$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa File: ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa (raw, json) Hash identifier: II2vj7t3qXFEaJF/t5i/ZG3O/36L3+BGR+WaF6CYRmU= Subject key identifier: C3:C7:77:C5:0B:E0:F2:AD:10:EA:CE:97:B5:1A:1A:F9:44:71:88:5B Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F432858490021671C10B37A8C6611D400 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 2734 IP address blocks: 208.64.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:67:1c:10:b3:7a:8c:66:11:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=86924442-2524-466e-9a41-9e19fd035334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:bb:aa:8d:26:84:83:60:2b:02:09:3f:37: 0f:e9:46:8a:97:2d:d7:8e:89:a5:ca:fb:0b:e0:2d: c8:43:c5:23:08:1b:ca:ee:97:11:c2:93:0c:d0:e4: 1a:2e:e2:87:1c:08:be:e0:dd:a3:ba:56:97:4f:ec: 08:eb:f8:10:b0:a6:48:9c:bc:9c:78:9b:da:33:c2: b0:4d:96:13:37:d0:26:f1:f0:d9:12:49:55:a7:5a: da:88:3b:e1:68:d7:d6:68:11:ee:fd:e2:4c:d0:f3: e9:78:a8:ac:cd:36:7f:68:90:1e:23:bd:20:8a:04: 48:2f:20:e8:91:47:6f:0f:fd:5a:22:9c:3c:c5:ee: b1:ee:8a:1d:b7:23:26:85:c2:c6:47:80:b8:04:75: 95:20:16:91:43:1d:2b:7a:b2:4b:bd:68:f9:be:47: 1a:2b:b0:b9:93:e4:6a:59:d9:99:f3:d0:0e:27:e6: b2:de:90:8c:ff:68:55:9b:78:02:9a:a9:05:5a:ed: 1f:fd:6d:b6:81:ce:b2:39:e3:b4:fe:36:e4:bf:b0: 4f:a1:f2:52:07:22:1c:51:a3:7b:94:86:8b:63:c1: a9:22:1a:c7:e5:57:5a:3e:7d:8a:22:ab:91:39:c5: fe:8d:b7:d0:01:3a:1a:b9:4e:16:4e:f1:49:ae:61: 71:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C7:77:C5:0B:E0:F2:AD:10:EA:CE:97:B5:1A:1A:F9:44:71:88:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 208.64.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:59:1d:74:94:19:83:45:05:be:44:bb:f1:be:3c:b7:ed:0f: 0b:b4:8a:c4:27:36:70:72:b4:b4:8e:61:cb:0f:43:6f:de:83: 75:b8:7f:e1:d1:4c:4b:c8:38:d2:32:54:ec:1b:e5:94:15:c0: e0:3d:18:3b:6f:3e:1a:d3:d4:7d:71:9c:08:1b:79:d7:2f:86: 94:66:b3:18:c6:83:ca:10:37:63:21:69:d7:32:93:71:82:7d: 19:73:6f:7b:fe:1b:8f:36:4f:e4:3b:b7:d8:73:8f:cb:4c:7c: 52:31:9b:7b:a6:18:a8:69:8f:86:01:24:f1:8d:1b:ce:c0:f3: 59:69:d8:20:b5:3b:3e:aa:cd:ae:d5:37:08:11:79:da:d5:ab: 0c:e2:13:e0:41:8a:c4:80:1e:bb:9a:84:89:55:bd:f6:22:98: a6:0b:7c:57:11:01:6c:fe:b5:c2:4d:f9:a9:87:f0:55:48:ac: 92:9f:d6:90:0e:3b:01:ce:ca:85:7f:b3:34:51:3f:06:0a:bb: 14:59:87:62:89:57:1c:e2:db:9e:60:36:53:41:97:24:e9:72: d2:9f:76:17:db:f4:3e:31:23:d2:79:3b:48:2c:05:b0:1b:5e: 80:d3:0f:20:e9:e7:e6:51:92:1f:18:a7:7d:ed:5c:77:60:46: 19:67:a6:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWccELN6jGYR1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk ODY5MjQ0NDItMjUyNC00NjZlLTlhNDEtOWUxOWZkMDM1MzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB+7qo0mhINgKwIJPzcP6UaKly3XjomlyvsL 4C3IQ8UjCBvK7pcRwpMM0OQaLuKHHAi+4N2julaXT+wI6/gQsKZInLyceJvaM8Kw TZYTN9Am8fDZEklVp1raiDvhaNfWaBHu/eJM0PPpeKiszTZ/aJAeI70gigRILyDo kUdvD/1aIpw8xe6x7oodtyMmhcLGR4C4BHWVIBaRQx0rerJLvWj5vkcaK7C5k+Rq WdmZ89AOJ+ay3pCM/2hVm3gCmqkFWu0f/W22gc6yOeO0/jbkv7BPofJSByIcUaN7 lIaLY8GpIhrH5VdaPn2KIquROcX+jbfQAToauU4WTvFJrmFxPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPHd8UL4PKtEOrOl7UaGvlEcYhbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvY2U4ZmYzNWEtZWJiZC0z Njk5LTk3YzktYzgwYmQ0YmUyMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ED4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxZHXSUGYNFBb5Eu/G+PLftDwu0isQnNnBytLSOYcsPQ2/eg3W4f+HR TEvIONIyVOwb5ZQVwOA9GDtvPhrT1H1xnAgbedcvhpRmsxjGg8oQN2Mhadcyk3GC fRlzb3v+G482T+Q7t9hzj8tMfFIxm3umGKhpj4YBJPGNG87A81lp2CC1Oz6qza7V NwgRedrVqwziE+BBisSAHruahIlVvfYimKYLfFcRAWz+tcJN+amH8FVIrJKf1pAO OwHOyoV/szRRPwYKuxRZh2KJVxzi255gNlNBlyTpctKfdhfb9D4xI9J5O0gsBbAb XoDTDyDp5+ZRkh8Yp33tXHdgRhlnprU= -----END CERTIFICATE-----Generated at Fri Mar 14 07:22:07 2025 by rpki-client