$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa File: 977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa (raw, json) Hash identifier: oZbXMhwQnQQV3b1dLVwyIXN6CAWeVYQdpa9N3Yov01w= Subject key identifier: EB:EB:34:D1:CC:CA:CC:B5:31:8B:83:10:0C:EC:66:41:7A:6B:9C:17 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285848C582084D6329C5394462C200 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 36492 IP address blocks: 209.107.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:08:4d:63:29:c5:39:44:62:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c8c74ab3-96dc-4ebc-8aa4-94751293c4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ed:09:b2:0e:32:63:1c:ae:66:24:b0:a0:cb: ca:a3:7e:ec:d7:aa:66:83:4b:16:2c:15:8f:d3:f7: 57:5f:39:1c:38:ea:0f:18:24:8c:f4:e1:0d:16:0c: db:28:2b:fa:69:21:96:b4:ef:e0:9e:7c:cf:f2:a0: 8f:6f:90:32:1e:1f:d8:81:b5:b7:d6:6f:62:8a:ef: fb:fd:6a:c4:bd:96:14:29:d5:f2:d0:17:ac:db:82: 88:15:67:48:e1:38:74:a1:60:02:a0:ff:b4:0f:61: fc:f6:17:f8:1f:b4:81:0f:3e:3d:54:22:86:63:e9: a4:ac:60:fe:9a:72:b2:40:3e:22:7a:ee:47:0a:e8: 0b:d7:06:05:71:90:4a:44:89:8c:bd:18:7d:23:d9: 40:59:0a:53:a6:41:94:42:84:ff:44:de:c9:f1:a6: be:27:3b:2d:5a:e9:ac:a9:bc:04:74:96:27:fa:33: 22:e8:11:f1:4d:bc:84:aa:03:0c:c4:0d:8d:bc:fe: a1:5e:a2:da:c9:1b:5b:39:ff:c2:3d:98:0d:c1:0e: 2b:c6:94:33:19:1b:7e:eb:08:60:6b:14:8f:15:5b: 88:1f:e7:7c:4b:74:f8:74:5d:47:ff:4d:80:14:c0: 80:12:48:3e:3d:35:37:0b:52:6d:e8:1f:f8:61:db: cb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EB:34:D1:CC:CA:CC:B5:31:8B:83:10:0C:EC:66:41:7A:6B:9C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 209.107.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:95:4c:82:28:e7:e0:95:30:b5:fa:5a:18:ed:4f:93:bd:40: 02:f1:fd:8b:81:32:7d:71:90:3f:29:77:88:83:9a:e8:39:54: 3c:27:03:2c:e5:76:74:cb:a2:67:f4:51:06:28:f0:85:ba:60: fa:41:1a:4e:45:75:4d:d6:72:f8:01:1d:eb:15:11:4c:fa:cb: 9f:04:91:a2:4d:f4:f1:7c:31:d1:7e:66:c3:58:57:9a:3f:af: 47:1c:d8:48:3f:b2:97:fe:2c:fa:3e:cd:8c:b1:01:60:6f:f5: 49:21:7d:b8:bf:74:c9:fe:f8:72:8e:54:96:2f:f3:21:74:1a: b2:e7:c4:0f:af:a8:a2:7a:2b:9d:23:4a:08:3a:22:43:a5:c2: 46:d2:42:e0:32:75:96:d9:1f:99:05:81:35:e6:c5:ce:f7:6a: ad:cd:01:58:f1:3b:1d:90:55:b0:c7:2f:61:9d:9c:ca:57:71: 63:00:8e:03:d6:e7:f8:90:9e:47:df:c9:8b:12:7c:a1:94:ea: af:ca:1a:ef:09:31:ec:e4:27:47:17:19:fa:98:f3:be:f2:6f: fb:b4:6d:b8:42:a2:7e:76:48:a2:77:71:5a:4c:45:9f:f2:6c: 15:64:0b:40:d4:7b:61:6e:c9:48:fc:00:4a:21:ad:47:53:b5: 0d:bf:0d:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgghNYynFOURiwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzhjNzRhYjMtOTZkYy00ZWJjLThhYTQtOTQ3NTEyOTNjNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu0Jsg4yYxyuZiSwoMvKo37s16pmg0sWLBWP 0/dXXzkcOOoPGCSM9OENFgzbKCv6aSGWtO/gnnzP8qCPb5AyHh/YgbW31m9iiu/7 /WrEvZYUKdXy0Bes24KIFWdI4Th0oWACoP+0D2H89hf4H7SBDz49VCKGY+mkrGD+ mnKyQD4ieu5HCugL1wYFcZBKRImMvRh9I9lAWQpTpkGUQoT/RN7J8aa+JzstWums qbwEdJYn+jMi6BHxTbyEqgMMxA2NvP6hXqLayRtbOf/CPZgNwQ4rxpQzGRt+6whg axSPFVuIH+d8S3T4dF1H/02AFMCAEkg+PTU3C1Jt6B/4YdvLiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvrNNHMysy1MYuDEAzsZkF6a5wXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvOTc3YmM4NDktNWIxZC0z NGM1LTkxZWItODFlMjQ3N2YxYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByVTIIo5+CVMLX6WhjtT5O9QALx/YuBMn1xkD8pd4iDmug5VDwnAyzl dnTLomf0UQYo8IW6YPpBGk5FdU3WcvgBHesVEUz6y58EkaJN9PF8MdF+ZsNYV5o/ r0cc2Eg/spf+LPo+zYyxAWBv9Ukhfbi/dMn++HKOVJYv8yF0GrLnxA+vqKJ6K50j Sgg6IkOlwkbSQuAydZbZH5kFgTXmxc73aq3NAVjxOx2QVbDHL2GdnMpXcWMAjgPW 5/iQnkffyYsSfKGU6q/KGu8JMezkJ0cXGfqY877yb/u0bbhCon52SKJ3cVpMRZ/y bBVkC0DUe2FuyUj8AEohrUdTtQ2/Ddc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:51 2025 by rpki-client