$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/415d4bdc-d0b4-34bd-af3e-80f04563b5a0.roa File: 415d4bdc-d0b4-34bd-af3e-80f04563b5a0.roa (raw, json) Hash identifier: PU2cdDIFQ4n2tpejtPNtVPsWeLKW68Pe+rIhshjSS2I= Subject key identifier: D4:8D:6B:E2:F0:C4:1E:A9:24:FB:55:D4:5A:8D:08:62:7A:C5:4D:DA Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858487FB5D8F80E13768AE4984488 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/415d4bdc-d0b4-34bd-af3e-80f04563b5a0.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 26421 IP address blocks: 207.114.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:d8:f8:0e:13:76:8a:e4:98:44:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=5e6fa58e-274e-4eb7-9b1e-6bd4d09c8c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:33:4b:e3:e1:64:bb:45:63:53:06:be:57:43: e1:b2:5c:12:ae:17:7f:8e:26:93:fc:4e:a7:17:71: 79:0d:cf:80:a9:93:60:c7:a7:74:0b:90:72:a0:0b: cf:2b:2e:14:9a:55:00:4d:b8:b7:80:fd:0f:73:31: 2a:bb:b8:cf:7a:af:13:59:4b:e0:7f:93:aa:ff:b5: 1b:68:f9:9d:c7:0b:35:f4:30:9c:bf:89:a0:6b:92: 39:25:eb:6d:1e:ec:ed:5c:2e:6b:c1:b3:11:b5:c7: a5:72:fd:c1:67:14:e7:40:9f:6b:44:d4:fa:e5:b8: 4d:5f:c7:f2:70:55:3a:1c:44:ef:75:61:90:57:ec: 3c:bd:e0:14:ff:94:27:1a:63:da:1a:d2:c5:8e:e4: 3e:24:14:e2:1b:7d:1e:04:ae:be:e2:08:b1:f1:ac: 9e:c7:06:4c:1c:cb:f1:68:2d:5c:7b:7c:70:b6:21: ea:8f:cd:98:09:20:23:b5:1d:1a:42:6f:7d:2a:03: af:0e:fe:24:2d:ab:41:a9:fa:63:9e:a1:df:17:8e: dd:e8:f3:35:39:d4:55:67:e4:fc:21:86:8e:10:26: fb:1c:26:e9:ca:80:a6:67:dc:a4:c2:bd:53:28:31: 6a:ea:af:3d:56:d6:b1:08:85:87:c6:65:7d:fb:b7: d9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8D:6B:E2:F0:C4:1E:A9:24:FB:55:D4:5A:8D:08:62:7A:C5:4D:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/415d4bdc-d0b4-34bd-af3e-80f04563b5a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.114.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:82:de:0f:38:39:1e:f9:8d:fc:5b:29:2c:53:04:64:07:a4: f4:2d:e0:13:a2:5e:e5:fd:d2:8c:03:bc:e6:f1:d8:86:e0:f0: 65:b3:d6:74:45:e9:10:ba:b8:2e:94:c8:ab:f9:41:96:d1:b7: d7:0b:49:a6:1f:90:3c:29:07:89:e0:c9:9f:a0:c2:af:ad:9b: 6c:69:09:20:22:36:1b:c9:38:75:9a:47:a7:a6:6a:da:d4:a5: 24:15:a9:83:ec:d5:48:3f:4d:5f:8a:d5:7b:ba:08:80:56:c3: 11:ca:6d:92:4d:26:e3:1a:29:93:a4:8a:3e:8f:6b:dd:d3:5c: 1f:92:6a:7d:90:5a:31:f6:03:b9:9d:96:6e:06:79:2b:59:9b: ed:05:01:b7:5b:51:71:34:f6:ce:81:d2:72:39:e1:0b:26:9f: de:a2:fc:f3:f6:6a:d0:ca:e5:a9:4c:1d:7a:61:f8:51:67:43: 4d:2e:74:81:e7:5b:70:a1:96:ff:49:b6:a2:db:7e:d1:6b:20: ec:c1:14:45:63:d8:f2:bc:81:5a:b4:02:88:10:b1:09:7c:bb: 82:03:3a:b7:c6:d7:93:61:45:e1:a2:49:e7:d3:6b:cf:6c:9a: 97:56:02:bd:ac:a1:78:52:e5:32:c7:06:39:81:1e:d8:49:48: 58:e4:70:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tdj4DhN2iuSYRIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk NWU2ZmE1OGUtMjc0ZS00ZWI3LTliMWUtNmJkNGQwOWM4YzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDNL4+Fku0VjUwa+V0PhslwSrhd/jiaT/E6n F3F5Dc+AqZNgx6d0C5ByoAvPKy4UmlUATbi3gP0PczEqu7jPeq8TWUvgf5Oq/7Ub aPmdxws19DCcv4mga5I5JettHuztXC5rwbMRtcelcv3BZxTnQJ9rRNT65bhNX8fy cFU6HETvdWGQV+w8veAU/5QnGmPaGtLFjuQ+JBTiG30eBK6+4gix8ayexwZMHMvx aC1ce3xwtiHqj82YCSAjtR0aQm99KgOvDv4kLatBqfpjnqHfF47d6PM1OdRVZ+T8 IYaOECb7HCbpyoCmZ9ykwr1TKDFq6q89VtaxCIWHxmV9+7fZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSNa+LwxB6pJPtV1FqNCGJ6xU3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDE1ZDRiZGMtZDBiNC0z NGJkLWFmM2UtODBmMDQ1NjNiNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz3KfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmC3g84OR75jfxbKSxTBGQHpPQt4BOiXuX90owDvObx2Ibg8GWz1nRF 6RC6uC6UyKv5QZbRt9cLSaYfkDwpB4ngyZ+gwq+tm2xpCSAiNhvJOHWaR6ematrU pSQVqYPs1Ug/TV+K1Xu6CIBWwxHKbZJNJuMaKZOkij6Pa93TXB+San2QWjH2A7md lm4GeStZm+0FAbdbUXE09s6B0nI54Qsmn96i/PP2atDK5alMHXph+FFnQ00udIHn W3Chlv9JtqLbftFrIOzBFEVj2PK8gVq0AogQsQl8u4IDOrfG15NhReGiSefTa89s mpdWAr2soXhS5TLHBjmBHthJSFjkcM0= -----END CERTIFICATE-----Generated at Fri Mar 14 11:15:09 2025 by rpki-client