U= Subject key identifier: B7:02:8B:A3:EE:90:63:6C:9E:11:28:43:7D:4E:B7:82:D8:84:D0:4C Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F432858486D905B54C99A4D5A8B5D7100 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f11ad83a-6b7f-36f8-bfc6-e13e23b31ec8.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 19740 IP address blocks: 208.78.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:5b:54:c9:9a:4d:5a:8b:5d:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=aef290cc-a062-4645-9f71-c7b8625ab7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9b:0c:eb:15:c7:cb:3b:34:f2:58:d1:31:14: c6:d4:9d:7a:8b:63:60:b2:fa:27:0b:3e:07:de:ee: 67:5e:95:a6:70:87:dd:d3:a7:b0:fd:c7:df:21:11: ab:9d:33:b8:94:61:84:37:fa:96:21:f0:b8:7e:ad: 99:33:61:30:16:98:34:66:1f:50:92:1e:b1:86:f1: 7a:b4:57:54:4a:34:4c:ff:b8:73:c3:82:0a:30:db: 3d:f1:69:ea:b0:99:98:22:75:94:28:bf:03:51:ff: 62:7a:16:45:91:44:a0:5f:cc:5c:b7:fb:92:e8:82: 8f:51:86:71:c6:bc:1a:7e:77:b7:d4:6b:42:1b:54: d7:a3:c0:ff:61:d6:b7:42:28:38:af:b0:4d:68:34: 70:1e:c4:41:8b:b6:18:bb:d3:5c:83:91:59:d2:20: 4a:3a:82:e7:84:80:43:37:1a:ce:ff:7a:56:1a:dd: f4:e8:1a:41:c2:5e:17:f3:ca:c6:a1:ce:ef:28:f0: 72:8f:34:a8:8f:53:93:ba:b2:4a:f1:a8:d2:6b:49: 8f:26:e5:ce:9c:f3:7c:10:88:7e:a3:85:5e:84:72: 11:13:80:a2:b9:82:92:97:34:79:c2:5d:ee:9f:8d: 45:4a:6a:e4:09:09:dd:f2:8f:b5:47:1d:f4:c0:53: f2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:02:8B:A3:EE:90:63:6C:9E:11:28:43:7D:4E:B7:82:D8:84:D0:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f11ad83a-6b7f-36f8-bfc6-e13e23b31ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 208.78.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:88:3a:87:5e:32:d5:ab:24:8e:ef:0b:24:58:d3:fb:46:9a: 33:b5:2c:96:69:52:99:20:5f:5a:af:2f:17:6b:0d:eb:64:d6: 66:ce:e2:f2:d5:d4:0c:f7:45:98:b6:f0:b3:88:e1:02:33:98: fd:ea:af:44:33:6d:23:37:27:14:3b:2a:59:b9:f9:25:12:2c: be:f3:72:ab:66:33:2e:58:d0:4f:cd:42:07:3e:8d:9e:b1:6f: 3f:88:31:44:dc:57:f4:90:79:2d:d4:d6:87:92:fb:40:a3:12: 55:3c:e5:57:d1:3c:0e:d6:7e:c2:c3:f3:e2:fa:83:53:70:37: cf:f9:7c:91:6d:d9:81:e7:5d:f3:48:f5:54:4f:72:5e:ac:d9: a4:49:68:17:9b:3e:ca:a9:1d:f5:32:d3:7e:12:71:95:1c:88: ae:ff:b1:ce:b1:fe:21:62:4f:14:8d:3c:69:ad:54:2f:eb:1c: 55:35:cc:f9:4b:74:db:22:35:b8:9c:e5:52:8c:83:af:8f:37: 14:b5:22:91:05:1a:c2:33:b1:da:e9:09:d8:59:76:26:68:2b: 99:ad:72:fc:7b:36:fc:45:40:b8:10:e8:67:b9:a9:de:d2:9c: 2a:62:ed:6c:71:37:3b:9f:c7:e0:55:59:bb:5a:a3:b2:16:fc: 44:d8:e5:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkFtUyZpNWotdcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk YWVmMjkwY2MtYTA2Mi00NjQ1LTlmNzEtYzdiODYyNWFiN2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpsM6xXHyzs08ljRMRTG1J16i2NgsvonCz4H 3u5nXpWmcIfd06ew/cffIRGrnTO4lGGEN/qWIfC4fq2ZM2EwFpg0Zh9Qkh6xhvF6 tFdUSjRM/7hzw4IKMNs98WnqsJmYInWUKL8DUf9iehZFkUSgX8xct/uS6IKPUYZx xrwafne31GtCG1TXo8D/Yda3Qig4r7BNaDRwHsRBi7YYu9Ncg5FZ0iBKOoLnhIBD NxrO/3pWGt306BpBwl4X88rGoc7vKPByjzSoj1OTurJK8ajSa0mPJuXOnPN8EIh+ o4VehHIRE4CiuYKSlzR5wl3un41FSmrkCQnd8o+1Rx30wFPy1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcCi6PukGNsnhEoQ31Ot4LYhNBMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvZjExYWQ4M2EtNmI3Zi0z NmY4LWJmYzYtZTEzZTIzYjMxZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0E7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+IOodeMtWrJI7vCyRY0/tGmjO1LJZpUpkgX1qvLxdrDetk1mbO4vLV 1Az3RZi28LOI4QIzmP3qr0QzbSM3JxQ7Klm5+SUSLL7zcqtmMy5Y0E/NQgc+jZ6x bz+IMUTcV/SQeS3U1oeS+0CjElU85VfRPA7WfsLD8+L6g1NwN8/5fJFt2YHnXfNI 9VRPcl6s2aRJaBebPsqpHfUy034ScZUciK7/sc6x/iFiTxSNPGmtVC/rHFU1zPlL dNsiNbic5VKMg6+PNxS1IpEFGsIzsdrpCdhZdiZoK5mtcvx7NvxFQLgQ6Ge5qd7S nCpi7WxxNzufx+BVWbtao7IW/ETY5cI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:55 2025 by rpki-client