$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa File: 20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa (raw, json) Hash identifier: 6Grt9gepiE4VxPxOFcl9uxK4xhXpVwdcwk/8v/bO7vU= Subject key identifier: 5B:A2:1D:6E:B6:5A:1D:68:6E:7A:CB:FD:CD:A7:6B:3A:25:7F:F1:C6 Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Certificate serial: 010D0C9F432858485B6AF865F38127972E99E200 Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 16552 IP address blocks: 208.80.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6a:f8:65:f3:81:27:97:2e:99:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=27e5eed0-c414-4307-94c5-04e01b4c4cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0f:45:45:28:ba:07:7b:d7:79:b1:89:bf:a6: 09:37:03:db:4b:3a:b9:9c:51:00:06:6c:f5:97:54: ad:7a:d6:db:df:2f:07:ec:7e:0f:ba:35:44:f0:70: 5e:31:31:67:61:d7:f3:c8:7a:ad:a3:35:b7:61:5c: 3d:d5:3b:30:a6:92:23:5f:71:6c:f1:fe:d8:dc:53: 49:c9:89:19:be:c8:84:d4:ee:7d:ac:56:53:8a:52: 40:d4:a9:8f:b1:43:f8:c4:25:22:0c:66:a8:84:35: a1:3d:2f:78:6c:a7:70:1c:84:81:1e:d2:69:96:75: 66:a2:d0:5a:01:43:0e:24:6f:43:75:90:38:db:57: d3:1d:b2:a3:d6:b0:fd:88:6c:59:c3:2d:5e:92:a6: 2a:f8:96:b2:a1:cb:e5:58:00:67:66:05:e2:d4:e2: 6c:40:e9:6c:62:d5:df:66:a1:3b:25:0e:af:c7:25: 80:e2:d5:0e:64:d6:74:a1:a7:d3:73:eb:7e:d6:4b: e9:a7:1f:2e:92:de:ac:75:ee:ae:7a:cf:6b:c8:6d: 2f:18:e3:f6:61:56:b8:49:b1:53:d9:e5:7f:ee:d9: 9d:d1:2f:e0:6d:d5:90:c4:92:0f:97:d7:2b:65:3d: b4:3d:85:b7:79:b1:4a:34:66:55:04:d7:e3:a6:53: 2c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A2:1D:6E:B6:5A:1D:68:6E:7A:CB:FD:CD:A7:6B:3A:25:7F:F1:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl X509v3 Authority Key Identifier: keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer sbgp-ipAddrBlock: critical IPv4: 208.80.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b0:cd:15:79:86:42:58:5a:79:10:58:2a:3c:65:00:a1:8d: dc:3e:f4:6f:8b:8c:e5:d9:e9:02:66:6e:1e:b8:1a:ba:84:d8: 25:66:3b:f4:70:8f:f0:22:5b:32:81:9d:67:43:29:6c:c4:27: e1:33:f3:ad:04:22:4e:fc:90:2b:33:82:1a:63:ff:cb:fe:93: 92:e6:70:ee:9b:4c:a5:5c:80:92:20:88:c7:a8:b7:e9:72:54: 15:9a:fe:1c:a7:72:fd:8f:19:ec:64:3a:3f:d6:21:f6:6b:90: ad:ef:91:d6:2e:3f:23:ba:f5:ca:5d:2d:08:27:3f:08:d6:ba: 16:7a:61:32:d6:5e:4a:10:63:3e:c0:db:2f:49:f2:43:c4:0a: 8d:78:05:c6:1c:48:c0:a1:c9:fb:c3:4e:9a:2e:d8:c6:55:44: b4:cd:27:34:cf:e7:3e:2d:31:70:cc:db:60:05:d3:6d:42:31: 90:69:25:8e:12:fb:c0:64:52:a0:02:74:ab:c0:a7:7e:39:4e: 00:c5:b9:5d:e4:f3:d0:1c:42:2b:7e:5b:d9:8d:cf:c2:ad:76: 7f:09:ba:f4:87:43:b3:c5:5d:55:c9:32:02:06:9d:c4:2c:d3: b0:4d:f2:7a:e9:9a:92:5e:b1:7b:e8:f7:10:98:71:62:96:74: b4:a2:ba:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbavhl84Enly6Z4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRmNmViZDctMGNjZC00YzA2LTgwYTAtNDVmZDc2MDc3 ZjU0MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk MjdlNWVlZDAtYzQxNC00MzA3LTk0YzUtMDRlMDFiNGM0Y2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ9FRSi6B3vXebGJv6YJNwPbSzq5nFEABmz1 l1Stetbb3y8H7H4PujVE8HBeMTFnYdfzyHqtozW3YVw91TswppIjX3Fs8f7Y3FNJ yYkZvsiE1O59rFZTilJA1KmPsUP4xCUiDGaohDWhPS94bKdwHISBHtJplnVmotBa AUMOJG9DdZA421fTHbKj1rD9iGxZwy1ekqYq+JayocvlWABnZgXi1OJsQOlsYtXf ZqE7JQ6vxyWA4tUOZNZ0oafTc+t+1kvppx8ukt6sde6ues9ryG0vGOP2YVa4SbFT 2eV/7tmd0S/gbdWQxJIPl9crZT20PYW3ebFKNGZVBNfjplMsJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuiHW62Wh1obnrL/c2nazolf/HGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2 ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZkNzYwNzdmNTQvMjBkYzJhMGMtY2FkYy0z ZDdiLThlZWYtYTVlY2Q4ODc0ZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRmNmViZDctMGNjZC00YzA2LTgw YTAtNDVmZDc2MDc3ZjU0LzVkZjZlYmQ3LTBjY2QtNGMwNi04MGEwLTQ1ZmQ3NjA3 N2Y1NC5jcmwwHwYDVR0jBBgwFoAU+ZXymTKY5kpAyLxIzydJ7K1e/qcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZk NzYwNzdmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKwzRV5hkJYWnkQWCo8ZQChjdw+9G+LjOXZ6QJmbh64GrqE2CVmO/Rw j/AiWzKBnWdDKWzEJ+Ez860EIk78kCszghpj/8v+k5LmcO6bTKVcgJIgiMeot+ly VBWa/hyncv2PGexkOj/WIfZrkK3vkdYuPyO69cpdLQgnPwjWuhZ6YTLWXkoQYz7A 2y9J8kPECo14BcYcSMChyfvDTpou2MZVRLTNJzTP5z4tMXDM22AF021CMZBpJY4S +8BkUqACdKvAp345TgDFuV3k89AcQit+W9mNz8Ktdn8JuvSHQ7PFXVXJMgIGncQs 07BN8nrpmpJesXvo9xCYcWKWdLSiuio= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:52 2025 by rpki-client