$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa File: af9473bf-b67e-357e-95a9-91892269d8f7.roa (raw, json) Hash identifier: /1d71veDg7OZhnMubgFpr+RO8+c0KH4MKOvJUFLHNh4= Subject key identifier: C2:67:C4:08:65:C6:AD:FF:54:33:5C:D2:25:02:E7:39:F2:46:C7:2F Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Certificate serial: 010D0C9F43285848E2D10FF4DB8670EEB5010E00 Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 208.79.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:0f:f4:db:86:70:ee:b5:01:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=8ddffde3-b7e1-49b1-9fd4-5c7c225da96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5e:5f:0e:f6:a4:b0:8e:d1:93:75:c1:f3:72: db:c9:f0:a0:9c:c7:cd:9a:72:b3:4b:05:46:a3:f6: 6a:2e:b1:d9:a9:be:7a:e2:13:95:3a:56:8b:c2:d0: a4:94:98:6f:0e:ad:59:88:d5:bd:11:20:ff:7b:19: 18:4b:e4:2a:59:3e:d2:61:c2:a9:15:a3:8f:0d:85: ca:28:8b:bf:7e:20:bd:64:13:36:0d:8f:dd:d1:17: a7:34:eb:5d:60:ae:17:da:bc:4e:69:e1:1a:5e:f8: 13:1b:f0:90:b1:c8:0c:1c:f8:a0:ac:ae:5e:20:de: 1d:b9:3e:44:b4:35:a8:7c:6e:ba:48:d4:e1:42:58: f9:14:9b:45:bc:f1:de:55:e2:00:ce:3e:f6:4c:03: 21:78:77:f0:ed:f1:fd:27:f6:e4:48:7e:2c:94:18: af:5c:7e:27:14:e4:e3:22:88:1c:bb:e4:a4:a3:fb: 8f:54:32:ef:ff:84:2f:fa:a0:37:74:6a:d4:df:93: e9:40:9f:62:e0:62:e3:48:26:b3:35:a4:0a:14:d8: 4e:6a:c2:8a:ad:6c:cd:cf:54:81:1e:87:f6:78:99: 7c:a1:42:09:d0:38:f3:55:79:96:2b:8a:9e:36:f3: f2:75:83:ae:85:c5:f8:f4:44:96:4e:48:ae:23:2c: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:67:C4:08:65:C6:AD:FF:54:33:5C:D2:25:02:E7:39:F2:46:C7:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl X509v3 Authority Key Identifier: keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer sbgp-ipAddrBlock: critical IPv4: 208.79.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:8e:b9:42:ce:ea:c2:d8:1d:f1:f0:e6:2b:23:53:97:3f:0f: dd:84:7b:34:77:ff:9d:a7:69:c7:da:9f:d9:48:a9:f6:59:b9: e2:67:72:67:f9:a2:53:5d:67:a5:1a:13:80:86:1c:d5:f0:43: 0a:7d:ae:9f:7d:35:35:e4:17:52:ae:81:70:49:b0:d4:47:b9: 77:64:f2:b6:46:75:df:a4:20:c3:a9:e7:f0:5e:65:75:61:9d: be:88:80:50:cd:bd:a4:dd:8c:bf:ea:41:5a:0d:42:ad:40:19: f4:94:eb:cf:0b:f9:85:53:3d:22:f6:94:82:9d:73:cb:67:d9: c1:29:f8:01:03:16:67:8b:59:53:fd:66:45:63:13:d4:f3:f8: 3a:27:26:c5:88:ea:3d:dd:07:4a:1f:9a:c2:d2:12:55:e3:04: 45:ff:7c:19:bb:90:ae:6b:b0:8e:93:90:25:11:44:a2:44:c7: 54:5a:03:a0:46:c7:d4:c0:83:51:de:ee:35:74:84:d7:3a:9b: 29:b1:e8:42:74:b6:8d:45:3d:5d:6f:3c:ad:64:9a:a9:0b:62: 2d:c3:4f:bc:36:d8:5b:18:4b:7e:4f:8d:69:dc:99:39:bf:50: 49:c7:7d:28:d8:99:e4:e2:f3:26:33:b1:77:52:45:cc:3d:3c: 8c:25:7e:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Q/024Zw7rUBDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzNGRhNDItNzUzZS00YjlhLWFiNzYtMzdmZDZjZmQ3 NjVkMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk OGRkZmZkZTMtYjdlMS00OWIxLTlmZDQtNWM3YzIyNWRhOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA215fDvaksI7Rk3XB83LbyfCgnMfNmnKzSwVG o/ZqLrHZqb564hOVOlaLwtCklJhvDq1ZiNW9ESD/exkYS+QqWT7SYcKpFaOPDYXK KIu/fiC9ZBM2DY/d0RenNOtdYK4X2rxOaeEaXvgTG/CQscgMHPigrK5eIN4duT5E tDWofG66SNThQlj5FJtFvPHeVeIAzj72TAMheHfw7fH9J/bkSH4slBivXH4nFOTj Iogcu+Sko/uPVDLv/4Qv+qA3dGrU35PpQJ9i4GLjSCazNaQKFNhOasKKrWzNz1SB Hof2eJl8oUIJ0DjzVXmWK4qeNvPydYOuhcX49ESWTkiuIyxMBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJnxAhlxq3/VDNc0iUC5znyRscvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0 ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2ZkNmNmZDc2NWQvYWY5NDczYmYtYjY3ZS0z NTdlLTk1YTktOTE4OTIyNjlkOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2UzNGRhNDItNzUzZS00YjlhLWFi NzYtMzdmZDZjZmQ3NjVkLzNlMzRkYTQyLTc1M2UtNGI5YS1hYjc2LTM3ZmQ2Y2Zk NzY1ZC5jcmwwHwYDVR0jBBgwFoAUyczkBMk8UbylYUVW4zKa/Jhk+IwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2Zk NmNmZDc2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiOuULO6sLYHfHw5isjU5c/D92EezR3/52nacfan9lIqfZZueJncmf5 olNdZ6UaE4CGHNXwQwp9rp99NTXkF1KugXBJsNRHuXdk8rZGdd+kIMOp5/BeZXVh nb6IgFDNvaTdjL/qQVoNQq1AGfSU688L+YVTPSL2lIKdc8tn2cEp+AEDFmeLWVP9 ZkVjE9Tz+DonJsWI6j3dB0ofmsLSElXjBEX/fBm7kK5rsI6TkCURRKJEx1RaA6BG x9TAg1He7jV0hNc6mymx6EJ0to1FPV1vPK1kmqkLYi3DT7w22FsYS35PjWncmTm/ UEnHfSjYmeTi8yYzsXdSRcw9PIwlflg= -----END CERTIFICATE-----Generated at Fri Mar 14 09:51:47 2025 by rpki-client