$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f16af19d-d86f-3da1-8a01-99cec2d7c5f8.roa File: f16af19d-d86f-3da1-8a01-99cec2d7c5f8.roa (raw, json) Hash identifier: oHDYT6E3hj3UTUpy64XsmMWpGvCoxXwHCshLEM/3vpA= Subject key identifier: 32:B9:E6:95:0C:B1:78:63:4A:CF:26:D6:5D:7C:B8:56:F4:00:48:E4 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F43285848C5818A6A0DA731CB3596BC80 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f16af19d-d86f-3da1-8a01-99cec2d7c5f8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 36040 IP address blocks: 208.117.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8a:6a:0d:a7:31:cb:35:96:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e8b0efe5-e5fb-4e50-a79d-12edd4514638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2b:81:a4:88:51:13:6b:9e:74:ec:ce:d2:79: 69:17:b0:5a:a5:52:6f:d5:f8:f7:71:de:4d:9b:9b: 2e:87:f6:87:1d:c8:f8:95:8a:b9:7f:c1:ed:aa:b7: 71:56:1b:b4:53:c8:07:60:f5:0a:03:4d:64:a0:f3: 5c:af:ae:be:7f:c1:57:4b:dc:ea:f1:de:31:7d:42: 00:3b:c0:c8:88:22:78:82:9b:f9:55:c8:b8:bb:2d: 62:56:95:e1:c4:a7:f5:50:58:b4:c4:3b:89:eb:cd: 2b:a6:c5:5b:7f:6c:68:19:cf:f5:40:b3:97:42:65: 68:b9:7c:4a:37:74:2b:00:cd:a8:86:57:1c:c8:c4: b1:7b:db:eb:ec:fd:41:3b:3f:44:31:43:40:fc:17: 16:ee:61:19:46:37:d4:55:3d:b5:f2:5e:7a:07:47: 2f:9d:7c:b1:36:8f:7c:ef:2c:7b:e3:f3:bc:ac:20: 8a:08:52:6a:f0:bc:71:9f:b4:1e:eb:90:7c:f8:31: 66:27:32:92:76:5f:4b:9f:78:53:dd:36:07:c2:b8: bf:08:73:07:91:68:cd:36:81:12:66:38:36:a9:d1: 93:95:c0:8e:1d:18:c0:42:62:7f:e0:6b:75:fd:a9: 36:ad:b6:8b:c7:53:36:35:94:4e:79:e2:23:b9:fb: ef:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B9:E6:95:0C:B1:78:63:4A:CF:26:D6:5D:7C:B8:56:F4:00:48:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f16af19d-d86f-3da1-8a01-99cec2d7c5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2f:22:61:75:f8:00:40:e5:90:f7:f7:97:92:d3:d4:8d:c8: 1b:74:33:f8:ad:0e:21:c9:65:17:04:ce:ac:01:5c:3f:a8:a0: 5a:a8:9e:d9:2e:72:55:ce:92:3e:bd:57:03:85:f8:f0:40:8c: 18:52:0c:a1:ad:1d:95:d6:4f:63:2c:8e:c9:ef:53:d0:81:25: 7c:a1:31:72:5c:cd:52:c9:0f:83:f3:21:aa:fc:35:d9:76:28: 05:c3:8c:6e:60:b0:c5:de:df:cf:9a:af:46:ef:2a:7b:f7:b5: 7c:68:a8:30:dc:5d:71:b4:98:55:9f:01:27:7e:b1:da:d0:1d: c3:fc:b9:c2:27:69:9b:61:30:8d:c2:71:63:c7:b6:cc:71:e6: 93:bf:e3:ed:f7:dd:15:0d:00:0e:19:7d:44:2d:5c:08:b3:4b: f5:52:1a:4d:e1:70:a1:8b:fb:1d:a4:3e:3d:b7:c5:ce:81:47: 34:9b:d3:95:5f:51:75:e9:fd:71:e3:25:a6:e9:f4:11:54:af: 72:88:e4:f6:f7:88:ad:30:4b:56:86:12:fc:f5:1f:5e:0b:7d: c5:fd:14:a7:de:03:b9:69:09:d5:c0:9f:54:e9:6f:df:86:68: b0:0d:dc:09:09:b0:10:7c:da:c7:84:87:7d:0e:87:96:52:4d: c3:99:78:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYpqDacxyzWWvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZThiMGVmZTUtZTVmYi00ZTUwLWE3OWQtMTJlZGQ0NTE0NjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCuBpIhRE2uedOzO0nlpF7BapVJv1fj3cd5N m5suh/aHHcj4lYq5f8HtqrdxVhu0U8gHYPUKA01koPNcr66+f8FXS9zq8d4xfUIA O8DIiCJ4gpv5Vci4uy1iVpXhxKf1UFi0xDuJ680rpsVbf2xoGc/1QLOXQmVouXxK N3QrAM2ohlccyMSxe9vr7P1BOz9EMUNA/BcW7mEZRjfUVT218l56B0cvnXyxNo98 7yx74/O8rCCKCFJq8Lxxn7Qe65B8+DFmJzKSdl9Ln3hT3TYHwri/CHMHkWjNNoES Zjg2qdGTlcCOHRjAQmJ/4Gt1/ak2rbaLx1M2NZROeeIjufvvzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK55pUMsXhjSs8m1l18uFb0AEjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZjE2YWYxOWQtZDg2Zi0z ZGExLThhMDEtOTljZWMyZDdjNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0HXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAvImF1+ABA5ZD395eS09SNyBt0M/itDiHJZRcEzqwBXD+ooFqontku clXOkj69VwOF+PBAjBhSDKGtHZXWT2MsjsnvU9CBJXyhMXJczVLJD4PzIar8Ndl2 KAXDjG5gsMXe38+ar0bvKnv3tXxoqDDcXXG0mFWfASd+sdrQHcP8ucInaZthMI3C cWPHtsxx5pO/4+333RUNAA4ZfUQtXAizS/VSGk3hcKGL+x2kPj23xc6BRzSb05Vf UXXp/XHjJabp9BFUr3KI5Pb3iK0wS1aGEvz1H14LfcX9FKfeA7lpCdXAn1Tpb9+G aLAN3AkJsBB82seEh30Oh5ZSTcOZeOk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:44 2025 by rpki-client