$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa File: a3c913bd-38a7-3113-91a3-43cfa8207222.roa (raw, json) Hash identifier: I8gW7HghdF0BkXU0yccL8bbskTZFq9D46cnInYMGZo0= Subject key identifier: 99:DA:56:9B:DA:E8:85:11:07:D1:5E:19:6E:2D:42:0A:7C:B6:CF:78 Certificate issuer: /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Certificate serial: 010D0C9F43285848E2D10E950804D027C0209D80 Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 33717 IP address blocks: 208.70.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:0e:95:08:04:d0:27:c0:20:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=8eaca67d-1eaa-4bcb-8ebb-da082ee94c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ba:0d:0a:95:e9:d5:3a:67:ec:cf:f1:57:e8: 42:ed:03:aa:82:19:c5:b7:89:27:39:3a:b8:2f:9b: 30:07:5b:85:83:fe:8e:ac:d7:ab:56:ca:f3:b0:28: 2c:dc:3a:82:d7:83:67:20:c2:3e:6c:b5:b1:ed:74: 57:34:cb:cc:b5:17:88:45:05:00:d0:2b:05:4f:11: 67:5a:05:93:16:48:4a:b6:9a:80:63:65:53:ba:84: b6:52:3e:99:7c:c7:b1:c8:b0:1c:5d:16:72:d2:96: 6b:8c:43:7f:1b:eb:f6:05:6c:be:9d:84:58:4d:0b: 30:d5:fa:73:ff:ae:7d:ce:d4:7e:31:6f:a5:eb:71: 79:44:11:1c:03:f6:06:32:4b:ba:14:9f:e9:a0:c2: 8a:ee:11:6f:31:62:e3:05:60:3a:0b:22:14:0d:ee: 23:a7:59:3e:56:24:39:59:c0:94:6e:48:b9:e3:f3: b9:5e:2a:b0:2f:f5:5b:e1:ea:15:db:90:c8:20:d7: 50:9f:59:69:ba:5f:3c:af:4f:44:a8:67:7e:1b:65: bc:1d:6a:d3:66:b9:ce:30:e4:ea:0d:03:34:f4:26: fd:a4:c5:e1:f1:c1:60:4c:a1:56:89:4c:d1:46:d0: 2e:90:f5:80:35:cc:75:9e:1e:78:2e:3f:12:65:95: b2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DA:56:9B:DA:E8:85:11:07:D1:5E:19:6E:2D:42:0A:7C:B6:CF:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl X509v3 Authority Key Identifier: keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer sbgp-ipAddrBlock: critical IPv4: 208.70.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4d:92:0f:a4:69:1e:45:00:84:f8:a0:88:76:1d:8b:0f:44: 1d:80:5c:d5:ae:e7:2b:33:af:4a:f5:b7:8c:a6:80:a6:06:29: 04:22:be:49:ce:10:d6:43:ee:86:26:b1:0a:50:f5:e8:9f:83: 35:e5:14:b9:a6:fd:16:fe:f5:9e:fe:79:ca:6c:47:c5:04:30: 6b:3f:49:ec:77:0b:69:31:5b:e1:8e:cb:3e:81:67:a2:e5:64: 89:a3:5e:6b:95:25:98:83:92:7c:2b:73:de:12:58:ad:4c:29: ed:82:19:8b:93:3a:b2:9c:a7:96:3f:e7:63:cf:03:5d:71:88: 60:ae:83:da:c2:ed:64:0e:7a:5c:83:5b:36:9c:bc:81:dc:93: 76:ab:de:58:cb:0c:9e:e9:2e:5a:57:a8:26:74:a5:3d:d9:51: fe:c3:ad:93:ef:2b:68:d0:1c:1b:21:8c:8b:be:69:0a:53:6e: a4:f2:bf:e6:4b:43:cb:b6:a4:b2:6c:9c:a7:4e:10:7a:61:39: 14:25:a7:d2:4f:cb:89:0f:b6:74:27:1b:0f:2f:12:e8:bf:02: cb:ed:1e:32:c8:83:7e:0c:32:66:4d:95:20:c4:0f:b8:a6:97: 6d:df:10:e9:74:b9:6f:14:6c:a0:b6:25:b2:db:4f:7b:ff:cc: 96:a4:20:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Q6VCATQJ8AgnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNi ZmQ2MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk OGVhY2E2N2QtMWVhYS00YmNiLThlYmItZGEwODJlZTk0Yzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiroNCpXp1Tpn7M/xV+hC7QOqghnFt4knOTq4 L5swB1uFg/6OrNerVsrzsCgs3DqC14NnIMI+bLWx7XRXNMvMtReIRQUA0CsFTxFn WgWTFkhKtpqAY2VTuoS2Uj6ZfMexyLAcXRZy0pZrjEN/G+v2BWy+nYRYTQsw1fpz /659ztR+MW+l63F5RBEcA/YGMku6FJ/poMKK7hFvMWLjBWA6CyIUDe4jp1k+ViQ5 WcCUbki54/O5XiqwL/Vb4eoV25DIINdQn1lpul88r09EqGd+G2W8HWrTZrnOMOTq DQM09Cb9pMXh8cFgTKFWiUzRRtAukPWANcx1nh54Lj8SZZWy8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnaVpva6IURB9FeGW4tQgp8ts94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0 YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvYTNjOTEzYmQtMzhhNy0z MTEzLTkxYTMtNDNjZmE4MjA3MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzdjNGM2MmEtM2Y2ZC00YzFjLThi ZGItMzcwNjI0NmNiZmQ2Lzc3YzRjNjJhLTNmNmQtNGMxYy04YmRiLTM3MDYyNDZj YmZkNi5jcmwwHwYDVR0jBBgwFoAU4p3oDYbgi/0iz/5leJQg8L1y3xMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2 MjQ2Y2JmZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1Nkg+kaR5FAIT4oIh2HYsPRB2AXNWu5yszr0r1t4ymgKYGKQQivknO ENZD7oYmsQpQ9eifgzXlFLmm/Rb+9Z7+ecpsR8UEMGs/Sex3C2kxW+GOyz6BZ6Ll ZImjXmuVJZiDknwrc94SWK1MKe2CGYuTOrKcp5Y/52PPA11xiGCug9rC7WQOelyD WzacvIHck3ar3ljLDJ7pLlpXqCZ0pT3ZUf7DrZPvK2jQHBshjIu+aQpTbqTyv+ZL Q8u2pLJsnKdOEHphORQlp9JPy4kPtnQnGw8vEui/AsvtHjLIg34MMmZNlSDED7im l23fEOl0uW8UbKC2JbLbT3v/zJakILo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:44 2025 by rpki-client