$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa File: 974b8952-186c-379e-b0c2-e4fb964cf09d.roa (raw, json) Hash identifier: c2loRDFXrp+a7zATElc/tID52fvCOR1GjhDT9ZJx5Tg= Subject key identifier: A5:3C:1C:83:95:C3:47:64:D0:B6:47:16:9C:01:33:C5:FB:59:67:E6 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F43285848DEA134EC3D0363DF4ABB9500 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 21928 IP address blocks: 208.54.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:34:ec:3d:03:63:df:4a:bb:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=77b5efb5-3248-4c48-b262-386319aa6089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:93:bf:b8:68:82:f8:60:c8:4b:dd:a6:41:0c: fe:29:d6:6e:cc:7e:ce:25:41:a4:43:32:7f:bf:49: 63:e5:6e:d0:99:56:71:4f:42:d8:17:8a:56:5c:5d: a1:f9:84:81:20:21:cc:02:c6:8e:cd:2b:da:2e:4b: 7d:13:21:38:36:fd:9a:bd:4e:8f:28:3b:ae:ef:8d: 18:94:67:a7:e5:2d:11:50:97:17:c6:67:ab:ab:b3: d2:f4:6f:29:aa:21:e4:43:49:e6:b5:30:0c:a2:5b: 62:e4:1b:53:d4:df:ff:90:dc:13:f8:23:8f:c4:05: 42:18:c6:a4:32:54:1a:93:3e:3c:ac:8b:6b:f6:db: ce:f7:c3:74:01:00:b3:32:8b:2d:58:60:dc:32:ac: 55:71:4c:f3:90:ab:2f:bd:84:66:35:30:85:f5:cb: a8:d0:df:1b:4c:41:e8:d8:a3:fa:f4:8d:3d:1f:05: 6f:7f:11:e2:52:88:92:eb:9a:ff:f3:f9:82:8e:4c: 63:46:81:3b:81:f6:86:71:d4:5d:a0:c3:1e:27:dc: 39:42:1f:57:22:5f:da:bf:5c:8a:e6:0c:36:d0:eb: 80:91:19:13:10:80:fc:b6:c7:42:53:6c:c7:00:7e: d2:84:2b:04:74:08:e5:16:55:bc:d0:eb:75:6d:64: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3C:1C:83:95:C3:47:64:D0:B6:47:16:9C:01:33:C5:FB:59:67:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 208.54.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:71:71:d6:e0:80:b2:d6:46:6c:45:91:8e:57:1e:3c:59:1f: 18:23:1a:24:9e:e1:88:e5:a8:43:48:6d:3a:e6:03:23:43:b9: 4d:65:38:38:be:9a:50:ec:22:05:92:6e:fb:c0:fb:6f:a8:c9: 00:74:83:04:fe:f3:79:80:39:5b:10:56:48:58:08:92:a4:28: ee:7f:52:09:fe:d2:80:35:85:6f:16:09:d4:55:76:95:b0:a8: 4d:80:2a:3a:ef:5b:2d:2c:fd:44:96:5f:76:ac:56:06:d8:a9: da:bb:a8:b4:4c:b8:47:c0:99:6f:3f:70:2c:0c:1a:13:ae:bd: 30:d2:e8:75:b1:96:7d:58:e1:74:91:87:dc:a9:84:5d:2c:a8: bc:83:6c:5a:16:12:c9:2b:dc:6d:20:36:7f:ce:18:91:3e:24: c3:6f:ae:15:c7:91:97:52:8b:3e:92:b4:5b:80:38:ea:3a:2d: 5f:65:88:b0:7d:46:d9:d5:ac:96:cb:13:12:f1:9f:97:e5:f6: d8:ca:57:e8:78:a7:f4:97:bb:41:c9:73:ed:07:6b:1e:2a:c9: 9f:27:4a:5f:ad:1c:cf:54:d9:2b:60:df:41:c1:c0:74:88:69: bd:f9:d1:4e:db:5c:5d:64:70:b0:10:2c:c4:60:e0:e2:70:b9: 55:4d:56:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoTTsPQNj30q7lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NzdiNWVmYjUtMzI0OC00YzQ4LWIyNjItMzg2MzE5YWE2MDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZO/uGiC+GDIS92mQQz+KdZuzH7OJUGkQzJ/ v0lj5W7QmVZxT0LYF4pWXF2h+YSBICHMAsaOzSvaLkt9EyE4Nv2avU6PKDuu740Y lGen5S0RUJcXxmerq7PS9G8pqiHkQ0nmtTAMolti5BtT1N//kNwT+COPxAVCGMak MlQakz48rItr9tvO98N0AQCzMostWGDcMqxVcUzzkKsvvYRmNTCF9cuo0N8bTEHo 2KP69I09HwVvfxHiUoiS65r/8/mCjkxjRoE7gfaGcdRdoMMeJ9w5Qh9XIl/av1yK 5gw20OuAkRkTEID8tsdCU2zHAH7ShCsEdAjlFlW80Ot1bWRqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKU8HIOVw0dk0LZHFpwBM8X7WWfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvOTc0Yjg5NTItMTg2Yy0z NzllLWIwYzItZTRmYjk2NGNmMDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0DaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpxcdbggLLWRmxFkY5XHjxZHxgjGiSe4YjlqENIbTrmAyNDuU1lODi+ mlDsIgWSbvvA+2+oyQB0gwT+83mAOVsQVkhYCJKkKO5/Ugn+0oA1hW8WCdRVdpWw qE2AKjrvWy0s/USWX3asVgbYqdq7qLRMuEfAmW8/cCwMGhOuvTDS6HWxln1Y4XSR h9yphF0sqLyDbFoWEskr3G0gNn/OGJE+JMNvrhXHkZdSiz6StFuAOOo6LV9liLB9 RtnVrJbLExLxn5fl9tjKV+h4p/SXu0HJc+0Hax4qyZ8nSl+tHM9U2Stg30HBwHSI ab350U7bXF1kcLAQLMRg4OJwuVVNVic= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:21 2025 by rpki-client