$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa File: 38baa28c-5f18-3003-b482-8efaa6947bef.roa (raw, json) Hash identifier: XxPhwrWut4yp1bAL5vPc+fFXO4hknlXAHUMq4UUY3bA= Subject key identifier: 05:DD:61:2D:EC:62:94:BC:59:1D:07:44:34:27:1F:7B:79:9E:BD:AD Certificate issuer: /CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Certificate serial: 010D0C9F43285848854B31B136007C4AB27C3338 Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 12022 IP address blocks: 208.83.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:31:b1:36:00:7c:4a:b2:7c:33:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=3cefcda0-a0bc-42c3-b456-c211684ce202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:44:71:13:89:22:00:9d:9c:36:1f:74:89: e1:ed:f9:49:dd:ed:2d:07:3c:18:e4:00:d1:ff:2f: 4d:a5:e9:18:5f:6c:c7:96:13:8f:61:5e:69:73:28: 89:8f:88:01:5c:54:df:f3:47:6e:b5:84:30:6b:ab: 20:55:48:7f:b5:29:44:14:c6:52:2e:db:34:b0:8b: 66:3e:27:ec:b6:24:f8:bd:a8:0e:be:12:2e:b8:d8: 7b:8e:15:8a:f8:4d:fe:81:e9:54:a3:6a:f8:70:9f: 29:bb:75:f3:1c:d2:d3:73:84:59:c3:99:fa:53:aa: 7e:d6:5a:06:50:bf:94:f8:ca:f2:d5:ac:94:cb:e3: 20:b4:61:c7:10:cb:f3:ff:8d:e5:ed:ba:18:08:91: c7:61:01:d1:c4:56:c4:1a:61:81:fd:1a:96:8d:e9: 64:d8:72:61:83:cf:d1:47:8c:76:ce:e8:55:80:2b: a8:63:51:35:ea:28:0c:c8:1e:17:ae:0a:c3:6f:11: 42:05:95:5a:d5:8a:07:35:f3:0b:28:c5:bf:b3:43: 82:47:ea:88:14:fc:97:cb:c4:5d:6d:bb:f8:4f:86: 68:c3:b8:e0:44:57:f9:be:f9:5b:ae:5c:33:ff:78: 64:d8:41:c3:ba:f9:6d:2b:83:03:4f:4c:2d:0d:ef: c8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DD:61:2D:EC:62:94:BC:59:1D:07:44:34:27:1F:7B:79:9E:BD:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl X509v3 Authority Key Identifier: keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer sbgp-ipAddrBlock: critical IPv4: 208.83.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:2e:8b:e9:35:55:97:0f:f0:8f:6a:5d:d7:4d:a2:85:09:46: 05:65:4e:21:89:08:09:ce:58:00:26:98:42:ae:c6:c9:80:4a: 3b:76:51:0a:e5:20:74:52:03:97:aa:ef:58:e0:cf:e0:19:3d: 4e:3c:c7:4e:8e:57:1a:9e:ef:65:44:9c:da:02:ca:78:fe:7e: 7a:a2:d1:00:42:c5:11:f6:bd:d5:48:08:1a:94:a0:e8:e0:96: 46:14:6b:81:71:4d:fa:c0:bf:b4:39:d7:d1:aa:de:01:9d:46: a8:0c:44:2b:0f:18:23:c4:65:65:c3:b9:a0:16:7a:46:c7:ce: 2f:24:26:8c:c8:ed:70:c5:2b:3a:1b:36:3c:e6:af:1d:cf:05: b6:98:69:8e:55:23:ac:42:31:c5:f0:5c:3a:15:b2:ef:8d:9c: 38:ed:ac:9d:b3:4a:7e:0c:dc:2c:55:fe:41:b0:a7:0e:dd:44: af:a7:ba:f5:da:cf:c9:80:1d:96:bd:e5:b8:16:59:a7:95:5b: ef:25:ab:3a:76:7f:db:2d:18:e9:7e:3a:c9:a5:68:78:9c:ba: ec:99:b3:34:70:67:bd:8d:00:f1:ce:f4:94:bc:2e:f7:c0:09: 85:b8:0a:d0:4b:8a:ee:9c:ee:2b:88:11:7f:4a:ee:62:09:22: 1a:49:82:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFSzGxNgB8SrJ8MzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhNjY2OWItNmQyNS00MTg2LWE3NTctM2MyODliZGM4 MDMxMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk M2NlZmNkYTAtYTBiYy00MmMzLWI0NTYtYzIxMTY4NGNlMjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXFEcROJIgCdnDYfdInh7flJ3e0tBzwY5ADR /y9NpekYX2zHlhOPYV5pcyiJj4gBXFTf80dutYQwa6sgVUh/tSlEFMZSLts0sItm PifstiT4vagOvhIuuNh7jhWK+E3+gelUo2r4cJ8pu3XzHNLTc4RZw5n6U6p+1loG UL+U+Mry1ayUy+MgtGHHEMvz/43l7boYCJHHYQHRxFbEGmGB/RqWjelk2HJhg8/R R4x2zuhVgCuoY1E16igMyB4XrgrDbxFCBZVa1YoHNfMLKMW/s0OCR+qIFPyXy8Rd bbv4T4Zow7jgRFf5vvlbrlwz/3hk2EHDuvltK4MDT0wtDe/I+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXdYS3sYpS8WR0HRDQnH3t5nr2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2 NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4OWJkYzgwMzEvMzhiYWEyOGMtNWYxOC0z MDAzLWI0ODItOGVmYWE2OTQ3YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDlhNjY2OWItNmQyNS00MTg2LWE3 NTctM2MyODliZGM4MDMxL2Q5YTY2NjliLTZkMjUtNDE4Ni1hNzU3LTNjMjg5YmRj ODAzMS5jcmwwHwYDVR0jBBgwFoAU7lIQLy5n25yXT3T+levfSezkaxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4 OWJkYzgwMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcui+k1VZcP8I9qXddNooUJRgVlTiGJCAnOWAAmmEKuxsmASjt2UQrl IHRSA5eq71jgz+AZPU48x06OVxqe72VEnNoCynj+fnqi0QBCxRH2vdVICBqUoOjg lkYUa4FxTfrAv7Q519Gq3gGdRqgMRCsPGCPEZWXDuaAWekbHzi8kJozI7XDFKzob Njzmrx3PBbaYaY5VI6xCMcXwXDoVsu+NnDjtrJ2zSn4M3CxV/kGwpw7dRK+nuvXa z8mAHZa95bgWWaeVW+8lqzp2f9stGOl+OsmlaHicuuyZszRwZ72NAPHO9JS8LvfA CYW4CtBLiu6c7iuIEX9K7mIJIhpJgoc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:48 2025 by rpki-client