$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa File: a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa (raw, json) Hash identifier: tcArJneVO/RRl8tByie6j5ZzcRy36TPJHxXICvvYy5k= Subject key identifier: 8A:C3:A9:CA:57:EE:24:9E:A9:F9:C0:67:07:90:07:21:81:47:A0:75 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F43285848C2B64798A0AF928B0BC84380 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 40948 IP address blocks: 208.95.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:47:98:a0:af:92:8b:0b:c8:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=66eae391-9c40-4545-8445-14d857da9bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:0c:14:34:b6:0a:37:6e:b0:fd:ec:d7:60: 68:3b:23:21:c5:01:d9:1a:bf:86:02:3f:2f:10:a8: ee:07:b0:0a:02:85:ba:69:73:a2:e4:3f:74:d3:98: 11:23:4c:53:c2:78:9c:6e:00:c2:8a:96:50:4b:0a: fb:6c:47:15:96:84:c4:ab:1e:a2:ee:15:fb:4f:92: 4f:58:be:c5:b6:17:6b:45:84:7c:b8:10:0d:7d:a8: d2:a3:47:1a:2e:62:5b:1d:d4:61:9e:f5:09:67:c9: c2:47:51:8b:45:a4:0a:09:de:2f:f4:8d:d0:5e:0f: 31:9d:6e:14:ea:aa:ab:e3:81:ad:ac:7a:b1:81:b1: ef:8e:30:8d:bb:f2:2b:01:42:a6:9d:54:6f:9f:ec: 78:02:5d:eb:32:58:0c:c2:cd:67:72:6b:19:a1:32: d9:94:fa:e8:83:56:ae:45:b3:78:76:f6:39:6e:11: 60:73:39:69:16:50:2b:4e:f6:dd:fb:e0:d9:b2:3b: 8a:84:81:15:c0:30:bc:c4:f6:d4:af:30:51:1d:44: 70:09:b9:21:67:40:aa:92:ce:69:7c:38:ad:e1:45: c9:63:c5:df:b7:e5:7e:54:6e:b4:61:b9:6e:15:b0: 53:17:69:07:4f:4a:9c:21:3a:ff:cb:4c:61:c7:92: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C3:A9:CA:57:EE:24:9E:A9:F9:C0:67:07:90:07:21:81:47:A0:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 208.95.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ea:4b:b2:6b:8b:45:b0:3d:cc:b5:58:ae:af:97:bc:15:1f: dd:f9:54:22:38:f4:66:13:33:0f:02:93:f6:66:3e:ac:1a:b0: e0:1f:9a:fc:17:a6:77:1a:c7:a9:03:16:32:ab:52:85:fc:40: 01:94:fc:a5:cf:e2:b8:35:12:49:fa:9d:d9:bd:55:26:b6:e1: 12:e7:d9:67:6f:66:4c:02:51:22:dc:d1:d5:bd:ef:01:1c:33: 15:f9:c3:bc:a1:86:3c:ed:92:dd:9d:90:89:fc:69:39:45:61: 46:22:2c:2a:3a:fa:fe:f9:07:e7:cd:54:f8:09:af:6f:08:48: 74:3b:ab:0e:33:c0:37:c9:6b:bd:61:fa:7a:4c:fd:96:47:f9: 0e:98:eb:8c:1c:fd:fd:f2:d2:2f:b3:c3:db:a1:00:99:15:06: 6d:7d:15:c9:0e:69:93:5d:aa:90:fa:95:d9:c4:d9:e1:a1:8d: 2b:5a:d9:fe:5d:f4:98:d9:89:f4:1e:d5:0f:9b:7c:ce:c6:29: a2:aa:0c:12:0c:10:e7:cb:a5:b1:19:9b:b4:68:d9:06:ed:3f: aa:7d:5f:1b:e7:cc:8d:e1:72:26:b7:41:c7:6c:3f:c8:4b:0c: ca:2f:57:96:b4:25:9d:2d:7f:90:22:d5:bc:96:b4:69:50:05: 31:dd:57:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtkeYoK+SiwvIQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk NjZlYWUzOTEtOWM0MC00NTQ1LTg0NDUtMTRkODU3ZGE5YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn0MFDS2CjdusP3s12BoOyMhxQHZGr+GAj8v EKjuB7AKAoW6aXOi5D9005gRI0xTwnicbgDCipZQSwr7bEcVloTEqx6i7hX7T5JP WL7FthdrRYR8uBANfajSo0caLmJbHdRhnvUJZ8nCR1GLRaQKCd4v9I3QXg8xnW4U 6qqr44GtrHqxgbHvjjCNu/IrAUKmnVRvn+x4Al3rMlgMws1ncmsZoTLZlProg1au RbN4dvY5bhFgczlpFlArTvbd++DZsjuKhIEVwDC8xPbUrzBRHURwCbkhZ0Cqks5p fDit4UXJY8Xft+V+VG60YbluFbBTF2kHT0qcITr/y0xhx5IVvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrDqcpX7iSeqfnAZweQByGBR6B1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvYTUxZjUwZTQtZDdjNy0z OWUwLTg2ODEtMDA5N2ZkMmM4NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0F/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvqS7Jri0WwPcy1WK6vl7wVH935VCI49GYTMw8Ck/ZmPqwasOAfmvwX pncax6kDFjKrUoX8QAGU/KXP4rg1Ekn6ndm9VSa24RLn2WdvZkwCUSLc0dW97wEc MxX5w7yhhjztkt2dkIn8aTlFYUYiLCo6+v75B+fNVPgJr28ISHQ7qw4zwDfJa71h +npM/ZZH+Q6Y64wc/f3y0i+zw9uhAJkVBm19FckOaZNdqpD6ldnE2eGhjSta2f5d 9JjZifQe1Q+bfM7GKaKqDBIMEOfLpbEZm7Ro2QbtP6p9XxvnzI3hcia3QcdsP8hL DMovV5a0JZ0tf5Ai1byWtGlQBTHdV7E= -----END CERTIFICATE-----Generated at Fri Apr 11 21:10:58 2025 by rpki-client