$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/4e42054b-6daf-3113-8e31-be7ae7badb56.roa File: 4e42054b-6daf-3113-8e31-be7ae7badb56.roa (raw, json) Hash identifier: NNXPbYaMlpEBI8rtsOUAYP/AGHe1Z2Lh0KgblW28lVE= Subject key identifier: 44:9B:2A:AE:6B:B8:28:13:10:53:03:24:D3:8E:5A:E4:C8:8A:90:73 Certificate issuer: /CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765 Certificate serial: 010D0C9F43285848E0065BF3CDDCB5045EF76EF0 Authority key identifier: 3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/4e42054b-6daf-3113-8e31-be7ae7badb56.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396982 IP address blocks: 204.16.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:5b:f3:cd:dc:b5:04:5e:f7:6e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=0b8d53da-e3fe-4b19-a52f-07d667461ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e9:c1:42:8f:fd:4e:c3:2f:e4:ed:39:71:24: 13:a9:f0:a2:ff:c1:b5:a7:03:e1:60:6c:d6:bf:7a: 67:33:cc:04:08:e8:7e:9a:a4:f0:19:c7:54:ba:58: 4d:b8:da:b4:05:62:a7:1d:bb:d3:68:04:b8:36:10: 9b:50:a2:16:b1:84:19:a4:7f:76:f5:9c:c1:91:e8: 1e:67:86:d7:1d:20:3b:19:27:7b:42:38:7c:b0:d7: 9d:60:a3:93:69:65:d9:bf:ad:95:da:1e:27:e3:ab: 5e:bd:26:1a:70:52:fe:5c:5d:fd:54:0c:f1:44:30: a5:68:7c:73:2d:cb:96:46:ed:b3:b8:7f:1b:2c:b8: c3:f2:bf:9b:c0:64:c2:85:5f:77:84:b7:f0:fe:6f: dd:98:85:d3:95:65:5d:fb:30:72:c9:a4:83:15:53: cf:51:6b:f1:0b:06:c0:67:e9:79:63:73:7a:3c:a3: bc:a8:75:ec:c5:d6:ce:63:7a:d0:8c:31:c8:50:8c: 5d:66:de:78:f6:cb:1e:7f:16:51:79:69:6a:96:13: fd:3c:86:1b:25:4d:3d:dc:87:27:2d:5e:2a:eb:68: 62:dc:a9:4c:5d:1a:e2:b4:81:79:56:4a:e4:28:c2: d8:29:c2:f5:6e:0a:11:94:7b:17:73:f8:f2:05:01: 89:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9B:2A:AE:6B:B8:28:13:10:53:03:24:D3:8E:5A:E4:C8:8A:90:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/4e42054b-6daf-3113-8e31-be7ae7badb56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl X509v3 Authority Key Identifier: keyid:3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer sbgp-ipAddrBlock: critical IPv4: 204.16.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:70:63:60:22:00:03:ec:44:fd:78:4d:dc:4c:0f:c5:81:1e: b4:ff:a9:55:63:07:77:6a:eb:ee:c9:4d:84:4c:11:c0:15:3e: 97:e0:40:64:7b:6a:27:4f:77:bf:9e:af:7a:c2:de:fa:8d:ec: 60:2b:dd:19:97:7a:c1:73:c2:99:17:47:fe:e1:c8:ca:79:15: d6:23:f1:4d:04:c2:43:3d:6a:8b:4f:df:8f:19:68:bd:4d:01: ef:97:51:49:b6:90:a1:ca:63:49:9a:a1:ea:76:f0:86:95:a8: b5:39:1f:01:fc:25:50:f9:c9:49:6e:9f:29:e5:b2:4b:5c:ec: 0e:b1:63:37:0e:a0:62:24:25:d5:f6:9a:4f:18:5a:37:fa:06: 2d:fd:e9:b9:e9:b7:9b:26:f7:c7:53:b8:24:eb:03:f8:ec:02: d0:ce:0b:93:70:07:a7:3a:30:61:64:c2:b8:0d:61:3b:ee:4d: 4b:4c:b8:fc:e0:5e:3f:ed:ad:02:23:f9:2c:6a:dc:c3:bd:cb: 9e:bf:36:39:7e:3c:83:92:27:52:84:39:15:5a:25:22:aa:ce: 47:b7:51:bf:0e:2d:4b:7a:81:a1:6a:7a:5a:c7:d8:c8:d7:68: 4f:89:24:19:fa:44:49:8b:d7:03:2c:01:80:46:3b:8e:29:f3: c5:ae:de:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBlvzzdy1BF73bvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwMTNiZDgtZmMzNC00YWQ0LThkYzgtNTE2YmRkOGJj NzY1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk MGI4ZDUzZGEtZTNmZS00YjE5LWE1MmYtMDdkNjY3NDYxY2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxunBQo/9TsMv5O05cSQTqfCi/8G1pwPhYGzW v3pnM8wECOh+mqTwGcdUulhNuNq0BWKnHbvTaAS4NhCbUKIWsYQZpH929ZzBkege Z4bXHSA7GSd7Qjh8sNedYKOTaWXZv62V2h4n46tevSYacFL+XF39VAzxRDClaHxz LcuWRu2zuH8bLLjD8r+bwGTChV93hLfw/m/dmIXTlWVd+zByyaSDFVPPUWvxCwbA Z+l5Y3N6PKO8qHXsxdbOY3rQjDHIUIxdZt549ssefxZReWlqlhP9PIYbJU093Icn LV4q62hi3KlMXRritIF5VkrkKMLYKcL1bgoRlHsXc/jyBQGJ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESbKq5ruCgTEFMDJNOOWuTIipBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTAx M2JkOC1mYzM0LTRhZDQtOGRjOC01MTZiZGQ4YmM3NjUvNGU0MjA1NGItNmRhZi0z MTEzLThlMzEtYmU3YWU3YmFkYjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUwMTNiZDgtZmMzNC00YWQ0LThk YzgtNTE2YmRkOGJjNzY1L2E1MDEzYmQ4LWZjMzQtNGFkNC04ZGM4LTUxNmJkZDhi Yzc2NS5jcmwwHwYDVR0jBBgwFoAUPNGeaXellv96HMZ7UJhoSVXPS6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTAxM2JkOC1mYzM0LTRhZDQtOGRjOC01MTZi ZGQ4YmM3NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBAhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlwY2AiAAPsRP14TdxMD8WBHrT/qVVjB3dq6+7JTYRMEcAVPpfgQGR7 aidPd7+er3rC3vqN7GAr3RmXesFzwpkXR/7hyMp5FdYj8U0EwkM9aotP348ZaL1N Ae+XUUm2kKHKY0maoep28IaVqLU5HwH8JVD5yUlunynlsktc7A6xYzcOoGIkJdX2 mk8YWjf6Bi396bnpt5sm98dTuCTrA/jsAtDOC5NwB6c6MGFkwrgNYTvuTUtMuPzg Xj/trQIj+Sxq3MO9y56/Njl+PIOSJ1KEORVaJSKqzke3Ub8OLUt6gaFqelrH2MjX aE+JJBn6REmL1wMsAYBGO44p88Wu3so= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:41 2025 by rpki-client