$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/05d98a1e-5ff8-3196-abf4-ec4805322b55.roa File: 05d98a1e-5ff8-3196-abf4-ec4805322b55.roa (raw, json) Hash identifier: aiX1LlRUrkoPrBydV8VxMOhf7o/aJvgeMNXVhsC6y3o= Subject key identifier: DA:09:EB:D9:73:10:33:51:CA:B4:56:06:CB:08:43:26:B3:C9:55:B4 Certificate issuer: /CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3 Certificate serial: 010D0C9F43285848811B1492BA94CA9734B09A40 Authority key identifier: 77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/05d98a1e-5ff8-3196-abf4-ec4805322b55.roa Signing time: Sat 11 Jan 2025 02:00:39 +0000 ROA not before: Sat 11 Jan 2025 02:00:39 +0000 ROA not after: Fri 11 Apr 2025 01:00:39 +0000 asID: 32777 IP address blocks: 208.115.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:81:1b:14:92:ba:94:ca:97:34:b0:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3 Validity Not Before: Jan 11 02:00:39 2025 GMT Not After : Apr 11 01:00:39 2025 GMT Subject: CN=390b6600-32e3-4779-b411-84f37010fab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:22:fd:ec:34:f2:44:48:19:88:5e:05:97: 26:de:8c:96:17:17:89:79:47:6c:32:6c:d2:3b:6e: 93:d1:dd:c6:16:e2:24:6e:5c:e7:e9:f8:04:20:02: 16:d2:1a:2c:fc:d6:ae:c8:ff:64:c1:f0:43:b0:8a: 2f:f8:f2:93:c4:a7:8d:ed:12:e7:f6:30:eb:bd:f2: 3c:18:f9:6c:d3:61:be:85:4f:8e:d7:a0:58:e2:36: 90:4b:e5:59:15:c0:0f:86:b4:a2:76:9e:99:a2:d6: b4:66:6b:0c:00:cf:c2:f3:2c:fc:b1:92:7d:d6:55: f1:9d:b6:1e:4f:12:53:7a:de:84:2a:f2:ea:49:b6: f4:f1:99:8b:91:5b:a1:a0:e9:68:c1:92:fc:b7:32: 7f:3d:1e:56:b1:ec:97:5f:8f:b4:e4:e0:1e:31:1b: b3:36:35:d0:4f:90:ed:40:80:34:ce:4e:1b:d9:46: a8:24:e2:7b:20:9e:9e:a9:7b:08:52:b9:58:f5:66: 92:c4:da:41:c8:6f:be:91:52:a6:7f:df:37:ec:4a: 05:7d:3b:04:63:bc:2d:82:66:6e:6b:a8:e7:31:a0: 2c:32:70:e4:03:d0:5a:ac:fa:c4:05:5b:ce:38:b9: 7a:48:04:c8:0c:7c:95:49:51:c2:e9:5a:38:ef:66: 73:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:09:EB:D9:73:10:33:51:CA:B4:56:06:CB:08:43:26:B3:C9:55:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/05d98a1e-5ff8-3196-abf4-ec4805322b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl X509v3 Authority Key Identifier: keyid:77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer sbgp-ipAddrBlock: critical IPv4: 208.115.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d5:a0:dc:22:71:79:95:a6:63:d0:1b:e0:33:a8:ce:7e:b7: b1:af:9a:88:5d:a2:32:ec:0c:02:8b:50:c7:88:42:15:ed:c6: 31:25:e9:de:1d:2c:5e:e4:c5:5b:b3:ca:5c:51:88:6f:46:24: a5:e8:42:90:87:4b:8d:da:6e:ad:b5:84:42:0f:50:8e:bf:9e: f4:81:3a:54:2c:20:58:e8:eb:02:29:4c:6f:7f:5e:af:34:5c: c3:6a:c4:c2:f8:a0:aa:c0:f2:d6:18:74:33:f2:87:f4:8c:c1: 99:73:18:8b:aa:7f:f9:e0:4c:f0:1e:1e:3e:f8:8b:62:4d:1d: 69:de:3f:d2:13:06:e3:a4:68:bf:2a:8f:88:38:c4:c2:45:44: e3:3b:4f:c6:b3:67:7a:eb:b1:9b:bd:4b:7d:6b:79:6a:70:9a: d7:93:77:15:52:18:9e:32:dc:af:6d:60:69:92:ba:7b:79:31: a5:f5:5b:e3:15:bb:f2:df:13:8c:c3:dd:7f:96:bc:e8:fa:8f: 1a:bd:f3:94:22:f5:da:0a:1f:46:0b:60:3b:13:03:07:12:1d: 99:d4:35:56:b2:fb:69:eb:c6:af:04:81:b0:dc:fc:f8:4e:96: 88:05:9c:de:07:b9:79:cb:4e:6c:59:88:eb:b5:02:73:d3:fa: 7a:09:48:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiBGxSSupTKlzSwmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ZlOGUyYzItMmE2MS00NGQ5LTk1YjctNjRlYjE4MTAz MmUzMB4XDTI1MDExMTAyMDAzOVoXDTI1MDQxMTAxMDAzOVowLzEtMCsGA1UEAxMk MzkwYjY2MDAtMzJlMy00Nzc5LWI0MTEtODRmMzcwMTBmYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiUi/ew08kRIGYheBZcm3oyWFxeJeUdsMmzS O26T0d3GFuIkblzn6fgEIAIW0hos/NauyP9kwfBDsIov+PKTxKeN7RLn9jDrvfI8 GPls02G+hU+O16BY4jaQS+VZFcAPhrSidp6Zota0ZmsMAM/C8yz8sZJ91lXxnbYe TxJTet6EKvLqSbb08ZmLkVuhoOlowZL8tzJ/PR5WseyXX4+05OAeMRuzNjXQT5Dt QIA0zk4b2UaoJOJ7IJ6eqXsIUrlY9WaSxNpByG++kVKmf9837EoFfTsEY7wtgmZu a6jnMaAsMnDkA9BarPrEBVvOOLl6SATIDHyVSVHC6Vo472Zz2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoJ69lzEDNRyrRWBssIQyazyVW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZmU4 ZTJjMi0yYTYxLTQ0ZDktOTViNy02NGViMTgxMDMyZTMvMDVkOThhMWUtNWZmOC0z MTk2LWFiZjQtZWM0ODA1MzIyYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2ZlOGUyYzItMmE2MS00NGQ5LTk1 YjctNjRlYjE4MTAzMmUzLzdmZThlMmMyLTJhNjEtNDRkOS05NWI3LTY0ZWIxODEw MzJlMy5jcmwwHwYDVR0jBBgwFoAUd9tPdj6fRI8goy97j3K38uwgDKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83ZmU4ZTJjMi0yYTYxLTQ0ZDktOTViNy02NGVi MTgxMDMyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXVoNwicXmVpmPQG+AzqM5+t7GvmohdojLsDAKLUMeIQhXtxjEl6d4d LF7kxVuzylxRiG9GJKXoQpCHS43abq21hEIPUI6/nvSBOlQsIFjo6wIpTG9/Xq80 XMNqxML4oKrA8tYYdDPyh/SMwZlzGIuqf/ngTPAeHj74i2JNHWneP9ITBuOkaL8q j4g4xMJFROM7T8azZ3rrsZu9S31reWpwmteTdxVSGJ4y3K9tYGmSunt5MaX1W+MV u/LfE4zD3X+WvOj6jxq985Qi9doKH0YLYDsTAwcSHZnUNVay+2nrxq8EgbDc/PhO logFnN4HuXnLTmxZiOu1AnPT+noJSIo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:22 2025 by rpki-client