$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b0af857f-33c3-32a0-9e32-f2b6e0088900.roa File: b0af857f-33c3-32a0-9e32-f2b6e0088900.roa (raw, json) Hash identifier: nTlbeH9FZQbc6Wvj8oJAX1mm+vfrDTLx/RfwX5iEkVg= Subject key identifier: 6C:C6:24:E5:99:5D:89:D0:36:2D:45:9E:88:14:7B:20:04:2E:87:3A Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F43285848C580F28523C29BA541553080 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b0af857f-33c3-32a0-9e32-f2b6e0088900.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 19437 IP address blocks: 216.24.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:f2:85:23:c2:9b:a5:41:55:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2ec3a02e-92da-4117-bdf5-7c9e1779a3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7b:d6:2e:69:12:22:f5:e4:52:77:9a:0d:e3: 61:cd:71:b0:77:9b:32:2a:24:9d:cc:1d:ad:88:93: b5:09:9a:ad:e5:a6:02:88:ab:cb:b8:0e:5b:48:aa: 11:8b:c2:cf:57:d5:ed:50:b8:9b:6d:c7:cd:79:73: 50:a0:18:12:78:fb:9d:8b:7c:5d:dc:ff:4b:ee:ed: 7a:ac:cf:e5:9d:b2:92:93:42:d4:0e:8d:b7:aa:2d: 7e:9d:f0:0a:14:cc:2b:36:13:89:32:57:d4:ad:61: 3e:29:39:3a:af:60:3b:e2:ee:cd:2c:46:3d:6e:de: 6c:29:d7:75:b2:7c:96:f7:f1:18:20:46:04:98:b5: 06:49:fe:17:37:93:90:fa:02:fb:64:4a:11:b0:af: aa:07:d7:9b:44:95:2c:d2:16:c8:a6:67:c2:ea:2e: e6:b4:70:a9:7b:79:a7:35:ad:27:74:ca:c8:7e:ad: 0f:f4:6f:61:9a:e0:f1:76:eb:31:ee:f1:10:35:fe: 56:c3:56:1c:85:5f:1e:50:ca:83:f7:97:82:8b:f2: 0b:de:1d:e1:88:e9:c0:0d:9f:41:e3:5a:ba:f4:12: 3f:85:1f:08:9f:74:07:b2:70:3b:b6:24:38:5d:bd: 21:10:66:23:a4:5c:78:21:d4:ca:02:f1:73:78:50: 6b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C6:24:E5:99:5D:89:D0:36:2D:45:9E:88:14:7B:20:04:2E:87:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b0af857f-33c3-32a0-9e32-f2b6e0088900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ee:2f:a9:3c:13:5f:a8:d8:cf:83:9f:ad:a8:44:1e:ee:8b: 7f:8d:75:2a:04:b6:fa:70:9c:77:8a:1f:17:31:ad:12:13:af: d2:4d:e9:c0:74:8f:63:59:a3:4e:9e:b6:65:4f:43:48:fa:02: 8e:51:8e:b3:0f:79:b4:ce:ad:23:14:c6:03:81:b5:3a:ce:fc: ff:b0:a3:24:82:f1:1d:51:81:3a:6a:8d:c0:d6:48:24:c9:d7: 63:92:70:f5:a8:08:7c:99:7d:bb:fd:e9:66:50:11:93:2d:50: 03:c1:ca:b9:a7:b1:b8:84:10:df:bf:df:6a:e3:f5:90:66:86: 2c:7d:95:63:96:9a:8e:9f:61:3d:f7:1f:35:ac:26:29:b4:0e: ed:b9:59:91:5d:b6:a3:53:a8:af:ab:5e:d6:1d:51:07:ce:22: 6c:2b:00:09:f7:dc:a7:11:37:39:d3:0e:f0:f8:bf:31:25:5d: 74:b2:f0:27:e0:35:34:3d:43:99:e2:da:9d:74:82:6f:0f:09: 61:cf:a3:35:cb:1d:2b:b8:c8:8c:29:c0:e6:6c:3b:a1:09:47: 50:e7:a0:8d:53:d4:58:85:b2:12:65:27:92:09:c7:49:31:cc: 5e:6d:11:54:32:4f:6f:66:4a:58:b2:3f:cb:e4:aa:7d:d0:55: f4:ef:6d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPKFI8KbpUFVMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmVjM2EwMmUtOTJkYS00MTE3LWJkZjUtN2M5ZTE3NzlhM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHvWLmkSIvXkUneaDeNhzXGwd5syKiSdzB2t iJO1CZqt5aYCiKvLuA5bSKoRi8LPV9XtULibbcfNeXNQoBgSePudi3xd3P9L7u16 rM/lnbKSk0LUDo23qi1+nfAKFMwrNhOJMlfUrWE+KTk6r2A74u7NLEY9bt5sKdd1 snyW9/EYIEYEmLUGSf4XN5OQ+gL7ZEoRsK+qB9ebRJUs0hbIpmfC6i7mtHCpe3mn Na0ndMrIfq0P9G9hmuDxdusx7vEQNf5Ww1YchV8eUMqD95eCi/IL3h3hiOnADZ9B 41q69BI/hR8In3QHsnA7tiQ4Xb0hEGYjpFx4IdTKAvFzeFBryQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzGJOWZXYnQNi1FnogUeyAELoc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYjBhZjg1N2YtMzNjMy0z MmEwLTllMzItZjJiNmUwMDg4OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfuL6k8E1+o2M+Dn62oRB7ui3+NdSoEtvpwnHeKHxcxrRITr9JN6cB0 j2NZo06etmVPQ0j6Ao5RjrMPebTOrSMUxgOBtTrO/P+woySC8R1RgTpqjcDWSCTJ 12OScPWoCHyZfbv96WZQEZMtUAPByrmnsbiEEN+/32rj9ZBmhix9lWOWmo6fYT33 HzWsJim0Du25WZFdtqNTqK+rXtYdUQfOImwrAAn33KcRNznTDvD4vzElXXSy8Cfg NTQ9Q5ni2p10gm8PCWHPozXLHSu4yIwpwOZsO6EJR1DnoI1T1FiFshJlJ5IJx0kx zF5tEVQyT29mSliyP8vkqn3QVfTvbQY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:50 2025 by rpki-client