$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa File: c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa (raw, json) Hash identifier: Ph3qJLa3DpTu4I2Iyk2ZXtcf8aaczfOqo04wspFfEi8= Subject key identifier: A9:F9:27:02:21:D2:0F:43:DD:CF:7A:D1:D6:4C:71:F4:A5:24:3D:07 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F43285848530AE73DAEE8EFC32A09C280 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 88 IP address blocks: 204.153.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:e7:3d:ae:e8:ef:c3:2a:09:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=182cc425-2aba-4b12-8aa8-72d86ba31db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f3:ae:20:be:0e:cd:92:f1:b5:89:70:43:2b: 82:11:e6:fa:64:bc:af:bd:81:3e:c5:b4:82:95:78: 70:ec:88:be:13:5e:4c:64:f8:ff:4c:c9:49:c8:3f: 90:08:c7:25:db:80:d2:71:87:84:3d:38:4e:8a:53: a2:1b:9b:d9:91:ca:88:7f:6e:fd:46:b0:32:ed:02: d0:89:d5:d1:fb:3a:d5:14:5c:56:dc:2a:c3:22:f1: 04:75:4f:47:d8:da:b7:37:27:c9:b5:87:68:59:2e: 40:e0:39:33:52:c0:d2:15:97:3c:59:cb:5c:31:e1: 3d:2f:99:34:12:8a:9b:aa:1b:83:bb:c6:23:62:e8: 83:88:5f:6d:68:26:2c:b5:ac:28:3e:3c:6b:0e:d4: ff:6a:23:d2:98:6c:b6:5b:2f:34:77:f1:db:05:3e: 31:02:5e:15:68:32:26:43:95:8c:c4:c8:6d:94:2f: 2b:22:3b:9c:d9:d6:a4:f2:2c:d8:06:d8:d4:2d:5b: ef:34:9a:3d:dc:51:78:2e:0d:f4:96:ed:62:98:32: f3:0f:d6:30:12:e5:40:a2:48:52:b8:ab:d6:7f:ed: ae:ac:30:29:03:0d:0c:33:d1:a6:96:82:da:8d:87: 66:b9:c4:f9:f9:c8:de:c9:79:e6:90:8c:d4:23:3b: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F9:27:02:21:D2:0F:43:DD:CF:7A:D1:D6:4C:71:F4:A5:24:3D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 204.153.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:66:4f:44:e2:b9:55:02:f4:19:a0:5f:ae:ed:60:17:f3:7a: ca:60:88:c5:ca:42:f1:15:9d:73:fa:18:b3:03:98:c6:bc:56: b3:e7:9a:66:28:11:a5:a5:a9:56:55:1f:98:bb:70:d1:95:97: e3:6a:6e:e3:a2:39:ba:72:a0:4d:1e:15:f3:23:ea:cc:cf:80: 48:6e:ec:02:ef:8f:25:3a:ab:50:c9:23:3d:dd:5d:18:9a:0e: 54:f2:22:09:ea:a8:5b:7f:3d:33:5c:b5:e8:07:98:e9:b3:72: c1:98:79:f0:8c:3d:a3:91:00:60:ef:cc:d6:5f:85:09:3d:a9: 61:9c:ef:d0:d5:76:bc:2f:41:d4:a8:fb:74:3e:29:5a:cb:01: df:93:36:ba:fb:2f:71:37:e1:7f:4d:49:78:ec:97:fe:48:fb: b6:3d:0e:9e:56:1b:b0:92:b7:3c:b6:4e:7e:7c:aa:19:f3:fd: 1b:c9:4e:6e:47:08:33:58:9f:17:67:5c:0c:82:29:eb:d4:19: c3:87:95:1a:8a:db:8f:5f:53:29:ce:38:e9:64:db:cf:1d:b3: 68:a0:10:47:28:5f:ca:fc:3c:d6:e4:94:5c:51:3c:f0:12:d4: 10:36:96:90:da:be:4f:da:f3:ff:a8:a2:5c:c1:23:72:fe:33: 69:6e:a1:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCuc9rujvwyoJwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk MTgyY2M0MjUtMmFiYS00YjEyLThhYTgtNzJkODZiYTMxZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2POuIL4OzZLxtYlwQyuCEeb6ZLyvvYE+xbSC lXhw7Ii+E15MZPj/TMlJyD+QCMcl24DScYeEPThOilOiG5vZkcqIf279RrAy7QLQ idXR+zrVFFxW3CrDIvEEdU9H2Nq3NyfJtYdoWS5A4DkzUsDSFZc8WctcMeE9L5k0 EoqbqhuDu8YjYuiDiF9taCYstawoPjxrDtT/aiPSmGy2Wy80d/HbBT4xAl4VaDIm Q5WMxMhtlC8rIjuc2dak8izYBtjULVvvNJo93FF4Lg30lu1imDLzD9YwEuVAokhS uKvWf+2urDApAw0MM9GmloLajYdmucT5+cjeyXnmkIzUIzsQyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn5JwIh0g9D3c960dZMcfSlJD0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvYzJkOWY2ZDktMWZjNi0z NDgyLWEzNjMtOGUzYTA1N2NiZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJkzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpmT0TiuVUC9BmgX67tYBfzespgiMXKQvEVnXP6GLMDmMa8VrPnmmYo EaWlqVZVH5i7cNGVl+NqbuOiObpyoE0eFfMj6szPgEhu7ALvjyU6q1DJIz3dXRia DlTyIgnqqFt/PTNctegHmOmzcsGYefCMPaORAGDvzNZfhQk9qWGc79DVdrwvQdSo +3Q+KVrLAd+TNrr7L3E34X9NSXjsl/5I+7Y9Dp5WG7CStzy2Tn58qhnz/RvJTm5H CDNYnxdnXAyCKevUGcOHlRqK249fUynOOOlk288ds2igEEcoX8r8PNbklFxRPPAS 1BA2lpDavk/a8/+oolzBI3L+M2luodA= -----END CERTIFICATE-----Generated at Sun Feb 16 20:44:32 2025 by rpki-client