$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ced76a77-e853-3b99-a16f-f047bf73a04c.roa File: ced76a77-e853-3b99-a16f-f047bf73a04c.roa (raw, json) Hash identifier: PBfDflTaVrFLlcJQyrRPnBVxWtsYQ7N4WTdOOtoOTzI= Subject key identifier: EF:21:BE:1F:DF:8A:25:56:01:0E:4F:E2:F5:4E:B4:D8:67:71:66:11 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584900216835703079A0222A4B80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ced76a77-e853-3b99-a16f-f047bf73a04c.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 399439 IP address blocks: 208.53.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:68:35:70:30:79:a0:22:2a:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=8b65e0b7-72d1-4ab4-8a25-facfdc8c6992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:37:a5:ed:5e:51:99:b4:5c:01:cc:e0:5a: 8c:9d:13:43:d1:a1:db:e3:dd:a6:f6:31:72:88:4b: c4:dc:9c:d1:43:be:03:d2:6b:70:4c:cf:58:10:73: 7c:18:ec:0c:9c:20:8c:fc:49:f6:50:e9:1f:c6:71: 12:20:19:cd:8b:f4:13:29:a2:e9:32:d4:af:a5:9e: d3:14:bd:ff:44:72:9a:4f:34:9e:04:f6:d7:97:f8: 99:37:a5:be:13:aa:6f:92:da:47:60:c0:d0:c4:80: 4d:9f:2b:3d:20:16:3e:82:1c:26:7b:aa:14:bf:38: 70:15:de:7d:5f:d6:8b:21:2b:26:4c:c7:b9:f1:ff: d7:c3:99:4d:76:56:62:9f:af:ee:65:c0:a9:54:ec: 67:61:52:bc:48:e2:82:02:a6:90:bb:93:a8:3d:d4: a1:b2:a5:77:81:bd:9a:94:6f:5f:3a:62:1b:6a:f8: 49:12:a3:2c:a4:aa:08:16:8e:b0:94:e1:83:36:16: b3:66:76:cb:82:4e:b2:bc:73:8c:77:66:61:82:dc: 82:74:27:de:30:71:0c:f5:b0:ad:71:6f:ce:25:dd: f7:20:b0:ce:8e:bb:f9:d2:48:5c:88:e4:0f:8f:64: 9f:fe:f4:a1:0e:3e:e5:d2:e4:8e:67:13:15:dd:86: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:21:BE:1F:DF:8A:25:56:01:0E:4F:E2:F5:4E:B4:D8:67:71:66:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ced76a77-e853-3b99-a16f-f047bf73a04c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2c:a4:76:e7:c6:ec:96:58:8e:75:c6:59:46:84:2c:5e:40: 65:4a:2f:4c:a1:f4:8d:58:01:ff:da:bb:85:a4:b6:db:f6:24: 82:fe:bf:3a:a2:4e:09:e6:51:1d:25:83:28:d6:00:c5:ea:2a: c2:c8:43:60:70:24:ee:af:3f:b5:b1:9d:91:20:be:00:94:88: 13:5b:6c:61:e9:84:04:12:bf:34:09:62:7f:61:2d:f9:2e:bc: a3:65:f6:6e:2b:80:65:af:f9:b8:80:f7:81:84:91:2f:91:c8: 6a:2b:a8:92:53:b5:09:98:a9:7e:96:ed:f1:e0:3e:81:7b:15: e7:bd:32:44:3f:9f:c6:72:20:4d:36:5a:10:cc:68:dd:19:ec: 99:72:41:1e:43:4b:93:6b:10:56:25:6a:8b:06:dc:16:7d:60: 54:e2:0c:91:4a:a8:01:df:de:f8:f6:ab:f3:37:79:db:62:48: db:7d:ce:e3:1a:63:dc:89:c6:87:97:d7:7e:df:4d:1b:49:39: 2b:b0:07:08:af:e4:4f:e0:67:1c:a9:c1:d0:0b:d0:84:36:3d: d3:f5:b5:3f:0c:59:1b:55:3e:71:52:f2:a7:86:e8:30:12:ac: d6:98:21:60:e3:15:4c:0a:15:ae:80:8f:0a:d6:03:a9:b5:42: 33:f3:e7:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWg1cDB5oCIqS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk OGI2NWUwYjctNzJkMS00YWI0LThhMjUtZmFjZmRjOGM2OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv03pe1eUZm0XAHM4FqMnRND0aHb492m9jFy iEvE3JzRQ74D0mtwTM9YEHN8GOwMnCCM/En2UOkfxnESIBnNi/QTKaLpMtSvpZ7T FL3/RHKaTzSeBPbXl/iZN6W+E6pvktpHYMDQxIBNnys9IBY+ghwme6oUvzhwFd59 X9aLISsmTMe58f/Xw5lNdlZin6/uZcCpVOxnYVK8SOKCAqaQu5OoPdShsqV3gb2a lG9fOmIbavhJEqMspKoIFo6wlOGDNhazZnbLgk6yvHOMd2ZhgtyCdCfeMHEM9bCt cW/OJd33ILDOjrv50khciOQPj2Sf/vShDj7l0uSOZxMV3Ya5jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8hvh/fiiVWAQ5P4vVOtNhncWYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2VkNzZhNzctZTg1My0z Yjk5LWExNmYtZjA0N2JmNzNhMDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQspHbnxuyWWI51xllGhCxeQGVKL0yh9I1YAf/au4Wkttv2JIL+vzqi TgnmUR0lgyjWAMXqKsLIQ2BwJO6vP7WxnZEgvgCUiBNbbGHphAQSvzQJYn9hLfku vKNl9m4rgGWv+biA94GEkS+RyGorqJJTtQmYqX6W7fHgPoF7Fee9MkQ/n8ZyIE02 WhDMaN0Z7JlyQR5DS5NrEFYlaosG3BZ9YFTiDJFKqAHf3vj2q/M3edtiSNt9zuMa Y9yJxoeX137fTRtJOSuwBwiv5E/gZxypwdAL0IQ2PdP1tT8MWRtVPnFS8qeG6DAS rNaYIWDjFUwKFa6AjwrWA6m1QjPz5yM= -----END CERTIFICATE-----Generated at Fri Mar 14 11:06:53 2025 by rpki-client