$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa File: ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa (raw, json) Hash identifier: zJk8//H7TiA/9TIKHbbiCtqCWsLVIwgzqJi4BgwGdkM= Subject key identifier: 2F:2B:19:E8:65:8F:50:14:9F:5D:5A:7E:8E:56:50:5F:F7:B2:56:C4 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F432858481F65382A75D86B9B2E107040 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa Signing time: Sat 07 Dec 2024 02:00:39 +0000 ROA not before: Sat 07 Dec 2024 02:00:39 +0000 ROA not after: Fri 07 Mar 2025 02:00:39 +0000 asID: 2734 IP address blocks: 208.64.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1f:65:38:2a:75:d8:6b:9b:2e:10:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Dec 7 02:00:39 2024 GMT Not After : Mar 7 02:00:39 2025 GMT Subject: CN=1f728dbf-a29b-477c-88ad-28c67917867f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:1d:eb:c3:76:f3:e2:73:c9:ce:57:48:95: e8:75:97:d3:94:9b:54:f4:d0:e2:e3:59:e5:5f:f1: 0c:f1:6c:0a:74:f4:87:bf:24:87:54:34:d1:b1:07: f7:90:d3:ad:57:e5:ba:6e:68:e7:f6:26:da:99:19: d1:73:81:ef:0c:75:cd:90:07:76:d6:e9:0d:58:0b: f3:86:aa:ee:23:f3:c0:06:2a:14:21:67:bd:c9:24: ee:ad:28:0c:07:17:80:a2:c5:9f:18:ff:16:47:f3: c9:b4:77:cb:62:0f:2a:18:21:a3:98:45:2e:99:04: 4e:72:22:de:8c:d4:12:23:a4:27:9b:55:05:88:09: 82:52:95:d9:6d:47:81:b1:dc:15:b6:12:90:86:11: 00:7c:71:27:35:7b:69:79:79:25:73:32:76:d9:0e: d0:e7:ea:51:60:65:03:6e:a4:ce:95:27:1a:17:4d: b2:d4:b4:99:46:d9:67:aa:23:51:1f:0a:28:cc:7d: 83:2d:b4:fc:ca:5a:81:67:f1:7f:7c:9c:79:96:5b: 08:81:f3:e8:9a:ab:2d:4e:a8:1f:d6:df:ac:35:ff: 58:38:2e:e1:4c:b8:c6:23:75:9b:9d:5b:6f:e6:73: b7:5a:f3:e0:bb:35:ca:2d:9d:a1:e0:5e:0f:66:27: 47:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2B:19:E8:65:8F:50:14:9F:5D:5A:7E:8E:56:50:5F:F7:B2:56:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 208.64.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:aa:84:4e:f4:a2:4b:88:05:25:4c:46:04:3a:66:28:4b:37: 60:81:60:63:a9:2e:cc:7a:53:11:a4:50:8d:ed:2d:00:37:b0: cc:89:3c:f5:ac:cd:14:ee:61:2e:17:ef:6f:86:cf:7a:1f:80: c0:2e:56:81:a9:2a:74:f1:d0:14:f4:82:ab:86:7d:55:9c:ff: 7a:62:e1:19:ab:b0:b1:3b:ef:6b:22:07:8b:ca:7b:08:55:f2: 9d:71:5a:5d:08:17:29:78:ca:1b:ab:60:8e:4c:46:7c:d1:3a: 03:08:6f:1b:6b:bf:58:91:b9:d1:fe:62:86:95:e8:62:69:b9: 5d:4d:70:ff:e7:47:8e:e7:d2:ef:6b:2a:00:d2:df:57:d9:bd: 92:9c:1e:a4:e9:b0:d6:af:00:77:1d:2d:af:3f:95:02:08:72: 1e:df:b4:eb:14:b9:a0:3a:c6:bb:ff:86:4d:43:61:91:60:7a: e1:8c:13:68:fb:f2:c6:e8:2d:4a:85:2e:89:ef:e9:bf:03:c0: 7f:02:e2:46:93:a3:3c:10:c3:62:53:46:c5:af:ba:51:d7:a0: 54:68:9e:93:89:03:ce:ba:43:02:93:e9:b6:06:18:2b:09:13: 96:1c:c1:af:d5:2d:b0:c7:99:a4:47:94:49:f5:51:e4:99:98: ce:d5:e6:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTgqddhrmy4QcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk MWY3MjhkYmYtYTI5Yi00NzdjLTg4YWQtMjhjNjc5MTc4NjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBod68N28+Jzyc5XSJXodZfTlJtU9NDi41nl X/EM8WwKdPSHvySHVDTRsQf3kNOtV+W6bmjn9ibamRnRc4HvDHXNkAd21ukNWAvz hqruI/PABioUIWe9ySTurSgMBxeAosWfGP8WR/PJtHfLYg8qGCGjmEUumQROciLe jNQSI6Qnm1UFiAmCUpXZbUeBsdwVthKQhhEAfHEnNXtpeXklczJ22Q7Q5+pRYGUD bqTOlScaF02y1LSZRtlnqiNRHwoozH2DLbT8ylqBZ/F/fJx5llsIgfPomqstTqgf 1t+sNf9YOC7hTLjGI3WbnVtv5nO3WvPguzXKLZ2h4F4PZidH3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8rGehlj1AUn11afo5WUF/3slbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvY2U4ZmYzNWEtZWJiZC0z Njk5LTk3YzktYzgwYmQ0YmUyMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ED4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACqhE70okuIBSVMRgQ6ZihLN2CBYGOpLsx6UxGkUI3tLQA3sMyJPPWs zRTuYS4X72+Gz3ofgMAuVoGpKnTx0BT0gquGfVWc/3pi4RmrsLE772siB4vKewhV 8p1xWl0IFyl4yhurYI5MRnzROgMIbxtrv1iRudH+YoaV6GJpuV1NcP/nR47n0u9r KgDS31fZvZKcHqTpsNavAHcdLa8/lQIIch7ftOsUuaA6xrv/hk1DYZFgeuGME2j7 8sboLUqFLonv6b8DwH8C4kaTozwQw2JTRsWvulHXoFRonpOJA866QwKT6bYGGCsJ E5Ycwa/VLbDHmaRHlEn1UeSZmM7V5jk= -----END CERTIFICATE-----Generated at Sun Feb 16 22:11:42 2025 by rpki-client