$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/99891767-1d2a-33b2-ae5b-882cf5d6301f.roa File: 99891767-1d2a-33b2-ae5b-882cf5d6301f.roa (raw, json) Hash identifier: dCLKsfAXGC6ozyDt2QeiG/y2e+8ugwuIfVAweoIrDRs= Subject key identifier: A0:71:D5:19:43:3E:46:79:76:FE:F8:9A:E8:35:57:FB:35:40:6D:F9 Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F432858487CEB2F9EED1ECEDD0AAAE800 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/99891767-1d2a-33b2-ae5b-882cf5d6301f.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 396982 IP address blocks: 208.94.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:2f:9e:ed:1e:ce:dd:0a:aa:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=f148a515-01a3-4e1c-ae87-d950bf084f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:3c:13:4b:98:14:54:4f:e5:90:9a:7f:72: 5f:29:14:74:12:12:92:78:10:c4:4f:4a:39:79:1c: ae:9f:61:72:a5:7c:3a:17:47:be:9f:ed:4b:bb:f7: 81:d0:c0:91:a1:dc:fd:bf:8c:44:8a:14:2b:24:bc: 43:cf:f6:c8:ab:61:c5:f3:aa:55:2e:5e:08:13:f1: e9:18:f5:64:96:39:9c:1f:89:91:27:16:5d:ae:1d: 75:f5:40:fb:c5:71:93:88:99:55:fa:d9:6b:ba:77: 4c:40:b7:55:5e:93:14:b4:c4:32:67:2f:5f:f0:bb: ee:58:19:87:2c:f6:d0:f3:8e:53:63:b6:9b:46:f7: 76:62:31:c3:ff:62:e5:c8:ba:9c:3e:62:f0:4b:9c: f5:fc:4b:87:a8:3b:6f:2a:3a:06:f6:22:4b:ff:1f: f1:9f:2f:2b:84:08:09:f0:82:99:68:1d:59:dd:31: c3:5e:86:28:c1:18:0a:59:c4:80:8e:8e:87:5b:b7: 00:55:d1:60:a2:55:25:52:e4:82:7c:4d:1c:2d:cf: 35:a0:95:39:17:a6:46:96:2a:3f:06:f5:cd:58:cd: b7:2e:5b:03:5f:62:93:b4:4e:e4:9d:8f:5d:db:c8: 0f:c9:04:32:ed:af:f2:ac:d0:be:44:b0:f3:1a:60: 86:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:71:D5:19:43:3E:46:79:76:FE:F8:9A:E8:35:57:FB:35:40:6D:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/99891767-1d2a-33b2-ae5b-882cf5d6301f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fd:8c:0c:ec:17:81:ed:b6:66:45:e7:19:79:b9:47:60:b0: 8e:8e:7a:12:3e:cd:f2:56:23:4f:dc:f0:09:16:22:16:e0:80: 84:56:f6:cf:64:cd:e1:de:59:bf:3b:13:b5:63:1a:83:c2:32: 01:de:fe:42:d5:9a:1f:17:d3:3a:cb:ca:80:8a:11:77:79:b6: 92:0c:51:0c:ac:7e:d4:8f:60:72:eb:b7:a3:0a:62:33:6e:3b: fd:bd:80:a9:a9:0a:e6:cb:38:23:8e:bb:86:f3:b8:ef:15:f8: 08:29:c7:d0:d4:81:7f:f6:ca:38:78:b4:56:b1:2b:5e:4a:e3: 24:3c:60:a7:62:60:5d:27:34:ee:03:37:d8:fb:36:1b:70:72: a2:d9:d9:56:2a:db:da:88:20:35:ee:76:d1:b1:62:3a:62:59: 5f:c0:5b:6a:76:ab:86:12:6d:aa:c3:44:98:bd:03:c4:ef:9c: 25:2c:1e:3c:db:ed:24:48:ea:7f:6f:81:1a:0c:bd:80:35:f2: 9c:b3:05:cc:de:ee:13:3d:80:3a:21:fe:13:2f:7c:7b:af:78: c3:0b:63:d8:d5:b1:97:ac:c3:87:a8:cf:23:92:c0:bb:dc:72: 78:71:2d:4e:79:d6:a2:e4:ec:b0:01:ed:ef:a6:88:2f:2a:16: 4d:a6:bc:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86y+e7R7O3Qqq6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk ZjE0OGE1MTUtMDFhMy00ZTFjLWFlODctZDk1MGJmMDg0ZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Dk8E0uYFFRP5ZCaf3JfKRR0EhKSeBDET0o5 eRyun2FypXw6F0e+n+1Lu/eB0MCRodz9v4xEihQrJLxDz/bIq2HF86pVLl4IE/Hp GPVkljmcH4mRJxZdrh119UD7xXGTiJlV+tlrundMQLdVXpMUtMQyZy9f8LvuWBmH LPbQ845TY7abRvd2YjHD/2LlyLqcPmLwS5z1/EuHqDtvKjoG9iJL/x/xny8rhAgJ 8IKZaB1Z3THDXoYowRgKWcSAjo6HW7cAVdFgolUlUuSCfE0cLc81oJU5F6ZGlio/ BvXNWM23LlsDX2KTtE7knY9d28gPyQQy7a/yrNC+RLDzGmCGdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBx1RlDPkZ5dv74mug1V/s1QG35MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvOTk4OTE3NjctMWQyYS0z M2IyLWFlNWItODgyY2Y1ZDYzMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID9jAzsF4HttmZF5xl5uUdgsI6OehI+zfJWI0/c8AkWIhbggIRW9s9k zeHeWb87E7VjGoPCMgHe/kLVmh8X0zrLyoCKEXd5tpIMUQysftSPYHLrt6MKYjNu O/29gKmpCubLOCOOu4bzuO8V+Agpx9DUgX/2yjh4tFaxK15K4yQ8YKdiYF0nNO4D N9j7NhtwcqLZ2VYq29qIIDXudtGxYjpiWV/AW2p2q4YSbarDRJi9A8TvnCUsHjzb 7SRI6n9vgRoMvYA18pyzBcze7hM9gDoh/hMvfHuveMMLY9jVsZesw4eozyOSwLvc cnhxLU551qLk7LAB7e+miC8qFk2mvDE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:55 2025 by rpki-client