$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa File: a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa (raw, json) Hash identifier: 9h9w0ON9cTlLvJdjxEkyjiOm05JQEGR/XMyRPnS8p5c= Subject key identifier: 4C:A5:60:53:F5:20:D6:44:0E:D5:34:FB:70:C2:46:FA:AA:75:D7:07 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F432858484D759AC38520367BC7EE6100 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa Signing time: Mon 23 Dec 2024 14:00:51 +0000 ROA not before: Mon 23 Dec 2024 14:00:51 +0000 ROA not after: Sun 23 Mar 2025 13:00:51 +0000 asID: 398465 IP address blocks: 208.58.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:75:9a:c3:85:20:36:7b:c7:ee:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Dec 23 14:00:51 2024 GMT Not After : Mar 23 13:00:51 2025 GMT Subject: CN=4ac0ab21-130a-4bcd-9f10-6cc2fdfb7048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:3e:5c:7c:4b:70:d5:ec:66:80:aa:21:8b: 26:e2:d0:2f:4d:a8:59:7c:54:b1:d0:7a:54:d8:58: 93:ba:31:6d:22:43:70:70:a9:6a:61:66:2e:7b:44: 1f:88:27:d5:07:26:b4:ce:d5:57:6b:4f:4b:ed:76: eb:69:fe:39:cf:e1:fe:90:6f:18:27:6a:97:4a:96: 00:98:7a:de:9e:87:2a:67:44:77:ed:ba:72:6c:16: 99:b4:7a:1c:3f:a8:10:ef:02:0a:03:02:3b:5c:83: a2:ce:39:bb:30:22:a7:1b:8b:e5:37:ad:f0:b3:54: 17:6c:c2:ec:78:83:76:a1:e7:d1:4d:14:00:54:d3: d8:aa:09:1e:a8:ec:50:58:50:be:37:95:18:b2:f4: bd:8b:f1:ac:49:64:2d:d2:08:95:b1:60:d4:73:09: 9c:e7:81:be:c2:79:95:6c:6c:61:39:1b:e8:9c:45: a9:c8:d1:6f:66:40:da:6c:9e:ca:9c:86:09:4d:e9: 72:b2:3f:f9:42:05:31:24:2c:83:0b:09:82:27:f9: 95:0b:3a:d4:1b:3c:7c:5b:9a:5f:c1:c7:fd:0d:8b: 1e:88:83:eb:34:2e:62:8e:c8:ef:2f:06:ce:57:69: 18:ee:26:14:19:fe:3a:df:78:d2:d9:f4:bb:39:ca: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A5:60:53:F5:20:D6:44:0E:D5:34:FB:70:C2:46:FA:AA:75:D7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 208.58.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:93:f2:cd:f2:d6:a1:8d:2f:bf:e5:20:61:a3:7b:e4:44:de: af:e9:f7:07:0a:a0:5e:69:f6:b0:0b:2a:c9:b0:ac:17:f6:00: 7c:ca:d8:d7:0d:34:ff:c2:6d:2c:ba:25:66:82:da:c5:63:d9: 69:41:bd:d7:08:6c:c9:28:81:3b:fa:e5:6a:4e:ac:5a:50:89: 2c:50:bb:d7:ad:a7:99:0a:71:d2:9f:e3:8a:46:6b:42:f6:e4: a5:e9:d0:77:0d:e9:c6:73:1f:30:02:50:5a:d8:e8:7d:8e:36: e3:22:8b:b1:27:7b:1b:f4:d4:af:4b:45:5a:34:0a:9b:92:32: 07:90:4a:21:ab:1c:39:b9:ba:08:ab:dc:3f:fa:89:92:bd:da: 41:c7:e9:3c:5a:23:29:15:38:fe:d6:18:b7:8d:4b:2f:51:c3: 6a:ee:c5:32:63:82:ba:64:fe:ab:01:4e:7a:63:70:cf:81:05: a3:08:69:93:44:98:3c:2c:19:e3:00:d3:37:a4:58:52:29:8f: 1c:fa:02:c8:b9:13:c7:c3:29:6f:36:25:58:5f:04:af:fd:06: c5:38:67:c3:28:b4:58:8e:38:a0:81:85:4d:78:64:d3:39:59: 6f:c3:27:57:04:ee:ea:8b:8f:7f:5a:b6:2a:24:80:63:6d:62: ca:d2:e0:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdZrDhSA2e8fuYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk NGFjMGFiMjEtMTMwYS00YmNkLTlmMTAtNmNjMmZkZmI3MDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUs+XHxLcNXsZoCqIYsm4tAvTahZfFSx0HpU 2FiTujFtIkNwcKlqYWYue0QfiCfVBya0ztVXa09L7Xbraf45z+H+kG8YJ2qXSpYA mHrenocqZ0R37bpybBaZtHocP6gQ7wIKAwI7XIOizjm7MCKnG4vlN63ws1QXbMLs eIN2oefRTRQAVNPYqgkeqOxQWFC+N5UYsvS9i/GsSWQt0giVsWDUcwmc54G+wnmV bGxhORvonEWpyNFvZkDabJ7KnIYJTelysj/5QgUxJCyDCwmCJ/mVCzrUGzx8W5pf wcf9DYseiIPrNC5ijsjvLwbOV2kY7iYUGf4633jS2fS7OconrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEylYFP1INZEDtU0+3DCRvqqddcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYTdjYjQxNDktZWE4Yi0z ZDBlLTgwNzItMWU1ZmNlMjdjNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaT8s3y1qGNL7/lIGGje+RE3q/p9wcKoF5p9rALKsmwrBf2AHzK2NcN NP/CbSy6JWaC2sVj2WlBvdcIbMkogTv65WpOrFpQiSxQu9etp5kKcdKf44pGa0L2 5KXp0HcN6cZzHzACUFrY6H2ONuMii7Enexv01K9LRVo0CpuSMgeQSiGrHDm5ugir 3D/6iZK92kHH6TxaIykVOP7WGLeNSy9Rw2ruxTJjgrpk/qsBTnpjcM+BBaMIaZNE mDwsGeMA0zekWFIpjxz6Asi5E8fDKW82JVhfBK/9BsU4Z8MotFiOOKCBhU14ZNM5 WW/DJ1cE7uqLj39atiokgGNtYsrS4HM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:44 2025 by rpki-client