$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/49082d3e-7584-364a-9da5-2646622120e1.roa File: 49082d3e-7584-364a-9da5-2646622120e1.roa (raw, json) Hash identifier: AvCCI63JJSAGHAaMVn5nWTE4GGLt+9trmCRqUXxV+tY= Subject key identifier: 87:AE:C0:12:E0:1E:19:E7:4A:E6:5E:93:0E:8C:93:D9:CE:CD:A3:E7 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285848467ABDD421939D060A44A480 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/49082d3e-7584-364a-9da5-2646622120e1.roa Signing time: Sat 21 Dec 2024 02:00:39 +0000 ROA not before: Sat 21 Dec 2024 02:00:39 +0000 ROA not after: Fri 21 Mar 2025 01:00:39 +0000 asID: 25732 IP address blocks: 208.53.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:46:7a:bd:d4:21:93:9d:06:0a:44:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 21 02:00:39 2024 GMT Not After : Mar 21 01:00:39 2025 GMT Subject: CN=e91616e2-717b-4942-aa76-9fcec9a4ed0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fe:dd:ca:5a:8d:2a:82:63:70:f4:91:4a:78: 14:e9:92:3e:a4:2c:cf:a3:c5:e8:82:9a:af:f6:f4: 76:b6:77:dd:08:4c:51:88:7e:15:ba:00:3d:1c:83: 76:37:08:a7:4f:3b:51:75:44:d6:46:da:42:6d:e7: 83:d1:74:ba:b0:80:44:e0:31:25:b4:20:cc:54:8f: e0:f5:90:32:50:8d:12:61:3d:f8:fa:bd:89:45:ef: e7:6b:98:23:1d:d7:e3:e0:6c:42:0a:3c:e9:2b:c2: 98:a4:cc:f5:c2:62:4e:20:c1:f7:8a:e7:4b:db:30: 5d:d4:89:9f:ea:52:c0:58:66:94:7c:62:21:e7:0e: ac:c4:74:b6:b3:5a:e7:e2:a4:a5:10:39:12:46:9f: 58:31:96:27:bd:78:68:60:da:25:db:9d:32:90:de: ae:ac:62:e8:b0:a6:76:ff:bc:e1:cb:22:59:40:03: c1:2a:5d:a7:56:cf:a0:0b:41:7b:8e:c1:a7:85:28: dc:0a:9f:b8:30:c1:7a:ce:9c:9d:37:37:25:f3:46: 22:70:68:f4:46:5f:22:3f:9f:8c:77:85:15:96:2c: 0f:7b:58:0b:af:2b:c4:c4:63:92:d1:80:85:1c:9e: 37:b5:39:ca:fe:b0:7d:c6:20:c2:85:97:ac:e0:63: f4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AE:C0:12:E0:1E:19:E7:4A:E6:5E:93:0E:8C:93:D9:CE:CD:A3:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/49082d3e-7584-364a-9da5-2646622120e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:ae:1f:e9:f0:9a:c5:36:b1:cb:da:43:5d:51:f0:10:f3:db: 50:eb:41:80:39:ef:ac:c8:93:1a:ba:0c:3d:97:9b:44:66:cb: 8c:87:56:29:43:31:1f:bc:22:23:7d:42:d7:58:d0:68:5f:ae: 50:18:2e:5a:66:43:8a:8b:8c:74:31:87:2e:86:3b:fd:84:b3: 2a:d2:13:7a:90:5c:57:78:b1:5b:ad:7d:38:a8:64:a6:15:f6: 59:15:64:12:28:a8:cd:d3:7a:c1:19:e3:8a:c9:14:82:94:46: 9e:00:60:3f:32:a3:12:1b:25:9a:4e:72:d6:de:fd:00:95:44: a3:20:2a:a7:1a:15:0b:d0:88:ed:11:9b:46:6a:76:5e:72:3b: 19:2c:29:9e:37:f5:dc:f4:78:c6:af:9b:ac:4d:09:7e:3d:de: 52:47:08:22:1c:d0:93:b6:56:29:7a:85:64:74:c5:4e:0b:ef: 57:ad:e2:06:da:08:c7:1c:c9:ff:ba:d3:5b:3e:aa:5d:8e:56: c6:64:9e:39:3d:23:69:64:36:57:14:5f:76:70:56:39:ba:1c: 3c:93:6b:7b:4e:80:80:4e:f0:9a:d4:f0:3e:3a:ea:de:fb:61: 96:02:b7:25:86:13:06:53:d2:8f:5c:07:c1:f7:46:87:af:c8: 76:a0:96:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGer3UIZOdBgpEpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTkxNjE2ZTItNzE3Yi00OTQyLWFhNzYtOWZjZWM5YTRlZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP7dylqNKoJjcPSRSngU6ZI+pCzPo8Xogpqv 9vR2tnfdCExRiH4VugA9HIN2NwinTztRdUTWRtpCbeeD0XS6sIBE4DEltCDMVI/g 9ZAyUI0SYT34+r2JRe/na5gjHdfj4GxCCjzpK8KYpMz1wmJOIMH3iudL2zBd1Imf 6lLAWGaUfGIh5w6sxHS2s1rn4qSlEDkSRp9YMZYnvXhoYNol250ykN6urGLosKZ2 /7zhyyJZQAPBKl2nVs+gC0F7jsGnhSjcCp+4MMF6zpydNzcl80YicGj0Rl8iP5+M d4UVliwPe1gLryvExGOS0YCFHJ43tTnK/rB9xiDChZes4GP0CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeuwBLgHhnnSuZekw6Mk9nOzaPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNDkwODJkM2UtNzU4NC0z NjRhLTlkYTUtMjY0NjYyMjEyMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+uH+nwmsU2scvaQ11R8BDz21DrQYA576zIkxq6DD2Xm0Rmy4yHVilD MR+8IiN9QtdY0GhfrlAYLlpmQ4qLjHQxhy6GO/2EsyrSE3qQXFd4sVutfTioZKYV 9lkVZBIoqM3TesEZ44rJFIKURp4AYD8yoxIbJZpOctbe/QCVRKMgKqcaFQvQiO0R m0Zqdl5yOxksKZ439dz0eMavm6xNCX493lJHCCIc0JO2Vil6hWR0xU4L71et4gba CMccyf+601s+ql2OVsZknjk9I2lkNlcUX3ZwVjm6HDyTa3tOgIBO8JrU8D466t77 YZYCtyWGEwZT0o9cB8H3RoevyHagllA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:33 2025 by rpki-client