$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/e84bd9e8-ee36-32ea-ac22-f7fe28143b21.roa File: e84bd9e8-ee36-32ea-ac22-f7fe28143b21.roa (raw, json) Hash identifier: o42EJR8ssOL8G47XmCoiKETJbjh+WAwSpZRipgXHHpk= Subject key identifier: 04:F6:73:64:E3:94:70:01:CD:2C:4F:50:81:8A:F3:57:18:5C:6D:84 Certificate issuer: /CN=de0cc6bd-e920-421b-822f-9be354b0d759 Certificate serial: 010D0C9F43285848143A820A1ADBF5962C571B40 Authority key identifier: D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/e84bd9e8-ee36-32ea-ac22-f7fe28143b21.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 399888 IP address blocks: 208.75.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:82:0a:1a:db:f5:96:2c:57:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0cc6bd-e920-421b-822f-9be354b0d759 Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=7f7ecfbe-b8f0-4768-a78a-70c13d276e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:4b:75:76:d7:02:ea:7f:62:6b:1d:b0:8c: 45:99:89:17:31:3e:05:21:fe:f2:1a:fa:93:2f:ae: 0b:94:2a:a0:f1:40:e5:38:64:63:a6:4e:ec:e0:a7: 1b:36:db:88:19:f6:c9:38:5f:7f:a4:a5:fe:1f:e5: c0:79:d7:23:b3:c3:9f:94:93:b0:fa:51:87:2e:31: 4c:d0:9d:62:5c:e8:34:27:c8:01:d9:44:87:f0:85: f3:e8:53:14:c2:0b:72:c8:ad:bf:5e:aa:0d:bf:81: 5b:cc:70:01:c5:ee:8e:b9:e0:06:10:d7:af:2f:5e: bf:bd:97:00:d4:fe:d6:b9:ad:de:9e:e9:04:08:10: 4e:fb:90:a8:8d:87:8c:32:cd:f2:f5:d5:49:a6:e0: 54:0b:b0:63:63:6c:ba:a4:e2:34:05:64:4b:0c:86: c6:d3:2f:e0:8c:d5:3b:83:ff:9f:c3:24:a1:90:84: d0:b1:6e:33:98:f2:a3:32:d1:c1:55:d5:0c:1e:4c: c6:e3:96:86:bc:c9:53:49:1f:00:8d:48:f4:fe:c1: e6:a7:7f:8b:27:ca:70:5f:d8:2a:48:1c:76:5d:b5: 2e:80:cc:8b:9c:62:28:58:13:ff:3c:7a:eb:c6:9e: 6b:9e:62:95:06:96:bf:c3:0b:bd:1f:70:cb:89:d5: 0f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F6:73:64:E3:94:70:01:CD:2C:4F:50:81:8A:F3:57:18:5C:6D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/e84bd9e8-ee36-32ea-ac22-f7fe28143b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl X509v3 Authority Key Identifier: keyid:D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer sbgp-ipAddrBlock: critical IPv4: 208.75.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:3e:2c:61:c7:52:71:4d:2d:83:13:a4:78:4c:db:dc:47:44: f0:ae:b7:e5:a7:bf:9e:33:2d:00:25:29:93:5a:2e:af:d9:7a: b5:d8:a3:8b:cc:7e:0a:59:1b:d9:de:36:fb:ce:c4:6f:ac:aa: b7:7e:b2:45:31:df:7f:84:3a:e8:6d:4e:09:24:8d:8b:1c:ce: e5:49:6f:03:0f:cc:92:80:cf:61:f6:ee:df:2f:24:d8:62:01: 31:0b:7b:d1:e8:1f:d9:dc:c5:41:ce:fa:e2:77:33:3c:b9:67: 41:fc:63:c4:7f:e1:ef:ee:f7:0e:5e:b7:39:43:81:42:b7:b4: fe:43:94:60:3d:5a:96:29:cb:0d:08:dd:ad:dd:b3:00:86:5e: b7:f5:d6:1a:ba:48:45:a3:9a:a5:48:46:29:ca:f9:45:a0:59: 4d:73:48:c6:9c:66:a9:9b:9c:a8:48:64:c2:10:2b:c8:d7:e2: 5d:54:41:44:6e:01:0a:3e:01:48:e0:25:de:fd:5e:c1:c1:7e: 0f:5d:1d:07:d3:8d:9d:e5:4b:e6:f9:8b:91:21:9b:d1:5a:50: 84:ce:5a:0d:a0:d8:14:12:13:47:4d:04:53:26:22:34:07:02: 2e:01:e0:e7:8d:79:29:ee:2f:d5:b3:29:ea:01:1c:fd:f7:45: d2:b8:75:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOoIKGtv1lixXG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwY2M2YmQtZTkyMC00MjFiLTgyMmYtOWJlMzU0YjBk NzU5MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk N2Y3ZWNmYmUtYjhmMC00NzY4LWE3OGEtNzBjMTNkMjc2ZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCNLdXbXAup/YmsdsIxFmYkXMT4FIf7yGvqT L64LlCqg8UDlOGRjpk7s4KcbNtuIGfbJOF9/pKX+H+XAedcjs8OflJOw+lGHLjFM 0J1iXOg0J8gB2USH8IXz6FMUwgtyyK2/XqoNv4FbzHABxe6OueAGENevL16/vZcA 1P7Wua3enukECBBO+5CojYeMMs3y9dVJpuBUC7BjY2y6pOI0BWRLDIbG0y/gjNU7 g/+fwyShkITQsW4zmPKjMtHBVdUMHkzG45aGvMlTSR8AjUj0/sHmp3+LJ8pwX9gq SBx2XbUugMyLnGIoWBP/PHrrxp5rnmKVBpa/wwu9H3DLidUPQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAT2c2TjlHABzSxPUIGK81cYXG2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZTBj YzZiZC1lOTIwLTQyMWItODIyZi05YmUzNTRiMGQ3NTkvZTg0YmQ5ZTgtZWUzNi0z MmVhLWFjMjItZjdmZTI4MTQzYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGUwY2M2YmQtZTkyMC00MjFiLTgy MmYtOWJlMzU0YjBkNzU5L2RlMGNjNmJkLWU5MjAtNDIxYi04MjJmLTliZTM1NGIw ZDc1OS5jcmwwHwYDVR0jBBgwFoAU0N8F+unbijdSc2pIZnRTxmgQcFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZTBjYzZiZC1lOTIwLTQyMWItODIyZi05YmUz NTRiMGQ3NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8+LGHHUnFNLYMTpHhM29xHRPCut+Wnv54zLQAlKZNaLq/ZerXYo4vM fgpZG9neNvvOxG+sqrd+skUx33+EOuhtTgkkjYsczuVJbwMPzJKAz2H27t8vJNhi ATELe9HoH9ncxUHO+uJ3Mzy5Z0H8Y8R/4e/u9w5etzlDgUK3tP5DlGA9WpYpyw0I 3a3dswCGXrf11hq6SEWjmqVIRinK+UWgWU1zSMacZqmbnKhIZMIQK8jX4l1UQURu AQo+AUjgJd79XsHBfg9dHQfTjZ3lS+b5i5Ehm9FaUITOWg2g2BQSE0dNBFMmIjQH Ai4B4OeNeSnuL9WzKeoBHP33RdK4dXM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:20 2025 by rpki-client