$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ce0befbe-67ad-31e1-a53f-d68c86dda911.roa File: ce0befbe-67ad-31e1-a53f-d68c86dda911.roa (raw, json) Hash identifier: jdVXqtSz84KYPUdMDpE52UH7BxcVACc6dS1RMd+lLm0= Subject key identifier: 39:DB:79:3E:78:BF:06:2F:2D:BF:5C:EE:18:3B:56:FA:C9:EE:0B:00 Certificate issuer: /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Certificate serial: 010D0C9F43285848A996238E2AA27B7E81959180 Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ce0befbe-67ad-31e1-a53f-d68c86dda911.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 174.34.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:23:8e:2a:a2:7b:7e:81:95:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=ffc3b171-0034-46c6-a857-40c5feb3054a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f1:eb:c5:68:d4:7b:fb:2b:41:d8:99:51:c1: 3a:92:b5:02:03:c0:eb:72:ec:31:c5:5c:cb:35:09: c0:af:35:15:cb:ec:01:15:44:84:62:8f:69:2a:e1: 97:c3:ce:09:c8:fa:07:79:e5:bf:d5:ee:a6:f9:3f: 7b:37:84:61:0b:0d:8e:02:8d:96:3d:b1:1b:a6:2b: 88:af:7e:e6:9b:98:d2:b2:1d:08:d6:63:2f:53:df: 2f:6a:ff:78:97:ac:3b:48:43:02:7d:1e:f0:9d:3a: ec:c4:6f:15:b0:40:13:9a:e6:0b:86:5f:6a:8d:9b: 92:75:4f:4b:ae:1e:5d:c6:c5:13:f8:4c:0e:80:7c: 9d:ea:17:d7:a4:08:e4:20:04:f6:fd:a1:50:04:14: c7:4a:d3:c4:9c:34:5c:ee:96:56:d3:f9:4c:22:cb: 38:f7:d6:ef:26:65:68:b3:28:dc:db:73:c0:87:cd: cf:b2:5d:fb:de:78:d7:51:de:b1:9f:87:69:b1:ae: 12:40:79:41:ea:01:d2:d0:d6:1d:c7:d7:96:4f:65: 60:8e:a4:81:da:c6:35:e7:71:70:44:5b:20:52:02: d9:42:d1:b9:bd:f3:87:0a:e9:89:18:eb:0c:69:57: 06:00:4a:bb:9f:81:03:ea:d9:25:11:51:35:a2:85: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DB:79:3E:78:BF:06:2F:2D:BF:5C:EE:18:3B:56:FA:C9:EE:0B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/ce0befbe-67ad-31e1-a53f-d68c86dda911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl X509v3 Authority Key Identifier: keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer sbgp-ipAddrBlock: critical IPv4: 174.34.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:92:3a:91:bf:d8:69:eb:73:75:2d:02:23:1f:91:93:d1:22: 0e:f1:0c:8a:7b:70:a9:3b:d2:56:57:f6:19:ec:d1:ca:a1:f0: 97:00:c6:f6:73:19:c2:fb:da:45:f7:0a:c2:c1:18:12:ac:a3: 1a:56:2e:b6:81:b4:70:7c:c1:f8:b4:e0:48:7b:fa:5f:f7:dd: 1d:3e:85:a0:75:a8:fd:97:34:4f:ba:35:94:79:89:b4:9c:ef: b2:37:14:d8:5f:6b:8d:7a:b7:b5:f0:97:ec:a0:48:c6:4c:a8: 75:c6:a6:99:f2:0e:42:5e:ba:7d:b8:d0:8c:97:fb:96:80:53: 11:f7:f0:98:a5:de:6b:8f:55:e1:83:fa:cd:f6:1c:7f:cf:2e: 39:67:7f:d0:fc:6f:24:52:20:45:66:14:5a:b5:d5:8e:96:99: 03:2b:28:4f:9c:aa:38:6a:fb:d9:ba:6f:ef:06:18:d3:d9:9f: be:a3:bf:a1:22:78:9c:23:80:cb:24:28:0c:f0:58:bb:ef:c2: 4b:f0:74:0b:54:3c:06:18:9a:5e:14:fc:17:0c:db:a8:df:09: b0:56:04:76:e3:9f:b6:39:fe:10:7f:6a:08:91:9e:e1:6b:47: c4:9a:a8:d9:54:56:04:cf:22:24:e3:e4:4f:fe:0f:e0:c2:0d: 7b:f8:5a:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipliOOKqJ7foGVkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAz ZDhhMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmZjM2IxNzEtMDAzNC00NmM2LWE4NTctNDBjNWZlYjMwNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPHrxWjUe/srQdiZUcE6krUCA8DrcuwxxVzL NQnArzUVy+wBFUSEYo9pKuGXw84JyPoHeeW/1e6m+T97N4RhCw2OAo2WPbEbpiuI r37mm5jSsh0I1mMvU98vav94l6w7SEMCfR7wnTrsxG8VsEATmuYLhl9qjZuSdU9L rh5dxsUT+EwOgHyd6hfXpAjkIAT2/aFQBBTHStPEnDRc7pZW0/lMIss499bvJmVo syjc23PAh83Psl373njXUd6xn4dpsa4SQHlB6gHS0NYdx9eWT2VgjqSB2sY153Fw RFsgUgLZQtG5vfOHCumJGOsMaVcGAEq7n4ED6tklEVE1ooX5vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnbeT54vwYvLb9c7hg7VvrJ7gsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFi Y2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvY2UwYmVmYmUtNjdhZC0z MWUxLWE1M2YtZDY4Yzg2ZGRhOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZThhYmNiMzYtN2Q3NS00NjU0LWEw OTgtZDAzMmRkZjAzZDhhL2U4YWJjYjM2LTdkNzUtNDY1NC1hMDk4LWQwMzJkZGYw M2Q4YS5jcmwwHwYDVR0jBBgwFoAU5SKbDu705qho1RMGspmd441YHB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMy ZGRmMDNkOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuSOpG/2Gnrc3UtAiMfkZPRIg7xDIp7cKk70lZX9hns0cqh8JcAxvZz GcL72kX3CsLBGBKsoxpWLraBtHB8wfi04Eh7+l/33R0+haB1qP2XNE+6NZR5ibSc 77I3FNhfa416t7Xwl+ygSMZMqHXGppnyDkJeun240IyX+5aAUxH38Jil3muPVeGD +s32HH/PLjlnf9D8byRSIEVmFFq11Y6WmQMrKE+cqjhq+9m6b+8GGNPZn76jv6Ei eJwjgMskKAzwWLvvwkvwdAtUPAYYml4U/BcM26jfCbBWBHbjn7Y5/hB/agiRnuFr R8SaqNlUVgTPIiTj5E/+D+DCDXv4Wv0= -----END CERTIFICATE-----Generated at Fri Apr 4 23:32:40 2025 by rpki-client