$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bac3beef-e8a6-39b1-9473-0951235b352a.roa File: bac3beef-e8a6-39b1-9473-0951235b352a.roa (raw, json) Hash identifier: 32bB30Dln6v+dojw953MQqxNPc/ObyR5HSFzeYbi4hM= Subject key identifier: D4:8A:D5:BE:10:2F:C4:BA:E5:3A:03:11:EF:57:F8:E5:62:FC:89:06 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584851A5839DDCF38A78530EBA80 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bac3beef-e8a6-39b1-9473-0951235b352a.roa Signing time: Wed 25 Dec 2024 02:00:38 +0000 ROA not before: Wed 25 Dec 2024 02:00:38 +0000 ROA not after: Tue 25 Mar 2025 01:00:38 +0000 asID: 396494 IP address blocks: 208.58.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:a5:83:9d:dc:f3:8a:78:53:0e:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Dec 25 02:00:38 2024 GMT Not After : Mar 25 01:00:38 2025 GMT Subject: CN=9d67f951-fda8-4a50-a066-56ca4a2cfb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:4d:99:a6:9f:2d:c3:d0:de:7f:38:46:8f: 7c:92:f1:17:d2:03:22:17:34:fa:9d:47:a3:e5:39: 22:ce:fd:f7:8d:dc:02:03:dc:58:ae:ed:a8:ca:35: 5b:9b:c2:56:3b:2d:9e:b1:bf:7a:22:c4:f6:0e:e9: ba:eb:a5:da:e5:8e:6a:ff:14:1d:7c:e0:ed:de:09: 57:83:a4:67:bb:00:1b:93:15:62:72:0b:06:19:a3: fe:22:d9:d6:dc:e9:1d:dc:f4:74:fa:fd:b0:ab:95: 25:b8:ce:29:47:bc:c3:a8:ef:f9:1c:8f:a4:2e:5e: 63:0a:5a:f1:0a:a7:b2:93:a6:b8:df:cc:db:1e:e4: fd:a1:c3:77:2f:1a:44:bd:03:89:9a:33:e2:4e:ee: b9:d2:8d:83:64:ef:b9:b8:1c:ae:c2:9a:cb:25:93: 71:48:23:4d:02:d8:a6:ec:86:40:0c:4b:cf:4d:7e: 42:05:64:69:ac:fe:d7:a8:f9:b5:d7:3f:97:38:1a: c0:0f:31:8a:d0:94:76:5f:d4:c1:47:46:bc:4c:0b: 3a:f0:f4:6a:cb:e8:2a:e5:fb:b2:f3:5c:fe:87:ef: d8:fe:b4:1e:8c:cc:22:67:65:3e:a9:4f:6e:0b:68: 51:78:c3:6f:b9:54:bd:af:ea:e6:04:ad:2e:63:fc: 64:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8A:D5:BE:10:2F:C4:BA:E5:3A:03:11:EF:57:F8:E5:62:FC:89:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bac3beef-e8a6-39b1-9473-0951235b352a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 208.58.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:fb:fd:fd:a6:20:49:88:2f:00:90:9e:c0:8d:cd:58:d8:fd: 5e:62:63:e9:2c:36:1e:9e:31:d0:30:a1:23:e0:96:db:c0:d2: 35:ca:d2:d7:f0:ce:59:50:0b:90:76:41:dd:6d:f6:26:ed:7d: a4:9f:e3:24:2a:55:0e:26:36:96:f9:f9:b1:b5:85:3c:81:13: 60:e8:79:ad:96:66:56:89:99:4a:6b:ed:56:2b:6a:50:42:6d: a3:58:e5:c7:44:31:80:67:ab:79:63:91:36:da:a7:95:56:59: 34:09:9d:ba:16:dc:9f:a2:06:fb:44:cd:68:e1:05:f0:40:53: 1f:5a:d3:77:c1:bc:7f:e6:42:7c:e0:fb:df:ca:e2:d2:fb:b3: 88:2d:47:58:b8:f1:05:29:4b:91:80:1a:18:96:40:94:28:53: d0:74:64:17:a4:58:64:2d:6f:de:c6:27:92:c5:b1:40:a6:70: 7b:02:9b:79:4e:e1:90:6a:c0:a6:58:18:69:33:7c:3d:b9:cd: 13:c7:33:af:c9:86:61:88:e2:bb:dd:b8:ba:ed:90:ca:d9:35: 6c:65:21:1c:98:4d:eb:26:e7:c0:77:a6:61:96:67:5c:81:7e: 27:23:8d:4a:3a:10:51:f8:cf:47:2a:2f:67:b8:42:07:9b:6b: 1d:4f:52:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpYOd3POKeFMOuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk OWQ2N2Y5NTEtZmRhOC00YTUwLWEwNjYtNTZjYTRhMmNmYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1BNmaafLcPQ3n84Ro98kvEX0gMiFzT6nUej 5Tkizv33jdwCA9xYru2oyjVbm8JWOy2esb96IsT2Dum666Xa5Y5q/xQdfODt3glX g6RnuwAbkxVicgsGGaP+ItnW3Okd3PR0+v2wq5UluM4pR7zDqO/5HI+kLl5jClrx Cqeyk6a438zbHuT9ocN3LxpEvQOJmjPiTu650o2DZO+5uByuwprLJZNxSCNNAtim 7IZADEvPTX5CBWRprP7XqPm11z+XOBrADzGK0JR2X9TBR0a8TAs68PRqy+gq5fuy 81z+h+/Y/rQejMwiZ2U+qU9uC2hReMNvuVS9r+rmBK0uY/xk1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSK1b4QL8S65ToDEe9X+OVi/IkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYmFjM2JlZWYtZThhNi0z OWIxLTk0NzMtMDk1MTIzNWIzNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DpOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/7/f2mIEmILwCQnsCNzVjY/V5iY+ksNh6eMdAwoSPgltvA0jXK0tfw zllQC5B2Qd1t9ibtfaSf4yQqVQ4mNpb5+bG1hTyBE2Doea2WZlaJmUpr7VYralBC baNY5cdEMYBnq3ljkTbap5VWWTQJnboW3J+iBvtEzWjhBfBAUx9a03fBvH/mQnzg +9/K4tL7s4gtR1i48QUpS5GAGhiWQJQoU9B0ZBekWGQtb97GJ5LFsUCmcHsCm3lO 4ZBqwKZYGGkzfD25zRPHM6/JhmGI4rvduLrtkMrZNWxlIRyYTesm58B3pmGWZ1yB ficjjUo6EFH4z0cqL2e4Qgebax1PUk0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:39 2025 by rpki-client