$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/08d994b0-98f1-323a-8f29-58eb272417bd.roa File: 08d994b0-98f1-323a-8f29-58eb272417bd.roa (raw, json) Hash identifier: +orx9bQWzX69hFmVPyTONRGKBgBXKNvIiB764wWhZlU= Subject key identifier: 9E:08:5A:75:E6:69:69:AA:62:E3:02:2C:A5:43:EB:85:25:9D:9C:5A Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F43285848E16BE30BD304A4B0CD562C40 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/08d994b0-98f1-323a-8f29-58eb272417bd.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 16826 IP address blocks: 198.248.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e3:0b:d3:04:a4:b0:cd:56:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=f2071a0c-b3bd-4be5-a165-5a4f21ad6c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:db:5e:1a:0c:7a:35:34:cc:ea:1a:1e:81:b8: fd:5b:9a:7b:c6:0b:9f:83:d6:59:08:49:c9:9d:90: 98:d3:61:f1:41:fe:da:1d:b0:4a:f5:6a:30:4a:3b: 7d:19:df:56:5b:97:4f:93:94:6d:5b:8c:e6:2f:54: bc:79:e7:37:d3:3e:ff:16:ac:70:95:68:e0:53:e7: 26:44:43:a7:ad:cd:d1:ad:4d:d7:ef:0e:fc:8d:8c: b5:8e:a4:8c:8b:1f:03:81:06:b7:d8:62:e4:20:2e: b6:44:c1:13:a4:db:fb:47:46:37:d0:3e:49:86:fb: 92:e4:2d:f3:f5:7d:7c:12:49:3e:8a:18:ff:d9:57: 03:7e:44:d3:5e:fe:27:e8:f0:ba:83:40:4b:d4:e9: 70:47:f9:08:ec:13:99:ea:32:08:0b:02:28:f1:66: 61:73:64:b4:e3:fe:22:d7:09:0d:b7:58:f0:f1:d4: 0a:2f:74:83:58:52:13:32:5b:cc:19:65:a4:bf:ef: 7d:07:f4:e6:4f:a8:b1:93:89:bb:4d:6f:76:63:49: d6:16:b0:8a:10:3b:02:53:a4:e9:7f:3e:22:26:93: 3c:74:52:db:68:c6:a0:0a:7b:52:c1:28:3c:b0:8c: 09:23:e2:a3:6e:2d:99:9f:59:ff:66:b7:08:6b:60: ed:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:08:5A:75:E6:69:69:AA:62:E3:02:2C:A5:43:EB:85:25:9D:9C:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/08d994b0-98f1-323a-8f29-58eb272417bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:93:f7:62:05:f2:31:a3:94:60:0d:39:cb:aa:7a:73:1c:12: 61:b1:e7:54:ad:a5:78:b0:3f:8f:7b:89:ea:80:a1:fd:ba:bc: a1:4f:f1:1b:c0:a3:c4:c0:aa:06:c2:48:bd:09:34:83:7a:e7: 4c:2e:23:a0:cc:de:66:6e:e7:b8:5c:c9:78:a6:79:36:56:02: 91:b5:9f:99:80:e9:20:c6:c1:6e:bd:cf:b9:f8:30:92:9a:47: 15:d2:f2:72:21:22:a9:35:ab:d7:8c:84:12:fc:bb:ff:85:82: 61:aa:f8:f7:29:44:1a:de:5c:d0:b8:92:5e:76:7c:2f:0a:bf: fb:0c:28:d4:18:b4:40:1d:b5:7b:fb:7e:10:56:27:21:1e:fd: a8:92:8c:1f:10:c3:d8:cc:38:53:9a:65:fa:00:9a:e8:92:23: 89:1b:38:7b:18:b8:e5:15:95:44:85:00:d4:1f:e1:31:50:b4: 16:f2:a3:e5:11:71:69:c5:8e:a8:e4:bb:0d:5a:83:30:17:79: b5:64:8e:c0:f7:f9:a3:d0:4a:76:d5:22:d9:ea:b0:3c:e6:8a: 36:a4:fe:6d:db:75:31:1c:72:6d:71:30:d3:39:be:b6:16:78: a0:62:f6:b0:2e:6f:55:c2:12:bc:55:01:1a:94:84:3c:67:7d: 0e:ea:2d:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+ML0wSksM1WLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjIwNzFhMGMtYjNiZC00YmU1LWExNjUtNWE0ZjIxYWQ2YzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktteGgx6NTTM6hoegbj9W5p7xgufg9ZZCEnJ nZCY02HxQf7aHbBK9WowSjt9Gd9WW5dPk5RtW4zmL1S8eec30z7/FqxwlWjgU+cm REOnrc3RrU3X7w78jYy1jqSMix8DgQa32GLkIC62RMETpNv7R0Y30D5JhvuS5C3z 9X18Ekk+ihj/2VcDfkTTXv4n6PC6g0BL1OlwR/kI7BOZ6jIICwIo8WZhc2S04/4i 1wkNt1jw8dQKL3SDWFITMlvMGWWkv+99B/TmT6ixk4m7TW92Y0nWFrCKEDsCU6Tp fz4iJpM8dFLbaMagCntSwSg8sIwJI+Kjbi2Zn1n/ZrcIa2DtmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4IWnXmaWmqYuMCLKVD64UlnZxaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvMDhkOTk0YjAtOThmMS0z MjNhLThmMjktNThlYjI3MjQxN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExvhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKT92IF8jGjlGANOcuqenMcEmGx51StpXiwP497ieqAof26vKFP8RvA o8TAqgbCSL0JNIN650wuI6DM3mZu57hcyXimeTZWApG1n5mA6SDGwW69z7n4MJKa RxXS8nIhIqk1q9eMhBL8u/+FgmGq+PcpRBreXNC4kl52fC8Kv/sMKNQYtEAdtXv7 fhBWJyEe/aiSjB8Qw9jMOFOaZfoAmuiSI4kbOHsYuOUVlUSFANQf4TFQtBbyo+UR cWnFjqjkuw1agzAXebVkjsD3+aPQSnbVItnqsDzmijak/m3bdTEccm1xMNM5vrYW eKBi9rAub1XCErxVARqUhDxnfQ7qLVc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:18 2025 by rpki-client