$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa File: 7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa (raw, json) Hash identifier: 7cA6RmJMMGNFjyHSqoCxHMQGmfydImiGaiLSy4S7Unw= Subject key identifier: 39:38:ED:95:D4:62:08:8F:5B:18:41:55:98:BE:8E:4D:05:F5:9B:FE Certificate issuer: /CN=db859a2a-df82-4532-a984-71176499699e Certificate serial: 010D0C9F432858482D5A919C0E31DD18DCE1EDC9 Authority key identifier: FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 16509 IP address blocks: 208.83.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:91:9c:0e:31:dd:18:dc:e1:ed:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db859a2a-df82-4532-a984-71176499699e Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=9516ca88-1590-4cd4-860e-3375e5da5c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0a:76:14:f5:36:15:95:46:65:57:8b:2f:d9: d5:7a:fa:b3:b2:55:a8:d3:7e:fa:c2:00:20:2f:bb: 1a:e3:f3:55:8e:3a:1c:bd:ba:1f:50:b0:af:0f:30: e6:b9:3d:65:92:21:1e:3a:73:3d:d3:62:7e:39:86: 43:56:83:3c:10:46:46:0f:8b:b3:38:b8:3b:71:2d: 46:89:bf:c9:d9:08:e2:95:ef:ca:5c:0e:a3:27:0e: 4a:e9:e1:32:49:23:7e:5d:39:39:11:fc:f0:7a:c7: 48:24:c1:a2:e0:17:e6:4a:55:6c:2c:d4:22:74:a3: 5c:49:fd:c3:b0:2d:27:6a:0d:31:d0:3d:0b:10:73: 0b:02:3d:3f:ff:67:ce:d8:65:95:16:9f:58:11:1f: 4d:21:e4:b9:6d:32:c5:2b:a0:d0:d3:24:25:64:f4: 8e:45:8c:f2:a2:b5:18:a8:ee:b7:0a:75:10:f6:fb: e9:1f:84:24:7d:40:bc:00:c6:88:d4:77:56:44:d9: 81:06:b4:34:05:b4:cd:eb:0b:97:46:f1:55:64:0e: 8a:54:e7:3e:d5:0f:9a:ae:f6:63:95:63:47:45:37: 1d:a0:06:a4:9b:97:89:0e:ec:d1:25:e7:0c:ef:3f: d9:88:43:05:5c:43:ac:d6:4a:d4:2c:7d:21:b7:cf: 92:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:38:ED:95:D4:62:08:8F:5B:18:41:55:98:BE:8E:4D:05:F5:9B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl X509v3 Authority Key Identifier: keyid:FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer sbgp-ipAddrBlock: critical IPv4: 208.83.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:27:d8:2e:90:1f:f8:e1:64:7c:cf:53:42:7b:36:74:c7:51: 84:d6:33:ce:d4:7b:0a:1d:c1:54:e5:94:ea:bb:5c:99:96:e2: c0:44:98:2d:4b:c2:fd:0b:7f:a6:f2:94:a2:ea:ed:f2:28:90: 01:4f:ff:fa:d4:14:ba:3f:97:98:67:c0:64:79:d7:a8:c0:59: 50:2b:7f:ea:04:0c:4b:ce:c3:4a:bc:5e:89:9e:3a:53:fe:2d: d6:49:09:3e:18:61:94:45:19:ed:9f:30:7e:67:3a:2c:f0:ad: ab:68:56:c3:d3:7a:3b:2d:fe:7a:1f:ec:f1:64:8c:56:64:f5: 57:fe:c3:d3:92:92:b3:b6:16:06:de:84:bb:5a:0f:b0:4d:52: 1e:01:cf:fe:45:df:3f:28:a0:8f:5f:a5:85:11:4a:3f:09:b0: 85:df:79:8e:8a:f5:9d:44:74:ba:dc:bf:48:3a:38:49:e1:e5: 8b:17:27:bc:0b:71:cd:f0:54:6e:fc:d4:c2:e5:1c:e4:76:4d: 46:62:e8:ce:6f:34:40:65:8f:bd:9c:8e:cc:7d:dd:82:59:ef: d1:fa:88:01:a1:f2:09:3c:4a:77:f2:e2:bc:20:88:b7:4a:ae: 1b:3c:ca:99:07:27:ae:e7:20:ee:f4:0b:ad:55:bd:20:e0:6b: 23:90:75:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWpGcDjHdGNzh7ckwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI4NTlhMmEtZGY4Mi00NTMyLWE5ODQtNzExNzY0OTk2 OTllMB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk OTUxNmNhODgtMTU5MC00Y2Q0LTg2MGUtMzM3NWU1ZGE1YzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAp2FPU2FZVGZVeLL9nVevqzslWo0376wgAg L7sa4/NVjjocvbofULCvDzDmuT1lkiEeOnM902J+OYZDVoM8EEZGD4uzOLg7cS1G ib/J2Qjile/KXA6jJw5K6eEySSN+XTk5EfzwesdIJMGi4BfmSlVsLNQidKNcSf3D sC0nag0x0D0LEHMLAj0//2fO2GWVFp9YER9NIeS5bTLFK6DQ0yQlZPSORYzyorUY qO63CnUQ9vvpH4QkfUC8AMaI1HdWRNmBBrQ0BbTN6wuXRvFVZA6KVOc+1Q+arvZj lWNHRTcdoAakm5eJDuzRJecM7z/ZiEMFXEOs1krULH0ht8+S1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk47ZXUYgiPWxhBVZi+jk0F9Zv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1 OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3NjQ5OTY5OWUvN2EzYmU2M2ItNjNjMy0z YTFmLWFiNTItNDM0YTM5ZDc1Yzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGI4NTlhMmEtZGY4Mi00NTMyLWE5 ODQtNzExNzY0OTk2OTllL2RiODU5YTJhLWRmODItNDUzMi1hOTg0LTcxMTc2NDk5 Njk5ZS5jcmwwHwYDVR0jBBgwFoAU/0GuHKgSjWDMIT5f7WFJYq02iV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3 NjQ5OTY5OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FMPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkn2C6QH/jhZHzPU0J7NnTHUYTWM87UewodwVTllOq7XJmW4sBEmC1L wv0Lf6bylKLq7fIokAFP//rUFLo/l5hnwGR516jAWVArf+oEDEvOw0q8XomeOlP+ LdZJCT4YYZRFGe2fMH5nOizwratoVsPTejst/nof7PFkjFZk9Vf+w9OSkrO2Fgbe hLtaD7BNUh4Bz/5F3z8ooI9fpYURSj8JsIXfeY6K9Z1EdLrcv0g6OEnh5YsXJ7wL cc3wVG781MLlHOR2TUZi6M5vNEBlj72cjsx93YJZ79H6iAGh8gk8Snfy4rwgiLdK rhs8ypkHJ67nIO70C61VvSDgayOQdbg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:35 2025 by rpki-client