$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a89150dd-4153-345d-91e8-d43ba9e5edde.roa File: a89150dd-4153-345d-91e8-d43ba9e5edde.roa (raw, json) Hash identifier: NKZdlrG55N8GtmDYwDZ5BTBEaraDtjRyCIZrJsUbqF4= Subject key identifier: 2E:44:55:53:C9:E1:D0:00:EA:7A:1F:AD:2A:23:E4:E2:09:34:23:8D Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F43285848A996262864BDA1F539BF31C0 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a89150dd-4153-345d-91e8-d43ba9e5edde.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 3549 IP address blocks: 208.54.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:26:28:64:bd:a1:f5:39:bf:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=d2351be4-edc1-4349-a0f3-6415e2503409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:7e:11:ec:87:25:63:1e:5e:e5:4a:55:b1: 25:0b:f2:3d:6e:4a:6e:17:47:d0:24:ca:f0:ef:9d: 69:2c:db:e8:49:16:ac:c5:55:ef:d2:b9:2d:5e:e8: c6:91:63:a3:b6:da:39:9a:31:9e:6c:ba:8f:c8:fb: b9:26:24:c8:7f:16:25:48:7d:bd:1e:1e:54:79:c2: fa:0e:c0:c2:75:3b:82:33:cf:17:7c:88:4b:90:3d: a4:cf:4d:05:5b:2f:ac:8f:ce:4b:7e:66:ab:10:fe: 66:94:ad:78:ea:1f:bb:db:6b:0d:30:25:6c:d5:8d: 0d:48:25:27:5d:38:89:fc:ef:8f:ea:65:c0:e5:32: 9e:97:a0:fd:d3:f7:6a:fb:be:6e:6e:53:d1:63:b2: 49:cc:c3:b4:49:83:12:e0:8a:6a:6d:1a:6d:de:65: 91:9a:25:4f:98:8b:a0:46:f9:02:6b:09:8b:b2:b4: 0d:8e:c4:f2:71:38:b2:80:2b:5c:08:fc:f9:76:b2: 92:0e:0f:01:99:3c:a3:13:3f:02:34:c7:32:c8:ab: ef:88:73:ba:63:33:a0:9e:20:39:6b:54:10:a1:33: 0f:a0:4a:34:08:0e:b7:9b:23:8a:17:d1:92:ce:c8: 0e:bb:3d:14:26:f9:48:03:fa:bf:cf:be:47:d5:aa: fc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:44:55:53:C9:E1:D0:00:EA:7A:1F:AD:2A:23:E4:E2:09:34:23:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a89150dd-4153-345d-91e8-d43ba9e5edde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 208.54.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:47:76:bf:44:2a:5d:87:00:9a:a5:68:96:03:e7:da:ab:91: 66:87:68:f9:7e:1d:71:f4:97:bb:2d:a8:4d:d3:ce:91:a6:b3: 61:67:2e:c1:d9:63:d6:78:f9:c2:02:58:a9:4e:08:48:db:26: 43:34:bc:bc:3e:b5:bc:9b:b4:bd:53:9e:07:ea:2a:79:63:a3: 00:f9:ad:97:6a:7b:34:b0:e6:ff:e8:dc:b8:15:5d:50:e1:40: a4:f4:0f:3b:e9:c4:d7:46:95:2a:10:18:36:e0:52:32:bb:24: ef:7d:02:7f:e1:09:5a:f8:55:48:b8:91:89:70:f8:b0:fa:0b: d9:d4:e5:aa:34:78:79:f4:c7:5f:a7:de:fb:f8:a1:22:8c:f4: 2d:cb:b8:ec:40:a2:88:62:5c:c1:8c:28:53:81:34:14:0f:8d: 31:6b:c4:20:95:a3:42:4e:22:dd:8b:e4:f2:fc:18:ac:d7:a3: b8:da:00:05:71:e8:6b:b7:d3:dd:c3:7c:5d:7d:e7:1b:0c:11: 2f:14:d0:3a:b1:58:00:62:d4:cb:a4:ef:db:7b:52:64:4f:3e: 74:c5:2a:34:c2:2e:e2:b9:bb:92:d2:20:fb:dc:37:66:11:38: c9:ee:53:86:51:1e:62:f1:87:e7:cf:dc:10:d2:68:3f:08:d7: 35:17:c1:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipliYoZL2h9Tm/McAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDIzNTFiZTQtZWRjMS00MzQ5LWEwZjMtNjQxNWUyNTAzNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJh+EeyHJWMeXuVKVbElC/I9bkpuF0fQJMrw 751pLNvoSRasxVXv0rktXujGkWOjtto5mjGebLqPyPu5JiTIfxYlSH29Hh5UecL6 DsDCdTuCM88XfIhLkD2kz00FWy+sj85LfmarEP5mlK146h+722sNMCVs1Y0NSCUn XTiJ/O+P6mXA5TKel6D90/dq+75ublPRY7JJzMO0SYMS4IpqbRpt3mWRmiVPmIug RvkCawmLsrQNjsTycTiygCtcCPz5drKSDg8BmTyjEz8CNMcyyKvviHO6YzOgniA5 a1QQoTMPoEo0CA63myOKF9GSzsgOuz0UJvlIA/q/z75H1ar81QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5EVVPJ4dAA6nofrSoj5OIJNCONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvYTg5MTUwZGQtNDE1My0z NDVkLTkxZTgtZDQzYmE5ZTVlZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlHdr9EKl2HAJqlaJYD59qrkWaHaPl+HXH0l7stqE3TzpGms2FnLsHZ Y9Z4+cICWKlOCEjbJkM0vLw+tbybtL1TngfqKnljowD5rZdqezSw5v/o3LgVXVDh QKT0DzvpxNdGlSoQGDbgUjK7JO99An/hCVr4VUi4kYlw+LD6C9nU5ao0eHn0x1+n 3vv4oSKM9C3LuOxAoohiXMGMKFOBNBQPjTFrxCCVo0JOIt2L5PL8GKzXo7jaAAVx 6Gu3093DfF195xsMES8U0DqxWABi1Muk79t7UmRPPnTFKjTCLuK5u5LSIPvcN2YR OMnuU4ZRHmLxh+fP3BDSaD8I1zUXwQ0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:03:58 2025 by rpki-client