$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa File: 514b984c-cac0-3f94-a6d5-e507ad0ad953.roa (raw, json) Hash identifier: U8ZQ/uuzRDE+IC1VLmrIMbG/4pu2bNDzXTK62nuwDZM= Subject key identifier: 25:DB:29:1B:AE:6C:15:CA:D1:AB:82:EA:84:5C:F4:52:66:63:DE:0B Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F432858489A3B4AB3D69B365C77703700 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 400591 IP address blocks: 204.8.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:4a:b3:d6:9b:36:5c:77:70:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=812b1d04-9a18-43a6-90f5-1aab2f40d411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f0:70:b9:62:3b:be:9e:d2:68:77:4d:a0:99: 65:f4:71:72:18:77:47:ca:d6:64:42:00:39:dd:a9: 7a:85:be:a0:9a:ea:1f:9e:10:a0:f3:71:b2:a4:21: 9d:f8:ca:a8:91:e0:31:3c:cf:57:e8:cc:cd:56:ac: b8:94:9c:20:4b:61:95:1d:b0:97:4b:5c:9e:0c:56: b7:4f:28:a9:e6:7f:d7:5e:1a:0d:91:6b:cb:6b:a7: 87:65:46:81:e2:fe:36:45:40:e7:8a:57:f5:52:4e: 8c:58:f3:53:73:75:07:7f:0b:bd:3a:44:28:1c:68: a3:83:da:28:00:d7:5c:35:47:bb:dc:c6:24:48:28: ac:52:e8:1b:3e:24:8b:db:5e:32:21:04:67:2e:a0: fa:85:d1:81:58:d5:ad:7e:45:64:50:27:1e:b4:bc: 05:15:29:d6:b4:54:79:6d:3a:e4:d9:1b:a0:90:09: 6a:3f:36:8a:4a:0e:c7:88:07:e3:83:5c:07:68:f4: 9f:ab:38:da:57:94:50:b7:f7:19:1f:54:58:31:74: ef:7b:46:46:79:9c:18:67:3c:f5:41:7a:5e:e2:4e: 6c:d6:d3:f1:e0:95:13:0d:3f:33:28:e6:99:0e:2b: 62:8f:a9:c3:18:54:02:03:e6:b3:0e:59:38:c6:45: 3c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DB:29:1B:AE:6C:15:CA:D1:AB:82:EA:84:5C:F4:52:66:63:DE:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 204.8.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:5b:35:aa:25:67:59:b8:64:ac:20:d9:aa:ee:5d:71:b4:5e: ef:bd:84:21:8b:56:85:13:bc:1c:e1:b8:3c:46:23:b2:b2:ac: fa:6b:32:21:95:5a:4d:cc:31:fe:7c:94:88:08:68:a8:f9:fc: 11:45:26:f7:fd:70:ee:57:8c:d7:6f:eb:07:63:36:ca:03:9a: 94:82:a4:e1:87:be:ca:9d:01:5f:a2:48:b3:7c:ac:3b:0e:46: 42:5c:e1:e1:c8:3d:b2:52:72:ca:8e:07:52:0f:8c:40:39:f0: ba:6c:62:f9:4b:c1:74:61:10:46:84:3a:06:31:97:df:63:89: 82:07:de:7e:65:9d:05:33:38:f4:38:26:db:76:82:a8:da:80: a3:4b:7b:54:d9:e0:24:37:df:4f:67:43:15:e5:05:6e:b9:3a: 9b:7f:be:e6:e0:09:36:c8:d7:8a:31:fa:9e:81:8b:ae:e3:97: 75:17:6b:4a:2f:05:79:cc:dd:db:ee:35:92:3c:28:54:53:30: e6:e5:db:47:9b:bd:6c:6b:f9:87:0b:bc:90:a3:de:a2:cf:a7: 85:15:b6:d7:40:f7:d4:a7:0c:f4:f3:19:cb:81:73:6f:51:30: 1e:a0:35:b2:58:91:b1:b4:59:89:a5:a6:ce:0a:4f:77:43:17: cc:da:97:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0qz1ps2XHdwNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk ODEyYjFkMDQtOWExOC00M2E2LTkwZjUtMWFhYjJmNDBkNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPBwuWI7vp7SaHdNoJll9HFyGHdHytZkQgA5 3al6hb6gmuofnhCg83GypCGd+MqokeAxPM9X6MzNVqy4lJwgS2GVHbCXS1yeDFa3 Tyip5n/XXhoNkWvLa6eHZUaB4v42RUDnilf1Uk6MWPNTc3UHfwu9OkQoHGijg9oo ANdcNUe73MYkSCisUugbPiSL214yIQRnLqD6hdGBWNWtfkVkUCcetLwFFSnWtFR5 bTrk2RugkAlqPzaKSg7HiAfjg1wHaPSfqzjaV5RQt/cZH1RYMXTve0ZGeZwYZzz1 QXpe4k5s1tPx4JUTDT8zKOaZDitij6nDGFQCA+azDlk4xkU8mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXbKRuubBXK0auC6oRc9FJmY94LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNTE0Yjk4NGMtY2FjMC0z Zjk0LWE2ZDUtZTUwN2FkMGFkOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhbNaolZ1m4ZKwg2aruXXG0Xu+9hCGLVoUTvBzhuDxGI7KyrPprMiGV Wk3MMf58lIgIaKj5/BFFJvf9cO5XjNdv6wdjNsoDmpSCpOGHvsqdAV+iSLN8rDsO RkJc4eHIPbJScsqOB1IPjEA58LpsYvlLwXRhEEaEOgYxl99jiYIH3n5lnQUzOPQ4 Jtt2gqjagKNLe1TZ4CQ3309nQxXlBW65Opt/vubgCTbI14ox+p6Bi67jl3UXa0ov BXnM3dvuNZI8KFRTMObl20ebvWxr+YcLvJCj3qLPp4UVttdA99SnDPTzGcuBc29R MB6gNbJYkbG0WYmlps4KT3dDF8zal4s= -----END CERTIFICATE-----Generated at Sun Feb 16 20:17:57 2025 by rpki-client