$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/411e6ac6-a5e2-3368-bc02-605007a2b36c.roa File: 411e6ac6-a5e2-3368-bc02-605007a2b36c.roa (raw, json) Hash identifier: JXN0P2SMWlwSpGbD1IXV3ra6HpgAodgoGyR051WJZxk= Subject key identifier: 6B:7C:59:B5:74:D9:48:D4:17:DF:B3:A8:E8:21:F5:6B:63:AF:3E:86 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584894A5EACCED5C935F0ED67280 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/411e6ac6-a5e2-3368-bc02-605007a2b36c.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 834 IP address blocks: 204.19.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:ea:cc:ed:5c:93:5f:0e:d6:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=2aef4981-55b9-4f79-9244-a4fadcb8925e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:86:02:ea:cd:d0:00:2d:61:db:ee:d3:91:93: 89:98:76:76:24:c2:27:b2:98:8d:05:83:e0:f3:cb: 3e:25:66:b4:a1:fa:70:bf:f1:91:30:5d:2b:56:85: 9a:bf:8a:d4:b7:04:81:48:43:23:ad:09:f0:f4:12: c2:2b:92:0f:f4:e3:7e:77:78:b7:8d:14:5f:33:fa: 4e:c0:c1:55:7a:b7:9b:fe:8a:64:cf:08:ce:2c:89: 27:d9:ff:7a:84:b5:82:05:90:5b:3f:83:7f:37:82: 7b:af:8f:72:6e:8b:f9:df:b9:e4:be:db:8f:00:24: 7e:08:52:5e:ea:6c:fd:05:41:d6:44:16:b2:d7:a4: b0:af:d1:d4:cb:04:fa:2b:92:cd:64:e6:e6:bb:67: 70:d2:e5:98:fc:ed:3e:95:4e:c6:0f:67:31:65:c6: c1:71:3a:be:56:94:dc:0d:d0:1e:44:42:0e:f9:d2: 89:ae:fe:e2:8f:1e:80:6f:4d:bb:c9:ee:e8:d5:05: 10:aa:4a:7b:c9:e4:39:8d:2d:0e:b9:c3:9b:e9:bb: c8:39:1a:17:43:1b:ba:33:66:8c:e9:bc:68:65:07: 95:1b:0a:98:02:c7:ed:38:52:b0:68:02:7c:9f:61: ef:4f:94:23:68:82:2b:09:d2:4e:a0:cf:d1:fb:4d: b7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7C:59:B5:74:D9:48:D4:17:DF:B3:A8:E8:21:F5:6B:63:AF:3E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/411e6ac6-a5e2-3368-bc02-605007a2b36c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 204.19.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:76:77:8d:bd:3c:31:29:0a:db:17:2b:59:ce:b8:38:d9:e4: 90:0b:ba:72:b4:9f:2a:de:a7:f8:38:23:15:e8:8d:45:2a:b7: 80:cb:7f:3d:05:9e:a8:d6:ca:a2:78:70:be:7a:f0:c3:f3:46: 4c:f7:e8:f3:75:e4:69:2a:eb:54:b1:b2:22:11:9f:27:c8:46: 47:d0:21:d9:58:dc:48:4c:01:fe:ad:be:f4:f1:45:8d:a1:ae: 1f:bf:d3:8a:6c:fb:8d:08:ba:d1:47:26:b8:89:ea:a2:6e:03: c8:ce:7d:89:96:11:86:74:d4:4e:fd:a9:83:2e:04:7b:86:f5: 2a:fa:9c:b3:d7:a3:7d:34:b2:b8:57:b6:40:c4:35:6e:be:89: c6:e9:2f:a0:17:45:e1:80:87:c9:16:cd:68:dc:bc:a6:78:ef: 69:f0:fd:b1:a7:36:5d:4f:46:6b:3d:1a:cd:32:ca:3c:25:b9: 78:e5:75:d0:c5:d0:c9:18:e9:76:ff:f1:45:62:46:ed:20:7b: da:97:d1:e6:a8:a5:a1:cb:56:79:68:5d:5c:2e:f6:2c:40:6b: 4d:67:ba:df:2e:b2:89:8b:30:59:74:a5:b7:fa:3c:09:20:74: 5f:cb:7f:a1:86:60:29:46:34:40:17:a8:b3:a9:5d:43:34:94: a5:8a:1f:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUperM7VyTXw7WcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk MmFlZjQ5ODEtNTViOS00Zjc5LTkyNDQtYTRmYWRjYjg5MjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoYC6s3QAC1h2+7TkZOJmHZ2JMInspiNBYPg 88s+JWa0ofpwv/GRMF0rVoWav4rUtwSBSEMjrQnw9BLCK5IP9ON+d3i3jRRfM/pO wMFVereb/opkzwjOLIkn2f96hLWCBZBbP4N/N4J7r49ybov537nkvtuPACR+CFJe 6mz9BUHWRBay16Swr9HUywT6K5LNZObmu2dw0uWY/O0+lU7GD2cxZcbBcTq+VpTc DdAeREIO+dKJrv7ijx6Ab027ye7o1QUQqkp7yeQ5jS0OucOb6bvIORoXQxu6M2aM 6bxoZQeVGwqYAsftOFKwaAJ8n2HvT5QjaIIrCdJOoM/R+023nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGt8WbV02UjUF9+zqOgh9Wtjrz6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvNDExZTZhYzYtYTVlMi0z MzY4LWJjMDItNjA1MDA3YTJiMzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBPuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp2d429PDEpCtsXK1nOuDjZ5JALunK0nyrep/g4IxXojUUqt4DLfz0F nqjWyqJ4cL568MPzRkz36PN15Gkq61SxsiIRnyfIRkfQIdlY3EhMAf6tvvTxRY2h rh+/04ps+40IutFHJriJ6qJuA8jOfYmWEYZ01E79qYMuBHuG9Sr6nLPXo300srhX tkDENW6+icbpL6AXReGAh8kWzWjcvKZ472nw/bGnNl1PRms9Gs0yyjwluXjlddDF 0MkY6Xb/8UViRu0ge9qX0eaopaHLVnloXVwu9ixAa01nut8usomLMFl0pbf6PAkg dF/Lf6GGYClGNEAXqLOpXUM0lKWKHyo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:28 2025 by rpki-client