$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/84674b29-ce04-35c0-8a3b-86ebf2b8ff5c.roa File: 84674b29-ce04-35c0-8a3b-86ebf2b8ff5c.roa (raw, json) Hash identifier: rnIBFxpLEZHLWcQ72XS59seXhS1PeeG48P8eF8rfWeQ= Subject key identifier: 2A:3F:93:FD:D0:81:3D:27:E4:EB:5E:64:51:12:D2:2F:E6:EE:21:02 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F432858488815EA21F9EAE2A0B48FBC00 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/84674b29-ce04-35c0-8a3b-86ebf2b8ff5c.roa Signing time: Mon 13 Jan 2025 14:00:52 +0000 ROA not before: Mon 13 Jan 2025 14:00:52 +0000 ROA not after: Sun 13 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 209.114.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:88:15:ea:21:f9:ea:e2:a0:b4:8f:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Jan 13 14:00:52 2025 GMT Not After : Apr 13 13:00:52 2025 GMT Subject: CN=4fa8fe78-7856-433d-90eb-ffa156db857e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:14:29:45:72:e8:65:ca:53:6d:08:ac:d4: a9:f3:27:b2:23:7f:51:ad:6a:ed:7e:c4:91:bd:6b: c3:ee:0e:7f:0e:d0:55:c0:68:bc:f0:47:15:c5:e9: 94:74:12:06:70:53:69:81:28:04:c0:ad:16:03:cc: df:14:81:47:17:49:b0:8e:4e:b5:25:55:14:82:cd: ca:04:70:35:00:6c:78:56:2d:24:76:01:bf:16:d8: aa:f3:10:f0:0e:c2:dd:94:17:30:ed:f0:07:7c:eb: 33:3c:f8:7a:fa:92:20:c4:c9:af:76:7d:c3:53:8d: 61:57:2e:5e:c5:fc:fe:06:a2:18:07:00:ca:3e:c1: 3f:dc:2e:01:c9:65:35:23:46:96:92:9e:4d:84:f3: 23:98:16:ab:4b:b3:8b:5e:2f:bb:64:ba:f0:db:9f: 76:aa:0d:d1:57:08:a8:2b:6b:e2:7a:41:27:54:ab: 3d:e7:b4:ed:5c:a6:09:fb:1b:c4:0d:c7:18:49:d4: 64:d5:f6:ed:41:24:86:15:45:69:f8:c4:b6:e9:81: 66:af:97:5c:f7:a6:a9:f0:1c:fe:f3:54:d5:57:47: ce:3b:43:06:16:2f:0b:22:46:01:8a:ef:cf:4c:1f: 4d:40:2d:64:40:08:ef:68:a5:e4:bf:ee:a4:53:09: d4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3F:93:FD:D0:81:3D:27:E4:EB:5E:64:51:12:D2:2F:E6:EE:21:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/84674b29-ce04-35c0-8a3b-86ebf2b8ff5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ce:1b:e5:5e:9f:d3:cb:a1:47:2c:f0:ea:52:d7:ce:89:00: cb:8b:2f:86:78:ba:17:b6:62:a8:74:71:b7:6e:7d:a9:8e:14: 3a:d4:18:57:01:f0:fb:da:b1:bd:86:15:9b:1a:7c:74:96:5f: ea:a6:54:ce:60:b5:90:c4:62:00:0d:7b:9b:42:6f:b4:0d:6a: ea:15:a6:45:f5:d8:c5:6e:a8:e0:e6:ea:94:e6:4f:db:da:15: 56:eb:48:1e:6a:2e:23:82:7d:6c:45:00:e3:4e:fe:a2:01:75: 2c:89:a7:e0:cf:f8:03:63:ca:78:3b:fe:e0:68:4f:fa:5f:fd: c0:b3:c2:3d:1a:20:12:f8:46:3b:68:4b:7f:09:32:6c:47:0c: 69:8c:04:fd:34:6a:9c:b1:46:15:eb:f4:b1:92:18:bd:cf:59: 4a:53:36:75:d8:ed:28:1b:f2:18:5f:74:4a:76:19:51:7b:a5: 80:2b:91:5a:4f:64:7c:e9:78:aa:0d:f5:09:62:13:e5:45:d4: ea:69:21:1d:5f:82:fe:6d:d0:dc:f6:19:22:93:08:0d:5d:57: f6:b2:64:6b:74:09:6f:1c:54:22:20:1d:95:1e:3f:a7:fe:98: 39:57:48:dd:ad:dc:a5:8f:38:a9:39:6b:2f:00:9f:5d:ba:f7: b6:ba:e1:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiIFeoh+erioLSPvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MDExMzE0MDA1MloXDTI1MDQxMzEzMDA1MlowLzEtMCsGA1UEAxMk NGZhOGZlNzgtNzg1Ni00MzNkLTkwZWItZmZhMTU2ZGI4NTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso8UKUVy6GXKU20IrNSp8yeyI39RrWrtfsSR vWvD7g5/DtBVwGi88EcVxemUdBIGcFNpgSgEwK0WA8zfFIFHF0mwjk61JVUUgs3K BHA1AGx4Vi0kdgG/Ftiq8xDwDsLdlBcw7fAHfOszPPh6+pIgxMmvdn3DU41hVy5e xfz+BqIYBwDKPsE/3C4ByWU1I0aWkp5NhPMjmBarS7OLXi+7ZLrw2592qg3RVwio K2viekEnVKs957TtXKYJ+xvEDccYSdRk1fbtQSSGFUVp+MS26YFmr5dc96ap8Bz+ 81TVV0fOO0MGFi8LIkYBiu/PTB9NQC1kQAjvaKXkv+6kUwnUJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo/k/3QgT0n5OteZFES0i/m7iECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvODQ2NzRiMjktY2UwNC0z NWMwLThhM2ItODZlYmYyYjhmZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XICMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjOG+Ven9PLoUcs8OpS186JAMuLL4Z4uhe2Yqh0cbdufamOFDrUGFcB 8Pvasb2GFZsafHSWX+qmVM5gtZDEYgANe5tCb7QNauoVpkX12MVuqODm6pTmT9va FVbrSB5qLiOCfWxFAONO/qIBdSyJp+DP+ANjyng7/uBoT/pf/cCzwj0aIBL4Rjto S38JMmxHDGmMBP00apyxRhXr9LGSGL3PWUpTNnXY7Sgb8hhfdEp2GVF7pYArkVpP ZHzpeKoN9QliE+VF1OppIR1fgv5t0Nz2GSKTCA1dV/ayZGt0CW8cVCIgHZUeP6f+ mDlXSN2t3KWPOKk5ay8An12697a64b8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:00 2025 by rpki-client