$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b329ccb4-4c8d-3081-80c6-39113fd63696.roa File: b329ccb4-4c8d-3081-80c6-39113fd63696.roa (raw, json) Hash identifier: 0wG4G2QeM3/B8YEVF5xXqWO8VHA8FI0mXlrqacukTGo= Subject key identifier: C3:D2:A6:6C:0E:25:93:C5:63:83:95:70:5B:0D:A1:BC:D7:48:7A:C5 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F43285848C581847BA289AED88F9F5E00 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b329ccb4-4c8d-3081-80c6-39113fd63696.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 36040 IP address blocks: 208.117.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:84:7b:a2:89:ae:d8:8f:9f:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=aaeef35f-6ac1-4cc6-956f-df10c690db5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:95:c0:42:e6:8c:74:c1:25:76:7a:f9:0b: 25:17:57:43:9b:39:9d:56:dd:0b:58:b7:86:1c:c2: c7:f0:3c:60:25:60:6c:23:d4:73:32:50:05:62:fc: fb:b4:9c:6d:ec:d7:7f:ea:96:68:ad:4f:05:d6:4a: 15:93:06:d8:80:da:e9:0b:89:c5:85:ef:ce:8c:5c: 30:72:9d:a6:a6:df:48:bb:05:24:75:a7:2b:f4:73: 1b:6a:d2:5d:69:18:28:9d:3b:e1:0d:11:5f:32:8f: 34:a1:59:f0:cb:30:3f:a3:93:63:8b:b8:18:ef:14: a5:97:95:11:14:7c:e7:52:f5:d7:40:f2:fa:11:60: 41:11:3d:d2:44:12:95:a9:90:3b:bb:18:20:9d:6c: 25:a3:72:fe:e1:ea:4f:f5:29:30:07:f2:ad:20:05: 90:49:62:12:cb:80:16:ee:93:89:23:11:4b:0e:ec: ff:20:96:40:94:b2:8b:52:8a:69:3f:12:b7:93:5e: f6:e0:78:2f:b5:a6:77:ed:b1:b3:08:21:0f:4f:3d: 75:a4:93:ba:70:9b:0b:ce:0c:3e:dc:01:25:43:82: f7:96:d3:85:ce:f3:e2:db:72:20:d6:1f:66:93:ea: 79:65:7e:5a:c2:e9:50:f6:24:eb:56:d5:f4:45:00: 5b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D2:A6:6C:0E:25:93:C5:63:83:95:70:5B:0D:A1:BC:D7:48:7A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b329ccb4-4c8d-3081-80c6-39113fd63696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d4:d2:47:b9:32:e4:ab:43:dc:85:5b:5d:1e:b2:0e:f5:73: ae:3f:23:6f:75:b9:23:12:24:28:74:dd:2e:64:9d:ff:78:e3: ce:e3:de:66:a4:f5:d7:31:9c:ee:43:e3:7d:ca:5f:3d:cc:3a: 63:dc:d6:27:47:3c:ca:6f:fd:c3:9e:8c:88:17:b6:2a:2f:a9: e3:87:d8:37:7c:ce:ac:5d:29:13:99:92:92:db:27:1e:d8:d4: 7d:95:35:8c:31:09:82:48:45:b9:00:7f:9b:b8:99:bd:cb:0c: d2:94:31:7a:10:97:4f:f4:27:47:fa:62:12:56:2b:70:69:f4: ce:c0:d5:8c:52:79:f2:3d:0d:3f:4d:be:96:ef:02:d3:4f:25: 8e:e3:b5:10:58:ed:2c:0a:4f:c4:8a:6f:7e:8c:4b:29:26:0a: c0:e8:04:ec:5b:72:dc:34:f1:05:af:e5:a0:43:f3:97:58:17: 8b:15:fe:16:5d:cd:ef:a0:9d:9a:6a:e8:ae:23:ed:06:3f:b3: e6:54:c2:fc:f2:41:34:1b:fa:5c:f6:da:eb:d6:2d:b5:ba:85: 17:43:90:35:4e:43:3d:d5:0a:5e:fd:67:a2:d6:b5:43:60:8c: 40:06:32:85:3b:f2:d5:c3:d6:09:7d:0a:cb:13:e5:bc:6f:6f: d4:c5:ed:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYR7oomu2I+fXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YWFlZWYzNWYtNmFjMS00Y2M2LTk1NmYtZGYxMGM2OTBkYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNqVwELmjHTBJXZ6+QslF1dDmzmdVt0LWLeG HMLH8DxgJWBsI9RzMlAFYvz7tJxt7Nd/6pZorU8F1koVkwbYgNrpC4nFhe/OjFww cp2mpt9IuwUkdacr9HMbatJdaRgonTvhDRFfMo80oVnwyzA/o5Nji7gY7xSll5UR FHznUvXXQPL6EWBBET3SRBKVqZA7uxggnWwlo3L+4epP9SkwB/KtIAWQSWISy4AW 7pOJIxFLDuz/IJZAlLKLUoppPxK3k1724HgvtaZ37bGzCCEPTz11pJO6cJsLzgw+ 3AElQ4L3ltOFzvPi23Ig1h9mk+p5ZX5awulQ9iTrVtX0RQBbVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPSpmwOJZPFY4OVcFsNobzXSHrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYjMyOWNjYjQtNGM4ZC0z MDgxLTgwYzYtMzkxMTNmZDYzNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HX+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTU0ke5MuSrQ9yFW10esg71c64/I291uSMSJCh03S5knf94487j3mak 9dcxnO5D433KXz3MOmPc1idHPMpv/cOejIgXtiovqeOH2Dd8zqxdKROZkpLbJx7Y 1H2VNYwxCYJIRbkAf5u4mb3LDNKUMXoQl0/0J0f6YhJWK3Bp9M7A1YxSefI9DT9N vpbvAtNPJY7jtRBY7SwKT8SKb36MSykmCsDoBOxbctw08QWv5aBD85dYF4sV/hZd ze+gnZpq6K4j7QY/s+ZUwvzyQTQb+lz22uvWLbW6hRdDkDVOQz3VCl79Z6LWtUNg jEAGMoU78tXD1gl9CssT5bxvb9TF7ZE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:44 2025 by rpki-client