$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa File: 240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa (raw, json) Hash identifier: /Swn3RLU2SAX/ruKGncRWiI09h6ZAq+pfrYakTIiNW8= Subject key identifier: D0:23:B1:BF:7C:93:5F:15:EC:7D:09:07:92:D0:86:00:D7:3A:D5:15 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858489E5282A8AE40F773EFC24280 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa Signing time: Tue 21 Jan 2025 13:10:51 +0000 ROA not before: Tue 21 Jan 2025 13:10:51 +0000 ROA not after: Mon 21 Apr 2025 12:10:51 +0000 asID: 40509 IP address blocks: 204.8.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:52:82:a8:ae:40:f7:73:ef:c2:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jan 21 13:10:51 2025 GMT Not After : Apr 21 12:10:51 2025 GMT Subject: CN=6a14984c-320a-4e89-8571-b7a0cf3ddc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b6:4e:5a:4c:6b:58:53:8b:40:e6:65:79:13: 83:93:de:09:92:da:ce:4d:25:8a:86:fe:1c:ab:8b: 0f:cd:8e:e7:9d:ca:61:75:37:92:f4:21:31:85:8b: 89:dd:21:66:51:df:af:6b:8c:e4:9b:22:a0:ba:c9: 97:19:1d:e0:9c:31:16:13:15:56:5f:c9:cc:b6:45: b8:3d:c6:79:6d:10:a1:95:8d:79:24:c4:9c:9c:3b: be:b1:58:5a:ba:dc:a1:e2:fa:e2:bb:fa:c4:ba:52: 12:d7:c3:98:f3:55:46:fe:7b:56:b9:f7:30:cc:fd: 4c:f4:07:b0:2c:76:d0:0e:da:7a:c5:9b:18:ec:f6: 52:d1:98:fa:3e:1e:b9:3e:2e:cb:31:c1:bf:ac:28: 3f:67:bd:3e:4a:81:f3:23:a8:35:4a:f4:8b:7e:22: d9:33:d9:13:25:28:0b:3d:4e:1e:a1:cd:26:83:ac: 1f:fd:b4:c3:50:e7:9f:90:e3:1e:81:7f:12:37:49: a0:13:96:a2:7d:4b:e3:e6:e0:5f:35:4d:9c:7c:e1: 5e:64:c6:14:c0:49:57:c0:64:da:72:0a:f6:7c:60: 57:4b:1b:d3:ba:b4:1d:75:71:e0:31:61:24:fd:fe: 9a:61:4f:cc:b5:d1:38:96:7b:0e:34:d1:e8:a4:03: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:23:B1:BF:7C:93:5F:15:EC:7D:09:07:92:D0:86:00:D7:3A:D5:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 204.8.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:22:4a:16:27:17:79:92:d1:eb:87:d1:e4:cf:03:ba:9d:06: 85:7a:2e:e6:bf:e6:64:f1:4b:66:02:64:57:a1:98:f9:90:e5: 63:b4:93:72:55:65:61:7c:37:76:f0:53:16:b8:b9:1c:1a:2e: 1f:1f:3b:7c:44:aa:c2:53:60:e8:37:29:a6:7e:94:7e:5b:46: 03:5c:43:fd:73:12:03:8d:f4:e9:f4:15:fe:ba:95:10:7f:ff: fd:ce:ff:17:f5:7d:7f:3c:e3:9a:7e:21:b0:54:48:ef:12:80: e5:f2:96:07:f8:65:1c:19:b2:07:a0:81:67:21:19:a6:05:15: b9:44:c4:da:30:49:1b:f0:10:e3:91:e8:ca:c4:04:65:82:e0: b4:13:dd:d9:42:8d:d0:f8:7f:04:a1:4f:4f:89:45:a9:bb:c1: 01:14:41:f4:62:8d:60:4e:4c:47:55:85:47:f2:c8:bc:7b:ca: d1:32:52:f8:17:4c:a4:36:fc:19:7b:b5:d7:85:2f:cd:42:20: 67:6c:fd:d9:9c:5d:15:9a:d0:93:bb:68:c8:ca:6f:3d:13:3b: 40:74:28:59:13:70:d0:28:5c:95:34:9c:82:c0:9d:d5:a5:21: d0:9a:95:ce:19:30:21:46:1f:cd:e4:a7:47:97:f8:8a:5f:22: cc:6c:11:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEieUoKorkD3c+/CQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDEyMTEzMTA1MVoXDTI1MDQyMTEyMTA1MVowLzEtMCsGA1UEAxMk NmExNDk4NGMtMzIwYS00ZTg5LTg1NzEtYjdhMGNmM2RkYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbZOWkxrWFOLQOZleRODk94JktrOTSWKhv4c q4sPzY7nncphdTeS9CExhYuJ3SFmUd+va4zkmyKgusmXGR3gnDEWExVWX8nMtkW4 PcZ5bRChlY15JMScnDu+sVhautyh4vriu/rEulIS18OY81VG/ntWufcwzP1M9Aew LHbQDtp6xZsY7PZS0Zj6Ph65Pi7LMcG/rCg/Z70+SoHzI6g1SvSLfiLZM9kTJSgL PU4eoc0mg6wf/bTDUOefkOMegX8SN0mgE5aifUvj5uBfNU2cfOFeZMYUwElXwGTa cgr2fGBXSxvTurQddXHgMWEk/f6aYU/MtdE4lnsONNHopAPZ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAjsb98k18V7H0JB5LQhgDXOtUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMjQwYmU2YWYtYWFkZi0z ZjI0LWJlYmUtOWVhMzhhMGE2YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIiShYnF3mS0euH0eTPA7qdBoV6Lua/5mTxS2YCZFehmPmQ5WO0k3JV ZWF8N3bwUxa4uRwaLh8fO3xEqsJTYOg3KaZ+lH5bRgNcQ/1zEgON9On0Ff66lRB/ //3O/xf1fX8845p+IbBUSO8SgOXylgf4ZRwZsgeggWchGaYFFblExNowSRvwEOOR 6MrEBGWC4LQT3dlCjdD4fwShT0+JRam7wQEUQfRijWBOTEdVhUfyyLx7ytEyUvgX TKQ2/Bl7tdeFL81CIGds/dmcXRWa0JO7aMjKbz0TO0B0KFkTcNAoXJU0nILAndWl IdCalc4ZMCFGH83kp0eX+IpfIsxsEdE= -----END CERTIFICATE-----Generated at Sun Feb 2 15:55:15 2025 by rpki-client