$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5ccae8e5-9fe9-3698-8e7f-398d4c9c2c84.roa File: 5ccae8e5-9fe9-3698-8e7f-398d4c9c2c84.roa (raw, json) Hash identifier: H7cLh7++YFIRULmNvr/9BL2XOjZ7TIMKnEsyHJdDbYo= Subject key identifier: 32:3D:3E:53:87:33:2A:AF:19:35:FA:14:F8:70:CA:D2:FF:4F:8C:11 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285848BBBB78D1C3182DFF99299B00 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5ccae8e5-9fe9-3698-8e7f-398d4c9c2c84.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 3561 IP address blocks: 208.128.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:78:d1:c3:18:2d:ff:99:29:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=66c10c03-c6a0-43fa-83f3-113d49f5c7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ed:b5:ad:ff:ce:50:2f:86:d6:b1:ab:6f:4c: c7:1d:12:a2:a0:c0:16:bd:11:ff:32:18:a5:7a:61: 14:07:5d:90:5a:75:df:83:d8:32:e4:ab:69:95:8e: fa:4a:78:0c:c7:bb:1f:f0:92:e9:47:74:22:a0:bc: a1:d6:27:3d:57:19:7f:6c:45:97:58:86:d0:4c:b4: 81:8f:32:41:81:72:17:ad:f4:65:05:16:87:26:73: c4:5b:c0:52:59:6f:ae:c3:1a:cc:82:32:62:12:b0: 1c:92:f1:93:6c:cd:d9:f5:12:5a:33:ce:73:17:97: 2f:97:24:78:66:7d:4a:b8:fb:f5:67:2f:2b:c3:47: 5f:83:fc:20:8f:a1:e3:01:22:73:a4:c4:e0:f3:62: ec:36:9e:b8:de:70:fd:47:2a:18:1d:76:d6:8a:4a: 9c:59:f5:dc:64:e0:83:15:c8:ed:ee:1e:fb:c8:b2: 93:0b:e4:c5:ef:3f:85:36:27:db:ea:1b:0b:10:25: b9:05:ff:b8:0f:33:25:5c:1b:32:41:03:e0:49:a9: ee:77:53:85:ec:24:49:f7:2a:a9:31:74:ae:cc:ae: f1:0c:4f:03:36:36:da:7f:d1:db:da:4d:07:8f:1b: 07:79:74:e3:4e:98:5a:e8:ee:33:aa:98:0d:43:12: 51:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3D:3E:53:87:33:2A:AF:19:35:FA:14:F8:70:CA:D2:FF:4F:8C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5ccae8e5-9fe9-3698-8e7f-398d4c9c2c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.128.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:67:e0:e2:50:ae:6c:a4:4d:69:99:eb:09:76:88:bc:33:26: b3:27:41:f9:78:33:e7:e7:f3:af:04:57:d9:e8:f2:09:28:f7: a9:e5:1e:1e:92:2b:15:82:2d:e7:b4:e1:99:c8:c7:a2:fe:5f: cf:fd:a2:00:5a:cc:49:79:f0:e6:e6:ba:6a:13:aa:0f:e6:7f: 2f:ce:fd:94:68:b2:a8:3d:54:19:b2:5f:b0:b8:43:96:2b:9e: ff:fd:58:4f:41:44:81:f3:0f:b2:98:6a:f3:2b:af:23:01:59: c4:8c:3f:a1:c6:17:ea:4c:b2:f7:9e:05:2d:cb:7d:38:64:ab: 75:74:b4:92:30:26:30:79:a4:67:49:cd:c0:5e:d8:23:0c:cf: 98:bc:8f:c3:1b:ce:21:e9:71:1f:7d:88:17:bd:4e:b6:98:e9: cc:24:f4:eb:44:61:93:c2:3a:d8:46:d9:04:80:0f:c5:56:24: 05:45:e0:86:3e:19:3f:d8:72:df:e1:bd:46:51:92:b4:f5:75: 3a:ae:d7:8b:d0:af:1e:6b:2e:d5:e5:e0:a2:d1:d6:3e:5b:2f: d8:38:1e:b5:85:a9:cb:1b:8a:45:fb:09:74:98:28:6e:23:4a: db:20:a2:b1:ef:13:14:b7:62:82:7b:5c:fa:e1:af:1c:72:a7: 72:09:7d:b7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi7u3jRwxgt/5kpmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk NjZjMTBjMDMtYzZhMC00M2ZhLTgzZjMtMTEzZDQ5ZjVjN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+21rf/OUC+G1rGrb0zHHRKioMAWvRH/Mhil emEUB12QWnXfg9gy5KtplY76SngMx7sf8JLpR3QioLyh1ic9Vxl/bEWXWIbQTLSB jzJBgXIXrfRlBRaHJnPEW8BSWW+uwxrMgjJiErAckvGTbM3Z9RJaM85zF5cvlyR4 Zn1KuPv1Zy8rw0dfg/wgj6HjASJzpMTg82LsNp643nD9RyoYHXbWikqcWfXcZOCD Fcjt7h77yLKTC+TF7z+FNifb6hsLECW5Bf+4DzMlXBsyQQPgSanud1OF7CRJ9yqp MXSuzK7xDE8DNjbaf9Hb2k0HjxsHeXTjTpha6O4zqpgNQxJRAwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDI9PlOHMyqvGTX6FPhwytL/T4wRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNWNjYWU4ZTUtOWZlOS0z Njk4LThlN2YtMzk4ZDRjOWMyYzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0IAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAH2fg4lCubKRNaZnrCXaIvDMmsydB+Xgz5+fzrwRX2ejyCSj3qeUeHpIr FYIt57ThmcjHov5fz/2iAFrMSXnw5ua6ahOqD+Z/L879lGiyqD1UGbJfsLhDliue //1YT0FEgfMPsphq8yuvIwFZxIw/ocYX6kyy954FLct9OGSrdXS0kjAmMHmkZ0nN wF7YIwzPmLyPwxvOIelxH32IF71OtpjpzCT060Rhk8I62EbZBIAPxVYkBUXghj4Z P9hy3+G9RlGStPV1Oq7Xi9CvHmsu1eXgotHWPlsv2DgetYWpyxuKRfsJdJgobiNK 2yCise8TFLdigntc+uGvHHKncgl9tw== -----END CERTIFICATE-----Generated at Fri Mar 14 10:02:25 2025 by rpki-client