$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/8e05f5b3-6798-30cc-9a8c-a46833e7f0f8.roa File: 8e05f5b3-6798-30cc-9a8c-a46833e7f0f8.roa (raw, json) Hash identifier: kqJmN0+StbgOTq6XN824/4nZ3VOgX40aTJDIRFAnDZE= Subject key identifier: 4F:25:44:AC:42:C9:F1:BC:7D:D6:B9:95:F6:7D:1B:F2:05:E8:71:E0 Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Certificate serial: 010D0C9F432858487A2080F626E525AE32017EC0 Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/8e05f5b3-6798-30cc-9a8c-a46833e7f0f8.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 32098 IP address blocks: 204.199.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:80:f6:26:e5:25:ae:32:01:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=2daa6d14-55ab-4a8f-a350-64b098b278e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:20:ab:de:b1:8a:77:81:70:18:aa:00:77: d1:8c:87:f2:3d:2c:2f:01:79:fe:45:56:51:da:7b: 86:2c:bf:f9:ac:9e:49:0e:b8:50:eb:b6:86:42:82: ae:8a:20:28:d1:77:5e:64:21:b0:2d:19:bc:3c:bc: 7c:51:70:62:0a:d2:2f:69:8d:bd:9f:c2:69:84:6a: 78:6a:86:74:26:db:37:dc:2e:37:5b:8b:b9:fa:29: 5a:d2:f7:49:c8:56:b9:33:8b:58:fe:b5:25:6a:5f: c8:2d:75:2c:3f:71:b7:01:e4:80:8c:4c:17:44:ec: 15:d9:38:d0:1d:b0:12:4d:c6:cb:77:9b:41:ec:9b: 15:4e:f1:87:2a:5f:98:e8:48:ce:c5:d1:0e:9e:1b: 9c:9f:ba:5c:1e:72:03:df:71:c3:10:3c:ee:93:84: e4:76:fd:d7:5f:d2:1d:9d:97:87:52:ce:b4:36:ea: 06:3b:cc:43:f7:ab:01:aa:c9:7f:d4:5f:cc:e3:03: 6b:f6:22:dc:92:86:c1:d3:cd:36:47:33:61:86:ae: 14:c4:20:51:fb:bd:91:f4:7d:b0:c5:3b:c3:b5:6a: 6f:0e:a8:fe:77:6e:f6:f1:11:05:8e:a1:87:40:f2: 7d:ac:b2:93:89:a3:bc:d4:6b:df:7a:0e:ef:5c:b0: 03:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:25:44:AC:42:C9:F1:BC:7D:D6:B9:95:F6:7D:1B:F2:05:E8:71:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/8e05f5b3-6798-30cc-9a8c-a46833e7f0f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl X509v3 Authority Key Identifier: keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer sbgp-ipAddrBlock: critical IPv4: 204.199.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:42:3c:30:39:86:7a:0e:c1:0e:02:68:96:54:8b:46:15:3c: 92:aa:60:72:d7:2d:22:23:e2:e4:50:55:fd:20:08:df:48:50: 15:0f:88:fe:c4:d0:3f:ba:42:00:ec:2b:13:69:b2:fe:37:61: 58:f0:a4:ad:c1:ba:91:73:ff:04:18:0a:42:90:54:5a:0d:95: 44:f0:c8:22:4c:16:01:52:c6:07:da:4a:42:2b:ef:9c:fc:a9: 46:0b:56:47:23:8a:98:6e:38:0c:7b:a1:08:7f:ae:c0:44:90: 14:ba:8b:62:fc:33:1c:d7:21:ee:4a:98:c3:5c:f3:a6:d7:f9: f6:50:b1:68:e3:1f:ac:7c:8c:60:76:66:f2:98:30:73:8a:b4: 8a:e6:b6:20:1a:79:2f:f8:a3:67:8b:c2:45:e1:dd:f7:0b:fc: 08:26:cf:e6:45:0c:2d:3a:a7:7f:a3:25:d4:03:4b:ab:49:8b: 83:b0:32:7a:11:2d:80:51:d5:65:05:a1:c5:98:bc:c8:31:67: 4b:8c:e2:48:c9:fe:5f:cd:6a:3c:ad:4e:6e:18:32:43:f1:36: b3:35:8c:d3:da:f6:7a:94:84:1d:b6:38:df:76:73:8c:88:df: f4:27:49:b5:06:a8:f8:59:b0:59:ba:e2:36:03:01:3f:a3:e5: 29:c2:2a:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IID2JuUlrjIBfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj OTBlMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk MmRhYTZkMTQtNTVhYi00YThmLWEzNTAtNjRiMDk4YjI3OGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi0gq96xineBcBiqAHfRjIfyPSwvAXn+RVZR 2nuGLL/5rJ5JDrhQ67aGQoKuiiAo0XdeZCGwLRm8PLx8UXBiCtIvaY29n8JphGp4 aoZ0Jts33C43W4u5+ila0vdJyFa5M4tY/rUlal/ILXUsP3G3AeSAjEwXROwV2TjQ HbASTcbLd5tB7JsVTvGHKl+Y6EjOxdEOnhucn7pcHnID33HDEDzuk4Tkdv3XX9Id nZeHUs60NuoGO8xD96sBqsl/1F/M4wNr9iLckobB0802RzNhhq4UxCBR+72R9H2w xTvDtWpvDqj+d2728REFjqGHQPJ9rLKTiaO81Gvfeg7vXLADuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8lRKxCyfG8fda5lfZ9G/IF6HHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvOGUwNWY1YjMtNjc5OC0z MGNjLTlhOGMtYTQ2ODMzZTdmMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0 NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1 YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx MzQ3NWM5MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMfOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRCPDA5hnoOwQ4CaJZUi0YVPJKqYHLXLSIj4uRQVf0gCN9IUBUPiP7E 0D+6QgDsKxNpsv43YVjwpK3BupFz/wQYCkKQVFoNlUTwyCJMFgFSxgfaSkIr75z8 qUYLVkcjiphuOAx7oQh/rsBEkBS6i2L8MxzXIe5KmMNc86bX+fZQsWjjH6x8jGB2 ZvKYMHOKtIrmtiAaeS/4o2eLwkXh3fcL/Agmz+ZFDC06p3+jJdQDS6tJi4OwMnoR LYBR1WUFocWYvMgxZ0uM4kjJ/l/NajytTm4YMkPxNrM1jNPa9nqUhB22ON92c4yI 3/QnSbUGqPhZsFm64jYDAT+j5SnCKlU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:06 2025 by rpki-client