$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/937e7e93-fe07-3efb-8602-a6bec5832de3.roa File: 937e7e93-fe07-3efb-8602-a6bec5832de3.roa (raw, json) Hash identifier: Hvpn/HLk5yQONo9R3Z6TfgtRTW4KMWr7uOOjKkosNIo= Subject key identifier: 39:A0:14:81:24:E4:81:56:09:CA:90:E5:3E:3B:60:BB:51:F6:F9:78 Certificate issuer: /CN=3df29669-3733-4127-bbde-a71cc4b5a661 Certificate serial: 010D0C9F43285848E16BD815EE665A9D8591F100 Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/937e7e93-fe07-3efb-8602-a6bec5832de3.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 55247 IP address blocks: 208.82.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d8:15:ee:66:5a:9d:85:91:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=d23b1f59-ff11-4027-9a8d-749ea68d18a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:c1:5d:29:ce:0d:b2:7e:62:5d:2b:40:12: c8:92:6a:1f:b9:11:72:65:a2:e9:99:c1:1d:40:c9: cc:b7:4f:77:4d:21:2c:0f:af:3e:fa:3f:0e:db:c5: 96:79:a1:54:c9:32:59:34:50:b3:61:43:49:9f:21: 53:03:86:3d:18:cb:45:25:78:47:b0:a2:7c:aa:62: ce:25:20:b5:d7:40:c4:47:21:3e:64:fe:34:95:c1: bc:aa:aa:40:c0:a1:05:d0:8e:fe:a7:20:a1:a0:1a: a3:65:7f:50:99:f1:93:d7:e2:6c:bf:75:a8:da:5b: 28:09:3f:92:c7:1f:bd:81:67:d4:e9:c3:79:49:cf: 56:50:2d:27:48:b9:ca:33:0a:92:80:b9:fa:6e:63: 39:6b:d1:dd:f3:7a:38:ed:64:6c:02:e4:81:a0:60: 5b:ce:c7:e8:e9:c2:af:5b:12:ad:a8:81:b7:9a:29: 6e:de:f4:dc:a4:32:e5:5a:26:8f:c5:67:a2:0a:31: 99:cb:0c:b5:b6:0c:a4:23:6e:ba:12:6f:1e:8a:3b: 14:6e:84:eb:81:8d:10:2a:2f:d7:35:8d:ae:9c:86: 85:ea:64:51:96:f9:8d:57:67:aa:c6:ac:eb:6a:1d: c3:6d:c0:2f:d3:e8:7c:00:ab:0b:a4:58:64:59:0b: ee:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A0:14:81:24:E4:81:56:09:CA:90:E5:3E:3B:60:BB:51:F6:F9:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/937e7e93-fe07-3efb-8602-a6bec5832de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl X509v3 Authority Key Identifier: keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer sbgp-ipAddrBlock: critical IPv4: 208.82.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d3:f0:25:20:08:0d:61:6b:55:e7:3e:9a:25:48:a9:20:c1: f1:1b:c5:18:e6:76:11:16:71:07:c2:92:68:06:d6:77:e1:ed: 5c:d7:65:e5:bc:2e:52:69:61:b4:40:fa:d3:55:b8:07:e4:cb: 4c:67:42:50:21:e4:e6:a5:78:60:70:51:84:27:a0:ea:ae:e3: 61:10:9a:01:8d:1a:5d:5a:14:df:fe:59:b2:23:31:cc:92:e9: 24:c3:69:8d:87:6a:8d:13:f5:9a:90:75:63:65:73:52:8b:4d: 5e:48:ce:47:62:99:c6:53:ef:0f:97:46:ef:cb:cc:b0:86:ca: 5a:84:88:f9:46:3c:10:dc:ad:68:d3:1c:f2:20:82:7b:76:8e: ce:c1:fd:30:68:5b:78:9e:58:09:7b:56:40:36:a6:7b:8a:fd: 56:94:c2:ef:6a:13:3e:de:ca:d2:cd:31:90:f7:69:e7:ff:66: d5:42:8d:a5:19:7c:7e:1b:17:d9:20:29:fd:44:3c:2e:52:01: 11:d1:9a:9a:6f:56:bc:ec:e5:4c:15:7b:8d:ad:22:63:a1:e8: ee:55:09:52:22:b1:ab:cb:b8:4a:66:66:c8:72:6a:d3:11:fc: 1e:e8:56:55:aa:1c:37:42:39:5b:d5:cb:17:29:b5:22:f1:15: 53:6f:f6:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9gV7mZanYWR8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RmMjk2NjktMzczMy00MTI3LWJiZGUtYTcxY2M0YjVh NjYxMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDIzYjFmNTktZmYxMS00MDI3LTlhOGQtNzQ5ZWE2OGQxOGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjDBXSnODbJ+Yl0rQBLIkmofuRFyZaLpmcEd QMnMt093TSEsD68++j8O28WWeaFUyTJZNFCzYUNJnyFTA4Y9GMtFJXhHsKJ8qmLO JSC110DERyE+ZP40lcG8qqpAwKEF0I7+pyChoBqjZX9QmfGT1+Jsv3Wo2lsoCT+S xx+9gWfU6cN5Sc9WUC0nSLnKMwqSgLn6bmM5a9Hd83o47WRsAuSBoGBbzsfo6cKv WxKtqIG3milu3vTcpDLlWiaPxWeiCjGZywy1tgykI266Em8eijsUboTrgY0QKi/X NY2unIaF6mRRlvmNV2eqxqzrah3DbcAv0+h8AKsLpFhkWQvuhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmgFIEk5IFWCcqQ5T47YLtR9vl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGYy OTY2OS0zNzMzLTQxMjctYmJkZS1hNzFjYzRiNWE2NjEvOTM3ZTdlOTMtZmUwNy0z ZWZiLTg2MDItYTZiZWM1ODMyZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2RmMjk2NjktMzczMy00MTI3LWJi ZGUtYTcxY2M0YjVhNjYxLzNkZjI5NjY5LTM3MzMtNDEyNy1iYmRlLWE3MWNjNGI1 YTY2MS5jcmwwHwYDVR0jBBgwFoAUla0kVNAfCbW05KXSZq5z8tSbVdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGYyOTY2OS0zNzMzLTQxMjctYmJkZS1hNzFj YzRiNWE2NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FKrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTT8CUgCA1ha1XnPpolSKkgwfEbxRjmdhEWcQfCkmgG1nfh7VzXZeW8 LlJpYbRA+tNVuAfky0xnQlAh5OaleGBwUYQnoOqu42EQmgGNGl1aFN/+WbIjMcyS 6STDaY2Hao0T9ZqQdWNlc1KLTV5IzkdimcZT7w+XRu/LzLCGylqEiPlGPBDcrWjT HPIggnt2js7B/TBoW3ieWAl7VkA2pnuK/VaUwu9qEz7eytLNMZD3aef/ZtVCjaUZ fH4bF9kgKf1EPC5SARHRmppvVrzs5UwVe42tImOh6O5VCVIisavLuEpmZshyatMR /B7oVlWqHDdCOVvVyxcptSLxFVNv9uw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:19 2025 by rpki-client