$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70226b31-5a81-344d-af5a-5f010e3fea64.roa File: 70226b31-5a81-344d-af5a-5f010e3fea64.roa (raw, json) Hash identifier: o+W1/L8F7ve9tkNp6xmZdC/OHMv+5za82LWd3sezChY= Subject key identifier: 55:85:69:22:AA:A3:19:0C:67:71:EC:89:FE:36:49:41:82:DE:E4:57 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584819CFE1D10108FDF01ADCAF80 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70226b31-5a81-344d-af5a-5f010e3fea64.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 2734 IP address blocks: 208.74.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:cf:e1:d1:01:08:fd:f0:1a:dc:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=3a8a2624-0b40-442c-886a-7794690be310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:87:80:45:a2:88:a1:c9:5b:f5:b9:61:d0: 1a:17:4e:28:52:ce:e5:bb:61:ea:5c:82:11:0e:66: 86:c0:6b:25:4a:8b:bc:98:fd:f6:36:2b:96:f6:28: 89:e6:a5:55:2e:ab:b8:3f:0b:f7:5c:6d:0a:f2:67: 9a:d6:0c:26:e4:59:e0:aa:01:97:50:65:0d:c6:62: 01:46:78:41:89:30:d1:17:dc:92:aa:d9:4e:8f:26: 73:df:a6:4e:6b:af:89:3c:64:a1:bd:2b:12:36:66: 75:13:af:c4:0c:b5:a1:0a:03:a8:83:bd:27:6c:65: f6:3e:58:b9:bc:bc:a6:84:85:61:3a:a0:ca:84:7f: 00:85:48:ce:48:f6:29:68:cd:09:e5:6f:74:90:25: 40:d7:59:ce:05:bc:a8:5f:fa:10:cf:2b:be:a7:a2: 6d:35:dc:fb:c8:db:32:6a:3a:ad:78:79:2c:31:5e: 2f:5d:d0:bf:a0:82:83:ba:9c:ce:46:81:d1:6a:6b: 3a:d8:0c:f3:cd:8f:8a:63:2f:89:7c:ab:95:40:c7: 35:c5:c1:e9:db:13:1a:4f:da:ce:50:f9:6a:83:2f: cd:6d:63:b5:0e:48:67:c1:93:8a:4b:2e:92:df:2a: 65:b8:b7:21:90:27:a4:ad:29:57:c7:05:ee:73:8b: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:85:69:22:AA:A3:19:0C:67:71:EC:89:FE:36:49:41:82:DE:E4:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70226b31-5a81-344d-af5a-5f010e3fea64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 208.74.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:fb:bb:bf:d2:94:77:79:c0:e7:26:c4:f1:79:e5:63:79:bf: 7f:ae:3c:00:2b:16:2a:a7:6a:68:e0:7f:63:62:f7:fc:ac:98: a3:ad:68:0b:ae:9d:1a:48:b9:0c:a5:24:3e:62:01:2f:36:c3: b5:29:6a:14:82:bf:d8:06:4b:e4:e6:fc:80:37:60:20:3c:52: bb:91:82:f1:56:b9:cb:29:32:1e:de:f0:99:49:3c:3b:65:9e: ac:80:64:72:05:c6:0d:0d:54:f9:a9:6e:e2:88:73:d0:a1:63: 32:6d:1c:32:d9:27:9e:bc:8c:0c:97:00:75:28:61:25:58:d7: e3:ae:1f:2a:7f:18:93:a3:db:a6:4e:9c:6e:b3:c5:91:1a:8d: 78:84:a8:3e:92:06:f9:f8:0b:fe:0a:ea:c3:ff:d8:53:2f:3d: c4:60:df:48:13:5f:f0:8f:72:94:ed:b1:9f:07:3e:15:6f:ef: 23:bb:d3:39:c5:1b:bd:14:7d:7b:9e:20:56:36:38:2c:c1:33: c1:92:1d:47:74:9c:91:6f:7b:f3:1e:68:52:f2:f7:d1:3a:4a: 2e:76:c3:58:1f:3f:39:03:08:c9:5f:c1:96:e7:4c:f4:0d:2e: 43:8b:f4:93:7f:53:0a:87:6f:b8:97:75:f7:0a:e5:5a:c1:3d: e4:d0:46:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz+HRAQj98Brcr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk M2E4YTI2MjQtMGI0MC00NDJjLTg4NmEtNzc5NDY5MGJlMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ+HgEWiiKHJW/W5YdAaF04oUs7lu2HqXIIR DmaGwGslSou8mP32NiuW9iiJ5qVVLqu4Pwv3XG0K8mea1gwm5FngqgGXUGUNxmIB RnhBiTDRF9ySqtlOjyZz36ZOa6+JPGShvSsSNmZ1E6/EDLWhCgOog70nbGX2Pli5 vLymhIVhOqDKhH8AhUjOSPYpaM0J5W90kCVA11nOBbyoX/oQzyu+p6JtNdz7yNsy ajqteHksMV4vXdC/oIKDupzORoHRams62AzzzY+KYy+JfKuVQMc1xcHp2xMaT9rO UPlqgy/NbWO1DkhnwZOKSy6S3ypluLchkCekrSlXxwXuc4vYEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWFaSKqoxkMZ3Hsif42SUGC3uRXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvNzAyMjZiMzEtNWE4MS0z NDRkLWFmNWEtNWYwMTBlM2ZlYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EpMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj7u7/SlHd5wOcmxPF55WN5v3+uPAArFiqnamjgf2Ni9/ysmKOtaAuu nRpIuQylJD5iAS82w7UpahSCv9gGS+Tm/IA3YCA8UruRgvFWucspMh7e8JlJPDtl nqyAZHIFxg0NVPmpbuKIc9ChYzJtHDLZJ568jAyXAHUoYSVY1+OuHyp/GJOj26ZO nG6zxZEajXiEqD6SBvn4C/4K6sP/2FMvPcRg30gTX/CPcpTtsZ8HPhVv7yO70znF G70UfXueIFY2OCzBM8GSHUd0nJFve/MeaFLy99E6Si52w1gfPzkDCMlfwZbnTPQN LkOL9JN/UwqHb7iXdfcK5VrBPeTQRqs= -----END CERTIFICATE-----Generated at Sun Feb 16 22:19:02 2025 by rpki-client