$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa File: a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa (raw, json) Hash identifier: qktdwBPcgPf8+kgZiNvmnM5UpG5TdKY+vOm2kXoLpcY= Subject key identifier: 3C:72:10:36:40:76:46:7F:6E:53:DD:F1:F7:5D:64:78:C8:FB:94:5C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818B8B7EED1C956FEE7E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 208.68.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8b:8b:7e:ed:1c:95:6f:ee:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=752da3a9-0a89-41b8-b342-bd2e780ecfd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a3:1c:9b:4f:35:fb:0c:4f:60:02:94:d5:d0: 4e:41:eb:14:5f:2f:29:e5:75:7f:e9:74:69:ad:6e: a9:45:d3:81:75:27:4e:d8:42:0d:68:b6:20:4f:12: dd:1a:6f:c1:f3:ec:9d:50:e4:5f:34:1b:b7:c2:27: fa:ec:b6:b7:57:fe:df:e0:14:26:05:6a:f0:cb:cb: 4b:69:84:70:24:01:08:aa:b1:07:45:50:7a:5d:d6: 17:df:20:ea:07:51:3a:a0:8a:b4:d0:d5:a6:0c:25: 79:a9:47:07:aa:03:7f:d2:a9:58:43:92:6f:62:c5: 76:ef:b5:34:40:ec:64:68:53:3a:1c:08:e7:21:ac: 81:aa:8f:b9:b0:ac:c0:f3:e1:c1:72:5b:af:dd:90: 1d:de:55:5b:4e:5c:a4:6b:df:a9:a0:c0:f6:77:7b: 7a:ae:a9:a6:f8:ad:0c:68:e3:be:d5:ee:4c:a0:90: de:5a:60:e1:ed:46:93:3a:1d:c9:c9:c6:af:d6:14: 32:5e:d3:64:d3:38:b6:ca:cb:b5:e9:52:44:a3:0d: 93:58:d3:4f:e3:0a:8a:ef:e1:d0:51:0e:c7:d8:fe: 92:f4:80:2c:c9:ba:bb:a9:7f:14:1c:69:a7:4c:8d: 75:28:fb:61:95:55:79:e7:ce:90:5f:42:88:b0:2c: 5d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:72:10:36:40:76:46:7F:6E:53:DD:F1:F7:5D:64:78:C8:FB:94:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:cb:29:f2:36:f2:b6:b2:68:17:a2:90:ff:e9:54:1e:1d:46: 20:65:ab:71:e2:f9:02:82:b2:63:f1:02:2b:48:e5:9b:ba:6a: 40:99:7b:41:48:96:17:fa:12:db:ca:fa:f5:d2:4c:00:5d:9b: 8c:6c:73:71:ea:ca:c6:34:c1:ef:02:b4:1e:25:27:2f:6e:8b: b5:4c:3a:66:ef:a9:f2:6e:7f:0b:21:5b:20:3a:e6:e7:91:51: 64:4d:e0:4b:eb:64:89:9d:0e:0d:c0:f2:0d:37:eb:37:45:c9: 8c:61:e7:94:e8:90:55:de:ee:4d:ae:75:01:e8:65:87:2e:d3: 66:8b:78:4e:53:a6:a3:a8:5c:dd:59:15:d5:37:71:2a:60:48: 94:33:a8:96:85:5e:65:ce:44:ce:82:bd:fd:4e:9b:96:45:08: 73:a9:f4:57:fc:90:6f:7d:61:a0:09:e1:56:7b:ce:be:e0:af: 56:50:48:71:0e:b3:9c:ed:68:3e:33:d3:9b:97:ca:aa:ce:5a: bc:3e:a0:5a:31:ec:26:c2:bc:48:38:a4:97:40:20:92:04:d7: 94:76:98:51:5c:8a:e2:54:4c:aa:e1:0e:b6:1c:29:7f:d4:4b: 2f:78:2a:f4:da:9c:69:7d:cb:59:bf:e4:ee:8f:90:70:3b:79: f8:23:cd:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYuLfu0clW/ufgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzUyZGEzYTktMGE4OS00MWI4LWIzNDItYmQyZTc4MGVjZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKMcm081+wxPYAKU1dBOQesUXy8p5XV/6XRp rW6pRdOBdSdO2EINaLYgTxLdGm/B8+ydUORfNBu3wif67La3V/7f4BQmBWrwy8tL aYRwJAEIqrEHRVB6XdYX3yDqB1E6oIq00NWmDCV5qUcHqgN/0qlYQ5JvYsV277U0 QOxkaFM6HAjnIayBqo+5sKzA8+HBcluv3ZAd3lVbTlyka9+poMD2d3t6rqmm+K0M aOO+1e5MoJDeWmDh7UaTOh3Jycav1hQyXtNk0zi2ysu16VJEow2TWNNP4wqK7+HQ UQ7H2P6S9IAsybq7qX8UHGmnTI11KPthlVV5586QX0KIsCxdBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxyEDZAdkZ/blPd8fddZHjI+5RcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTFmOGIyOGUtMzBiOS0z Y2VmLThlNzItOGNiNjc1ODJiNGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXLKfI28rayaBeikP/pVB4dRiBlq3Hi+QKCsmPxAitI5Zu6akCZe0FI lhf6EtvK+vXSTABdm4xsc3HqysY0we8CtB4lJy9ui7VMOmbvqfJufwshWyA65ueR UWRN4EvrZImdDg3A8g036zdFyYxh55TokFXe7k2udQHoZYcu02aLeE5TpqOoXN1Z FdU3cSpgSJQzqJaFXmXORM6Cvf1Om5ZFCHOp9Ff8kG99YaAJ4VZ7zr7gr1ZQSHEO s5ztaD4z05uXyqrOWrw+oFox7CbCvEg4pJdAIJIE15R2mFFciuJUTKrhDrYcKX/U Sy94KvTanGl9y1m/5O6PkHA7efgjzSY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:48 2025 by rpki-client