$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa File: 8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa (raw, json) Hash identifier: um2U7fhO0oOPo9w4XWTlPTb59l2IAbUQ1/H7enXxd80= Subject key identifier: A9:6E:C9:28:2E:A2:42:47:9C:ED:63:34:BD:E2:8C:8B:D2:07:96:F7 Certificate issuer: /CN=0d51e326-4804-4f59-a629-20153f71b7fe Certificate serial: 010D0C9F432858486D904AA141F506D56021AA00 Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 16509 IP address blocks: 204.239.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:4a:a1:41:f5:06:d5:60:21:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=5d243e59-bb5b-4447-a621-3566d4b1b630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:7b:de:9f:a9:51:8b:d5:54:c4:68:53:49: 00:04:dc:7b:f2:a6:c1:dd:d2:cb:81:02:dc:b6:6d: 9f:86:b3:f7:82:1c:b0:3f:47:e0:d5:95:b8:1f:15: 1b:71:b3:34:b2:a1:db:53:3f:77:79:c3:84:47:8c: 1c:15:08:d4:36:3f:db:d4:3d:f1:17:47:5a:01:9e: 17:5e:22:df:d4:bb:26:10:c6:51:9e:03:59:b3:c0: 76:44:76:03:de:9a:6a:89:7d:cb:35:7e:61:35:65: a7:67:0d:e8:5b:8b:9e:23:a2:8e:d4:4b:0f:86:d4: 78:7a:d8:08:d7:e3:8e:8f:54:2d:4f:7a:cd:3a:c2: 99:4d:68:2a:8d:3f:77:a2:c9:0f:8e:d6:df:cc:ab: 1a:05:35:33:ad:a7:99:04:fc:58:94:bd:25:d9:74: 24:e6:a5:f8:35:92:23:2c:af:04:b8:62:39:70:85: c8:1c:af:27:6c:af:78:db:21:e8:44:c6:0a:8a:d5: 7c:3b:58:37:01:11:be:0a:c6:f4:df:12:92:97:46: 07:41:73:b8:be:ab:df:7a:1c:96:39:c9:79:68:93: c0:ca:55:62:09:de:4d:75:6e:d8:10:78:40:27:52: 1e:f1:d7:84:bc:8d:eb:32:38:a1:22:99:3a:39:64: 4c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6E:C9:28:2E:A2:42:47:9C:ED:63:34:BD:E2:8C:8B:D2:07:96:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl X509v3 Authority Key Identifier: keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer sbgp-ipAddrBlock: critical IPv4: 204.239.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:82:70:c3:06:f8:3a:25:29:c1:ff:30:b1:85:65:b8:4c:1e: 55:be:b3:cd:ec:62:93:59:43:d2:33:0d:e4:41:b6:84:0b:21: b3:97:54:2b:7e:44:0a:45:bb:9c:35:7a:b7:b3:ca:9a:06:e7: fb:5f:86:58:5c:db:ca:18:49:96:bd:44:87:08:24:a0:84:2b: 96:a0:38:cf:de:29:41:d9:cc:46:8b:14:79:f1:be:68:2f:77: 47:b5:5d:5d:5a:c8:d3:f7:06:a8:ef:cb:09:79:1c:05:39:c6: 61:96:db:4f:a5:d0:d3:04:6d:3d:e2:e4:fa:56:54:54:c1:19: 1f:6b:17:2d:21:92:7f:98:07:51:88:18:56:fb:69:ba:16:40: 4f:8a:a7:5c:2e:8b:29:cc:d9:af:11:f3:00:ed:2c:7d:75:34: f4:69:f8:7d:9d:97:3b:f0:60:a7:ad:43:40:cc:7a:4c:e5:85: ba:83:36:48:bc:d8:a5:54:a8:4a:87:20:b6:32:f3:cf:7c:b6: b5:e6:28:37:c8:c9:50:fa:f9:6f:38:49:67:b9:91:2c:4b:6c: 04:27:23:d3:d5:49:63:ea:7a:54:d1:65:6b:68:68:5a:8a:12: 4c:da:9e:eb:99:12:87:3d:49:b7:fb:d7:0d:e2:a4:84:3f:55: a0:a4:81:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkEqhQfUG1WAhqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi N2ZlMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk NWQyNDNlNTktYmI1Yi00NDQ3LWE2MjEtMzU2NmQ0YjFiNjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtB73p+pUYvVVMRoU0kABNx78qbB3dLLgQLc tm2fhrP3ghywP0fg1ZW4HxUbcbM0sqHbUz93ecOER4wcFQjUNj/b1D3xF0daAZ4X XiLf1LsmEMZRngNZs8B2RHYD3ppqiX3LNX5hNWWnZw3oW4ueI6KO1EsPhtR4etgI 1+OOj1QtT3rNOsKZTWgqjT93oskPjtbfzKsaBTUzraeZBPxYlL0l2XQk5qX4NZIj LK8EuGI5cIXIHK8nbK942yHoRMYKitV8O1g3ARG+Csb03xKSl0YHQXO4vqvfehyW Ocl5aJPAylViCd5NdW7YEHhAJ1Ie8deEvI3rMjihIpk6OWRMDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKluySguokJHnO1jNL3ijIvSB5b3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvODgxNGM5YjUtODg0Ny0z ZDFhLWFhNTQtMGFiNzQyOWIyNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2 MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1 M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSCcMMG+DolKcH/MLGFZbhMHlW+s83sYpNZQ9IzDeRBtoQLIbOXVCt+ RApFu5w1erezypoG5/tfhlhc28oYSZa9RIcIJKCEK5agOM/eKUHZzEaLFHnxvmgv d0e1XV1ayNP3Bqjvywl5HAU5xmGW20+l0NMEbT3i5PpWVFTBGR9rFy0hkn+YB1GI GFb7aboWQE+Kp1wuiynM2a8R8wDtLH11NPRp+H2dlzvwYKetQ0DMekzlhbqDNki8 2KVUqEqHILYy8898trXmKDfIyVD6+W84SWe5kSxLbAQnI9PVSWPqelTRZWtoaFqK EkzanuuZEoc9Sbf71w3ipIQ/VaCkgWw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:33 2025 by rpki-client