$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/9cf0fcd5-9edc-3700-8c08-edcfd3963a71.roa File: 9cf0fcd5-9edc-3700-8c08-edcfd3963a71.roa (raw, json) Hash identifier: yI/aiLRcd+oLie4DYZw7ieysiBBVFWM7ssBDuQD1nZ4= Subject key identifier: 72:DB:79:3E:C4:03:1C:A6:2A:EE:FF:9A:B6:C3:F6:93:5B:1C:89:04 Certificate issuer: /CN=efead3cb-1d38-407f-ba06-8e276b067238 Certificate serial: 010D0C9F43285848E59BC79A42987A6EB34BF900 Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/9cf0fcd5-9edc-3700-8c08-edcfd3963a71.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 14618 IP address blocks: 216.238.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c7:9a:42:98:7a:6e:b3:4b:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=bdf2dc6d-5a0d-422d-9fd0-164b15c3e869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:59:b2:2a:1c:f5:d9:8a:80:86:95:79:c2:96: a6:80:f3:ee:c9:81:95:9f:c6:10:fb:20:47:16:62: 57:24:52:6f:54:ac:7a:10:81:f8:47:bd:fe:85:94: 20:ef:d8:45:31:32:aa:7b:88:f2:df:5c:9f:fc:ec: a8:c5:16:c4:5d:29:7a:ee:51:ac:22:4b:24:e1:d7: 6c:e7:be:68:8c:13:06:25:1b:41:ee:22:5a:5a:20: 46:02:2f:4d:b3:30:76:27:f0:db:5a:88:56:d6:b5: 90:51:42:af:3d:5c:cc:34:eb:d6:c9:cb:43:46:b0: e3:cf:e4:8a:20:34:17:59:70:9a:8b:ad:a9:d9:d5: fb:3c:b7:8e:74:6d:6f:6c:25:1d:5a:df:39:df:72: 57:7c:4d:09:d0:d6:05:75:8c:5c:5e:6c:17:46:bf: c5:5e:0d:b5:19:98:4f:f3:7b:c0:ea:e6:3a:35:6f: c7:b6:66:e1:5f:6a:a5:f4:85:49:18:59:b9:35:5e: f2:ed:49:af:85:18:ac:60:34:dd:04:3b:3b:21:cb: 37:3f:7d:48:ba:e2:28:94:42:e0:4a:22:53:c9:39: e2:a2:86:53:e4:62:d5:f1:25:b3:ca:55:f6:fb:b5: e7:62:8c:a2:18:a8:75:8d:f5:f0:af:fc:c6:60:9b: 31:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DB:79:3E:C4:03:1C:A6:2A:EE:FF:9A:B6:C3:F6:93:5B:1C:89:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/9cf0fcd5-9edc-3700-8c08-edcfd3963a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl X509v3 Authority Key Identifier: keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer sbgp-ipAddrBlock: critical IPv4: 216.238.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ca:06:69:d1:2a:4e:f2:db:40:53:ce:b9:2f:f3:0a:76:5e: 1e:0c:61:9c:12:97:8e:ba:16:11:ce:76:ec:e5:df:ec:ac:60: 10:67:f5:57:77:22:e9:e6:48:07:0e:0a:c2:cb:f1:50:62:7c: 3e:c0:91:c7:17:5e:84:6e:77:07:c7:ed:19:fe:a5:99:dc:37: 6c:54:e4:57:b5:3b:31:5f:db:75:51:1b:8f:75:7f:d3:00:c1: 1e:31:b8:fc:72:e7:df:a4:60:14:ea:6c:6e:63:ae:d5:d8:37: 55:1a:c7:ea:a6:d3:f8:7a:10:af:2e:b5:24:8a:66:a5:0e:fd: ed:01:54:48:4c:7e:98:f3:3f:4f:68:c2:b6:e3:7b:3d:d6:90: 5e:55:c4:82:d1:36:ea:91:08:c8:b0:51:d2:4c:f9:2a:5f:69: f1:f8:3c:37:c6:25:bc:25:1e:ab:e8:df:03:70:b3:82:24:cc: 40:e7:26:4c:a8:09:24:62:50:d2:18:00:75:9c:a4:93:84:27: 80:77:e2:5f:0d:68:a9:87:73:e3:3d:40:ce:9c:a2:41:4c:ab: 0c:d6:0b:21:a2:f7:23:7f:3f:45:aa:1d:8c:f2:af:1f:c6:54: b3:1c:3e:4d:86:50:30:87:7b:d8:15:26:fa:32:97:f9:2f:48: 44:7f:77:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8eaQph6brNL+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZlYWQzY2ItMWQzOC00MDdmLWJhMDYtOGUyNzZiMDY3 MjM4MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YmRmMmRjNmQtNWEwZC00MjJkLTlmZDAtMTY0YjE1YzNlODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1myKhz12YqAhpV5wpamgPPuyYGVn8YQ+yBH FmJXJFJvVKx6EIH4R73+hZQg79hFMTKqe4jy31yf/OyoxRbEXSl67lGsIksk4dds 575ojBMGJRtB7iJaWiBGAi9NszB2J/DbWohW1rWQUUKvPVzMNOvWyctDRrDjz+SK IDQXWXCai62p2dX7PLeOdG1vbCUdWt8533JXfE0J0NYFdYxcXmwXRr/FXg21GZhP 83vA6uY6NW/HtmbhX2ql9IVJGFm5NV7y7UmvhRisYDTdBDs7Ics3P31IuuIolELg SiJTyTniooZT5GLV8SWzylX2+7XnYoyiGKh1jfXwr/zGYJsx/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLbeT7EAxymKu7/mrbD9pNbHIkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVh ZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3NmIwNjcyMzgvOWNmMGZjZDUtOWVkYy0z NzAwLThjMDgtZWRjZmQzOTYzYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWZlYWQzY2ItMWQzOC00MDdmLWJh MDYtOGUyNzZiMDY3MjM4L2VmZWFkM2NiLTFkMzgtNDA3Zi1iYTA2LThlMjc2YjA2 NzIzOC5jcmwwHwYDVR0jBBgwFoAUNPnajc3fX4CiVfX2aItPRyDBA9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVhZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3 NmIwNjcyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O69MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLKBmnRKk7y20BTzrkv8wp2Xh4MYZwSl466FhHOduzl3+ysYBBn9Vd3 IunmSAcOCsLL8VBifD7AkccXXoRudwfH7Rn+pZncN2xU5Fe1OzFf23VRG491f9MA wR4xuPxy59+kYBTqbG5jrtXYN1Uax+qm0/h6EK8utSSKZqUO/e0BVEhMfpjzP09o wrbjez3WkF5VxILRNuqRCMiwUdJM+SpfafH4PDfGJbwlHqvo3wNws4IkzEDnJkyo CSRiUNIYAHWcpJOEJ4B34l8NaKmHc+M9QM6cokFMqwzWCyGi9yN/P0WqHYzyrx/G VLMcPk2GUDCHe9gVJvoyl/kvSER/dw0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:02 2025 by rpki-client