$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa File: 0affa3ca-5e84-377e-8612-b0e2003b6f16.roa (raw, json) Hash identifier: q0aCyVShrhNFwT68YhC0vYOflvh+clQkBJXXSAb03F0= Subject key identifier: 76:0D:B8:15:F9:6B:0B:9B:35:C9:32:3C:80:E8:2A:03:F4:43:85:5E Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Certificate serial: 010D0C9F43285848E59BC3A51EFDDEDD3AAD4080 Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 14618 IP address blocks: 208.79.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c3:a5:1e:fd:de:dd:3a:ad:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=4ce16c41-3a4f-404b-88e4-61bcd7f4fa16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:15:5a:4b:c6:ee:a6:57:f4:68:b9:de:f0:37: b8:4c:86:2c:82:52:93:c5:65:34:b8:56:a9:b4:33: 13:3c:2c:d0:a6:6a:50:39:3e:97:65:94:8e:27:be: 90:5e:c6:21:92:8c:bf:c5:e3:5f:7c:61:47:b1:9b: 44:0d:d1:5d:a3:44:4e:5a:43:a7:d6:2b:3e:76:91: 09:af:80:70:dc:5b:51:6d:50:81:f5:17:ee:95:50: 39:00:79:f9:3c:d5:7c:41:e2:85:55:4c:12:64:4d: 8b:17:06:3c:86:2d:28:15:19:f8:0a:c0:f1:b8:24: ba:f0:8d:9a:67:cf:3c:31:f3:ad:26:22:9c:d1:0c: 08:d2:dc:32:63:20:05:b8:8c:23:6d:23:9c:ef:7f: 9e:c6:13:f2:be:45:9a:a3:cc:ee:af:80:63:29:35: 35:b7:28:1b:52:b1:7b:a0:a3:d9:8d:7d:45:5f:60: d1:f1:91:8d:43:24:ed:8d:6a:99:8b:7d:80:c5:94: 12:d4:e4:fd:4c:8c:ce:32:b5:b8:f1:f9:4c:98:3f: 31:2e:37:a5:aa:2c:c4:44:b1:bc:20:ae:96:b7:dd: c5:a6:dd:c5:8b:2e:35:75:ad:a3:21:f9:f2:29:63: 70:17:8d:c5:1b:38:fa:b4:60:3f:72:07:87:c5:70: 69:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0D:B8:15:F9:6B:0B:9B:35:C9:32:3C:80:E8:2A:03:F4:43:85:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl X509v3 Authority Key Identifier: keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer sbgp-ipAddrBlock: critical IPv4: 208.79.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c9:18:69:64:3f:d1:3b:c9:c1:46:23:5c:c9:44:4f:3b:a1: 4a:6a:07:c0:aa:00:0f:47:4e:69:86:b5:a3:37:86:58:2f:7a: 88:0f:df:ed:b7:48:13:b9:11:9c:6f:cf:b6:81:32:a9:cb:c0: 47:9b:33:f9:5a:25:91:aa:9f:43:16:c4:b2:fd:d2:49:87:bf: f8:09:0f:28:79:06:b1:70:91:b9:6e:03:53:96:09:3c:0e:38: 44:5e:d0:15:c2:0f:ac:71:6b:63:86:1e:e1:f0:98:e8:f2:97: b1:9c:6d:35:c3:93:e4:14:fb:00:14:3d:23:b9:d7:f5:68:f5: 00:62:1a:bc:1a:4f:c9:d8:32:ee:36:04:2b:59:59:10:40:61: 67:d9:bf:82:04:6e:47:6e:b3:e0:6a:7b:eb:82:f6:3a:bd:49: 42:8b:e5:c0:83:6a:02:86:8b:5c:6b:e0:12:33:c0:d9:fd:2a: 7b:79:ac:d5:65:ec:56:0e:94:8b:e6:8f:33:34:41:27:87:f5: a6:43:66:e1:b5:eb:eb:02:b4:d7:d9:07:b7:89:e1:af:ae:02: 11:83:3f:c2:ed:f1:5c:42:b5:3e:2b:43:e6:07:09:5e:1f:e4: 4a:5b:b3:75:aa:7b:db:7a:f0:95:b4:6b:3f:77:97:77:d8:04: b0:ed:88:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8OlHv3e3TqtQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzNGRhNDItNzUzZS00YjlhLWFiNzYtMzdmZDZjZmQ3 NjVkMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NGNlMTZjNDEtM2E0Zi00MDRiLTg4ZTQtNjFiY2Q3ZjRmYTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohVaS8buplf0aLne8De4TIYsglKTxWU0uFap tDMTPCzQpmpQOT6XZZSOJ76QXsYhkoy/xeNffGFHsZtEDdFdo0ROWkOn1is+dpEJ r4Bw3FtRbVCB9RfulVA5AHn5PNV8QeKFVUwSZE2LFwY8hi0oFRn4CsDxuCS68I2a Z888MfOtJiKc0QwI0twyYyAFuIwjbSOc73+exhPyvkWao8zur4BjKTU1tygbUrF7 oKPZjX1FX2DR8ZGNQyTtjWqZi32AxZQS1OT9TIzOMrW48flMmD8xLjelqizERLG8 IK6Wt93Fpt3Fiy41da2jIfnyKWNwF43FGzj6tGA/cgeHxXBpwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYNuBX5awubNckyPIDoKgP0Q4VeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0 ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2ZkNmNmZDc2NWQvMGFmZmEzY2EtNWU4NC0z NzdlLTg2MTItYjBlMjAwM2I2ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2UzNGRhNDItNzUzZS00YjlhLWFi NzYtMzdmZDZjZmQ3NjVkLzNlMzRkYTQyLTc1M2UtNGI5YS1hYjc2LTM3ZmQ2Y2Zk NzY1ZC5jcmwwHwYDVR0jBBgwFoAUyczkBMk8UbylYUVW4zKa/Jhk+IwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2Zk NmNmZDc2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLJGGlkP9E7ycFGI1zJRE87oUpqB8CqAA9HTmmGtaM3hlgveogP3+23 SBO5EZxvz7aBMqnLwEebM/laJZGqn0MWxLL90kmHv/gJDyh5BrFwkbluA1OWCTwO OERe0BXCD6xxa2OGHuHwmOjyl7GcbTXDk+QU+wAUPSO51/Vo9QBiGrwaT8nYMu42 BCtZWRBAYWfZv4IEbkdus+Bqe+uC9jq9SUKL5cCDagKGi1xr4BIzwNn9Knt5rNVl 7FYOlIvmjzM0QSeH9aZDZuG16+sCtNfZB7eJ4a+uAhGDP8Lt8VxCtT4rQ+YHCV4f 5Epbs3Wqe9t68JW0az93l3fYBLDtiOM= -----END CERTIFICATE-----Generated at Wed Apr 9 06:32:30 2025 by rpki-client