$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6c4e6a2d-93bd-3168-9ca4-58e2acaf2e54.roa File: 6c4e6a2d-93bd-3168-9ca4-58e2acaf2e54.roa (raw, json) Hash identifier: D1D2LWsmVp+Uhq4mNg1lt+7jPvEloxzxBPZjg/4On3s= Subject key identifier: 1A:0F:AC:94:85:B3:9A:44:F0:A4:84:74:B8:7A:73:8E:FF:34:7D:BC Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711 Certificate serial: 010D0C9F4328584897708D7736C22E1355CB2AF4 Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6c4e6a2d-93bd-3168-9ca4-58e2acaf2e54.roa Signing time: Sun 19 Jan 2025 02:00:39 +0000 ROA not before: Sun 19 Jan 2025 02:00:39 +0000 ROA not after: Sat 19 Apr 2025 01:00:39 +0000 asID: 43641 IP address blocks: 208.70.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:70:8d:77:36:c2:2e:13:55:cb:2a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711 Validity Not Before: Jan 19 02:00:39 2025 GMT Not After : Apr 19 01:00:39 2025 GMT Subject: CN=7df2425b-c36d-4bee-b680-47cfc5626c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:41:cd:32:b1:34:0c:fe:c9:89:fb:21:78:d8: 3b:e1:17:06:70:1c:19:bc:09:14:a6:6d:c9:9d:8c: 11:58:d9:00:1f:a1:e9:84:99:ac:10:9b:e4:b3:32: 97:37:18:7e:2c:22:f8:cd:11:9e:b7:35:2c:fe:d2: 52:d6:fd:15:a1:27:0a:d8:b7:0d:18:66:81:83:dc: dc:9a:e1:f8:dc:20:18:22:0f:65:88:62:46:f3:06: c9:14:e6:46:20:1c:fc:1d:ed:ef:e0:da:3b:48:b3: 9f:a7:99:1b:aa:e7:24:69:95:5e:fb:b5:c2:83:4d: 07:9e:29:6f:3b:63:80:bf:db:3f:76:05:57:bf:94: e5:e4:bc:0e:32:d5:fe:c3:5e:90:9a:ed:90:99:1c: f9:ca:0c:03:f8:46:3a:fa:c9:9e:e0:9b:f1:d7:c8: a1:62:ac:3d:dc:11:b4:d8:b4:29:65:3b:0b:82:67: 2d:99:a9:34:18:9f:b7:7f:e9:c5:bc:0d:2d:97:61: 12:df:3c:0b:d0:87:54:e2:db:38:83:e3:0b:be:02: 8d:73:f7:de:1f:0d:13:fe:9f:0f:79:56:d5:e5:18: 49:f4:ef:74:21:fc:f9:4c:19:e5:22:3d:43:de:d2: 28:da:85:f3:b0:1e:1e:e9:1f:97:b0:d0:2b:ef:50: cf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0F:AC:94:85:B3:9A:44:F0:A4:84:74:B8:7A:73:8E:FF:34:7D:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6c4e6a2d-93bd-3168-9ca4-58e2acaf2e54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl X509v3 Authority Key Identifier: keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer sbgp-ipAddrBlock: critical IPv4: 208.70.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:1f:b9:8e:65:dc:77:37:04:f4:3f:d5:64:ef:16:9b:16:c5: 03:4c:cf:ff:4b:e4:57:29:05:50:b2:e6:da:e8:67:b2:89:68: 4d:ce:f5:43:d1:f7:5b:da:48:b0:5e:45:9f:08:7d:8c:cf:29: 84:99:e7:d6:bc:fc:10:18:76:bd:7e:9f:f0:7e:f9:12:57:11: 6b:84:6c:a1:5d:4e:4c:a8:a8:7a:ac:0d:43:99:58:81:b8:94: 72:c6:41:e2:7c:b4:d0:75:13:85:a0:f8:fb:1e:db:88:6e:bf: ae:ce:4c:b8:12:5f:75:5a:3a:d7:4c:fb:d1:96:09:10:ac:17: dc:e8:d7:a8:35:1f:29:18:5f:37:73:be:e0:9e:1a:21:35:90: 7c:be:ad:76:5c:49:19:f8:44:e7:2f:ff:e5:44:5d:1d:68:d8: f3:35:ff:25:4c:f4:bf:b6:8d:27:a7:b2:12:a8:2d:35:95:51: 65:3c:f2:eb:82:06:95:2c:dd:80:11:bc:11:2e:5f:39:60:11: 25:c0:8d:cf:36:0b:9b:a8:f9:39:4d:b6:4d:59:a0:0e:fb:dc: c2:99:8f:c5:d3:26:9a:82:76:0e:94:4c:9d:1b:ac:1d:39:e1: 1d:79:8b:31:7c:0d:64:62:aa:3b:0b:8d:33:a5:fa:ea:df:74: 25:44:8b:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiXcI13NsIuE1XLKvQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy NzExMB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk N2RmMjQyNWItYzM2ZC00YmVlLWI2ODAtNDdjZmM1NjI2YzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUHNMrE0DP7JifsheNg74RcGcBwZvAkUpm3J nYwRWNkAH6HphJmsEJvkszKXNxh+LCL4zRGetzUs/tJS1v0VoScK2LcNGGaBg9zc muH43CAYIg9liGJG8wbJFOZGIBz8He3v4No7SLOfp5kbquckaZVe+7XCg00Hnilv O2OAv9s/dgVXv5Tl5LwOMtX+w16Qmu2QmRz5ygwD+EY6+sme4Jvx18ihYqw93BG0 2LQpZTsLgmctmak0GJ+3f+nFvA0tl2ES3zwL0IdU4ts4g+MLvgKNc/feHw0T/p8P eVbV5RhJ9O90Ifz5TBnlIj1D3tIo2oXzsB4e6R+XsNAr71DP5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoPrJSFs5pE8KSEdLh6c47/NH28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvNmM0ZTZhMmQtOTNiZC0z MTY4LTljYTQtNThlMmFjYWYyZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk ZjY1MTI3MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgfuY5l3Hc3BPQ/1WTvFpsWxQNMz/9L5FcpBVCy5troZ7KJaE3O9UPR 91vaSLBeRZ8IfYzPKYSZ59a8/BAYdr1+n/B++RJXEWuEbKFdTkyoqHqsDUOZWIG4 lHLGQeJ8tNB1E4Wg+Pse24huv67OTLgSX3VaOtdM+9GWCRCsF9zo16g1HykYXzdz vuCeGiE1kHy+rXZcSRn4ROcv/+VEXR1o2PM1/yVM9L+2jSenshKoLTWVUWU88uuC BpUs3YARvBEuXzlgESXAjc82C5uo+TlNtk1ZoA773MKZj8XTJpqCdg6UTJ0brB05 4R15izF8DWRiqjsLjTOl+urfdCVEi4M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:56 2025 by rpki-client