$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa File: e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa (raw, json) Hash identifier: ldGOgztwc2ZYcGsWpUK11md8ZFiHMbSELteRHN7ZOM0= Subject key identifier: 3A:4A:FD:C6:43:DB:20:29:99:A5:0D:D0:EF:A9:B1:14:F8:4D:8E:F7 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285848EC968173911D1AC79DF1F040 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 42 IP address blocks: 208.67.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:81:73:91:1d:1a:c7:9d:f1:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=30b9e33d-71db-47b5-b460-c54b998d840f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0e:d7:40:82:87:a2:cf:37:55:4e:b1:d8:aa: cc:ab:b4:4f:38:df:fd:03:c9:c3:c7:50:4b:09:18: c1:bb:2c:5a:9c:40:b0:8d:da:db:4c:46:1a:b7:92: 98:87:0a:de:97:5f:2b:7d:f3:29:37:17:4a:1c:49: 52:32:34:89:ff:d2:35:75:a4:48:18:5f:60:ec:ec: fd:63:65:9b:41:3f:f8:f0:1f:d1:86:dd:ca:31:08: 6b:93:a3:b2:b2:8b:42:d3:fe:b5:ce:f6:ee:3e:9c: 65:13:61:b5:23:a1:9e:e8:18:41:3c:30:c1:be:ac: 18:a7:6b:a8:04:33:67:b5:c8:5d:77:30:76:e4:59: 1b:f7:b1:b5:a7:f9:44:f1:89:dd:5f:3d:09:87:43: 4c:3f:b8:cd:06:f6:a1:ae:a4:c6:07:af:66:5c:b6: 1d:5e:32:f7:6c:c0:eb:6e:c8:96:87:c3:bd:d7:6e: c6:bd:44:79:69:06:8a:df:0e:0e:b2:a5:9d:81:f0: 99:9b:99:c0:98:52:d7:97:be:52:c5:b5:63:a0:fa: cd:61:08:f4:1c:5f:c9:aa:a1:0d:8c:a4:a4:f3:b5: f6:02:f6:23:98:31:f6:19:50:5b:e0:56:80:c6:0d: 23:56:a3:be:34:4d:c8:fd:78:88:5f:94:6d:72:f2: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4A:FD:C6:43:DB:20:29:99:A5:0D:D0:EF:A9:B1:14:F8:4D:8E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 208.67.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:29:00:b9:ae:a5:13:29:84:ae:35:48:61:c3:9f:ac:6a:59: 6e:e5:35:9f:bb:90:6a:db:af:22:f8:d4:4e:f5:d4:4d:12:b2: 01:f8:94:a0:17:ce:23:82:04:d2:46:83:9f:3a:64:62:dd:32: 7b:72:17:f5:7e:c4:7a:fc:07:f9:4a:80:29:13:0e:d7:6b:cc: eb:47:ac:62:48:48:ac:17:1c:89:0a:29:6f:36:df:4e:37:81: 06:bd:49:e1:2b:04:5b:e5:3e:31:35:f1:d3:dd:ab:c4:65:7e: 07:2e:12:f0:57:13:71:3d:57:e3:dd:d5:1d:0f:da:d5:64:f4: d7:e6:4a:79:2b:77:62:b3:be:30:85:cc:63:e7:8b:f8:90:b4: 65:89:44:fa:77:74:1e:e6:1b:ee:d8:f2:38:4c:93:80:5d:5f: d4:0c:36:63:4a:9d:c6:60:a2:5c:26:a1:e4:93:91:34:49:89: dc:54:82:1f:29:cd:df:34:f7:e4:b7:94:0c:87:d0:7e:81:6c: 5b:a1:04:18:e2:ce:15:f1:e8:da:8c:be:9e:db:d1:6a:fa:ef: 30:1b:6f:82:2e:6f:c8:6b:b7:e3:f1:88:e2:8a:60:b4:2a:a8: 31:31:63:e5:99:5a:8a:b2:57:ed:3e:58:52:a3:a5:70:b5:88: c5:e3:13:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsloFzkR0ax53x8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MzBiOWUzM2QtNzFkYi00N2I1LWI0NjAtYzU0Yjk5OGQ4NDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q7XQIKHos83VU6x2KrMq7RPON/9A8nDx1BL CRjBuyxanECwjdrbTEYat5KYhwrel18rffMpNxdKHElSMjSJ/9I1daRIGF9g7Oz9 Y2WbQT/48B/Rht3KMQhrk6OysotC0/61zvbuPpxlE2G1I6Ge6BhBPDDBvqwYp2uo BDNntchddzB25Fkb97G1p/lE8YndXz0Jh0NMP7jNBvahrqTGB69mXLYdXjL3bMDr bsiWh8O9127GvUR5aQaK3w4OsqWdgfCZm5nAmFLXl75SxbVjoPrNYQj0HF/JqqEN jKSk87X2AvYjmDH2GVBb4FaAxg0jVqO+NE3I/XiIX5RtcvIu+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpK/cZD2yApmaUN0O+psRT4TY73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvZThhNGU5ZWYtZTZkZi0z OTJiLWI0MmItZGIzYzVmOGQwYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ENYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQpALmupRMphK41SGHDn6xqWW7lNZ+7kGrbryL41E711E0SsgH4lKAX ziOCBNJGg586ZGLdMntyF/V+xHr8B/lKgCkTDtdrzOtHrGJISKwXHIkKKW823043 gQa9SeErBFvlPjE18dPdq8RlfgcuEvBXE3E9V+Pd1R0P2tVk9NfmSnkrd2KzvjCF zGPni/iQtGWJRPp3dB7mG+7Y8jhMk4BdX9QMNmNKncZgolwmoeSTkTRJidxUgh8p zd809+S3lAyH0H6BbFuhBBjizhXx6NqMvp7b0Wr67zAbb4Iub8hrt+PxiOKKYLQq qDExY+WZWoqyV+0+WFKjpXC1iMXjE8Q= -----END CERTIFICATE-----Generated at Wed Apr 9 01:44:41 2025 by rpki-client