$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ea8cd07e-4a6c-3b3f-b530-0ac585b107de.roa File: ea8cd07e-4a6c-3b3f-b530-0ac585b107de.roa (raw, json) Hash identifier: OLcVWtL1odFFS6wgZuqddueeTuBsfg8MFe9Ad6pzCCw= Subject key identifier: 99:8E:D2:F8:31:66:E0:5B:EA:21:2E:AF:32:BA:AE:98:A7:09:A8:DB Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c Certificate serial: 010D0C9F4328584917DC290FBAE1D742F0683CB0 Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ea8cd07e-4a6c-3b3f-b530-0ac585b107de.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 22822 IP address blocks: 208.111.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:29:0f:ba:e1:d7:42:f0:68:3c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=615ea446-e6ee-4209-9ccf-4711f71fd47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:49:a8:04:7d:a6:93:d3:de:d4:ca:9c:40: 19:35:e5:48:91:4b:b0:22:ec:f1:4a:b3:e4:21:a6: a4:4d:00:d9:c4:9f:8a:29:2c:bd:e5:15:98:1a:5f: 09:b2:54:54:ce:aa:eb:91:e7:70:ad:e0:8c:99:e0: 2e:c6:c9:70:2e:f7:69:18:04:be:ea:af:5c:dc:31: a6:3a:c0:b0:84:a1:7c:27:a8:d5:10:d2:02:fc:d7: cf:33:1a:8d:15:ab:15:ef:b0:f1:a7:a7:bb:c5:04: 02:6c:a9:77:c3:b0:51:6d:bf:ef:28:1c:3c:80:0e: 37:5f:b4:e2:6b:5a:3c:9e:db:57:6f:93:05:b9:7d: c0:c1:a6:12:77:41:e7:17:2a:e0:d9:09:db:2e:ae: b2:c4:1b:3f:f7:ec:d7:d8:87:27:44:0c:d7:12:14: 6b:ce:b7:2a:39:90:b5:5d:c1:4d:de:f1:8b:8e:25: 7c:17:0e:77:15:cf:68:b9:1a:64:10:45:31:f0:43: 8f:a0:c5:0f:ff:c2:f3:43:11:cc:57:f5:af:19:a0: d0:af:a8:f5:a4:d1:90:d2:f8:3a:cd:e5:0b:76:16: 0b:9d:79:43:f5:e9:16:0f:82:09:98:e6:1d:c4:5c: 85:66:c7:8a:69:8b:3a:0c:ce:1f:25:45:ab:b7:d5: 8a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8E:D2:F8:31:66:E0:5B:EA:21:2E:AF:32:BA:AE:98:A7:09:A8:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ea8cd07e-4a6c-3b3f-b530-0ac585b107de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl X509v3 Authority Key Identifier: keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer sbgp-ipAddrBlock: critical IPv4: 208.111.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d8:99:f1:c9:77:0d:b4:fc:71:02:81:bc:69:d5:ee:1a:87: 2c:f5:6c:61:6d:a3:8a:51:3d:c9:b3:31:c3:1d:2b:e3:46:0e: b7:56:bb:5c:e5:21:67:73:08:4c:77:00:a4:95:4f:18:44:3f: 43:4c:eb:c0:bc:9a:71:6f:24:3c:f3:dc:57:46:dd:21:b7:08: e7:01:26:b6:88:c6:59:30:22:d1:f8:23:d3:52:c8:64:1d:38: 16:c4:cd:a5:1f:c8:b3:cc:a4:90:7e:03:e6:31:86:82:a5:c6: 32:77:7c:7c:2f:65:2b:e1:14:78:94:1f:b8:ba:a6:78:d4:40: ce:8d:f9:e8:79:08:41:44:1b:90:9b:16:9e:f1:f7:bd:94:ea: ff:c9:41:e8:02:47:3b:fe:bb:52:8c:55:59:68:1e:06:d9:bf: 6b:6c:bf:57:cc:0e:4d:9e:27:7e:f1:fd:e0:a2:50:7a:16:1e: 15:9e:ca:c9:d0:7f:de:79:c6:c2:46:43:54:61:30:01:2d:9b: 1f:15:ba:1d:a0:9d:a1:a2:3f:b7:f8:9f:49:03:de:cd:4c:e0: 8e:59:b6:a1:e6:a7:b9:cb:ca:03:bd:0c:0c:8a:6a:06:77:3a: 54:53:fd:3a:89:9d:bd:72:82:c6:c8:a7:93:4b:f6:dd:4d:4d: 09:98:91:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CkPuuHXQvBoPLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw MDdjMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NjE1ZWE0NDYtZTZlZS00MjA5LTljY2YtNDcxMWY3MWZkNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoedJqAR9ppPT3tTKnEAZNeVIkUuwIuzxSrPk IaakTQDZxJ+KKSy95RWYGl8JslRUzqrrkedwreCMmeAuxslwLvdpGAS+6q9c3DGm OsCwhKF8J6jVENIC/NfPMxqNFasV77Dxp6e7xQQCbKl3w7BRbb/vKBw8gA43X7Ti a1o8nttXb5MFuX3AwaYSd0HnFyrg2QnbLq6yxBs/9+zX2IcnRAzXEhRrzrcqOZC1 XcFN3vGLjiV8Fw53Fc9ouRpkEEUx8EOPoMUP/8LzQxHMV/WvGaDQr6j1pNGQ0vg6 zeULdhYLnXlD9ekWD4IJmOYdxFyFZseKaYs6DM4fJUWrt9WKUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmO0vgxZuBb6iEurzK6rpinCajbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2 OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvZWE4Y2QwN2UtNGE2Yy0z YjNmLWI1MzAtMGFjNTg1YjEwN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0 ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0G+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrYmfHJdw20/HECgbxp1e4ahyz1bGFto4pRPcmzMcMdK+NGDrdWu1zl IWdzCEx3AKSVTxhEP0NM68C8mnFvJDzz3FdG3SG3COcBJraIxlkwItH4I9NSyGQd OBbEzaUfyLPMpJB+A+YxhoKlxjJ3fHwvZSvhFHiUH7i6pnjUQM6N+eh5CEFEG5Cb Fp7x972U6v/JQegCRzv+u1KMVVloHgbZv2tsv1fMDk2eJ37x/eCiUHoWHhWeysnQ f955xsJGQ1RhMAEtmx8Vuh2gnaGiP7f4n0kD3s1M4I5ZtqHmp7nLygO9DAyKagZ3 OlRT/TqJnb1ygsbIp5NL9t1NTQmYkSc= -----END CERTIFICATE-----Generated at Fri Mar 14 10:42:25 2025 by rpki-client