$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa File: 8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa (raw, json) Hash identifier: QyzWYs/UrD1jIu9t02Jyk2lNoF5AEpNwXIO5EFYU0dQ= Subject key identifier: 83:2D:C7:E4:D9:9C:4A:52:E1:1D:A1:48:C4:89:3B:60:E6:30:DE:74 Certificate issuer: /CN=c501b1e0-0018-475e-9d4b-5090237060ae Certificate serial: 010D0C9F43285848C41B7DD02BEEDF614A47AD40 Authority key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 54840 IP address blocks: 192.30.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:7d:d0:2b:ee:df:61:4a:47:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c501b1e0-0018-475e-9d4b-5090237060ae Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=42f48af0-5319-490a-a436-01ccf0605316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cb:72:84:9f:51:38:b9:e5:62:9c:98:19:7e: 8e:10:df:a8:b5:d3:f9:35:04:1c:c8:16:a9:42:55: 17:2e:7b:5b:bd:84:92:de:47:16:78:3b:74:e3:bf: 10:27:2b:24:e7:5b:07:12:43:89:6e:ac:da:82:39: ce:37:65:f8:ac:66:5e:bd:cb:b7:32:8b:ab:15:bf: 23:2b:97:b9:61:2c:ca:50:30:2c:f0:6d:98:da:b2: 95:b9:9d:cf:3f:44:ab:e6:2c:f1:0c:2f:e6:3c:30: 7a:38:a2:c3:71:5f:4b:93:e6:1a:8e:dc:68:28:a4: f1:0c:c7:62:ba:41:7d:71:2b:70:02:c9:3b:fa:80: 82:dc:2b:a5:cb:b4:d6:a9:37:48:d9:4f:28:be:53: cb:a2:95:db:33:2b:79:27:9e:47:bb:9b:c1:50:ad: 4c:67:69:2d:8c:27:f8:6a:90:ac:54:54:ae:8d:d4: 64:cc:0d:c7:77:10:d8:3e:27:73:36:4f:68:62:8b: 87:96:57:38:af:98:bf:d5:9a:b9:59:41:96:e2:f1: 57:31:72:e7:a2:b2:1e:d5:16:e8:b2:df:20:d1:b7: a5:68:a9:43:b1:5e:46:18:5d:38:f7:65:aa:f8:8b: c0:c0:38:3b:81:c3:ec:ef:6e:3b:c0:69:d8:1a:8e: 44:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2D:C7:E4:D9:9C:4A:52:E1:1D:A1:48:C4:89:3B:60:E6:30:DE:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/8a40744a-ecf1-3610-b9d6-9da7da8707a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.crl X509v3 Authority Key Identifier: keyid:CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer sbgp-ipAddrBlock: critical IPv4: 192.30.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b0:fc:e4:85:57:f4:40:48:cf:a1:7d:5d:0d:fd:2f:fb:e0: 5d:ab:3e:72:bd:e2:b3:f8:3c:fe:33:83:0c:f0:30:82:37:c0: ba:68:e8:c0:80:c3:7b:8b:01:4a:3f:52:4a:a9:aa:e2:63:30: 09:c8:86:cb:cf:da:ae:01:4c:ad:8a:ed:d7:ae:af:75:41:d4: 21:17:6d:14:17:aa:15:cf:a5:cc:0e:c5:71:b8:b1:59:9c:db: 32:ef:75:ec:f3:8c:40:02:47:72:78:fb:4d:9d:9e:48:9f:ba: 04:98:6c:69:52:28:eb:15:69:a6:4a:2f:f9:0e:8e:75:5e:66: bb:82:61:ef:ba:21:a5:eb:d1:0e:dd:67:03:7e:42:fc:76:73: 2e:24:74:44:da:a8:8a:75:29:da:27:f7:96:71:8c:ce:b3:f3: b6:cd:bc:47:45:b1:0c:86:3c:d2:d7:2a:1a:05:31:46:85:51: 0d:d8:ca:74:92:c5:22:82:a3:0a:06:80:0d:bd:6d:09:12:35: 45:12:4d:17:77:2b:37:f9:8e:5a:04:6b:f6:c0:bf:94:78:46: 67:f7:ed:18:44:73:42:47:46:57:11:a1:0c:b6:72:76:7f:06: c8:3b:01:c6:c8:fd:57:35:94:b9:77:3c:1f:ee:7d:0a:14:7b: 7a:dd:4d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEG33QK+7fYUpHrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2 MGFlMB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk NDJmNDhhZjAtNTMxOS00OTBhLWE0MzYtMDFjY2YwNjA1MzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyctyhJ9ROLnlYpyYGX6OEN+otdP5NQQcyBap QlUXLntbvYSS3kcWeDt0478QJysk51sHEkOJbqzagjnON2X4rGZevcu3MourFb8j K5e5YSzKUDAs8G2Y2rKVuZ3PP0Sr5izxDC/mPDB6OKLDcV9Lk+YajtxoKKTxDMdi ukF9cStwAsk7+oCC3Culy7TWqTdI2U8ovlPLopXbMyt5J55Hu5vBUK1MZ2ktjCf4 apCsVFSujdRkzA3HdxDYPidzNk9oYouHllc4r5i/1Zq5WUGW4vFXMXLnorIe1Rbo st8g0belaKlDsV5GGF0492Wq+IvAwDg7gcPs7247wGnYGo5ENwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMtx+TZnEpS4R2hSMSJO2DmMN50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAx YjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvOGE0MDc0NGEtZWNmMS0z NjEwLWI5ZDYtOWRhN2RhODcwN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzUwMWIxZTAtMDAxOC00NzVlLTlk NGItNTA5MDIzNzA2MGFlL2M1MDFiMWUwLTAwMTgtNDc1ZS05ZDRiLTUwOTAyMzcw NjBhZS5jcmwwHwYDVR0jBBgwFoAUy4iXnad5H8TiAWX8bF3cELu6rMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkw MjM3MDYwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwB7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaw/OSFV/RASM+hfV0N/S/74F2rPnK94rP4PP4zgwzwMII3wLpo6MCA w3uLAUo/UkqpquJjMAnIhsvP2q4BTK2K7deur3VB1CEXbRQXqhXPpcwOxXG4sVmc 2zLvdezzjEACR3J4+02dnkifugSYbGlSKOsVaaZKL/kOjnVeZruCYe+6IaXr0Q7d ZwN+Qvx2cy4kdETaqIp1Kdon95ZxjM6z87bNvEdFsQyGPNLXKhoFMUaFUQ3YynSS xSKCowoGgA29bQkSNUUSTRd3Kzf5jloEa/bAv5R4Rmf37RhEc0JHRlcRoQy2cnZ/ Bsg7AcbI/Vc1lLl3PB/ufQoUe3rdTWs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:51 2025 by rpki-client