$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa File: dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa (raw, json) Hash identifier: eUjs5oGmum5djjFUoHsGjg0Y5lx3ch0Ph+/BEdp/X+8= Subject key identifier: B0:DA:7F:8E:DE:8D:BB:BA:3B:47:1A:29:C9:88:13:D1:5A:AF:08:33 Certificate issuer: /CN=378928e8-c134-40aa-9858-3838053cbbe9 Certificate serial: 010D0C9F432858486695BBCCBF1ACA66B19CBB00 Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 12261 IP address blocks: 208.118.192.0/22 maxlen: 22 208.118.196.0/22 maxlen: 22 208.118.200.0/22 maxlen: 22 208.118.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:bb:cc:bf:1a:ca:66:b1:9c:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9 Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=6738c68c-3c99-45a2-ae9a-33ec69a2d584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ec:b8:f1:8d:a1:6d:bf:24:8d:29:43:f8:a4: 70:b8:1f:b9:8d:d9:bf:49:da:77:6f:1b:1d:81:93: 81:1d:5e:cd:54:60:ed:33:47:e5:e9:5e:39:8c:2b: ad:df:a7:8e:13:b9:4b:16:e4:a8:ef:fa:71:e3:fd: e1:45:df:94:38:9f:e3:76:d8:7b:07:14:8a:4c:41: cf:58:6a:c4:77:e1:78:4c:cf:57:51:86:c0:99:03: 99:c5:69:63:c8:f4:71:d0:34:93:d4:82:59:3e:fc: 80:fd:6c:78:ee:d8:fe:04:47:7e:4f:30:ee:2d:a1: 2a:f0:64:61:7e:23:e8:91:1a:17:16:f4:71:12:2a: 15:d3:2e:0a:b0:48:23:c8:ca:e2:59:fb:06:2a:41: 95:1d:a5:b4:23:8f:9c:ee:11:e2:9d:52:f7:ad:36: f9:67:c3:9f:ab:38:3b:a8:77:40:bc:ff:a7:b0:7f: f5:8b:d7:79:eb:c2:c7:fd:ab:6f:39:b3:0b:85:da: 36:6b:fa:4b:ba:c6:1f:f4:0e:53:09:6d:b8:68:46: ba:2a:d0:60:36:94:df:1d:34:43:d6:22:9b:fd:28: a9:80:43:88:e9:05:2b:ee:71:ba:4d:b3:b7:ad:65: 36:49:63:6d:4d:02:60:ce:aa:d0:49:50:84:3e:17: 78:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DA:7F:8E:DE:8D:BB:BA:3B:47:1A:29:C9:88:13:D1:5A:AF:08:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl X509v3 Authority Key Identifier: keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer sbgp-ipAddrBlock: critical IPv4: 208.118.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:28:ce:d9:b9:2d:49:07:84:d2:6d:8d:d0:53:86:fe:86:42: 25:28:6d:e4:a6:d4:cc:58:2d:84:be:96:e9:c0:dc:66:3f:69: e7:9a:33:96:25:c7:46:13:ac:49:7b:bc:b4:cc:6d:c3:e7:5b: b0:a1:52:f3:aa:72:9b:83:56:76:5b:e4:c3:1a:1b:94:b9:69: f0:d1:14:c8:1e:b5:fc:37:e4:e3:83:53:5f:e9:32:85:60:8b: 45:3a:92:00:a8:c6:de:5d:28:a3:b1:14:66:b4:b7:09:93:3d: d8:88:77:ee:17:c5:eb:32:bc:d7:58:b6:41:7c:9c:d9:e8:99: 1c:13:86:a2:e1:a9:14:ee:5e:21:c2:f4:9b:e0:aa:4b:7e:7f: e8:07:9a:fa:bd:1e:3c:e6:1b:bf:32:96:7c:2d:49:ba:60:10: a8:ba:12:b0:fc:83:de:e3:5e:d0:06:b0:cb:3e:b5:64:20:c7: ab:43:cd:2c:88:27:e3:ce:cb:d1:d6:33:f3:57:31:84:08:85: a9:8d:67:80:de:63:5b:b1:b2:3b:c3:16:ac:f6:4e:bd:b1:e4: c0:d6:11:c7:fd:2c:b4:03:a3:52:9b:cc:bf:e1:38:59:9d:09: 32:6f:93:8b:07:9b:f3:52:9e:68:8f:c1:71:8a:45:df:b4:7c: e8:d8:54:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlbvMvxrKZrGcuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTI4ZTgtYzEzNC00MGFhLTk4NTgtMzgzODA1M2Ni YmU5MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk NjczOGM2OGMtM2M5OS00NWEyLWFlOWEtMzNlYzY5YTJkNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ey48Y2hbb8kjSlD+KRwuB+5jdm/Sdp3bxsd gZOBHV7NVGDtM0fl6V45jCut36eOE7lLFuSo7/px4/3hRd+UOJ/jdth7BxSKTEHP WGrEd+F4TM9XUYbAmQOZxWljyPRx0DST1IJZPvyA/Wx47tj+BEd+TzDuLaEq8GRh fiPokRoXFvRxEioV0y4KsEgjyMriWfsGKkGVHaW0I4+c7hHinVL3rTb5Z8Ofqzg7 qHdAvP+nsH/1i9d568LH/atvObMLhdo2a/pLusYf9A5TCW24aEa6KtBgNpTfHTRD 1iKb/SipgEOI6QUr7nG6TbO3rWU2SWNtTQJgzqrQSVCEPhd4IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDaf47ejbu6O0caKcmIE9FarwgzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5 MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4MDUzY2JiZTkvZGZkNWE2ZDItYjUwOC0z Njg1LThmZmYtY2Y2Y2UyMDUwZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzc4OTI4ZTgtYzEzNC00MGFhLTk4 NTgtMzgzODA1M2NiYmU5LzM3ODkyOGU4LWMxMzQtNDBhYS05ODU4LTM4MzgwNTNj YmJlOS5jcmwwHwYDVR0jBBgwFoAUBYTnTjebSl6FC+Qck2G4ZCYVGJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4 MDUzY2JiZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMoztm5LUkHhNJtjdBThv6GQiUobeSm1MxYLYS+lunA3GY/aeeaM5Yl x0YTrEl7vLTMbcPnW7ChUvOqcpuDVnZb5MMaG5S5afDRFMgetfw35OODU1/pMoVg i0U6kgCoxt5dKKOxFGa0twmTPdiId+4XxesyvNdYtkF8nNnomRwThqLhqRTuXiHC 9Jvgqkt+f+gHmvq9HjzmG78ylnwtSbpgEKi6ErD8g97jXtAGsMs+tWQgx6tDzSyI J+POy9HWM/NXMYQIhamNZ4DeY1uxsjvDFqz2Tr2x5MDWEcf9LLQDo1KbzL/hOFmd CTJvk4sHm/NSnmiPwXGKRd+0fOjYVFQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:39:20 2025 by rpki-client