$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5a94e139-6432-37da-ad9a-9a58e43133b8.roa File: 5a94e139-6432-37da-ad9a-9a58e43133b8.roa (raw, json) Hash identifier: jEnJJqbv0qExw3J6X3QfCtl8ZLOfdtgMOsOj1JVsbTk= Subject key identifier: DA:76:8F:71:0A:B0:52:EB:41:EC:86:6E:BA:07:FA:62:61:A9:D3:D6 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858489075F37EB9F41ECB89E90A40 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5a94e139-6432-37da-ad9a-9a58e43133b8.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 14041 IP address blocks: 204.132.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:f3:7e:b9:f4:1e:cb:89:e9:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=004f4901-b83b-4e2c-b84b-d8d8b6732a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:ac:d5:3d:a4:93:da:0a:86:eb:7e:29:d8: 0c:4c:a4:83:10:f9:3c:e7:28:15:86:3b:32:3d:f5: e6:61:ee:3f:d6:e2:c2:fe:4f:a3:f1:25:18:c7:f7: 50:ed:95:50:26:3f:0f:78:a0:1b:ab:63:75:64:e6: 1d:f4:db:e6:d9:9a:5f:da:d4:93:98:28:77:bf:fc: 79:5c:79:96:0d:d2:b8:7f:b4:1a:0a:41:ea:b4:2b: 7e:ad:ea:98:3e:c8:a2:5b:f2:35:8c:97:9b:39:96: c8:58:7c:d6:b9:51:5e:8f:99:e8:f0:34:54:5b:a2: 62:13:30:26:50:3d:9b:c7:f8:95:49:b6:da:4b:34: f7:b6:5a:14:c6:4e:af:57:82:f0:f2:e5:dd:c7:74: 2c:ca:cc:a5:91:5c:40:ec:02:3a:9e:5b:41:c4:a3: 80:f1:e3:79:ac:b1:1f:2b:67:bd:ec:1e:3e:62:ca: e2:6d:66:ca:22:36:aa:3d:53:b2:4a:89:61:0b:d8: 71:0d:67:74:94:02:ba:5d:67:1b:04:44:1c:5c:38: cb:ff:8c:2f:32:c0:db:a7:88:12:46:aa:a8:d7:ce: cd:8d:42:46:ff:bc:48:e2:8a:a4:fc:bf:9f:33:2a: 2b:07:60:e6:3b:bf:c9:7e:46:94:e9:e2:8e:08:8c: c7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:76:8F:71:0A:B0:52:EB:41:EC:86:6E:BA:07:FA:62:61:A9:D3:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5a94e139-6432-37da-ad9a-9a58e43133b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 204.132.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:1f:00:b5:2d:ba:ee:6a:c8:04:d2:35:1c:6d:d3:99:c0:27: 78:37:4e:57:eb:6a:de:26:8f:25:88:2a:f0:fe:91:88:b6:7e: 12:a5:e3:a0:cc:19:38:eb:03:3c:c3:0d:88:4e:1c:70:98:94: 4c:59:17:e1:b6:c8:0f:c4:e7:79:f8:ae:d9:c9:8a:28:0a:05: b4:51:6a:82:ed:26:d2:f3:35:0f:91:45:ec:70:8f:49:b7:4d: d1:f7:fb:d6:67:71:b0:75:22:7c:95:99:2f:69:3b:b7:3b:79: 4e:7d:5d:8c:d6:c0:6d:48:23:5f:99:cb:61:2a:fc:61:fd:54: 5e:06:41:68:94:30:03:47:f7:e5:39:95:9f:aa:56:fa:61:ce: 7b:1e:20:3d:a3:bb:57:8b:88:ac:71:41:a4:42:52:40:58:77: aa:fe:20:60:38:44:07:6e:ae:c5:30:a0:96:3b:6e:03:d9:21: c3:1e:e4:4e:ec:e2:38:1e:19:a0:81:1f:06:ce:63:5e:10:e1: a0:a7:5d:b1:d2:11:cb:a0:a9:c5:f1:6a:b8:76:cb:1d:8b:c6: 00:d5:1e:dc:dc:e5:7b:0f:44:83:a4:3e:9e:97:0a:e7:9b:0a: 7d:f0:32:f9:83:23:54:54:76:8c:fb:4d:9d:69:37:22:33:43: 9a:ac:9f:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfN+ufQey4npCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk MDA0ZjQ5MDEtYjgzYi00ZTJjLWI4NGItZDhkOGI2NzMyYTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+Os1T2kk9oKhut+KdgMTKSDEPk85ygVhjsy PfXmYe4/1uLC/k+j8SUYx/dQ7ZVQJj8PeKAbq2N1ZOYd9Nvm2Zpf2tSTmCh3v/x5 XHmWDdK4f7QaCkHqtCt+reqYPsiiW/I1jJebOZbIWHzWuVFej5no8DRUW6JiEzAm UD2bx/iVSbbaSzT3tloUxk6vV4Lw8uXdx3QsysylkVxA7AI6nltBxKOA8eN5rLEf K2e97B4+YsribWbKIjaqPVOySolhC9hxDWd0lAK6XWcbBEQcXDjL/4wvMsDbp4gS Rqqo187NjUJG/7xI4oqk/L+fMyorB2DmO7/JfkaU6eKOCIzHLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp2j3EKsFLrQeyGbroH+mJhqdPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNWE5NGUxMzktNjQzMi0z N2RhLWFkOWEtOWE1OGU0MzEzM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzIQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMfALUtuu5qyATSNRxt05nAJ3g3Tlfrat4mjyWIKvD+kYi2fhKl46DM GTjrAzzDDYhOHHCYlExZF+G2yA/E53n4rtnJiigKBbRRaoLtJtLzNQ+RRexwj0m3 TdH3+9ZncbB1InyVmS9pO7c7eU59XYzWwG1II1+Zy2Eq/GH9VF4GQWiUMANH9+U5 lZ+qVvphznseID2ju1eLiKxxQaRCUkBYd6r+IGA4RAdursUwoJY7bgPZIcMe5E7s 4jgeGaCBHwbOY14Q4aCnXbHSEcugqcXxarh2yx2LxgDVHtzc5XsPRIOkPp6XCueb Cn3wMvmDI1RUdoz7TZ1pNyIzQ5qsn90= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:51 2025 by rpki-client