$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8b3b755-3a3a-3952-b413-3c44e724b21d.roa File: e8b3b755-3a3a-3952-b413-3c44e724b21d.roa (raw, json) Hash identifier: 4PRoQkirMXHiNfgR+28bAEgMi0ummN/Kup2gjTwRf9A= Subject key identifier: 85:EB:80:A1:CC:1D:75:1E:84:6D:52:B6:3B:5F:78:21:1A:AE:C6:2E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC60B69BE1F1ABBADB70C00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8b3b755-3a3a-3952-b413-3c44e724b21d.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 15247 IP address blocks: 208.181.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:0b:69:be:1f:1a:bb:ad:b7:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=0cc4f026-4196-4846-a4eb-b38b9ccfd363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2c:a1:3b:4c:e6:e3:f6:fc:61:54:dc:92:46: 9d:7b:eb:b5:28:c3:95:ad:36:36:04:43:4f:e1:6b: b1:95:5c:e4:93:d0:41:89:ec:88:00:79:9b:30:29: d2:e5:80:b4:3e:c9:50:5e:0d:25:f3:30:e7:c3:cb: 82:21:a6:42:a7:cf:c3:d5:2a:e2:a0:a9:30:13:5f: 1a:b3:4d:2f:45:95:98:d2:45:b0:3f:75:09:08:96: 20:89:c1:48:3c:98:88:c3:d6:af:da:05:c5:54:e2: 7d:ff:0c:17:4b:70:4f:58:77:73:ef:04:b8:cb:4e: 89:ed:cf:cd:11:23:8e:df:75:0c:e2:76:53:4b:a0: 69:6f:0a:e6:58:a3:44:84:cc:b1:fe:9b:f8:25:e0: 9a:f5:38:90:e5:70:fb:d1:20:d6:6a:db:f0:b0:18: 1b:f6:08:6f:cf:84:60:5e:60:10:2d:15:75:a2:19: fb:d9:f3:dd:34:88:31:8a:10:12:e5:79:3e:f6:f0: c0:6b:5d:04:a9:85:9c:14:c9:49:5a:5b:c0:31:8e: 1a:68:3a:31:b5:2a:3c:37:30:08:9a:7f:d1:36:ea: e1:67:a5:e2:df:fc:7a:f7:8c:78:47:e0:d3:78:d9: 53:00:6d:89:d0:b5:e4:af:11:28:cf:13:fb:37:5e: 57:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EB:80:A1:CC:1D:75:1E:84:6D:52:B6:3B:5F:78:21:1A:AE:C6:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8b3b755-3a3a-3952-b413-3c44e724b21d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:c0:cc:c8:0c:5e:74:62:4a:b2:cb:35:c5:24:44:a2:98:eb: 6d:fa:1a:d0:4b:f6:51:ae:ba:b4:44:d0:db:3a:e4:71:37:15: f4:52:21:c1:c5:b5:df:2b:78:f7:9f:36:79:bd:4f:33:9a:1d: 8e:63:46:54:07:a9:df:65:10:31:f5:b9:2c:d1:e9:22:14:9b: 3d:16:25:68:6f:f9:3e:9f:ba:43:5e:2e:4d:0d:63:af:36:15: e7:0c:eb:aa:96:14:bc:21:f3:ad:22:3c:e3:b7:f9:7a:19:3e: 28:77:1f:44:5a:40:e2:a1:7f:0b:4d:aa:32:14:81:04:0d:87: cc:fd:a7:7f:cc:00:ce:0e:14:62:89:57:ff:48:c0:76:fd:a7: 5a:df:fb:74:48:cf:54:f5:11:58:c5:2f:d5:cf:85:bf:e7:ef: 0f:97:80:94:29:17:7e:9b:dc:f6:63:e2:ef:c9:a2:3f:cf:a5: 93:2d:92:20:90:35:b6:c4:20:a9:49:b8:f2:1e:4b:d1:0b:20: 70:43:54:b5:d0:4a:f1:c1:2f:b4:bc:41:5b:0a:77:f5:3c:01: 26:02:ce:03:c4:54:e0:12:cf:a9:09:bf:43:20:8e:c3:6b:21: 4b:50:e4:60:25:2e:17:93:8d:da:c5:92:22:e1:da:b2:4c:73: a9:a4:e3:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgtpvh8au623DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk MGNjNGYwMjYtNDE5Ni00ODQ2LWE0ZWItYjM4YjljY2ZkMzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCyhO0zm4/b8YVTckkade+u1KMOVrTY2BENP 4WuxlVzkk9BBieyIAHmbMCnS5YC0PslQXg0l8zDnw8uCIaZCp8/D1SrioKkwE18a s00vRZWY0kWwP3UJCJYgicFIPJiIw9av2gXFVOJ9/wwXS3BPWHdz7wS4y06J7c/N ESOO33UM4nZTS6BpbwrmWKNEhMyx/pv4JeCa9TiQ5XD70SDWatvwsBgb9ghvz4Rg XmAQLRV1ohn72fPdNIgxihAS5Xk+9vDAa10EqYWcFMlJWlvAMY4aaDoxtSo8NzAI mn/RNurhZ6Xi3/x694x4R+DTeNlTAG2J0LXkrxEozxP7N15XJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXrgKHMHXUehG1StjtfeCEarsYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZThiM2I3NTUtM2EzYS0z OTUyLWI0MTMtM2M0NGU3MjRiMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0LVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMfAzMgMXnRiSrLLNcUkRKKY6236GtBL9lGuurRE0Ns65HE3FfRSIcHF td8rePefNnm9TzOaHY5jRlQHqd9lEDH1uSzR6SIUmz0WJWhv+T6fukNeLk0NY682 FecM66qWFLwh860iPOO3+XoZPih3H0RaQOKhfwtNqjIUgQQNh8z9p3/MAM4OFGKJ V/9IwHb9p1rf+3RIz1T1EVjFL9XPhb/n7w+XgJQpF36b3PZj4u/Joj/PpZMtkiCQ NbbEIKlJuPIeS9ELIHBDVLXQSvHBL7S8QVsKd/U8ASYCzgPEVOASz6kJv0MgjsNr IUtQ5GAlLheTjdrFkiLh2rJMc6mk4z0= -----END CERTIFICATE-----Generated at Wed Feb 19 20:42:12 2025 by rpki-client