$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/e46c3515-ade6-33b1-864e-e44822def5e4.roa File: e46c3515-ade6-33b1-864e-e44822def5e4.roa (raw, json) Hash identifier: 0fRi1cecXsOdXsi6gmZf48V7GYivioiJ9SIC+/IXsao= Subject key identifier: 1F:3F:58:7C:C2:8B:EE:B0:FF:C8:54:89:D5:01:7F:05:56:A1:16:B1 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F43285848EC96A5475C3CDE6730428748 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/e46c3515-ade6-33b1-864e-e44822def5e4.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 203724 IP address blocks: 208.65.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:a5:47:5c:3c:de:67:30:42:87:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=269cea5b-06ba-4e41-8632-78dd08f267b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8c:70:3c:c3:de:23:4c:91:a3:5f:78:c4:0a: fc:55:ae:2e:bc:e3:a7:00:6d:48:2c:f2:c1:e7:a0: d2:13:fc:25:67:f6:92:37:fd:a5:90:0b:70:24:ec: 7d:89:3d:2b:51:82:e0:01:cd:69:58:e1:11:f0:3d: 8e:24:e9:6c:e3:ba:95:b9:64:cb:db:4e:79:fd:25: a4:54:87:38:58:49:ad:70:70:91:ae:41:05:b4:59: 76:5a:92:e8:47:db:08:47:e1:01:f8:9e:78:ca:6a: c4:91:a7:35:6f:61:2b:a0:47:0e:e0:b7:1e:5f:d5: 11:1a:43:15:9c:a6:89:74:89:c4:2a:f5:59:47:ae: 40:2e:bf:3d:ff:c3:86:ac:8b:a1:b8:8f:61:0c:17: a7:ca:f6:47:ee:f3:03:0d:05:fd:78:a7:80:f1:1a: b8:c9:f4:f6:e3:38:21:2b:47:db:46:9b:0a:27:36: 9f:c3:17:f6:a8:15:44:4d:15:ec:6f:ef:11:39:b1: 09:4f:a0:f4:ee:b7:24:ed:0a:72:19:74:5b:93:54: f8:02:84:15:7f:06:ad:d6:31:f4:cb:f2:ee:c6:b4: 42:fe:0f:4e:58:7c:2e:6e:77:46:05:ca:66:64:d3: 6f:93:14:e2:bd:43:cb:43:df:19:00:9e:25:e8:a3: 87:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3F:58:7C:C2:8B:EE:B0:FF:C8:54:89:D5:01:7F:05:56:A1:16:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/e46c3515-ade6-33b1-864e-e44822def5e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 208.65.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:7d:c8:91:24:a0:63:e1:08:56:3d:59:75:01:55:3a:33:d4: ac:5e:2d:45:74:88:a6:9d:a9:27:24:9b:78:51:a3:3f:5f:87: 95:e6:39:4b:30:33:8d:4b:2d:d0:4e:39:50:ed:50:fd:c6:0f: f6:2e:6b:b4:d7:c8:30:8e:00:37:d0:b2:49:5d:2d:4d:7f:e5: db:f9:9f:ae:66:fc:99:0e:7d:0b:26:f1:dc:ad:3d:4e:6b:05: 30:33:90:06:bf:95:fa:4c:1c:06:dd:29:9e:eb:fb:53:b4:c8: ba:51:a5:82:26:cb:8e:f5:da:df:29:17:2f:ef:e6:70:52:93: c5:37:fe:93:a3:05:98:00:c2:94:31:e8:ac:5d:bf:7f:76:e5: 30:ba:8f:31:60:2c:39:b3:19:63:a8:51:f7:7b:85:64:89:62: 36:b6:b4:9a:0f:53:d2:a3:7e:1a:35:26:79:27:ba:cd:88:6b: 6f:58:4d:64:cd:97:fd:8f:2a:a5:87:d4:32:17:99:68:87:6c: 0c:ad:cb:58:12:22:71:0a:f8:f0:3d:26:ea:98:89:19:10:63: 1a:0f:0f:2d:9c:11:0f:97:2f:eb:1f:d7:ed:eb:29:3a:69:d3: 43:c5:94:97:13:81:36:61:4b:1b:78:de:aa:8d:f1:b7:a2:e1: 21:d5:5c:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqVHXDzeZzBCh0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MjY5Y2VhNWItMDZiYS00ZTQxLTg2MzItNzhkZDA4ZjI2N2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoxwPMPeI0yRo194xAr8Va4uvOOnAG1ILPLB 56DSE/wlZ/aSN/2lkAtwJOx9iT0rUYLgAc1pWOER8D2OJOls47qVuWTL2055/SWk VIc4WEmtcHCRrkEFtFl2WpLoR9sIR+EB+J54ymrEkac1b2EroEcO4LceX9URGkMV nKaJdInEKvVZR65ALr89/8OGrIuhuI9hDBenyvZH7vMDDQX9eKeA8Rq4yfT24zgh K0fbRpsKJzafwxf2qBVETRXsb+8RObEJT6D07rck7QpyGXRbk1T4AoQVfwat1jH0 y/LuxrRC/g9OWHwubndGBcpmZNNvkxTivUPLQ98ZAJ4l6KOHrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8/WHzCi+6w/8hUidUBfwVWoRaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZTQ2YzM1MTUtYWRlNi0z M2IxLTg2NGUtZTQ0ODIyZGVmNWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EGTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJh9yJEkoGPhCFY9WXUBVToz1KxeLUV0iKadqSckm3hRoz9fh5XmOUsw M41LLdBOOVDtUP3GD/Yua7TXyDCOADfQskldLU1/5dv5n65m/JkOfQsm8dytPU5r BTAzkAa/lfpMHAbdKZ7r+1O0yLpRpYImy4712t8pFy/v5nBSk8U3/pOjBZgAwpQx 6Kxdv3925TC6jzFgLDmzGWOoUfd7hWSJYja2tJoPU9Kjfho1Jnknus2Ia29YTWTN l/2PKqWH1DIXmWiHbAyty1gSInEK+PA9JuqYiRkQYxoPDy2cEQ+XL+sf1+3rKTpp 00PFlJcTgTZhSxt43qqN8bei4SHVXOM= -----END CERTIFICATE-----Generated at Sat Apr 12 18:44:27 2025 by rpki-client