$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/950d8c36-ddb0-3620-b235-c13e150e45f1.roa File: 950d8c36-ddb0-3620-b235-c13e150e45f1.roa (raw, json) Hash identifier: fsmFZOLSzzGoOBN1vLeZRdMYPn59mTLC9ZZVVtdgRcc= Subject key identifier: 03:97:75:C6:97:E5:1D:0C:BE:44:37:FA:50:68:C5:AC:8A:D8:B5:AA Certificate issuer: /CN=c71b6a76-8f76-4635-b6fd-fdaad6f21504 Certificate serial: 010D0C9F432858488AE093E33C589E3862159B80 Authority key identifier: D9:8E:AC:FD:35:83:40:AB:4F:42:45:27:21:7A:91:87:20:D5:04:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/950d8c36-ddb0-3620-b235-c13e150e45f1.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 396982 IP address blocks: 204.107.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:93:e3:3c:58:9e:38:62:15:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c71b6a76-8f76-4635-b6fd-fdaad6f21504 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=e6e48ffc-05f8-48b4-9467-0553b85983a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:e7:16:e7:fb:2b:ed:48:63:74:cc:e8:3d: 4c:dd:83:10:4c:c6:04:37:e8:88:1d:9b:ff:a7:a3: 75:ef:6c:32:54:2a:fb:6f:77:49:cd:8b:b6:dd:ca: 03:1c:32:05:ad:c2:78:02:2e:d2:5f:ff:af:bd:2c: f7:30:69:e2:dc:5f:91:ba:ec:9b:b2:47:bf:67:c3: 22:02:5a:0c:67:35:0a:5c:53:b9:63:17:71:ab:70: d8:1c:f4:b6:66:42:f2:17:49:87:e0:02:e1:f6:81: ab:e4:bb:64:fc:3f:8d:04:6f:1d:49:08:bb:1e:71: 29:f4:77:3f:98:90:95:95:4d:95:64:98:1c:52:53: d0:ac:85:d2:5b:7b:f0:18:3c:78:f0:89:2d:d0:a0: 7d:4c:1f:50:45:f2:bb:e1:1d:79:09:04:02:ef:c2: 17:a9:73:d0:f2:e2:4b:58:c4:37:f6:16:f9:d1:a9: c5:ca:a3:bb:d4:93:ee:e3:75:58:69:d8:ca:0e:9e: 8f:b6:c5:80:a5:28:f8:2d:a1:31:50:5b:28:fd:3b: 04:84:39:b1:40:de:af:68:21:ae:bb:63:f9:f1:3f: ce:fd:44:d5:af:20:42:a1:6e:08:02:fb:84:8c:c1: 80:f0:a0:c9:fa:58:ce:81:85:49:0c:2c:a8:32:02: 38:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:97:75:C6:97:E5:1D:0C:BE:44:37:FA:50:68:C5:AC:8A:D8:B5:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/950d8c36-ddb0-3620-b235-c13e150e45f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl X509v3 Authority Key Identifier: keyid:D9:8E:AC:FD:35:83:40:AB:4F:42:45:27:21:7A:91:87:20:D5:04:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer sbgp-ipAddrBlock: critical IPv4: 204.107.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b3:f9:77:b0:c6:0e:f0:9c:fc:2a:8e:db:1d:76:f1:d2:8e: dd:60:19:7e:65:72:43:8f:6d:05:68:5c:78:47:12:b5:72:9b: 72:db:db:10:4a:cf:de:01:53:c8:ea:19:40:90:7a:e8:a7:07: cc:19:93:ef:5a:c9:5d:d7:12:5e:09:5c:73:93:a7:bc:89:8f: 2d:78:7f:5e:20:07:8c:9e:63:b5:01:6d:cf:7c:65:76:b1:e9: 08:f6:83:74:79:53:5f:3a:fe:00:76:03:53:3a:bc:8e:db:ee: e7:ab:a0:ba:40:5d:02:03:bf:4f:f9:82:a7:d9:02:e7:91:91: 26:b4:19:78:ee:4d:65:e7:1f:be:ae:48:d7:93:9f:8d:f1:0c: 47:7b:06:37:3e:76:7b:dc:f9:01:8d:d8:5b:03:a5:6e:b0:e4: 7e:e9:d0:3d:63:74:17:63:e7:43:24:4f:1a:1c:7f:64:e1:d4: c7:97:8e:fc:7e:1c:53:0d:34:bf:8a:8f:90:57:1e:0b:12:35: 8a:84:02:30:3e:db:43:50:99:ca:91:ff:b0:19:e3:39:9c:61: ae:72:5b:a1:c7:7b:87:8e:12:85:cf:2c:cd:c5:6a:1a:03:5e: b4:f2:22:45:ef:a8:0b:65:38:fd:49:04:a1:82:c1:24:1e:83: 89:ec:7e:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4JPjPFieOGIVm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcxYjZhNzYtOGY3Ni00NjM1LWI2ZmQtZmRhYWQ2ZjIx NTA0MB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk ZTZlNDhmZmMtMDVmOC00OGI0LTk0NjctMDU1M2I4NTk4M2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1PnFuf7K+1IY3TM6D1M3YMQTMYEN+iIHZv/ p6N172wyVCr7b3dJzYu23coDHDIFrcJ4Ai7SX/+vvSz3MGni3F+Ruuybske/Z8Mi AloMZzUKXFO5Yxdxq3DYHPS2ZkLyF0mH4ALh9oGr5Ltk/D+NBG8dSQi7HnEp9Hc/ mJCVlU2VZJgcUlPQrIXSW3vwGDx48Ikt0KB9TB9QRfK74R15CQQC78IXqXPQ8uJL WMQ39hb50anFyqO71JPu43VYadjKDp6PtsWApSj4LaExUFso/TsEhDmxQN6vaCGu u2P58T/O/UTVryBCoW4IAvuEjMGA8KDJ+ljOgYVJDCyoMgI4owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOXdcaX5R0MvkQ3+lBoxayK2LWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNzFi NmE3Ni04Zjc2LTQ2MzUtYjZmZC1mZGFhZDZmMjE1MDQvOTUwZDhjMzYtZGRiMC0z NjIwLWIyMzUtYzEzZTE1MGU0NWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzcxYjZhNzYtOGY3Ni00NjM1LWI2 ZmQtZmRhYWQ2ZjIxNTA0L2M3MWI2YTc2LThmNzYtNDYzNS1iNmZkLWZkYWFkNmYy MTUwNC5jcmwwHwYDVR0jBBgwFoAU2Y6s/TWDQKtPQkUnIXqRhyDVBFwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNzFiNmE3Ni04Zjc2LTQ2MzUtYjZmZC1mZGFh ZDZmMjE1MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOz+Xewxg7wnPwqjtsddvHSjt1gGX5lckOPbQVoXHhHErVym3Lb2xBK z94BU8jqGUCQeuinB8wZk+9ayV3XEl4JXHOTp7yJjy14f14gB4yeY7UBbc98ZXax 6Qj2g3R5U186/gB2A1M6vI7b7ueroLpAXQIDv0/5gqfZAueRkSa0GXjuTWXnH76u SNeTn43xDEd7Bjc+dnvc+QGN2FsDpW6w5H7p0D1jdBdj50MkTxocf2Th1MeXjvx+ HFMNNL+Kj5BXHgsSNYqEAjA+20NQmcqR/7AZ4zmcYa5yW6HHe4eOEoXPLM3FahoD XrTyIkXvqAtlOP1JBKGCwSQeg4nsfoE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:34 2025 by rpki-client