$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c32a39a3-2ff3-3275-bc33-703111400b46.roa File: c32a39a3-2ff3-3275-bc33-703111400b46.roa (raw, json) Hash identifier: Mcjhr6tYXfKQiCpq+Rj+kdWCi+fEQQkTLJVrp+ihVIM= Subject key identifier: 1B:92:7E:CF:B8:D0:15:43:77:78:E9:A3:DE:5D:BD:8A:C1:97:20:64 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F43285848977090798C345626A9B7F7C0 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c32a39a3-2ff3-3275-bc33-703111400b46.roa Signing time: Sun 19 Jan 2025 02:00:39 +0000 ROA not before: Sun 19 Jan 2025 02:00:39 +0000 ROA not after: Sat 19 Apr 2025 01:00:39 +0000 asID: 13768 IP address blocks: 209.15.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:70:90:79:8c:34:56:26:a9:b7:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Jan 19 02:00:39 2025 GMT Not After : Apr 19 01:00:39 2025 GMT Subject: CN=dcd8ca52-1b9a-499b-8800-64a4157dfc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:95:8f:4f:ca:d4:5c:59:4e:2c:ed:53:3c: cb:7a:2a:57:73:59:e5:5b:0e:46:22:e9:be:3b:cc: b0:d8:a1:4a:54:e7:94:8d:8a:3b:2a:22:a9:92:6d: 11:65:56:6a:f7:e3:d5:97:ba:cc:40:5f:32:cd:95: f2:59:ca:ba:2f:e4:7c:a6:9b:ee:9b:ec:1e:3b:ca: 7d:c7:80:34:87:cb:19:49:34:cf:eb:48:eb:f0:3f: 4d:b1:de:4c:e9:b5:a0:9f:36:24:ba:2f:7e:d6:38: 75:a1:00:9b:c9:ec:f3:b2:85:51:99:63:27:40:3f: 8e:57:bd:98:f4:5a:08:b1:ee:d1:f3:e6:f8:c0:eb: 9f:30:a7:92:16:6c:2e:9d:d4:b8:3c:96:a9:7d:3c: 8a:de:a9:12:6c:c4:18:6c:4d:1b:f1:fa:8a:ea:fd: c4:f4:d2:9f:2a:15:29:be:8c:29:98:e4:71:a3:96: a7:59:da:3a:9b:40:f8:e8:e4:4e:05:3d:cb:21:65: 96:c2:49:6e:d3:5e:9f:4f:8a:db:71:20:5f:62:4d: 51:db:e6:e8:70:25:a1:4b:ba:d6:16:50:54:c3:1d: 68:3a:62:ff:dc:d0:52:45:1c:f7:af:9e:cc:78:f4: e6:15:ff:09:42:3f:a0:5d:7d:35:fe:01:81:fa:5a: c3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:92:7E:CF:B8:D0:15:43:77:78:E9:A3:DE:5D:BD:8A:C1:97:20:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c32a39a3-2ff3-3275-bc33-703111400b46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 209.15.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d3:90:f0:27:a2:b3:ff:6b:13:de:b2:31:f7:c6:9e:47:ff: 71:b6:c3:19:11:64:3a:67:83:13:a9:84:f8:85:33:4b:21:ed: c6:a5:25:e2:27:48:9b:9c:46:46:e1:1f:d5:c6:83:d1:1b:97: 1a:63:24:9e:b2:17:6d:59:9b:88:f3:5e:83:fe:d1:7f:0b:c1: bd:24:4e:60:c7:a5:9d:b6:a1:8e:b2:37:01:be:1e:72:a4:84: 29:9d:7e:73:04:1e:03:ba:7f:9e:01:66:53:ff:0f:ba:73:63: b8:c1:bf:e8:61:79:3c:4f:ef:10:51:8e:63:6f:17:0e:a4:89: f5:4d:50:0a:ba:d8:df:67:51:6f:d0:13:d0:df:36:9f:65:5b: 1e:f4:76:b2:6c:85:80:20:cb:37:af:b9:21:a2:56:9c:29:8e: 85:05:cd:cd:fe:a0:b1:e8:f2:49:23:6d:02:f1:15:ae:cb:93: 99:f5:ad:a9:20:f5:ee:45:88:1e:dd:58:75:e1:68:52:a0:ea: af:b1:94:f8:18:c7:c5:9b:49:09:ac:9b:a2:d4:79:6c:7a:fc: 11:1e:c5:ea:8f:99:2b:4f:b0:ee:4e:7f:82:95:95:c2:e7:21: ad:27:ec:f5:54:95:c8:0a:dc:f8:f9:5e:97:3a:f7:d8:06:cc: 1f:6a:84:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiXcJB5jDRWJqm398AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk ZGNkOGNhNTItMWI5YS00OTliLTg4MDAtNjRhNDE1N2RmYzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApseVj0/K1FxZTiztUzzLeipXc1nlWw5GIum+ O8yw2KFKVOeUjYo7KiKpkm0RZVZq9+PVl7rMQF8yzZXyWcq6L+R8ppvum+weO8p9 x4A0h8sZSTTP60jr8D9Nsd5M6bWgnzYkui9+1jh1oQCbyezzsoVRmWMnQD+OV72Y 9FoIse7R8+b4wOufMKeSFmwundS4PJapfTyK3qkSbMQYbE0b8fqK6v3E9NKfKhUp vowpmORxo5anWdo6m0D46OROBT3LIWWWwklu016fT4rbcSBfYk1R2+bocCWhS7rW FlBUwx1oOmL/3NBSRRz3r57MePTmFf8JQj+gXX01/gGB+lrDNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuSfs+40BVDd3jpo95dvYrBlyBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvYzMyYTM5YTMtMmZmMy0z Mjc1LWJjMzMtNzAzMTExNDAwYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Q8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXTkPAnorP/axPesjH3xp5H/3G2wxkRZDpngxOphPiFM0sh7calJeIn SJucRkbhH9XGg9EblxpjJJ6yF21Zm4jzXoP+0X8Lwb0kTmDHpZ22oY6yNwG+HnKk hCmdfnMEHgO6f54BZlP/D7pzY7jBv+hheTxP7xBRjmNvFw6kifVNUAq62N9nUW/Q E9DfNp9lWx70drJshYAgyzevuSGiVpwpjoUFzc3+oLHo8kkjbQLxFa7Lk5n1rakg 9e5FiB7dWHXhaFKg6q+xlPgYx8WbSQmsm6LUeWx6/BEexeqPmStPsO5Of4KVlcLn Ia0n7PVUlcgK3Pj5Xpc699gGzB9qhL8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:04 2025 by rpki-client