$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d9acdab0-aaa1-3527-a872-ab0322e1875b.roa File: d9acdab0-aaa1-3527-a872-ab0322e1875b.roa (raw, json) Hash identifier: 8TSH1repCw0RT/TT++Y2r+XldHcp/pzOSC0YZBOeqew= Subject key identifier: 39:87:06:4E:55:CA:75:96:C0:E6:FD:CC:B1:AF:DF:4F:6A:7F:BD:0D Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285848A04910B4BF1D7B6136585680 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d9acdab0-aaa1-3527-a872-ab0322e1875b.roa Signing time: Wed 22 Jan 2025 06:03:26 +0000 ROA not before: Wed 22 Jan 2025 06:03:26 +0000 ROA not after: Tue 22 Apr 2025 05:03:26 +0000 asID: 19165 IP address blocks: 208.80.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:49:10:b4:bf:1d:7b:61:36:58:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jan 22 06:03:26 2025 GMT Not After : Apr 22 05:03:26 2025 GMT Subject: CN=b181ca06-6887-4d49-8878-faf1b2438d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:48:47:d6:46:31:e7:1a:1d:e5:8c:2b:2e: 08:ec:9b:8e:8b:f1:18:64:8d:32:a9:78:b4:94:0a: c6:3c:87:d0:91:95:e9:19:93:34:fb:15:d9:a2:73: 6c:86:d3:90:cb:55:5d:6c:5c:b2:40:c4:ca:98:8b: 2c:ba:0e:c3:b4:98:98:f4:9a:fb:ba:14:6b:29:c5: f8:39:4d:36:56:ea:b2:d9:11:f9:6f:91:9f:1d:4f: 78:4d:b9:d5:39:23:5c:18:de:b3:af:5b:9b:37:e5: 51:34:3d:3f:b3:20:45:52:e9:95:28:4f:e8:a6:fb: 76:2a:38:1d:9c:c5:14:84:ba:25:eb:2f:16:79:3b: a8:5c:6c:17:af:7a:0f:43:32:1b:91:e1:cc:d9:47: fe:19:04:ac:c8:d6:03:6b:2b:62:17:01:e9:9b:01: 1d:de:b4:76:10:3e:ca:7f:1e:55:9b:06:18:fe:c1: e5:f2:73:bb:ab:77:3b:14:65:f4:58:f9:0a:83:e0: a5:3c:03:e8:38:ef:81:eb:0e:54:6d:60:a8:44:78: d6:9f:15:06:79:d3:d8:cb:a2:41:32:0d:c8:3a:8f: 1b:32:f5:f1:39:92:24:c1:94:f3:be:3a:c4:cc:ea: 1d:11:00:7b:ed:72:1f:98:53:8b:76:d0:9e:27:cb: e0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:87:06:4E:55:CA:75:96:C0:E6:FD:CC:B1:AF:DF:4F:6A:7F:BD:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d9acdab0-aaa1-3527-a872-ab0322e1875b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 208.80.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:7f:3d:4a:04:17:0c:ce:29:f0:49:83:0d:39:9d:c7:1b:0e: a7:cb:bb:44:d1:7d:90:00:df:a8:7d:db:1d:da:aa:09:52:4f: 5e:f6:0f:f8:a8:f5:56:28:8c:5e:17:cd:98:2b:ff:fa:46:c9: 44:6c:c5:2b:b7:20:35:d9:e0:47:be:e3:da:02:0b:a6:ca:61: 84:43:6a:b3:71:5a:85:04:b3:e3:59:ac:ac:9e:f0:56:fd:f5: d0:ad:a6:17:a1:df:68:46:bc:39:f9:14:a5:67:05:ff:9d:d5: c7:72:08:ee:4b:a7:6b:82:4e:5b:e2:ef:78:b8:0b:81:a5:3b: e5:39:a1:cb:4a:1f:6a:ce:f7:65:d6:86:2c:3d:37:af:37:8f: ea:c2:37:70:e1:a2:66:f4:53:4a:ea:6f:de:08:9a:f0:ce:07: 5e:33:d5:54:49:6f:c2:6e:39:75:b1:43:18:e3:18:0d:7d:24: ec:4c:43:70:e6:8d:d3:1f:1a:62:1f:c5:8b:32:61:ae:e5:af: d8:86:60:04:f2:ca:8f:19:44:3c:46:cc:b4:45:a5:22:b8:35: 67:f4:3b:db:eb:2a:46:a2:5c:eb:c2:91:9e:ba:a4:3a:75:77: 25:99:f3:8f:c8:98:57:14:92:82:99:3d:b6:2d:11:38:94:6c: e6:83:4e:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigSRC0vx17YTZYVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDEyMjA2MDMyNloXDTI1MDQyMjA1MDMyNlowLzEtMCsGA1UEAxMk YjE4MWNhMDYtNjg4Ny00ZDQ5LTg4NzgtZmFmMWIyNDM4ZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoxIR9ZGMecaHeWMKy4I7JuOi/EYZI0yqXi0 lArGPIfQkZXpGZM0+xXZonNshtOQy1VdbFyyQMTKmIssug7DtJiY9Jr7uhRrKcX4 OU02Vuqy2RH5b5GfHU94TbnVOSNcGN6zr1ubN+VRND0/syBFUumVKE/opvt2Kjgd nMUUhLol6y8WeTuoXGwXr3oPQzIbkeHM2Uf+GQSsyNYDaytiFwHpmwEd3rR2ED7K fx5VmwYY/sHl8nO7q3c7FGX0WPkKg+ClPAPoOO+B6w5UbWCoRHjWnxUGedPYy6JB Mg3IOo8bMvXxOZIkwZTzvjrEzOodEQB77XIfmFOLdtCeJ8vg6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmHBk5VynWWwOb9zLGv309qf70NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZDlhY2RhYjAtYWFhMS0z NTI3LWE4NzItYWIwMzIyZTE4NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB/PUoEFwzOKfBJgw05nccbDqfLu0TRfZAA36h92x3aqglST172D/io 9VYojF4XzZgr//pGyURsxSu3IDXZ4Ee+49oCC6bKYYRDarNxWoUEs+NZrKye8Fb9 9dCtpheh32hGvDn5FKVnBf+d1cdyCO5Lp2uCTlvi73i4C4GlO+U5octKH2rO92XW hiw9N683j+rCN3Dhomb0U0rqb94ImvDOB14z1VRJb8JuOXWxQxjjGA19JOxMQ3Dm jdMfGmIfxYsyYa7lr9iGYATyyo8ZRDxGzLRFpSK4NWf0O9vrKkaiXOvCkZ66pDp1 dyWZ84/ImFcUkoKZPbYtETiUbOaDTgg= -----END CERTIFICATE-----Generated at Sun Apr 6 04:37:50 2025 by rpki-client