$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/eae0a58d-2ab5-3697-8268-38a3265b2c11.roa File: eae0a58d-2ab5-3697-8268-38a3265b2c11.roa (raw, json) Hash identifier: alffdL6ztkH/E4MRgugQ6YO0W0KJktkep3pc+LpduWA= Subject key identifier: 72:DD:5E:CB:BE:20:B7:89:8B:4C:05:07:2E:0F:58:0D:DB:B5:48:22 Certificate issuer: /CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Certificate serial: 010D0C9F432858485E359CF93CE475071940F100 Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/eae0a58d-2ab5-3697-8268-38a3265b2c11.roa Signing time: Sun 29 Dec 2024 14:00:53 +0000 ROA not before: Sun 29 Dec 2024 14:00:53 +0000 ROA not after: Sat 29 Mar 2025 13:00:53 +0000 asID: 12022 IP address blocks: 208.83.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5e:35:9c:f9:3c:e4:75:07:19:40:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Validity Not Before: Dec 29 14:00:53 2024 GMT Not After : Mar 29 13:00:53 2025 GMT Subject: CN=a2fa1a12-a0df-4b16-a10d-cf0171973865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f9:cc:0f:8e:62:b2:69:fe:75:ac:15:72:7f: df:d8:22:56:a3:b3:a3:83:03:99:45:e7:84:47:cb: 0d:9b:82:7d:a7:f0:64:40:fa:cf:a4:6e:49:a8:84: 05:aa:be:6c:e4:ba:ea:84:65:07:7d:fe:aa:e7:e6: 88:4a:d2:17:1d:22:6f:c1:d6:c4:3e:32:3c:8a:96: ee:35:77:19:dd:fe:60:4a:ba:e6:22:f1:c1:be:bd: 97:41:a4:f6:c6:98:06:96:61:b5:6f:b9:c5:1c:89: 8f:4d:d6:3c:f9:8f:c3:0d:a0:9c:03:60:d4:25:58: e4:54:8b:c5:cb:cd:57:23:90:a3:12:a2:6c:59:a9: 68:be:9e:fa:1d:76:36:14:12:50:07:87:ff:a6:64: 35:08:83:38:ab:61:a4:c6:28:36:19:03:87:47:15: de:0e:d5:2d:a5:86:44:24:16:4a:b5:dd:35:08:56: 13:96:a9:a8:9d:c2:3d:8e:50:a3:59:00:f8:2e:ef: 8d:48:be:f5:89:99:23:78:5c:a5:ba:0d:35:d9:14: 66:33:50:8c:1c:52:86:c9:67:79:81:85:a1:9b:c5: 1c:77:e4:a1:5d:20:ce:6e:47:ab:e8:8a:74:44:66: f3:42:b7:09:cb:2d:8c:a2:a2:f3:4f:6d:6f:a9:99: fb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DD:5E:CB:BE:20:B7:89:8B:4C:05:07:2E:0F:58:0D:DB:B5:48:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/eae0a58d-2ab5-3697-8268-38a3265b2c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl X509v3 Authority Key Identifier: keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer sbgp-ipAddrBlock: critical IPv4: 208.83.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f3:6b:af:e8:cc:8e:b6:6e:40:97:ae:9b:79:51:3e:e0:b0: cf:30:a0:f6:33:43:78:cf:53:6d:0c:19:e8:c7:2e:1e:ab:20: a0:c8:e0:5c:da:18:9b:ae:30:59:80:6a:09:27:2f:f4:2e:16: 89:50:aa:d9:85:ce:14:79:44:05:01:e6:9f:dd:39:78:36:a5: 8e:9b:85:20:f7:b8:a8:65:a7:40:3a:0b:1e:7f:37:ae:68:ef: ee:01:b0:ed:b3:c3:4e:b9:e4:2e:e9:f7:b3:21:c2:fb:37:e1: a3:92:6a:ad:70:1d:3c:0b:11:ca:a8:8b:72:1b:42:1d:a2:34: 4a:15:36:7b:2d:ba:ae:4c:b3:c7:55:78:ba:57:b9:9a:4d:b8: ce:a9:83:02:91:ab:45:79:51:cc:52:2b:fc:dd:04:3f:f9:85: fe:0c:6a:26:86:da:1b:9f:e2:cc:4c:ba:eb:44:c3:3d:70:d0: 9a:8b:56:26:af:80:09:d0:7f:50:fc:b6:6b:1d:49:99:27:e2: e1:bf:60:9e:c9:ab:97:ff:39:ea:cf:b9:ca:af:8f:1f:e0:b8: af:a9:ca:50:29:fc:0b:37:04:08:52:d9:4d:dd:62:97:72:a3: 4d:d7:30:8d:fb:94:ef:fe:0d:68:e9:88:4b:46:fc:f9:97:57: 4d:e9:29:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNZz5POR1BxlA8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhNjY2OWItNmQyNS00MTg2LWE3NTctM2MyODliZGM4 MDMxMB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk YTJmYTFhMTItYTBkZi00YjE2LWExMGQtY2YwMTcxOTczODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfnMD45ismn+dawVcn/f2CJWo7OjgwOZReeE R8sNm4J9p/BkQPrPpG5JqIQFqr5s5LrqhGUHff6q5+aIStIXHSJvwdbEPjI8ipbu NXcZ3f5gSrrmIvHBvr2XQaT2xpgGlmG1b7nFHImPTdY8+Y/DDaCcA2DUJVjkVIvF y81XI5CjEqJsWalovp76HXY2FBJQB4f/pmQ1CIM4q2Gkxig2GQOHRxXeDtUtpYZE JBZKtd01CFYTlqmoncI9jlCjWQD4Lu+NSL71iZkjeFylug012RRmM1CMHFKGyWd5 gYWhm8Ucd+ShXSDObker6Ip0RGbzQrcJyy2MoqLzT21vqZn77wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLdXsu+ILeJi0wFBy4PWA3btUgiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2 NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4OWJkYzgwMzEvZWFlMGE1OGQtMmFiNS0z Njk3LTgyNjgtMzhhMzI2NWIyYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDlhNjY2OWItNmQyNS00MTg2LWE3 NTctM2MyODliZGM4MDMxL2Q5YTY2NjliLTZkMjUtNDE4Ni1hNzU3LTNjMjg5YmRj ODAzMS5jcmwwHwYDVR0jBBgwFoAU7lIQLy5n25yXT3T+levfSezkaxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4 OWJkYzgwMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTza6/ozI62bkCXrpt5UT7gsM8woPYzQ3jPU20MGejHLh6rIKDI4Fza GJuuMFmAagknL/QuFolQqtmFzhR5RAUB5p/dOXg2pY6bhSD3uKhlp0A6Cx5/N65o 7+4BsO2zw0655C7p97Mhwvs34aOSaq1wHTwLEcqoi3IbQh2iNEoVNnstuq5Ms8dV eLpXuZpNuM6pgwKRq0V5UcxSK/zdBD/5hf4MaiaG2huf4sxMuutEwz1w0JqLViav gAnQf1D8tmsdSZkn4uG/YJ7Jq5f/OerPucqvjx/guK+pylAp/As3BAhS2U3dYpdy o03XMI37lO/+DWjpiEtG/PmXV03pKZ8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:22 2025 by rpki-client