$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/6e97f03d-b0ff-3e8d-a7cd-57b4940c6290.roa File: 6e97f03d-b0ff-3e8d-a7cd-57b4940c6290.roa (raw, json) Hash identifier: Hr8XeBciVlytOWdWnAlMd4owIL7XJpVVt5BuS2hxIY4= Subject key identifier: FB:03:C6:96:BB:45:7D:D5:63:6E:AF:EC:87:7C:9B:A5:67:D9:8D:17 Certificate issuer: /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Certificate serial: 010D0C9F43285848BE862CA30BCF77CFF1360140 Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/6e97f03d-b0ff-3e8d-a7cd-57b4940c6290.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 396982 IP address blocks: 168.235.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:2c:a3:0b:cf:77:cf:f1:36:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=f29c259a-7da1-42bb-b313-2cae4ae0c945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:fc:08:78:d2:4b:99:2c:b9:bd:49:7c:b7:07: 93:3e:21:ef:d6:a9:7a:d9:a4:c5:59:79:99:16:db: 3b:96:72:67:df:0c:46:ba:2d:20:e3:48:e4:e5:ce: 5d:f3:b0:6e:7c:79:a1:39:9c:17:cb:e7:25:9d:3f: ab:12:d7:e5:aa:2c:82:5b:d7:df:5f:5c:d6:b9:76: 50:61:af:70:31:58:65:5e:2a:8a:e5:e4:a2:25:02: bb:aa:1c:14:74:1c:f9:59:90:01:b7:60:06:63:7d: b4:47:3b:ac:91:17:f4:96:b3:40:1e:8a:07:d7:c1: 78:8d:21:5e:ef:65:90:82:5d:6c:2a:eb:cd:89:4d: 6d:9d:3f:4a:72:a1:f7:d6:88:85:cd:44:09:8e:8a: 45:41:36:10:f0:3e:97:b4:38:31:4c:7d:f2:fb:27: b3:20:44:c5:78:95:7a:9e:3f:43:b7:03:66:52:d0: d8:a9:03:c5:72:ff:10:22:5f:e3:3c:73:c3:af:56: 6a:a2:f5:92:d1:d0:ad:a4:06:3a:4a:7b:b9:a0:2c: 3d:ce:1c:9b:fd:c4:fc:e7:72:8d:d3:14:1e:16:5e: ec:c3:ff:f5:f5:7b:5a:8f:4a:03:5e:fb:d6:8d:79: ee:6a:c8:14:78:5e:ad:19:e1:72:31:53:08:30:d2: 9e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:03:C6:96:BB:45:7D:D5:63:6E:AF:EC:87:7C:9B:A5:67:D9:8D:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/6e97f03d-b0ff-3e8d-a7cd-57b4940c6290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl X509v3 Authority Key Identifier: keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer sbgp-ipAddrBlock: critical IPv4: 168.235.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f7:2c:3b:7f:36:95:69:0b:2d:7c:4d:7c:58:4b:9a:7b:da: b9:6f:c1:b0:ec:05:53:a9:39:bc:2f:78:05:ee:b2:db:2a:a7: c0:20:32:95:b7:26:a0:0b:ba:48:2c:06:5d:68:41:dd:db:19: b5:84:36:23:81:63:9b:dd:e5:9c:06:0d:97:d3:5e:e9:88:14: 0e:07:56:ed:df:fe:9f:2a:18:87:92:63:a1:1b:5a:58:00:1b: 1c:68:84:ec:86:10:f9:c1:ef:68:8e:d6:9e:1b:b8:ff:14:48: 3a:c9:3e:dc:93:c9:cc:c6:93:1f:51:c1:b3:9d:f7:4b:14:15: 82:48:79:a2:b4:00:b1:cd:b9:1a:9e:c0:95:29:2c:bc:60:45: 59:53:fd:bc:15:38:4d:8f:f6:0f:ce:20:4d:68:93:ad:74:c6: 34:d8:86:a2:7d:9b:67:88:03:7a:db:71:2b:5e:07:95:f6:b9: ad:92:a1:61:54:7d:d5:d6:fc:e6:65:1f:78:54:ec:3c:d8:2c: 6b:ed:d5:08:eb:b7:08:f6:c0:09:c8:49:03:48:34:69:d6:37: 3e:96:77:c4:bc:c2:fd:6b:eb:ad:c9:6c:d2:c4:1c:9b:6b:e4: e2:c8:c6:7d:c2:8b:7a:43:cc:36:33:12:4e:2e:ba:84:64:e4: d1:71:cb:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hiyjC893z/E2AUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQwN2M4ZmQtYjgwOC00MWQxLWFmNWUtYTg4ZDJkZDU1 NmY5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk ZjI5YzI1OWEtN2RhMS00MmJiLWIzMTMtMmNhZTRhZTBjOTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vwIeNJLmSy5vUl8tweTPiHv1ql62aTFWXmZ Fts7lnJn3wxGui0g40jk5c5d87BufHmhOZwXy+clnT+rEtflqiyCW9ffX1zWuXZQ Ya9wMVhlXiqK5eSiJQK7qhwUdBz5WZABt2AGY320RzuskRf0lrNAHooH18F4jSFe 72WQgl1sKuvNiU1tnT9KcqH31oiFzUQJjopFQTYQ8D6XtDgxTH3y+yezIETFeJV6 nj9DtwNmUtDYqQPFcv8QIl/jPHPDr1ZqovWS0dCtpAY6Snu5oCw9zhyb/cT853KN 0xQeFl7sw//19Xtaj0oDXvvWjXnuasgUeF6tGeFyMVMIMNKeEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsDxpa7RX3VY26v7Id8m6Vn2Y0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3 YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhkMmRkNTU2ZjkvNmU5N2YwM2QtYjBmZi0z ZThkLWE3Y2QtNTdiNDk0MGM2MjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTQwN2M4ZmQtYjgwOC00MWQxLWFm NWUtYTg4ZDJkZDU1NmY5L2U0MDdjOGZkLWI4MDgtNDFkMS1hZjVlLWE4OGQyZGQ1 NTZmOS5jcmwwHwYDVR0jBBgwFoAUOYhWE1EoATU3AroVdiYKUgOYPgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhk MmRkNTU2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT3LDt/NpVpCy18TXxYS5p72rlvwbDsBVOpObwveAXustsqp8AgMpW3 JqALukgsBl1oQd3bGbWENiOBY5vd5ZwGDZfTXumIFA4HVu3f/p8qGIeSY6EbWlgA GxxohOyGEPnB72iO1p4buP8USDrJPtyTyczGkx9RwbOd90sUFYJIeaK0ALHNuRqe wJUpLLxgRVlT/bwVOE2P9g/OIE1ok610xjTYhqJ9m2eIA3rbcSteB5X2ua2SoWFU fdXW/OZlH3hU7DzYLGvt1Qjrtwj2wAnISQNINGnWNz6Wd8S8wv1r663JbNLEHJtr 5OLIxn3Ci3pDzDYzEk4uuoRk5NFxyxM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:49 2025 by rpki-client