$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/cbf0ebb9-455c-3107-8c84-974a7f12d863.roa File: cbf0ebb9-455c-3107-8c84-974a7f12d863.roa (raw, json) Hash identifier: VL9Wwnhinzqey8psSDDlDcI4i/9LdxQzsY7ZgSsG5Pg= Subject key identifier: C6:81:2E:5D:B9:27:7D:62:21:73:20:8F:7E:E1:2F:59:73:B0:EE:B9 Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F43285848960B51F83D77BE34D8C15A40 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/cbf0ebb9-455c-3107-8c84-974a7f12d863.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 20454 IP address blocks: 64.38.208.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:51:f8:3d:77:be:34:d8:c1:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=5acb7ee1-78cf-4dee-ab9d-bed9a6f23c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dd:b2:06:81:21:25:a4:ed:2f:d6:4d:a7:28: a6:6d:6e:bc:0f:72:03:d3:04:28:6c:28:2b:1b:7f: 37:fa:32:45:ab:7c:3b:d0:b9:d2:44:1b:d6:7d:8b: 4f:12:da:38:8c:ab:ff:b2:c8:ac:72:f5:24:c0:6c: e5:09:de:12:81:07:4b:ee:48:d4:19:02:96:ca:ea: 64:28:d8:bc:18:0a:21:b5:1d:6b:de:69:07:c4:88: 36:1b:16:f8:9c:56:98:84:1a:37:6a:4c:ed:08:dc: 61:e1:55:a3:5f:b1:78:46:69:56:a1:79:51:c4:01: 04:e1:84:59:cc:90:bd:62:ef:fc:39:fe:62:34:23: a8:85:9c:aa:a4:b2:83:06:0c:24:d6:96:79:fe:bc: 44:40:4a:d8:7f:71:a4:df:85:b5:4e:fd:ab:54:1c: dd:49:ab:48:89:e3:74:8c:81:bc:df:86:8a:48:7a: 26:93:61:df:5c:bd:c7:b0:6c:42:55:75:a0:55:50: 71:17:72:9a:60:2c:b9:42:ba:f7:bd:de:2b:0a:34: 89:cd:f9:8b:5a:b4:b4:16:3e:57:06:4d:85:8d:c0: 81:65:a5:5b:b1:86:5a:d1:f2:36:9e:3f:6b:d8:45: cd:bd:63:77:8e:4d:30:41:e1:ff:e7:6d:48:7b:0f: 5f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:81:2E:5D:B9:27:7D:62:21:73:20:8F:7E:E1:2F:59:73:B0:EE:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/cbf0ebb9-455c-3107-8c84-974a7f12d863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:48:20:53:2e:a1:d1:95:db:00:62:e2:09:8f:ae:ca:97:4b: b0:bc:d0:cd:43:be:25:f2:df:d9:0f:40:1a:1c:98:89:00:ab: 02:da:b9:78:16:c8:e1:2f:10:44:5b:eb:1f:8b:4b:3f:28:b1: b8:4f:14:aa:01:ec:b2:57:2c:b1:40:e9:b3:e8:7b:ea:9c:0c: 0d:0e:83:95:53:fc:10:d9:b3:64:be:4f:e2:5f:38:0f:5f:2b: 32:16:a2:f4:dd:65:42:86:3d:8e:8a:36:a9:e4:88:de:50:40: 28:37:37:60:ce:d2:5c:22:3d:25:f9:f2:2e:f2:a4:ac:eb:f8: 24:2a:df:d2:2c:55:44:c8:be:35:c2:af:7c:42:49:e7:a6:e3: 02:5b:e7:49:98:62:dc:e1:37:da:7a:32:3c:84:f1:54:9a:b3: 8f:8b:03:28:a9:8b:01:a1:35:96:0d:37:d0:af:da:09:a4:6b: 19:be:57:58:6e:72:e5:eb:f3:d1:64:c3:df:e4:5a:40:04:1f: e8:7a:40:85:2e:bd:b9:13:a0:f6:fc:94:0f:14:29:8f:7d:cd: c3:34:d9:1b:5b:40:5d:9d:bb:06:02:70:7c:08:44:a0:73:95: b0:0f:0d:6c:a9:ec:f2:b7:11:46:c7:68:f2:1d:92:aa:5e:e6: cd:bb:85:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1H4PXe+NNjBWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk NWFjYjdlZTEtNzhjZi00ZGVlLWFiOWQtYmVkOWE2ZjIzYzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt2yBoEhJaTtL9ZNpyimbW68D3ID0wQobCgr G383+jJFq3w70LnSRBvWfYtPEto4jKv/ssiscvUkwGzlCd4SgQdL7kjUGQKWyupk KNi8GAohtR1r3mkHxIg2Gxb4nFaYhBo3akztCNxh4VWjX7F4RmlWoXlRxAEE4YRZ zJC9Yu/8Of5iNCOohZyqpLKDBgwk1pZ5/rxEQErYf3Gk34W1Tv2rVBzdSatIieN0 jIG834aKSHomk2HfXL3HsGxCVXWgVVBxF3KaYCy5Qrr3vd4rCjSJzfmLWrS0Fj5X Bk2FjcCBZaVbsYZa0fI2nj9r2EXNvWN3jk0wQeH/521Iew9fJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaBLl25J31iIXMgj37hL1lzsO65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvY2JmMGViYjktNDU1Yy0z MTA3LThjODQtOTc0YTdmMTJkODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5IIFMuodGV2wBi4gmPrsqXS7C80M1DviXy39kPQBocmIkAqwLauXgW yOEvEERb6x+LSz8osbhPFKoB7LJXLLFA6bPoe+qcDA0Og5VT/BDZs2S+T+JfOA9f KzIWovTdZUKGPY6KNqnkiN5QQCg3N2DO0lwiPSX58i7ypKzr+CQq39IsVUTIvjXC r3xCSeem4wJb50mYYtzhN9p6MjyE8VSas4+LAyipiwGhNZYNN9Cv2gmkaxm+V1hu cuXr89Fkw9/kWkAEH+h6QIUuvbkToPb8lA8UKY99zcM02RtbQF2duwYCcHwIRKBz lbAPDWyp7PK3EUbHaPIdkqpe5s27hQQ= -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:29 2025 by rpki-client