$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/021dd233-7b51-318b-9669-09b2cce6b6a9.roa File: 021dd233-7b51-318b-9669-09b2cce6b6a9.roa (raw, json) Hash identifier: gV1oVtb9CPr0miT094syomoFlX0mxQlPEJ4KclRsdk0= Subject key identifier: C9:70:21:35:E1:EF:59:E3:C3:6A:47:A3:6C:D2:D6:F3:E8:3E:70:AA Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Certificate serial: 010D0C9F4328584858A05819BB2573E4F9EDB680 Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/021dd233-7b51-318b-9669-09b2cce6b6a9.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 6079 IP address blocks: 208.72.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:58:19:bb:25:73:e4:f9:ed:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=b2e1bd06-1bc1-4495-83f4-0e83eab5375e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:88:d9:8d:fb:b5:01:af:ec:42:17:ee:c8: 6b:c8:68:3f:81:b4:3c:10:54:3e:4b:4b:7f:07:50: b4:9f:33:ca:31:20:b8:d0:f5:3f:02:75:cd:30:12: be:3c:56:e7:3d:4f:02:07:68:81:bc:62:fb:3a:0b: f4:4b:1f:72:c1:8a:8f:5b:d3:8e:84:80:8b:ea:b0: cf:26:2c:aa:fd:db:8d:ca:32:2b:05:cf:5b:64:75: 44:5f:c4:6b:9c:44:81:ee:e6:0e:b4:12:15:cf:d3: 72:b4:78:3a:f9:04:fa:69:ed:92:7f:e0:1c:ba:a3: 7f:ef:1c:d4:0b:d8:13:98:ef:92:fc:8c:02:7e:d4: e1:61:77:f9:9f:c3:26:a9:3b:6e:3a:ac:a8:18:22: bf:e9:3a:15:57:ac:38:ac:a6:54:7d:22:ce:7e:8e: 57:f5:7d:37:56:28:21:5d:75:1a:2a:56:b9:53:3d: 55:ba:14:f4:43:af:f7:25:0b:ef:09:cc:bc:e6:a3: e8:81:53:f4:c0:d1:0d:bf:10:66:d6:5b:7c:90:be: fa:0a:c8:02:6d:f8:49:d1:e8:6d:b1:46:cb:7d:f2: 00:25:a3:a9:43:63:f5:97:59:bb:6d:3b:d7:16:2d: cf:55:d0:5a:db:c7:12:42:72:64:ee:39:2c:9c:e4: b9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:70:21:35:E1:EF:59:E3:C3:6A:47:A3:6C:D2:D6:F3:E8:3E:70:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/021dd233-7b51-318b-9669-09b2cce6b6a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl X509v3 Authority Key Identifier: keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer sbgp-ipAddrBlock: critical IPv4: 208.72.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c5:67:41:7c:7c:b5:77:31:f7:8e:85:29:0b:ae:d6:d1:3e: ec:ef:3f:c1:81:74:1f:9a:bf:f9:eb:e6:e2:08:33:ba:4d:14: 8e:b9:65:37:f9:30:a4:66:5c:6c:33:63:1f:4f:3f:34:ca:ae: 50:c8:7e:c7:70:d9:50:f8:a1:35:f7:eb:f3:e1:7c:87:28:ff: f5:64:4f:0f:a6:b1:e8:48:69:5c:75:c8:e3:9f:7e:15:ef:53: cf:42:5f:2a:9c:7d:c6:cd:2b:39:ca:48:66:69:25:1b:b5:a6: 78:6a:6c:2b:83:84:4a:7e:b1:e5:25:c8:fd:bd:d7:b8:f3:6a: d9:0f:ce:e3:4b:7c:e9:b1:fe:2c:db:d4:3c:78:23:b1:38:5c: ee:a3:e0:5d:b5:b6:9d:d5:a1:40:db:4f:e7:99:99:79:9c:81: 97:a8:fb:4e:14:97:a9:0a:d6:42:fa:b3:0f:0a:88:2e:38:3b: 1c:08:e5:bf:d9:6c:e6:e3:2d:bf:fc:c9:3b:7a:f2:89:4a:97: d1:f7:f9:34:18:b6:40:9d:88:5f:d3:3c:98:b8:63:e3:1e:b3: 34:09:cd:c6:55:f9:0f:a0:cc:40:5b:d3:bd:d5:6b:71:22:b1: 2d:76:4c:c6:0a:ab:bf:2f:6a:3f:5e:fe:ad:7d:1f:92:5e:b0: ce:3a:24:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoFgZuyVz5PnttoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw YzhiMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk YjJlMWJkMDYtMWJjMS00NDk1LTgzZjQtMGU4M2VhYjUzNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV6I2Y37tQGv7EIX7shryGg/gbQ8EFQ+S0t/ B1C0nzPKMSC40PU/AnXNMBK+PFbnPU8CB2iBvGL7Ogv0Sx9ywYqPW9OOhICL6rDP Jiyq/duNyjIrBc9bZHVEX8RrnESB7uYOtBIVz9NytHg6+QT6ae2Sf+AcuqN/7xzU C9gTmO+S/IwCftThYXf5n8MmqTtuOqyoGCK/6ToVV6w4rKZUfSLOfo5X9X03Vigh XXUaKla5Uz1VuhT0Q6/3JQvvCcy85qPogVP0wNENvxBm1lt8kL76CsgCbfhJ0eht sUbLffIAJaOpQ2P1l1m7bTvXFi3PVdBa28cSQnJk7jksnOS5cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlwITXh71njw2pHo2zS1vPoPnCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvMDIxZGQyMzMtN2I1MS0z MThiLTk2NjktMDliMmNjZTZiNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0 NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EjTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnFZ0F8fLV3MfeOhSkLrtbRPuzvP8GBdB+av/nr5uIIM7pNFI65ZTf5 MKRmXGwzYx9PPzTKrlDIfsdw2VD4oTX36/PhfIco//VkTw+msehIaVx1yOOffhXv U89CXyqcfcbNKznKSGZpJRu1pnhqbCuDhEp+seUlyP2917jzatkPzuNLfOmx/izb 1Dx4I7E4XO6j4F21tp3VoUDbT+eZmXmcgZeo+04Ul6kK1kL6sw8KiC44OxwI5b/Z bObjLb/8yTt68olKl9H3+TQYtkCdiF/TPJi4Y+MeszQJzcZV+Q+gzEBb073Va3Ei sS12TMYKq78vaj9e/q19H5JesM46JP0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:35 2025 by rpki-client