$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70024f6c-997e-38fe-a1b0-71e9db6be67e.roa File: 70024f6c-997e-38fe-a1b0-71e9db6be67e.roa (raw, json) Hash identifier: Msqb02/hYbcFi/S71wEZecUDjUKC2XnO8mTBQ0tNO1A= Subject key identifier: 73:60:1D:1F:DE:FB:85:82:29:6F:42:3D:22:1A:FD:E6:52:B0:51:A8 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F43285848E9CBF211AC475B7924F42600 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70024f6c-997e-38fe-a1b0-71e9db6be67e.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 2734 IP address blocks: 208.64.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:f2:11:ac:47:5b:79:24:f4:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=0fc0e26e-ccc9-4735-8269-233fd4b1b093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:6c:5d:c1:76:15:4b:c8:a4:39:82:3b:08: 99:f0:dd:37:d1:df:79:7e:45:36:d0:af:9a:6e:69: 01:a3:9d:9e:4b:8f:c0:f6:c3:9d:39:06:6d:b6:ff: a3:35:c0:24:4d:58:d7:eb:5e:58:83:53:5f:84:9f: 02:ab:7e:2b:4a:a5:43:b6:d7:2a:0e:4a:1d:f7:ac: 56:3e:08:13:20:75:2b:7c:be:84:70:0e:11:8b:ba: ef:df:49:9f:f1:97:03:dc:81:43:1c:94:1b:e0:e2: 00:03:ed:f3:88:f2:ad:91:14:e6:73:13:98:45:1d: 1c:ca:ea:c6:88:ce:b0:c9:e0:03:32:19:6f:44:7e: 33:f9:21:9f:82:b6:03:77:b8:a6:7a:91:79:10:5a: a8:38:fa:ca:d1:24:28:cf:93:ad:dc:6d:70:df:f3: 4e:55:4f:c6:1e:64:45:7d:87:44:ec:25:c3:ab:c2: 19:d8:9c:51:d0:90:22:72:d2:54:83:40:64:1c:86: 92:4f:ee:c2:ff:bd:35:f1:70:6f:ad:c2:60:1c:f0: 6a:53:8b:5f:28:82:9e:11:fe:32:0e:43:a7:18:d6: d0:d7:77:67:05:0d:ef:d7:ef:d3:92:1e:a6:4b:11: 40:0d:d6:1d:9c:2c:92:dd:49:19:2e:de:2c:56:74: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:60:1D:1F:DE:FB:85:82:29:6F:42:3D:22:1A:FD:E6:52:B0:51:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70024f6c-997e-38fe-a1b0-71e9db6be67e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 208.64.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:0c:8c:c7:35:88:24:ba:4b:47:db:6c:11:f8:fd:41:a1:17: 5a:49:18:53:db:c0:55:67:a3:60:ed:ae:48:3e:9d:2b:13:45: fc:3b:99:cd:23:dd:05:88:5c:97:a3:41:23:e3:60:e4:8d:b3: 1a:c3:7f:54:71:c6:18:e0:e4:32:cf:d7:bb:0f:51:a1:c9:26: 00:6b:ba:37:8b:da:cc:1c:e5:1c:66:f4:a1:0a:05:bb:00:69: 28:f9:50:27:fd:e2:44:5e:81:77:27:81:5e:1c:23:f7:f0:8c: 79:de:01:48:54:a4:0d:9d:3a:fa:d4:ea:af:88:c9:fa:d2:3a: 25:4e:cc:93:fe:63:a6:e4:bd:85:06:23:e9:45:95:d1:95:5a: fe:12:ca:29:38:ca:3c:f3:3c:b0:03:39:c8:af:dc:86:ae:62: 43:41:04:ea:45:e8:3e:5e:20:03:da:ff:2c:6e:7b:6f:60:d8: a2:76:05:7e:80:bd:7b:9d:89:c4:23:6f:4b:09:3d:0c:a6:00: ca:1a:aa:ae:fe:47:74:91:56:66:9a:f9:00:3b:48:07:22:90: 91:9b:d8:0e:e4:4d:f2:ae:a6:09:2b:22:db:7e:30:9e:94:b3: 0e:3a:52:99:d8:e9:d0:a0:b6:73:0b:17:74:56:a7:b3:c7:6b: 1b:87:8d:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy/IRrEdbeST0JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk MGZjMGUyNmUtY2NjOS00NzM1LTgyNjktMjMzZmQ0YjFiMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgdsXcF2FUvIpDmCOwiZ8N030d95fkU20K+a bmkBo52eS4/A9sOdOQZttv+jNcAkTVjX615Yg1NfhJ8Cq34rSqVDttcqDkod96xW PggTIHUrfL6EcA4Ri7rv30mf8ZcD3IFDHJQb4OIAA+3ziPKtkRTmcxOYRR0cyurG iM6wyeADMhlvRH4z+SGfgrYDd7imepF5EFqoOPrK0SQoz5Ot3G1w3/NOVU/GHmRF fYdE7CXDq8IZ2JxR0JAictJUg0BkHIaST+7C/7018XBvrcJgHPBqU4tfKIKeEf4y DkOnGNbQ13dnBQ3v1+/Tkh6mSxFADdYdnCyS3UkZLt4sVnQjNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNgHR/e+4WCKW9CPSIa/eZSsFGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvNzAwMjRmNmMtOTk3ZS0z OGZlLWExYjAtNzFlOWRiNmJlNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ED7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkMjMc1iCS6S0fbbBH4/UGhF1pJGFPbwFVno2Dtrkg+nSsTRfw7mc0j 3QWIXJejQSPjYOSNsxrDf1Rxxhjg5DLP17sPUaHJJgBrujeL2swc5Rxm9KEKBbsA aSj5UCf94kRegXcngV4cI/fwjHneAUhUpA2dOvrU6q+IyfrSOiVOzJP+Y6bkvYUG I+lFldGVWv4Syik4yjzzPLADOciv3IauYkNBBOpF6D5eIAPa/yxue29g2KJ2BX6A vXudicQjb0sJPQymAMoaqq7+R3SRVmaa+QA7SAcikJGb2A7kTfKupgkrItt+MJ6U sw46UpnY6dCgtnMLF3RWp7PHaxuHjT0= -----END CERTIFICATE-----Generated at Fri Mar 14 07:22:06 2025 by rpki-client