$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d983f32-c282-3d5e-a0d3-f5c04628889d.roa File: 4d983f32-c282-3d5e-a0d3-f5c04628889d.roa (raw, json) Hash identifier: 4+puXvuzaF61TlgEo9UBkO/ZidueD0euuLwLZEpZsEI= Subject key identifier: CF:8E:51:00:06:D6:1E:AC:9D:1A:E9:2D:A0:90:BE:C2:44:8D:D2:75 Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Certificate serial: 010D0C9F43285848E00657B006770CC2192B4EC0 Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d983f32-c282-3d5e-a0d3-f5c04628889d.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 208.52.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:57:b0:06:77:0c:c2:19:2b:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=f73f0b4c-b954-4df9-bc0e-8727919641da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3a:dd:d1:9a:00:64:81:f1:ff:dc:dd:98:1c: e0:af:a6:09:d5:d0:ce:86:04:58:53:c8:e0:ec:5b: 5d:85:df:6a:66:64:7d:30:ae:07:86:03:63:e0:b2: 51:51:f8:a5:a2:98:65:52:2f:f5:dc:9b:d6:17:35: 84:54:0f:28:23:cf:1f:3b:24:e2:e0:35:15:e2:5b: 7a:8a:36:cf:cb:59:51:04:54:e3:5f:8d:90:08:c1: 46:a3:b1:f4:3f:04:6c:26:88:93:25:4e:df:58:98: 4d:ac:47:df:0a:5a:3b:f5:48:b9:fb:67:b4:5f:65: 1f:31:5d:92:82:07:54:1e:45:8a:f6:82:05:7a:98: 81:b8:6c:81:44:aa:e1:19:4b:91:35:08:a0:65:59: d8:26:da:83:28:88:09:45:c2:fb:56:7a:eb:80:a1: 23:3f:c2:fa:26:bd:4e:cc:b0:70:b7:40:56:48:24: a3:b7:06:7c:9e:30:d3:af:37:54:7f:af:41:83:b2: 41:16:cd:3b:54:98:b7:f2:69:22:79:cd:0f:33:9b: b9:3e:c9:50:54:b9:ef:60:02:6f:ea:bc:a3:1b:c2: 2b:94:93:ea:71:5a:36:27:68:ed:e2:c3:23:50:95: f5:c0:80:b8:2f:4a:cc:9e:ba:fd:fa:76:bc:a2:f6: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8E:51:00:06:D6:1E:AC:9D:1A:E9:2D:A0:90:BE:C2:44:8D:D2:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d983f32-c282-3d5e-a0d3-f5c04628889d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl X509v3 Authority Key Identifier: keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer sbgp-ipAddrBlock: critical IPv4: 208.52.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:60:28:ba:b4:12:e1:3f:a5:93:ff:5c:e2:ae:5b:12:9b:3a: e8:1d:b4:1a:fc:d5:73:3f:4b:50:48:18:83:3d:96:b4:75:52: d4:19:c2:c9:f2:1d:27:4a:a1:bb:d4:37:12:bd:0c:50:dc:1a: 11:19:e0:40:13:fb:f4:4b:3e:05:0b:f1:03:65:1f:4d:d0:7e: c6:9d:9c:52:82:87:c5:da:20:e7:23:8a:bd:d0:bb:4d:aa:10: 72:59:1d:b3:35:c9:47:d5:3b:ba:1d:60:d2:04:f7:28:3d:d5: d7:a7:76:1e:c2:9b:81:e7:19:40:50:6d:83:3d:86:b0:cb:41: 97:ba:c1:4e:7c:ab:ac:ca:9d:ca:ab:25:ed:8c:b3:58:ad:ed: 10:2a:ae:63:1d:d4:60:31:0c:6c:59:b7:d6:ca:06:74:c0:fe: 37:32:e6:38:38:08:54:45:d9:77:4f:b0:dc:a4:94:db:77:da: 0b:23:54:cd:c2:f7:98:a2:4a:e0:01:ae:5b:da:e1:c0:32:44: 82:4d:71:39:8a:53:db:55:1c:31:9f:f7:08:5f:69:13:e4:00: 41:ed:68:a9:da:68:19:b5:a7:ed:bc:60:c8:74:0f:c6:d7:3d: 2c:74:03:2b:2b:9e:72:62:73:17:fe:b7:5a:e8:8c:30:b4:12: 93:0c:f6:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBlewBncMwhkrTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj MTY4MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZjczZjBiNGMtYjk1NC00ZGY5LWJjMGUtODcyNzkxOTY0MWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Drd0ZoAZIHx/9zdmBzgr6YJ1dDOhgRYU8jg 7Ftdhd9qZmR9MK4HhgNj4LJRUfilophlUi/13JvWFzWEVA8oI88fOyTi4DUV4lt6 ijbPy1lRBFTjX42QCMFGo7H0PwRsJoiTJU7fWJhNrEffClo79Ui5+2e0X2UfMV2S ggdUHkWK9oIFepiBuGyBRKrhGUuRNQigZVnYJtqDKIgJRcL7VnrrgKEjP8L6Jr1O zLBwt0BWSCSjtwZ8njDTrzdUf69Bg7JBFs07VJi38mkiec0PM5u5PslQVLnvYAJv 6ryjG8IrlJPqcVo2J2jt4sMjUJX1wIC4L0rMnrr9+na8ovZ1qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+OUQAG1h6snRrpLaCQvsJEjdJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1 ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvNGQ5ODNmMzItYzI4Mi0z ZDVlLWEwZDMtZjVjMDQ2Mjg4ODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4 ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk N2VjZmMxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DSxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANgKLq0EuE/pZP/XOKuWxKbOugdtBr81XM/S1BIGIM9lrR1UtQZwsny HSdKobvUNxK9DFDcGhEZ4EAT+/RLPgUL8QNlH03QfsadnFKCh8XaIOcjir3Qu02q EHJZHbM1yUfVO7odYNIE9yg91dendh7Cm4HnGUBQbYM9hrDLQZe6wU58q6zKncqr Je2Ms1it7RAqrmMd1GAxDGxZt9bKBnTA/jcy5jg4CFRF2XdPsNyklNt32gsjVM3C 95iiSuABrlva4cAyRIJNcTmKU9tVHDGf9whfaRPkAEHtaKnaaBm1p+28YMh0D8bX PSx0AysrnnJicxf+t1rojDC0EpMM9ns= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:29 2025 by rpki-client