$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa File: d44b739e-4693-3efd-8c82-67f73703b4ec.roa (raw, json) Hash identifier: O1R1l2S79jWwkgKbmYF+Nu0Rkd6iSQXJ0SPzwPh6iWI= Subject key identifier: C4:45:86:11:1E:34:5D:60:B2:46:51:55:D6:A7:82:0A:9D:C9:FF:84 Certificate issuer: /CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Certificate serial: 010D0C9F43285848B090AE07943C6247820D4000 Authority key identifier: BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa Signing time: Tue 28 Jan 2025 02:00:39 +0000 ROA not before: Tue 28 Jan 2025 02:00:39 +0000 ROA not after: Mon 28 Apr 2025 01:00:39 +0000 asID: 46149 IP address blocks: 208.96.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:90:ae:07:94:3c:62:47:82:0d:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Validity Not Before: Jan 28 02:00:39 2025 GMT Not After : Apr 28 01:00:39 2025 GMT Subject: CN=8ab2bdf8-69cd-46d7-959e-5e3a1aace378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:35:90:53:4c:32:fd:70:2f:0e:bf:cd:ac:cd: 6c:63:c9:24:ef:08:8b:62:fb:0d:ae:e8:94:7a:0c: 7e:de:b3:e3:2f:b6:19:ac:ec:23:ad:99:0c:72:a0: c8:0d:d8:d7:36:9f:99:c4:c3:83:6e:8e:ea:d3:c2: ed:fd:41:50:c2:51:40:f3:df:9f:5a:4b:25:91:0b: 96:f8:76:e3:2c:f6:b3:89:85:53:7f:ec:87:06:38: 2c:1b:7d:a1:c3:6a:a3:27:da:9c:7f:90:7c:61:7a: b6:29:d8:58:84:7f:cb:cd:4e:b7:2d:12:b0:e2:24: dc:cd:a4:52:ec:5b:8c:e1:7b:f6:41:47:5a:0c:e4: e9:01:12:1a:c7:d3:27:04:3f:9c:b8:6b:1a:a4:3e: 94:7d:8b:6e:86:09:15:68:6c:39:85:56:ff:b2:2f: 69:89:77:60:f3:c1:41:c0:56:ec:b5:16:f9:f4:b3: af:4b:1f:5a:80:45:df:cb:12:73:f6:b2:e2:6c:97: 8f:c8:54:c4:c5:91:e7:3e:1f:bc:0f:f1:b7:ac:bb: 05:e8:11:ab:59:ba:3b:4b:49:b3:31:46:9d:1d:51: 5a:70:c5:bb:32:08:13:06:20:15:ff:cb:67:99:01: 45:e2:1f:07:67:70:26:ed:cd:5d:bc:c9:5e:4a:7d: f0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:45:86:11:1E:34:5D:60:B2:46:51:55:D6:A7:82:0A:9D:C9:FF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl X509v3 Authority Key Identifier: keyid:BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer sbgp-ipAddrBlock: critical IPv4: 208.96.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:eb:79:56:0e:de:62:cf:ea:ac:03:ea:8b:1d:e3:84:f7:c9: ff:f5:81:2e:95:ff:30:06:33:3d:ff:c3:89:09:04:b7:6d:41: 7c:96:86:79:27:ca:a9:b2:51:a3:80:23:cb:b5:8b:f0:0c:54: 53:f3:44:98:20:78:58:f8:51:13:c2:0e:1d:46:3e:0d:53:36: e3:fe:46:96:42:fb:04:db:d1:02:b0:8d:19:32:4e:4f:df:38: bf:b2:39:62:42:99:a4:0f:64:40:4b:b2:27:09:4d:74:54:d0: 09:df:59:a8:78:be:c0:bd:5c:61:1d:4d:87:c8:a7:d8:59:53: ce:52:2a:c1:f3:27:b9:51:80:29:e3:e5:0a:08:21:8a:71:49: 75:f5:bb:a0:c7:b2:2c:02:ea:95:93:96:cd:9e:43:f3:2b:df: cd:e5:b4:6c:e2:72:8e:e5:46:c4:84:f0:a8:c9:44:13:c2:a5: b0:95:cb:ae:2d:34:56:9e:d1:24:cd:4b:4c:79:c8:35:f2:31: 59:c9:f1:ef:dd:50:f5:30:25:25:4f:a8:ed:bc:ae:5e:93:44: a7:5d:53:fd:11:4f:4a:f0:b4:7d:b5:d1:6d:7a:5d:5c:55:8e: 67:62:eb:b7:d5:78:cd:59:2a:59:47:c2:df:a6:a9:9c:ff:1e: 54:22:19:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiwkK4HlDxiR4INQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RlMzlkM2UtMzgzNy00MzQxLWE4YmQtODZjNzRjMDZh NmU0MB4XDTI1MDEyODAyMDAzOVoXDTI1MDQyODAxMDAzOVowLzEtMCsGA1UEAxMk OGFiMmJkZjgtNjljZC00NmQ3LTk1OWUtNWUzYTFhYWNlMzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijWQU0wy/XAvDr/NrM1sY8kk7wiLYvsNruiU egx+3rPjL7YZrOwjrZkMcqDIDdjXNp+ZxMODbo7q08Lt/UFQwlFA89+fWkslkQuW +HbjLPaziYVTf+yHBjgsG32hw2qjJ9qcf5B8YXq2KdhYhH/LzU63LRKw4iTczaRS 7FuM4Xv2QUdaDOTpARIax9MnBD+cuGsapD6UfYtuhgkVaGw5hVb/si9piXdg88FB wFbstRb59LOvSx9agEXfyxJz9rLibJePyFTExZHnPh+8D/G3rLsF6BGrWbo7S0mz MUadHVFacMW7MggTBiAV/8tnmQFF4h8HZ3Am7c1dvMleSn3wyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRFhhEeNF1gskZRVdanggqdyf+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUz OWQzZS0zODM3LTQzNDEtYThiZC04NmM3NGMwNmE2ZTQvZDQ0YjczOWUtNDY5My0z ZWZkLThjODItNjdmNzM3MDNiNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2RlMzlkM2UtMzgzNy00MzQxLWE4 YmQtODZjNzRjMDZhNmU0L2NkZTM5ZDNlLTM4MzctNDM0MS1hOGJkLTg2Yzc0YzA2 YTZlNC5jcmwwHwYDVR0jBBgwFoAUvuGpWNaK7St+8q41TTvs7MIvWykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUzOWQzZS0zODM3LTQzNDEtYThiZC04NmM3 NGMwNmE2ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbreVYO3mLP6qwD6osd44T3yf/1gS6V/zAGMz3/w4kJBLdtQXyWhnkn yqmyUaOAI8u1i/AMVFPzRJggeFj4URPCDh1GPg1TNuP+RpZC+wTb0QKwjRkyTk/f OL+yOWJCmaQPZEBLsicJTXRU0AnfWah4vsC9XGEdTYfIp9hZU85SKsHzJ7lRgCnj 5QoIIYpxSXX1u6DHsiwC6pWTls2eQ/Mr383ltGzico7lRsSE8KjJRBPCpbCVy64t NFae0STNS0x5yDXyMVnJ8e/dUPUwJSVPqO28rl6TRKddU/0RT0rwtH210W16XVxV jmdi67fVeM1ZKllHwt+mqZz/HlQiGZU= -----END CERTIFICATE-----Generated at Sat Apr 12 00:42:08 2025 by rpki-client