$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9e999df3-d635-301e-8089-0cfc2e8a5cd0.roa File: 9e999df3-d635-301e-8089-0cfc2e8a5cd0.roa (raw, json) Hash identifier: iXIPOBbWmOwv32/aQJQ7uElTfKfwxGO+nI4/AAeA2Nc= Subject key identifier: 0F:32:CD:E2:FC:47:57:98:3E:DD:10:3E:FC:CD:C8:9A:11:60:57:89 Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Certificate serial: 010D0C9F43285848BE862F63C7A8238AC28DCA00 Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9e999df3-d635-301e-8089-0cfc2e8a5cd0.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 54702 IP address blocks: 208.72.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:2f:63:c7:a8:23:8a:c2:8d:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=2578a4cd-4d9d-41fa-9d30-8d4c78ef3e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:77:3a:a1:e6:ec:c6:9a:3b:5d:f1:5a:3d:97: 1f:bd:d0:59:20:58:dc:42:18:2e:26:fe:8f:77:55: d4:42:9d:63:5a:8e:aa:38:81:1a:2a:22:7d:46:27: 34:7e:0c:cc:74:98:b6:89:ea:43:52:c7:f9:07:db: 04:3c:23:de:32:29:c2:2d:fa:53:53:47:96:07:c6: 29:13:0f:3b:86:5e:a0:a1:c0:ed:2b:e6:7d:96:03: 9c:fc:2b:73:75:15:34:e4:e6:f4:d6:3e:d7:60:a1: 42:3e:4a:40:84:24:e4:a4:87:e1:14:ef:72:2e:9a: 3b:b8:af:f8:40:01:4e:96:cc:4c:de:15:8d:c0:c0: e6:1a:0b:17:be:d3:e8:85:46:f1:66:54:ad:62:e1: b4:f2:3f:40:c8:50:4b:1c:e1:3d:5b:11:1f:a2:b5: c1:bb:33:15:66:63:04:a1:26:11:b6:2d:29:57:d1: bb:5e:22:51:e8:b3:9f:d2:be:dd:4c:53:8b:74:66: 67:30:08:e0:12:16:74:b5:f3:4f:3a:2f:17:a5:48: d1:b5:63:80:c8:47:2e:be:bf:16:bf:01:21:07:78: d4:d5:39:fb:13:b6:f2:79:d3:ce:ab:24:e7:bf:23: 7d:55:31:99:6d:22:44:90:49:6b:6e:12:3f:04:74: 8e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:32:CD:E2:FC:47:57:98:3E:DD:10:3E:FC:CD:C8:9A:11:60:57:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9e999df3-d635-301e-8089-0cfc2e8a5cd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl X509v3 Authority Key Identifier: keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer sbgp-ipAddrBlock: critical IPv4: 208.72.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:14:7c:e6:46:fa:95:45:1a:93:34:84:62:ed:cb:5d:89:35: 69:df:08:5e:5c:21:72:b7:36:fa:f8:7e:2a:0e:59:63:05:46: f6:2f:72:ba:3c:0f:ed:87:3b:2b:48:2e:94:a3:46:e9:17:55: 68:25:02:31:7e:7b:2c:c7:89:e3:40:87:de:47:74:c1:17:12: 02:d8:3f:2c:c0:00:16:66:1b:6d:31:80:53:07:53:eb:af:f2: e0:35:38:46:1f:5d:a0:1b:df:74:08:0d:3c:d3:ca:8a:f3:87: 53:67:23:7f:a1:83:74:d0:3c:7d:33:06:dc:82:cc:e5:41:c4: 7b:c1:2d:90:91:eb:91:2e:b8:09:04:b1:40:73:dc:48:06:d7: f8:54:b2:ff:3a:87:c9:03:91:fc:95:e8:88:68:86:6b:78:f3: 2a:2b:6f:e8:ef:f6:4e:c9:ed:db:7b:8a:36:be:45:50:08:9c: 93:f2:6b:38:89:7a:f7:64:85:f7:17:ec:84:9d:a2:c4:ee:ff: 4b:14:a0:37:10:f8:9c:4d:7e:a8:6a:39:87:d3:f0:62:57:cf: 31:2b:82:18:63:d5:d4:bb:fa:51:a1:13:1f:72:19:54:37:b1: 9f:7e:b9:8c:70:43:06:0f:32:ab:83:88:e0:e6:e4:0f:c2:ed: a5:cd:07:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hi9jx6gjisKNygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw YzhiMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MjU3OGE0Y2QtNGQ5ZC00MWZhLTlkMzAtOGQ0Yzc4ZWYzZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnc6oebsxpo7XfFaPZcfvdBZIFjcQhguJv6P d1XUQp1jWo6qOIEaKiJ9Ric0fgzMdJi2iepDUsf5B9sEPCPeMinCLfpTU0eWB8Yp Ew87hl6gocDtK+Z9lgOc/CtzdRU05Ob01j7XYKFCPkpAhCTkpIfhFO9yLpo7uK/4 QAFOlsxM3hWNwMDmGgsXvtPohUbxZlStYuG08j9AyFBLHOE9WxEforXBuzMVZmME oSYRti0pV9G7XiJR6LOf0r7dTFOLdGZnMAjgEhZ0tfNPOi8XpUjRtWOAyEcuvr8W vwEhB3jU1Tn7E7byedPOqyTnvyN9VTGZbSJEkElrbhI/BHSOPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8yzeL8R1eYPt0QPvzNyJoRYFeJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvOWU5OTlkZjMtZDYzNS0z MDFlLTgwODktMGNmYzJlOGE1Y2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0 NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYUfOZG+pVFGpM0hGLty12JNWnfCF5cIXK3Nvr4fioOWWMFRvYvcro8 D+2HOytILpSjRukXVWglAjF+eyzHieNAh95HdMEXEgLYPyzAABZmG20xgFMHU+uv 8uA1OEYfXaAb33QIDTzTyorzh1NnI3+hg3TQPH0zBtyCzOVBxHvBLZCR65EuuAkE sUBz3EgG1/hUsv86h8kDkfyV6Ihohmt48yorb+jv9k7J7dt7ija+RVAInJPyaziJ evdkhfcX7ISdosTu/0sUoDcQ+JxNfqhqOYfT8GJXzzErghhj1dS7+lGhEx9yGVQ3 sZ9+uYxwQwYPMquDiODm5A/C7aXNB2c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:13 2025 by rpki-client