$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ced76a77-e853-3b99-a16f-f047bf73a04c.roa File: ced76a77-e853-3b99-a16f-f047bf73a04c.roa (raw, json) Hash identifier: IV9p1Igy63rq6g02bQX5YqxFGPCmL68+Q/+jkMuBZCI= Subject key identifier: 45:AD:C0:8E:C5:37:C0:93:1A:52:54:41:04:5E:69:45:9F:93:6C:37 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858481F653917EDE73DA921193D80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ced76a77-e853-3b99-a16f-f047bf73a04c.roa Signing time: Sat 07 Dec 2024 02:00:39 +0000 ROA not before: Sat 07 Dec 2024 02:00:39 +0000 ROA not after: Fri 07 Mar 2025 02:00:39 +0000 asID: 399439 IP address blocks: 208.53.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1f:65:39:17:ed:e7:3d:a9:21:19:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 7 02:00:39 2024 GMT Not After : Mar 7 02:00:39 2025 GMT Subject: CN=bab3a5c7-76d5-4446-b8e1-f8a70384b3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b5:f6:d0:6e:cf:44:b9:a7:9d:fd:76:c6:8c: 51:3c:ea:9e:2c:01:97:fd:f3:e7:6c:d9:7b:7c:18: 0b:d0:7c:5d:66:7d:a1:c4:58:e7:90:98:08:95:b4: a2:00:7e:e5:c4:b0:6e:17:f1:e8:b9:c6:df:f1:b5: af:be:82:5f:69:93:a3:83:79:9d:77:55:db:f3:9a: d3:21:f5:1a:04:fe:19:f7:6f:15:aa:58:50:e2:15: 6c:7f:77:fa:2f:f6:d6:ac:08:35:04:cd:13:95:bf: 11:f3:f6:6c:ec:fb:93:5e:99:3f:9e:d7:87:07:a4: db:89:c0:f3:87:f7:79:96:d6:d4:94:74:e4:ff:d2: cc:1c:21:9e:fa:19:72:a1:bd:ba:ec:e0:b8:43:35: 06:6d:52:54:99:d1:4e:4b:e9:09:ef:5a:c5:9a:e6: 7a:08:5e:88:37:6a:06:b5:b8:67:47:80:69:f1:fd: 8c:b6:eb:26:be:65:d9:19:24:2b:2b:9c:2f:fe:5c: 29:2c:c3:8f:e8:98:ef:94:65:2e:67:27:ba:c9:3f: eb:1f:ea:2d:1d:2e:b8:63:f3:d3:67:a8:a5:8c:8e: b0:5f:6c:ce:d8:60:76:aa:82:78:2a:e2:56:5d:b0: 53:66:cf:79:0c:89:5f:de:ef:b9:2b:de:2a:cc:59: a5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AD:C0:8E:C5:37:C0:93:1A:52:54:41:04:5E:69:45:9F:93:6C:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ced76a77-e853-3b99-a16f-f047bf73a04c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:6c:b1:90:6a:fe:26:d1:c9:5e:b5:10:6a:0e:e7:88:0b:10: 13:c3:4b:4b:85:0f:19:5f:23:88:ae:2c:70:d4:2e:a8:4b:45: 40:89:6f:c3:b5:63:c3:59:4a:1d:31:fb:35:c5:74:5e:bb:88: 68:74:08:9a:57:8b:e2:3e:07:1c:a1:f7:a9:89:4a:c3:53:22: e4:f8:71:93:e7:c1:4d:fc:7e:eb:02:37:67:62:09:f9:b5:02: 52:e0:e0:40:ac:a9:c7:b1:bd:ee:bc:49:75:10:7b:21:c1:f6: 7c:4a:60:c1:a9:1a:95:a7:79:40:92:e3:84:b3:ce:ef:b5:2d: 7b:33:81:2d:f1:c0:c6:21:ba:3c:c4:20:35:cc:23:05:89:0c: 93:c9:de:0d:8d:dc:c1:cb:56:1e:ab:64:76:08:20:1d:97:58: 7b:db:86:16:84:dc:7c:78:3b:cd:c1:80:00:12:e9:df:21:56: c6:fd:f4:ec:64:df:85:f7:36:8d:6d:3e:86:9f:ff:bd:db:f7: d7:ab:e0:4c:15:06:48:b4:11:49:4e:54:28:6f:cc:b2:64:f7: 8e:f3:b9:e5:01:09:e6:e1:de:ef:21:01:d7:ad:70:d9:94:14: 23:cd:0c:be:47:f7:2c:5a:a0:0c:9b:9c:01:e6:ab:e2:e1:5a: 42:ad:c9:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTkX7ec9qSEZPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk YmFiM2E1YzctNzZkNS00NDQ2LWI4ZTEtZjhhNzAzODRiM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7X20G7PRLmnnf12xoxRPOqeLAGX/fPnbNl7 fBgL0HxdZn2hxFjnkJgIlbSiAH7lxLBuF/Houcbf8bWvvoJfaZOjg3mdd1Xb85rT IfUaBP4Z928VqlhQ4hVsf3f6L/bWrAg1BM0Tlb8R8/Zs7PuTXpk/nteHB6TbicDz h/d5ltbUlHTk/9LMHCGe+hlyob267OC4QzUGbVJUmdFOS+kJ71rFmuZ6CF6IN2oG tbhnR4Bp8f2MtusmvmXZGSQrK5wv/lwpLMOP6JjvlGUuZye6yT/rH+otHS64Y/PT Z6iljI6wX2zO2GB2qoJ4KuJWXbBTZs95DIlf3u+5K94qzFmlyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWtwI7FN8CTGlJUQQReaUWfk2w3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2VkNzZhNzctZTg1My0z Yjk5LWExNmYtZjA0N2JmNzNhMDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtssZBq/ibRyV61EGoO54gLEBPDS0uFDxlfI4iuLHDULqhLRUCJb8O1 Y8NZSh0x+zXFdF67iGh0CJpXi+I+Bxyh96mJSsNTIuT4cZPnwU38fusCN2diCfm1 AlLg4ECsqcexve68SXUQeyHB9nxKYMGpGpWneUCS44Szzu+1LXszgS3xwMYhujzE IDXMIwWJDJPJ3g2N3MHLVh6rZHYIIB2XWHvbhhaE3Hx4O83BgAAS6d8hVsb99Oxk 34X3No1tPoaf/73b99er4EwVBki0EUlOVChvzLJk947zueUBCebh3u8hAdetcNmU FCPNDL5H9yxaoAybnAHmq+LhWkKtyTY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:13 2025 by rpki-client