$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa File: 3c5788b1-7c82-3275-9457-c61ff52b2890.roa (raw, json) Hash identifier: vqXkcap31+jKHjrE4bqeQ1vLpQDJl+AVhpZokjiCm5U= Subject key identifier: DE:4D:1F:DD:D3:28:AA:14:35:AD:3D:B6:E4:D1:07:09:66:4B:F2:13 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285848DA70F5B9B70164346E29FC80 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 397422 IP address blocks: 208.56.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f5:b9:b7:01:64:34:6e:29:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=b21f1949-74ad-4464-a57b-9d28a8b60fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:70:52:01:cc:0a:33:47:fe:04:bf:a8:53:1e: c0:8d:7c:5c:c3:f6:d3:a4:b0:e8:61:20:05:d0:18: 8c:82:bc:f7:d3:9e:40:c3:87:90:6a:64:a3:13:ad: 29:83:4b:cf:f0:0e:40:14:97:91:05:6f:4d:06:5d: a7:e9:da:57:c7:13:8f:2a:cf:97:d0:25:01:8a:ce: 36:2c:a6:0a:8e:65:35:f0:56:a2:47:8a:7c:0c:43: d3:0f:86:31:dc:76:99:55:8a:27:f6:08:f2:9b:3c: 5c:7d:40:a0:cd:ad:3c:ef:64:03:f3:82:a2:b4:74: 0b:2f:82:1c:b4:97:f7:b1:1e:49:be:8e:a2:aa:06: 98:fe:cb:07:87:eb:32:c0:b7:34:5a:98:04:1b:fe: 6e:35:e4:20:10:58:7b:2e:8d:8b:9d:b9:a2:49:db: 6b:4f:9b:3d:b2:a8:23:4c:93:c5:c5:36:c2:10:8d: 94:4a:9b:64:6c:d5:94:62:0c:2c:a2:03:b0:e1:16: b6:01:23:6a:ea:df:68:cd:43:31:b7:e3:8b:a5:96: 1b:aa:a7:62:0e:25:0f:66:53:bf:e5:e2:03:7b:d9: fb:1c:0c:31:46:e5:6c:b8:37:57:2b:17:95:fa:19: 63:94:a1:72:0b:23:8c:f2:2a:ed:40:5f:27:6c:2d: 0c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4D:1F:DD:D3:28:AA:14:35:AD:3D:B6:E4:D1:07:09:66:4B:F2:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 208.56.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:39:74:9e:9b:b2:34:58:51:b0:72:87:89:d8:07:1a:b5:08: c5:1a:c9:69:a0:27:ec:59:fc:18:1a:43:65:42:4a:96:05:d1: f5:a4:20:e8:b9:eb:d6:a5:2b:64:4b:85:f2:16:73:7d:90:ed: b7:a2:9d:c1:62:64:90:e7:c4:da:11:b2:46:25:85:36:b1:8d: 6d:4a:a2:11:d5:31:0d:ac:27:8a:c6:1f:e0:13:52:74:37:2c: 8b:1a:c4:00:26:e0:2f:51:51:c0:dd:ad:7b:23:56:37:27:e2: 12:3f:ea:68:60:1e:ab:db:85:25:8a:b4:7e:76:18:2c:ec:2c: 65:d2:11:05:f2:61:d8:10:af:ae:7a:45:37:0d:57:fb:45:a3: 20:4d:38:0f:55:49:c3:0b:54:58:84:21:cd:aa:51:e4:ed:cc: b4:a9:52:16:b3:6a:6c:cb:23:d2:31:9b:0a:3e:89:40:ea:db: ec:a0:60:bb:d8:75:bf:61:ef:3b:75:9e:6f:35:27:2c:33:62: dc:8c:d9:e5:dc:13:bc:bc:af:8e:3d:8e:7d:7a:e0:46:53:8f: a0:9a:a0:a1:ba:85:3b:69:18:ce:c7:d4:f0:ae:c7:c9:66:a1: a4:e4:36:56:f9:9f:c6:55:f9:ce:05:e4:0f:93:62:0e:45:af: 7b:24:69:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPW5twFkNG4p/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk YjIxZjE5NDktNzRhZC00NDY0LWE1N2ItOWQyOGE4YjYwZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13BSAcwKM0f+BL+oUx7AjXxcw/bTpLDoYSAF 0BiMgrz3055Aw4eQamSjE60pg0vP8A5AFJeRBW9NBl2n6dpXxxOPKs+X0CUBis42 LKYKjmU18FaiR4p8DEPTD4Yx3HaZVYon9gjymzxcfUCgza0872QD84KitHQLL4Ic tJf3sR5Jvo6iqgaY/ssHh+sywLc0WpgEG/5uNeQgEFh7Lo2LnbmiSdtrT5s9sqgj TJPFxTbCEI2USptkbNWUYgwsogOw4Ra2ASNq6t9ozUMxt+OLpZYbqqdiDiUPZlO/ 5eIDe9n7HAwxRuVsuDdXKxeV+hljlKFyCyOM8irtQF8nbC0MtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5NH93TKKoUNa09tuTRBwlmS/ITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvM2M1Nzg4YjEtN2M4Mi0z Mjc1LTk0NTctYzYxZmY1MmIyODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc5dJ6bsjRYUbByh4nYBxq1CMUayWmgJ+xZ/BgaQ2VCSpYF0fWkIOi5 69alK2RLhfIWc32Q7beincFiZJDnxNoRskYlhTaxjW1KohHVMQ2sJ4rGH+ATUnQ3 LIsaxAAm4C9RUcDdrXsjVjcn4hI/6mhgHqvbhSWKtH52GCzsLGXSEQXyYdgQr656 RTcNV/tFoyBNOA9VScMLVFiEIc2qUeTtzLSpUhazamzLI9Ixmwo+iUDq2+ygYLvY db9h7zt1nm81JywzYtyM2eXcE7y8r449jn164EZTj6CaoKG6hTtpGM7H1PCux8lm oaTkNlb5n8ZV+c4F5A+TYg5Fr3skaZM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:47 2025 by rpki-client