$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1045fe8d-434a-36b5-a028-7e65810bf0b5.roa File: 1045fe8d-434a-36b5-a028-7e65810bf0b5.roa (raw, json) Hash identifier: 4Dxt6pFrWLNAT+vp/sFO/jfmmjpXg6Pe9O7y/PmtDCQ= Subject key identifier: 7C:3C:10:5E:46:A2:34:BF:66:52:94:6C:77:E3:5F:0E:60:5E:2C:DA Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F43285848B8F0D0139994886D2D2CCEB8 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1045fe8d-434a-36b5-a028-7e65810bf0b5.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 393841 IP address blocks: 208.56.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d0:13:99:94:88:6d:2d:2c:ce:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=b7deee0f-cfe9-47e6-a911-668854fe409d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:f9:aa:17:73:2a:7d:96:46:5c:e5:de:25: eb:b1:5c:fe:08:f0:40:8f:77:26:47:25:29:fc:e6: 7d:58:c3:6f:71:03:28:69:4d:a1:fe:2c:3f:f0:f7: 3a:6d:f8:da:5e:53:33:62:ab:ab:95:31:cb:f4:b7: 7e:0c:e7:94:ee:f8:58:21:fa:a1:11:35:e3:82:8a: c2:8c:7e:55:99:a4:14:30:5f:88:a4:9d:d3:03:d5: 51:e3:d0:e4:38:cb:67:f1:1b:29:b4:ec:a7:b9:e9: 31:49:84:55:15:5a:93:2d:54:4f:aa:79:f0:57:fb: b5:87:e9:31:8b:60:32:01:36:f1:5a:da:3c:5d:7e: e3:ad:7d:71:63:80:65:32:ab:6f:f9:23:45:15:69: 30:7a:eb:7f:ee:71:52:e6:0d:84:12:c1:ac:23:9b: 23:2f:ff:f2:f2:c0:ed:1d:ff:98:48:7f:bc:14:c4: a2:6c:2e:9e:4c:ef:94:5c:c6:d0:8e:64:f9:75:a2: b6:10:36:a5:ac:26:51:36:94:2a:93:7b:d9:78:37: cd:55:c6:0a:8b:7c:56:fb:32:17:b8:04:a4:93:74: 78:71:9d:d2:3f:1f:b3:31:af:c6:30:dd:29:2d:f0: 4f:ae:b2:11:96:3f:3c:50:7f:6d:bb:fa:87:d5:7f: d2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3C:10:5E:46:A2:34:BF:66:52:94:6C:77:E3:5F:0E:60:5E:2C:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1045fe8d-434a-36b5-a028-7e65810bf0b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 208.56.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:eb:79:bc:2f:1c:8b:e5:79:d6:03:2d:da:74:7a:d1:c2:cc: bf:b2:5b:68:0e:62:06:05:32:6b:37:4f:db:f9:f2:d9:49:45: a1:91:13:68:3f:4c:8f:20:0c:26:91:74:16:00:50:61:4c:81: 51:5c:f2:93:23:ff:7e:d3:d5:e7:8b:aa:e5:f2:d1:f4:85:6c: b5:cd:84:78:89:c9:57:c9:b7:ec:9f:1e:37:61:0a:a4:31:6d: e6:42:ab:b5:6d:a7:2e:a5:6a:5c:6e:70:91:b0:19:e8:ca:18: 8c:b6:92:64:b2:bd:55:62:15:da:80:ee:13:7d:00:1a:41:fb: a6:5e:49:e1:58:f2:71:8d:e1:50:70:d3:ab:fd:b2:d0:f4:73: 51:5e:41:5c:3c:1e:21:12:20:d2:c4:4d:7a:bb:9c:3b:83:22: 8d:78:9d:d1:29:9c:0a:83:b3:4e:08:ec:bb:f3:fe:b1:7e:de: 64:88:05:13:32:70:d3:7b:5d:c7:57:cd:b0:fb:3b:a5:82:f6: 71:c3:53:00:ee:93:7d:d0:5e:5f:2a:80:00:2f:67:cf:02:9e: a0:de:2a:3b:4c:87:aa:37:65:22:62:a9:88:c4:9b:8b:41:88: 91:23:6f:19:68:1a:21:17:29:92:47:74:30:44:0c:6e:75:73: 92:06:8c:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NATmZSIbS0szrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk YjdkZWVlMGYtY2ZlOS00N2U2LWE5MTEtNjY4ODU0ZmU0MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXn5qhdzKn2WRlzl3iXrsVz+CPBAj3cmRyUp /OZ9WMNvcQMoaU2h/iw/8Pc6bfjaXlMzYqurlTHL9Ld+DOeU7vhYIfqhETXjgorC jH5VmaQUMF+IpJ3TA9VR49DkOMtn8RsptOynuekxSYRVFVqTLVRPqnnwV/u1h+kx i2AyATbxWto8XX7jrX1xY4BlMqtv+SNFFWkweut/7nFS5g2EEsGsI5sjL//y8sDt Hf+YSH+8FMSibC6eTO+UXMbQjmT5daK2EDalrCZRNpQqk3vZeDfNVcYKi3xW+zIX uASkk3R4cZ3SPx+zMa/GMN0pLfBPrrIRlj88UH9tu/qH1X/SwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHw8EF5GojS/ZlKUbHfjXw5gXizaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvMTA0NWZlOGQtNDM0YS0z NmI1LWEwMjgtN2U2NTgxMGJmMGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DjPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzrebwvHIvledYDLdp0etHCzL+yW2gOYgYFMms3T9v58tlJRaGRE2g/ TI8gDCaRdBYAUGFMgVFc8pMj/37T1eeLquXy0fSFbLXNhHiJyVfJt+yfHjdhCqQx beZCq7Vtpy6lalxucJGwGejKGIy2kmSyvVViFdqA7hN9ABpB+6ZeSeFY8nGN4VBw 06v9stD0c1FeQVw8HiESINLETXq7nDuDIo14ndEpnAqDs04I7Lvz/rF+3mSIBRMy cNN7XcdXzbD7O6WC9nHDUwDuk33QXl8qgAAvZ88CnqDeKjtMh6o3ZSJiqYjEm4tB iJEjbxloGiEXKZJHdDBEDG51c5IGjCk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:08 2025 by rpki-client