$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa File: 54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa (raw, json) Hash identifier: 8PEUMP5SzpxxROiqFYztlqnMie7xhwCj9+55qDpzuzM= Subject key identifier: 6C:60:5B:12:72:29:92:E4:F1:40:ED:5F:50:40:5F:7F:5B:87:27:E0 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285848451594C423A4F6155939B380 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 13576 IP address blocks: 208.53.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:94:c4:23:a4:f6:15:59:39:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=0cfa8bd2-ab17-4982-a288-6e60214e2523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c1:84:e8:27:de:33:e2:7e:3a:9a:4a:e7:eb: 92:7d:55:69:41:9d:05:ac:84:40:c2:5d:73:24:54: fe:e6:56:fa:97:d5:63:d6:8e:b5:43:d7:9f:54:dd: 01:55:67:b3:4d:e1:b8:e0:f9:23:ac:19:13:93:65: c0:11:28:b4:59:ee:40:60:94:56:d7:86:af:d5:01: 1e:68:f6:74:cf:00:91:2b:e1:f4:a8:d1:da:ff:80: f5:ac:39:f0:bc:d8:29:0f:16:4f:cf:5d:55:f9:f4: 73:c6:24:f0:c6:d1:f7:8a:3c:6b:18:62:67:05:2d: 05:09:8a:76:2d:5c:1f:3f:18:c2:af:09:70:da:45: 96:16:22:5f:dc:29:4c:46:b4:88:c6:a4:d6:72:5d: 8f:a8:07:aa:11:fe:20:9d:df:55:75:8b:19:b5:03: 11:d4:3e:e5:ba:df:70:8c:af:00:26:62:c7:ce:e4: d8:d2:84:fe:2b:c1:d0:2e:19:90:57:d7:9e:2e:3e: e9:62:2b:57:b4:3e:5a:d9:00:d9:eb:5e:46:4e:31: b8:9b:e0:45:d9:b9:ff:cb:f8:ad:8c:87:98:9c:e3: b5:fb:53:f1:07:20:b6:7e:30:67:44:f8:46:ff:1e: e1:42:f9:b3:89:e3:a6:8d:22:2f:9f:89:68:d8:3c: 84:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:60:5B:12:72:29:92:E4:F1:40:ED:5F:50:40:5F:7F:5B:87:27:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:25:fe:a7:66:4d:95:24:ac:85:f7:98:5c:29:c0:56:7d:18: 54:98:01:f5:a2:99:b8:18:59:12:49:8c:5b:41:89:7a:7f:16: 46:62:9d:fc:c5:8c:d9:ee:f1:b3:39:b9:fa:5a:42:e5:df:a3: ae:0e:9e:d4:d6:f0:0c:9a:46:a5:86:cb:29:39:c0:9c:f5:70: a0:83:0f:fa:5e:0c:ea:a9:da:44:5c:c8:24:d9:c0:e5:c1:54: ae:70:3a:0e:f1:b7:27:eb:82:c0:41:a7:d4:0d:0b:f3:f3:33: 00:f4:2b:4a:22:a6:d3:41:94:81:7d:17:48:a9:e7:b8:e4:f9: 50:9f:68:bb:d0:e4:08:00:cc:fb:e4:79:5b:6d:ae:d5:7d:6d: d9:f7:a0:98:81:26:58:82:c4:f8:c5:b8:a8:f7:46:28:c5:0f: 72:71:9b:6a:ed:94:31:80:d2:95:26:2c:78:7d:ea:2a:37:9f: e0:0d:25:8f:14:f1:f6:b0:66:0b:0b:02:a6:bd:5e:4d:e4:b7: 7d:3a:b7:4a:e7:bb:17:fb:b9:74:76:17:30:b9:d1:80:a3:8f: 92:91:7f:d7:c4:e8:73:3a:c3:3b:79:0b:10:60:90:b6:41:4a: ab:5e:b0:20:d5:36:33:ad:6a:ec:7a:05:ae:5e:d5:b6:fe:99: a7:6c:47:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFZTEI6T2FVk5s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk MGNmYThiZDItYWIxNy00OTgyLWEyODgtNmU2MDIxNGUyNTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcGE6CfeM+J+OppK5+uSfVVpQZ0FrIRAwl1z JFT+5lb6l9Vj1o61Q9efVN0BVWezTeG44PkjrBkTk2XAESi0We5AYJRW14av1QEe aPZ0zwCRK+H0qNHa/4D1rDnwvNgpDxZPz11V+fRzxiTwxtH3ijxrGGJnBS0FCYp2 LVwfPxjCrwlw2kWWFiJf3ClMRrSIxqTWcl2PqAeqEf4gnd9VdYsZtQMR1D7lut9w jK8AJmLHzuTY0oT+K8HQLhmQV9eeLj7pYitXtD5a2QDZ615GTjG4m+BF2bn/y/it jIeYnOO1+1PxByC2fjBnRPhG/x7hQvmzieOmjSIvn4lo2DyEKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxgWxJyKZLk8UDtX1BAX39bhyfgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNTQ5MTVhMDAtYTlhYS0z MDc5LTlkODQtZmU1OTFhZDFmZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMl/qdmTZUkrIX3mFwpwFZ9GFSYAfWimbgYWRJJjFtBiXp/FkZinfzF jNnu8bM5ufpaQuXfo64OntTW8AyaRqWGyyk5wJz1cKCDD/peDOqp2kRcyCTZwOXB VK5wOg7xtyfrgsBBp9QNC/PzMwD0K0oiptNBlIF9F0ip57jk+VCfaLvQ5AgAzPvk eVttrtV9bdn3oJiBJliCxPjFuKj3RijFD3Jxm2rtlDGA0pUmLHh96io3n+ANJY8U 8fawZgsLAqa9Xk3kt306t0rnuxf7uXR2FzC50YCjj5KRf9fE6HM6wzt5CxBgkLZB SqtesCDVNjOtaux6Ba5e1bb+madsR+Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:06 2025 by rpki-client