$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/59fc405d-4035-30c0-b187-caacc2bd4a19.roa File: 59fc405d-4035-30c0-b187-caacc2bd4a19.roa (raw, json) Hash identifier: d3MGNbMzskzrGFyKAmMaPSy1TkZDhkkdgsRfwNxTHFE= Subject key identifier: 6A:F3:A9:86:EE:24:EA:E6:F2:61:7D:FB:D4:55:EF:54:C1:BB:88:83 Certificate issuer: /CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Certificate serial: 010D0C9F43285848854B319028F4D1B01FE3FDC0 Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/59fc405d-4035-30c0-b187-caacc2bd4a19.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 12022 IP address blocks: 208.83.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:31:90:28:f4:d1:b0:1f:e3:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=d5fd4e74-ca58-487c-8df3-2baa07f9367d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:3b:d1:d3:d2:ba:c4:1b:ae:bd:33:62:ee: 8c:f1:97:6e:4b:c6:31:2e:43:b8:55:55:e2:5f:75: e0:80:46:38:36:05:c1:85:58:8b:a3:d6:4c:e3:0d: 51:b2:57:ea:41:63:d2:42:b1:23:41:bf:f6:ed:ee: e9:c6:79:47:d6:7d:b2:90:0c:56:3a:ab:8b:ec:e7: 7e:e4:28:16:c7:e7:97:e9:d1:2e:75:91:3e:e1:a0: 9c:fd:63:c6:2d:48:8a:9b:3b:5d:58:22:aa:65:2a: 45:b2:bf:db:0f:ea:eb:a4:4d:eb:06:eb:50:69:11: 8f:db:84:66:28:a8:2c:7e:c7:c0:54:53:90:eb:be: 8a:40:14:bd:54:41:8f:98:13:a9:f7:d0:10:bd:73: 1e:e9:3a:e4:fc:bb:94:03:1a:38:0f:91:1e:d5:28: 33:31:47:15:42:ae:c9:f1:d4:e6:38:03:ee:fa:1b: a4:b2:69:72:d4:9a:fc:a5:0f:b7:3d:a9:e9:75:ee: 19:bd:b4:8c:f5:d9:34:05:9d:94:95:88:06:81:02: 1b:a5:cc:21:12:7f:5d:d0:f6:55:58:49:68:d4:43: 65:6a:bf:39:5c:73:3c:3b:4f:d1:70:7e:4b:6b:a9: fe:66:55:bc:44:5a:f7:b8:b9:5d:7d:8c:e1:62:ff: 3a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F3:A9:86:EE:24:EA:E6:F2:61:7D:FB:D4:55:EF:54:C1:BB:88:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/59fc405d-4035-30c0-b187-caacc2bd4a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl X509v3 Authority Key Identifier: keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer sbgp-ipAddrBlock: critical IPv4: 208.83.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a3:3e:c4:4e:39:75:70:16:4d:60:31:52:4a:08:db:a3:8d: ad:5e:69:43:78:d4:50:f3:7c:7d:b4:73:63:47:63:0a:76:e4: 4c:bc:b8:52:dd:de:40:55:fc:d0:ba:8c:00:d3:b5:dc:14:79: ed:7d:b9:14:ef:8c:2d:bf:b3:e9:9a:6e:07:95:b2:40:ec:9a: 1a:df:d4:9b:24:0a:7a:0e:8a:73:d7:8e:37:5e:16:e5:02:d3: dc:67:41:f4:af:3a:ec:02:32:f8:c7:d8:c9:22:d9:86:db:e0: 18:04:53:a7:92:94:81:b8:24:76:91:8c:78:7b:fb:77:64:d4: 53:84:0a:a1:71:e6:48:e2:05:87:ef:27:76:76:07:82:23:fe: 61:33:d7:09:67:67:c3:2e:19:75:e1:51:0c:cb:b9:88:e5:50: 18:d0:2e:4b:41:f7:7a:25:fc:d9:96:9b:e1:cb:91:0b:a0:41: e2:0d:08:2e:27:62:70:c1:8d:7b:ac:24:66:e9:02:f7:1c:00: 67:db:6e:ef:0a:43:67:5a:5a:6f:03:31:e8:87:f8:d5:32:b9: 59:f7:62:24:ab:94:fe:22:c0:f4:81:cd:0d:e2:15:41:d9:f3: 46:84:fd:f7:3c:00:2f:f5:9b:97:ba:aa:44:4f:ba:4b:d6:2b: d6:97:c6:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFSzGQKPTRsB/j/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhNjY2OWItNmQyNS00MTg2LWE3NTctM2MyODliZGM4 MDMxMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk ZDVmZDRlNzQtY2E1OC00ODdjLThkZjMtMmJhYTA3ZjkzNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXo70dPSusQbrr0zYu6M8ZduS8YxLkO4VVXi X3XggEY4NgXBhViLo9ZM4w1RslfqQWPSQrEjQb/27e7pxnlH1n2ykAxWOquL7Od+ 5CgWx+eX6dEudZE+4aCc/WPGLUiKmztdWCKqZSpFsr/bD+rrpE3rButQaRGP24Rm KKgsfsfAVFOQ676KQBS9VEGPmBOp99AQvXMe6Trk/LuUAxo4D5Ee1SgzMUcVQq7J 8dTmOAPu+huksmly1Jr8pQ+3Panpde4ZvbSM9dk0BZ2UlYgGgQIbpcwhEn9d0PZV WElo1ENlar85XHM8O0/RcH5La6n+ZlW8RFr3uLldfYzhYv86OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrzqYbuJOrm8mF9+9RV71TBu4iDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2 NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4OWJkYzgwMzEvNTlmYzQwNWQtNDAzNS0z MGMwLWIxODctY2FhY2MyYmQ0YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDlhNjY2OWItNmQyNS00MTg2LWE3 NTctM2MyODliZGM4MDMxL2Q5YTY2NjliLTZkMjUtNDE4Ni1hNzU3LTNjMjg5YmRj ODAzMS5jcmwwHwYDVR0jBBgwFoAU7lIQLy5n25yXT3T+levfSezkaxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4 OWJkYzgwMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FOfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqjPsROOXVwFk1gMVJKCNujja1eaUN41FDzfH20c2NHYwp25Ey8uFLd 3kBV/NC6jADTtdwUee19uRTvjC2/s+mabgeVskDsmhrf1JskCnoOinPXjjdeFuUC 09xnQfSvOuwCMvjH2Mki2Ybb4BgEU6eSlIG4JHaRjHh7+3dk1FOECqFx5kjiBYfv J3Z2B4Ij/mEz1wlnZ8MuGXXhUQzLuYjlUBjQLktB93ol/NmWm+HLkQugQeINCC4n YnDBjXusJGbpAvccAGfbbu8KQ2daWm8DMeiH+NUyuVn3YiSrlP4iwPSBzQ3iFUHZ 80aE/fc8AC/1m5e6qkRPukvWK9aXxnw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:37 2025 by rpki-client