$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/58f883ef-2f08-35c0-8027-1d43d39b7941.roa File: 58f883ef-2f08-35c0-8027-1d43d39b7941.roa (raw, json) Hash identifier: K3tSKwdXklrGA6V9p3Inp8oDWUzw+UosTxUwORbVGJM= Subject key identifier: 24:E0:A1:6F:AB:B5:72:E3:C8:BC:92:9B:6D:B8:6D:36:98:99:1D:D6 Certificate issuer: /CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Certificate serial: 010D0C9F43285848854B31E3A214B57980D87640 Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/58f883ef-2f08-35c0-8027-1d43d39b7941.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 12022 IP address blocks: 208.83.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:31:e3:a2:14:b5:79:80:d8:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=aeb7b7ae-c3a2-4ac3-b8a5-c5552488b003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:b3:12:fa:c7:9c:2e:76:90:91:8a:ea:51: 37:92:b5:18:62:8e:13:83:6f:03:8a:2a:02:48:ff: e3:6b:24:18:87:5b:aa:45:02:ff:cd:e0:7c:ca:7d: 8c:b9:45:bd:b4:f9:b7:47:84:3e:0b:28:87:22:3e: ee:77:a9:ef:f0:2d:e9:55:5f:18:84:cd:3a:aa:5d: d1:2b:83:7e:85:90:d0:39:6c:48:0a:f1:75:f7:19: b6:20:6e:42:75:e6:e6:08:3f:32:4a:67:45:03:be: e1:3f:98:7e:fc:88:6c:4b:b3:22:2b:52:78:63:97: 5c:52:cd:5a:43:3e:47:c3:4c:ba:77:6c:cc:5e:82: 54:03:f5:06:6d:db:28:30:a1:23:33:3a:6f:f9:be: ee:6c:ac:65:39:8f:9a:f1:62:f0:ad:4c:ca:79:08: 79:2a:e5:4d:c0:b7:cc:a4:a0:af:59:73:67:cb:e4: 09:17:21:fe:fa:df:2a:8f:74:f5:89:5d:68:ce:e0: 86:d1:85:cc:10:59:9a:e0:ae:7b:2e:19:fe:0b:d1: 91:b6:52:69:d4:c8:a2:19:f2:e2:c3:31:84:a9:9c: 49:78:7d:7c:51:71:64:ac:59:6c:51:23:e0:24:4b: fd:88:d9:ec:ea:64:3b:4e:a3:4c:c1:52:48:5a:5f: 6f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E0:A1:6F:AB:B5:72:E3:C8:BC:92:9B:6D:B8:6D:36:98:99:1D:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/58f883ef-2f08-35c0-8027-1d43d39b7941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl X509v3 Authority Key Identifier: keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer sbgp-ipAddrBlock: critical IPv4: 208.83.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:35:61:c0:24:d9:3e:62:3c:32:69:ab:19:e9:77:71:e7:eb: b6:c4:88:68:ef:49:da:91:a3:fa:41:31:e7:8d:de:07:ce:e8: 8a:7d:96:a2:e5:5f:71:c6:6d:f4:87:89:74:32:ed:d5:71:96: 99:79:e7:05:78:8e:7f:5f:36:83:86:5f:22:57:3b:cc:78:63: f2:07:f9:e8:31:f8:fd:80:c0:40:57:d5:d1:c1:70:5e:44:e7: d0:2d:f5:1a:87:51:84:52:c6:77:2b:09:d2:41:0e:13:b2:7a: f0:59:6d:ad:90:79:ff:f3:ef:a2:cf:09:be:d6:5a:32:65:dd: c8:08:77:d7:41:fa:c0:c3:d4:a6:54:df:ec:08:40:4a:12:ce: ca:28:ef:d1:05:28:58:62:cf:29:32:d0:43:9a:2e:a6:00:df: 68:72:9c:31:0e:7e:12:bb:41:df:8e:bd:39:47:05:77:73:30: 9a:42:4d:f9:74:52:d1:2f:b8:3f:9e:11:98:8e:4f:4c:28:4d: ef:df:26:08:ed:38:87:9d:5e:24:ce:44:cf:fb:f8:da:9f:f1: 21:d6:ba:e7:5b:d4:e6:f5:e6:1b:06:2a:c7:f4:7b:7d:fd:d1: fc:6a:4a:ea:67:cc:2d:0e:47:24:39:51:f3:38:8a:c5:6c:76: 60:e3:e1:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFSzHjohS1eYDYdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhNjY2OWItNmQyNS00MTg2LWE3NTctM2MyODliZGM4 MDMxMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk YWViN2I3YWUtYzNhMi00YWMzLWI4YTUtYzU1NTI0ODhiMDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6uzEvrHnC52kJGK6lE3krUYYo4Tg28DiioC SP/jayQYh1uqRQL/zeB8yn2MuUW9tPm3R4Q+CyiHIj7ud6nv8C3pVV8YhM06ql3R K4N+hZDQOWxICvF19xm2IG5CdebmCD8ySmdFA77hP5h+/IhsS7MiK1J4Y5dcUs1a Qz5Hw0y6d2zMXoJUA/UGbdsoMKEjMzpv+b7ubKxlOY+a8WLwrUzKeQh5KuVNwLfM pKCvWXNny+QJFyH++t8qj3T1iV1ozuCG0YXMEFma4K57Lhn+C9GRtlJp1MiiGfLi wzGEqZxJeH18UXFkrFlsUSPgJEv9iNns6mQ7TqNMwVJIWl9vTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTgoW+rtXLjyLySm224bTaYmR3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2 NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4OWJkYzgwMzEvNThmODgzZWYtMmYwOC0z NWMwLTgwMjctMWQ0M2QzOWI3OTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDlhNjY2OWItNmQyNS00MTg2LWE3 NTctM2MyODliZGM4MDMxL2Q5YTY2NjliLTZkMjUtNDE4Ni1hNzU3LTNjMjg5YmRj ODAzMS5jcmwwHwYDVR0jBBgwFoAU7lIQLy5n25yXT3T+levfSezkaxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4 OWJkYzgwMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF41YcAk2T5iPDJpqxnpd3Hn67bEiGjvSdqRo/pBMeeN3gfO6Ip9lqLl X3HGbfSHiXQy7dVxlpl55wV4jn9fNoOGXyJXO8x4Y/IH+egx+P2AwEBX1dHBcF5E 59At9RqHUYRSxncrCdJBDhOyevBZba2Qef/z76LPCb7WWjJl3cgId9dB+sDD1KZU 3+wIQEoSzsoo79EFKFhizyky0EOaLqYA32hynDEOfhK7Qd+OvTlHBXdzMJpCTfl0 UtEvuD+eEZiOT0woTe/fJgjtOIedXiTORM/7+Nqf8SHWuudb1Ob15hsGKsf0e339 0fxqSupnzC0ORyQ5UfM4isVsdmDj4Y0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:05 2025 by rpki-client