$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4ed3df11-b22e-31aa-af9a-6ea26dc8f2e8.roa File: 4ed3df11-b22e-31aa-af9a-6ea26dc8f2e8.roa (raw, json) Hash identifier: JON6zRpzoIec2CS3zxgw/XaJptooFXfw7OWeuj6Z6g4= Subject key identifier: C1:BA:AF:92:37:FA:4C:C6:06:7A:3E:51:C2:ED:A0:12:6E:96:D5:0F Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285848451594D1B51BE77EDA90F400 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4ed3df11-b22e-31aa-af9a-6ea26dc8f2e8.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 393417 IP address blocks: 208.53.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:94:d1:b5:1b:e7:7e:da:90:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=55c26251-5fea-491c-bfc5-19b7c9f942bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:d7:bd:63:65:1a:71:63:b6:51:96:6c:5c: f9:5f:ec:93:03:c1:0a:4f:ce:fa:7c:c3:90:21:4d: 61:3c:39:6f:42:c8:40:6e:f0:02:ef:92:d5:b9:43: 55:a2:de:b7:4b:e1:68:6a:2b:f8:59:73:68:1d:ac: 1a:9f:b4:77:c5:68:ea:c6:c6:54:aa:08:ea:65:31: 0d:75:b7:09:9b:c7:60:3f:53:38:85:eb:2c:81:a6: c1:c0:f7:80:3e:08:57:a6:66:62:41:3d:a6:e7:bf: cd:6a:79:7e:45:71:a3:31:68:14:83:cd:8e:32:f3: 8b:b8:b8:7b:03:91:75:dc:6e:ba:6e:3d:03:cd:37: 3f:ab:f5:24:da:f2:65:b5:3a:5d:20:1b:c1:32:81: 76:ab:fd:16:66:34:04:73:ea:18:f3:ce:77:93:e9: b9:fd:ed:c6:48:c4:55:67:d3:68:fa:c1:af:4f:b9: f0:12:f2:5c:5c:95:ce:e0:6f:d4:58:84:e7:fc:89: 08:2c:7f:76:5c:ed:22:1e:e3:e2:43:9b:89:b6:4e: da:41:89:ce:81:c5:7a:05:9b:96:e9:bc:7c:5d:21: d6:43:65:9d:b8:62:f7:cd:e8:a8:c3:37:b8:b4:68: e9:4f:cf:c7:f4:a1:b6:8b:6e:bf:bf:24:fa:fb:6e: b5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BA:AF:92:37:FA:4C:C6:06:7A:3E:51:C2:ED:A0:12:6E:96:D5:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4ed3df11-b22e-31aa-af9a-6ea26dc8f2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a4:ce:6b:6b:da:55:60:6b:66:7f:bb:47:6e:2a:c0:4d:7b: bc:70:86:e0:2e:cf:54:a5:ca:c1:35:c2:28:4c:97:3d:fb:41: b5:75:55:b6:01:00:ed:fa:bc:72:f4:89:15:2b:33:28:9d:16: 20:f5:5f:36:b5:f7:f0:1a:66:35:fe:78:c9:7f:ab:af:51:5b: 7c:be:cb:73:52:99:39:87:dc:6a:94:0d:75:4c:79:3c:e6:e2: 0c:73:13:9d:c6:59:af:92:86:47:26:46:a4:4e:6b:a3:76:63: 9c:80:9e:1d:5a:5e:a0:9b:b9:c0:2c:51:3d:10:5e:2d:3a:0a: 16:09:a2:38:0b:f2:68:7c:96:32:9d:11:46:ae:79:4d:77:30: fa:40:5b:fd:b9:70:5f:79:0b:6d:ec:3e:99:78:94:08:8a:e9: 38:b1:b2:d3:3c:98:32:b8:28:0a:9a:06:d5:ed:d8:f6:69:42: 70:9d:76:40:a3:58:bc:74:76:30:2d:e3:fe:9f:a5:20:30:c1: 48:19:a0:4e:07:9c:88:1b:ec:64:15:12:bb:d2:ca:ee:cc:1e: f0:41:0a:cb:1b:d4:ac:f4:3c:51:81:e1:cc:30:b8:7c:27:2b: d4:cb:c7:09:8f:4b:44:bb:a2:38:64:c7:e9:64:cd:09:11:c7: 4f:14:88:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFZTRtRvnftqQ9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk NTVjMjYyNTEtNWZlYS00OTFjLWJmYzUtMTliN2M5Zjk0MmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjDXvWNlGnFjtlGWbFz5X+yTA8EKT876fMOQ IU1hPDlvQshAbvAC75LVuUNVot63S+Foaiv4WXNoHawan7R3xWjqxsZUqgjqZTEN dbcJm8dgP1M4hessgabBwPeAPghXpmZiQT2m57/Nanl+RXGjMWgUg82OMvOLuLh7 A5F13G66bj0DzTc/q/Uk2vJltTpdIBvBMoF2q/0WZjQEc+oY8853k+m5/e3GSMRV Z9No+sGvT7nwEvJcXJXO4G/UWITn/IkILH92XO0iHuPiQ5uJtk7aQYnOgcV6BZuW 6bx8XSHWQ2WduGL3zeiowze4tGjpT8/H9KG2i26/vyT6+261TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG6r5I3+kzGBno+UcLtoBJultUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNGVkM2RmMTEtYjIyZS0z MWFhLWFmOWEtNmVhMjZkYzhmMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2kzmtr2lVga2Z/u0duKsBNe7xwhuAuz1SlysE1wihMlz37QbV1VbYB AO36vHL0iRUrMyidFiD1Xza19/AaZjX+eMl/q69RW3y+y3NSmTmH3GqUDXVMeTzm 4gxzE53GWa+ShkcmRqROa6N2Y5yAnh1aXqCbucAsUT0QXi06ChYJojgL8mh8ljKd EUaueU13MPpAW/25cF95C23sPpl4lAiK6TixstM8mDK4KAqaBtXt2PZpQnCddkCj WLx0djAt4/6fpSAwwUgZoE4HnIgb7GQVErvSyu7MHvBBCssb1Kz0PFGB4cwwuHwn K9TLxwmPS0S7ojhkx+lkzQkRx08UiJQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:51 2025 by rpki-client