$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa File: db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa (raw, json) Hash identifier: UIfaiZfcUPFEosIUDoMu0TYVON20gqWdS68Owd4iMnM= Subject key identifier: 06:4C:D3:B5:40:0F:DF:81:36:58:B3:3A:2F:2D:D7:16:BE:75:97:BB Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9 Certificate serial: 010D0C9F43285848DA70F44E7D6F5264E49D1300 Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 398143 IP address blocks: 208.103.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f4:4e:7d:6f:52:64:e4:9d:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=52caceea-c254-45bc-a365-e27f632f5d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:9d:ae:19:08:1c:92:e9:b3:5e:57:fd:dd: 0e:e3:5a:26:6a:58:33:1f:e5:9e:18:73:7a:b3:c2: ba:2e:06:4b:4a:47:4a:16:d0:6e:f4:12:d4:61:20: 78:60:fa:7d:46:2e:af:35:32:7e:e5:25:5b:11:46: 93:36:24:13:74:72:a1:a3:fa:86:ee:5d:07:43:5f: 98:88:e4:5c:1c:9c:f9:b6:21:10:0c:59:5a:9c:2f: 51:49:53:e9:5e:20:b3:d8:8d:e4:24:b3:b3:8d:11: b3:6b:45:05:14:58:4b:fa:f8:7a:e9:ad:1d:a7:ff: 47:8f:34:da:a7:b0:86:28:26:8b:4b:98:b8:9e:ee: 96:47:55:0a:72:81:3b:bf:26:e6:77:80:22:84:a1: 17:36:a7:4e:c1:f6:2f:f2:59:8f:fd:2f:fa:35:11: 09:11:79:b1:f9:6d:a4:43:b0:df:ed:dc:43:a7:42: 6b:ce:50:41:33:37:39:56:80:e7:12:9e:eb:ef:c1: 90:79:37:2a:ac:f4:7b:57:cb:9f:f9:a2:b3:57:8d: ec:64:3a:af:ea:22:d8:16:a5:cd:c3:52:1f:1a:ed: 84:61:d6:04:45:cb:c6:76:97:35:49:63:f1:71:83: 4f:98:86:02:50:24:6b:96:cc:01:ab:8c:0f:f4:4a: 24:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4C:D3:B5:40:0F:DF:81:36:58:B3:3A:2F:2D:D7:16:BE:75:97:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl X509v3 Authority Key Identifier: keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer sbgp-ipAddrBlock: critical IPv4: 208.103.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7d:73:64:83:db:7e:f1:e7:01:5d:af:f1:5f:57:a1:b5:6c: 12:bc:41:77:14:0d:38:c4:2d:11:2e:6f:e1:ee:55:61:c1:32: 09:63:53:59:bb:cd:7e:73:2a:00:48:02:f9:bd:37:49:97:fd: 01:75:ee:ed:d5:88:e1:d9:05:17:f8:6c:5b:fc:fd:2e:fb:1f: 48:66:54:9a:5c:51:8e:fe:54:43:94:38:ac:88:3c:21:8c:d2: 5d:4f:c4:7a:83:e7:1a:80:08:89:73:df:22:4d:28:12:02:95: bd:b2:cc:fe:8c:4f:cf:1c:09:06:e6:31:f1:df:01:71:f7:c4: 7a:32:8e:28:b4:2f:a0:d9:5b:aa:63:06:44:c9:11:4c:ac:39: ca:19:24:52:4d:b7:d5:93:c4:54:b7:9e:eb:8d:42:d9:9a:9b: f5:30:4e:b7:25:8c:6a:8d:4e:91:7f:db:37:87:c9:f7:32:d3: 36:5d:c7:6d:44:a8:b3:a9:12:5d:d6:20:71:94:91:7e:bf:8b: cd:0a:2a:1e:c5:ef:fc:3a:45:97:e0:55:35:0f:da:1b:c6:b8: 7c:b3:30:23:7c:d9:a6:c6:1c:bd:46:00:c3:ac:8c:0d:2b:64: 95:7c:b8:74:cc:a5:84:79:15:36:8a:03:9e:83:a4:8d:c1:4d: 01:d3:0a:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPROfW9SZOSdEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh YWQ5MB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk NTJjYWNlZWEtYzI1NC00NWJjLWEzNjUtZTI3ZjYzMmY1ZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/SdrhkIHJLps15X/d0O41omalgzH+WeGHN6 s8K6LgZLSkdKFtBu9BLUYSB4YPp9Ri6vNTJ+5SVbEUaTNiQTdHKho/qG7l0HQ1+Y iORcHJz5tiEQDFlanC9RSVPpXiCz2I3kJLOzjRGza0UFFFhL+vh66a0dp/9HjzTa p7CGKCaLS5i4nu6WR1UKcoE7vybmd4AihKEXNqdOwfYv8lmP/S/6NREJEXmx+W2k Q7Df7dxDp0JrzlBBMzc5VoDnEp7r78GQeTcqrPR7V8uf+aKzV43sZDqv6iLYFqXN w1IfGu2EYdYERcvGdpc1SWPxcYNPmIYCUCRrlswBq4wP9EokSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZM07VAD9+BNlizOi8t1xa+dZe7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvZGIyNzZkNWUtZDYxOS0z ZTJhLWJjYzAtZWY0YWE5YTdlNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0 OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR9c2SD237x5wFdr/FfV6G1bBK8QXcUDTjELREub+HuVWHBMgljU1m7 zX5zKgBIAvm9N0mX/QF17u3ViOHZBRf4bFv8/S77H0hmVJpcUY7+VEOUOKyIPCGM 0l1PxHqD5xqACIlz3yJNKBIClb2yzP6MT88cCQbmMfHfAXH3xHoyjii0L6DZW6pj BkTJEUysOcoZJFJNt9WTxFS3nuuNQtmam/UwTrcljGqNTpF/2zeHyfcy0zZdx21E qLOpEl3WIHGUkX6/i80KKh7F7/w6RZfgVTUP2hvGuHyzMCN82abGHL1GAMOsjA0r ZJV8uHTMpYR5FTaKA56DpI3BTQHTChI= -----END CERTIFICATE-----Generated at Sun Apr 13 00:41:15 2025 by rpki-client