$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/2f39b9df-a572-3b0b-a30f-6b7e5fceea9c.roa File: 2f39b9df-a572-3b0b-a30f-6b7e5fceea9c.roa (raw, json) Hash identifier: 3lPVJm8gVDKM0aFtzmFzn6211XqZw5d4FIuJESP8ZlA= Subject key identifier: B3:EE:EC:0E:26:42:01:0A:F3:4E:48:DC:26:85:41:44:24:5A:51:B7 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F43285848424ADB6570F81B624423BC80 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/2f39b9df-a572-3b0b-a30f-6b7e5fceea9c.roa Signing time: Thu 19 Dec 2024 14:00:52 +0000 ROA not before: Thu 19 Dec 2024 14:00:52 +0000 ROA not after: Wed 19 Mar 2025 13:00:52 +0000 asID: 62467 IP address blocks: 204.197.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:4a:db:65:70:f8:1b:62:44:23:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Dec 19 14:00:52 2024 GMT Not After : Mar 19 13:00:52 2025 GMT Subject: CN=121748e7-fd60-4bfe-9b68-728a77586803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5c:31:2f:78:d6:26:f6:c3:0d:bc:a1:2a:94: cb:d7:86:3e:4c:c8:77:f9:70:41:07:42:d7:1f:86: 0b:49:6f:68:aa:c1:5e:90:0a:c5:d3:a5:9b:50:b5: d4:a9:65:f1:92:c5:f5:bc:14:cc:a4:c8:50:79:b8: 28:93:e1:cc:db:48:45:35:8a:e1:b1:cb:f8:b1:bf: d1:b6:eb:ee:04:c9:8b:d1:09:e5:25:4b:66:ad:9b: f6:fe:2e:be:8c:43:ff:23:c9:05:49:1e:d6:88:1d: 86:d3:e1:c4:c9:19:0a:86:4f:f3:c1:56:72:ad:f1: 93:9a:2b:b5:84:ec:95:f8:6d:7e:de:97:38:f4:45: c2:e4:34:b8:6c:13:6c:f0:fc:a7:f1:39:77:5e:ab: da:af:ec:ac:f1:6e:6d:6f:cc:c8:07:81:bf:80:e4: 68:29:06:4a:9c:fc:48:1c:7f:58:f2:72:8a:59:04: a5:f7:27:d1:dc:14:61:a3:76:43:ef:eb:c5:12:59: bb:e6:a8:b5:9d:7e:70:6d:c6:fb:b1:ab:fb:61:60: 60:44:55:65:ad:10:59:62:95:a9:82:ae:bd:ce:95: e8:73:47:cf:46:10:6a:b6:a6:1b:b5:9e:33:ec:d6: 47:be:6a:5e:9e:ef:ac:cb:9e:ac:07:5b:5c:3d:c8: 1a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EE:EC:0E:26:42:01:0A:F3:4E:48:DC:26:85:41:44:24:5A:51:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/2f39b9df-a572-3b0b-a30f-6b7e5fceea9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b1:13:d7:ec:dc:2f:1d:1a:c7:2a:9b:21:ac:6c:e6:26:96: 6e:2c:e2:a9:43:b7:c8:93:5a:78:ed:bb:d9:d7:02:cf:2b:dd: 47:ae:f7:b3:e0:31:21:d6:a7:18:b0:65:0b:b5:14:2c:1f:75: 73:92:68:8d:21:bd:4c:ca:39:a6:7b:65:14:10:b7:0d:41:a6: 57:d4:fd:1d:fc:1e:b2:9a:a8:de:3a:5a:b7:98:30:75:04:8b: bb:5f:c7:88:0e:6a:2a:ca:45:7e:90:bb:18:0d:22:bc:db:0b: 01:98:87:9b:f0:83:af:50:c9:7c:d3:e8:04:42:d0:6e:2a:74: ec:39:7c:6d:29:af:36:ee:f3:cc:2c:69:6f:d7:12:6d:60:c3: 59:a6:81:37:d9:6b:f5:d9:ba:ee:01:a7:01:fe:d7:b3:53:83: 8b:50:27:be:41:bb:15:a4:d3:7b:e8:6b:28:f7:01:b8:55:23: 74:1b:4e:59:b1:20:94:4b:06:b9:1d:79:18:08:3c:6b:cb:ad: ed:68:b4:70:51:56:41:2f:0c:70:b7:c9:9a:d9:e6:6e:ce:b4: 5f:b8:60:a3:96:9f:2b:e2:e8:69:0d:ad:ad:15:71:2b:27:c1: b3:c5:75:f5:b9:ab:80:d1:4f:ae:cb:9c:81:c9:d1:0f:0e:99: 69:fd:47:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSttlcPgbYkQjvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk MTIxNzQ4ZTctZmQ2MC00YmZlLTliNjgtNzI4YTc3NTg2ODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolwxL3jWJvbDDbyhKpTL14Y+TMh3+XBBB0LX H4YLSW9oqsFekArF06WbULXUqWXxksX1vBTMpMhQebgok+HM20hFNYrhscv4sb/R tuvuBMmL0QnlJUtmrZv2/i6+jEP/I8kFSR7WiB2G0+HEyRkKhk/zwVZyrfGTmiu1 hOyV+G1+3pc49EXC5DS4bBNs8Pyn8Tl3Xqvar+ys8W5tb8zIB4G/gORoKQZKnPxI HH9Y8nKKWQSl9yfR3BRho3ZD7+vFElm75qi1nX5wbcb7sav7YWBgRFVlrRBZYpWp gq69zpXoc0fPRhBqtqYbtZ4z7NZHvmpenu+sy56sB1tcPcgarQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPu7A4mQgEK805I3CaFQUQkWlG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMmYzOWI5ZGYtYTU3Mi0z YjBiLWEzMGYtNmI3ZTVmY2VlYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACxE9fs3C8dGscqmyGsbOYmlm4s4qlDt8iTWnjtu9nXAs8r3Ueu97Pg MSHWpxiwZQu1FCwfdXOSaI0hvUzKOaZ7ZRQQtw1BplfU/R38HrKaqN46WreYMHUE i7tfx4gOairKRX6QuxgNIrzbCwGYh5vwg69QyXzT6ARC0G4qdOw5fG0przbu88ws aW/XEm1gw1mmgTfZa/XZuu4BpwH+17NTg4tQJ75BuxWk03voayj3AbhVI3QbTlmx IJRLBrkdeRgIPGvLre1otHBRVkEvDHC3yZrZ5m7OtF+4YKOWnyvi6GkNra0VcSsn wbPFdfW5q4DRT67LnIHJ0Q8OmWn9R78= -----END CERTIFICATE-----Generated at Sun Feb 16 20:28:04 2025 by rpki-client