$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa File: f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa (raw, json) Hash identifier: e+zofqtpvAtq3RkYnxOnEdaQ2/pjOwxtHaMASjL5ds8= Subject key identifier: BC:AC:89:24:88:10:14:73:7F:28:AB:AE:40:68:EF:7E:FC:BE:C7:6B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582051D83F717E27BBDBDB0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 208.68.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:05:1d:83:f7:17:e2:7b:bd:bd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6e9dee87-67b2-4cdd-a502-67b0b5fe1ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6a:7b:a2:59:3a:e6:66:71:e0:4b:2b:22:0b: 2f:69:80:68:bc:cc:64:8b:87:52:36:4b:59:d0:b4: 92:2f:56:9f:e2:46:92:28:9d:d9:92:f9:a3:04:0f: be:53:69:83:97:3d:d1:e8:fa:2b:17:c5:1f:ea:ac: 7f:8b:ed:50:00:c9:a6:de:16:7e:67:e3:57:ee:d7: 72:a2:1c:7a:44:93:19:be:27:3c:15:1d:67:25:17: 26:45:92:c3:aa:4c:76:55:06:ba:83:9c:5e:ad:a3: 8a:5d:14:04:0f:86:79:8c:db:ce:d0:cb:19:ce:84: 96:06:09:fd:63:25:6b:23:f0:48:dd:57:fe:7a:30: 69:02:e6:4a:fc:4c:44:ac:ec:24:13:82:1e:b5:76: 04:af:4a:7b:89:0d:e9:36:f5:85:6c:99:2a:96:53: 47:af:2e:28:aa:9d:52:5c:be:2d:22:c7:95:4e:11: 93:80:94:7a:f5:ea:45:04:c9:5f:a5:4a:8a:21:42: 4d:23:6b:45:50:d8:5c:da:73:20:34:cc:3b:be:1f: e1:04:a8:ca:b3:ca:43:f3:0d:02:b0:d6:10:25:19: a5:0e:49:c0:f5:5f:5c:13:fe:b1:f5:69:8b:4d:43: e0:f4:6f:fc:cf:af:09:1e:d9:45:9f:0c:4a:70:63: c5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AC:89:24:88:10:14:73:7F:28:AB:AE:40:68:EF:7E:FC:BE:C7:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:5a:89:73:dc:73:f1:ed:b0:cc:48:92:2f:c2:11:ab:d9:1d: cb:37:75:c7:07:9c:ec:11:f1:f2:7b:86:87:dc:61:10:66:30: 92:60:3b:41:ed:c7:e3:6a:28:e0:c6:14:fc:1b:51:a3:b0:22: 8b:6c:da:27:81:5d:69:bd:0a:dc:6f:89:e2:aa:55:b6:22:63: 1e:98:cc:3e:ae:73:ef:c2:a8:d8:99:28:ea:98:b1:3d:a9:d6: dd:78:1e:7a:68:9c:ad:47:42:bf:1d:88:54:9e:b1:1b:2a:dc: 27:88:ac:a2:9c:a9:c0:4d:59:99:a8:8f:2a:4c:a7:01:e2:15: bd:bc:45:56:9e:0b:95:03:95:21:f1:6f:d6:a8:0a:83:c5:e5: c3:15:62:c7:a1:85:a6:71:5c:99:6d:42:f7:cd:56:9e:80:a9: 34:dd:37:d0:cb:45:04:f4:fd:38:f3:17:92:cb:3c:b4:9e:e8: d2:7b:1d:15:83:fc:b4:a5:6b:6c:bb:96:8c:ce:99:ef:ce:3a: 34:8e:68:44:b6:78:44:81:7c:44:28:d3:e8:82:42:4d:66:b8: 93:16:8f:0e:86:c9:19:2c:b7:77:11:e0:11:03:74:e6:6e:0d: c7:65:71:eb:67:60:52:94:39:56:af:c9:57:6a:36:5a:95:82: b8:96:e8:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggUdg/cX4nu9vbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NmU5ZGVlODctNjdiMi00Y2RkLWE1MDItNjdiMGI1ZmUxZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGp7olk65mZx4EsrIgsvaYBovMxki4dSNktZ 0LSSL1af4kaSKJ3ZkvmjBA++U2mDlz3R6PorF8Uf6qx/i+1QAMmm3hZ+Z+NX7tdy ohx6RJMZvic8FR1nJRcmRZLDqkx2VQa6g5xeraOKXRQED4Z5jNvO0MsZzoSWBgn9 YyVrI/BI3Vf+ejBpAuZK/ExErOwkE4IetXYEr0p7iQ3pNvWFbJkqllNHry4oqp1S XL4tIseVThGTgJR69epFBMlfpUqKIUJNI2tFUNhc2nMgNMw7vh/hBKjKs8pD8w0C sNYQJRmlDknA9V9cE/6x9WmLTUPg9G/8z68JHtlFnwxKcGPFLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLysiSSIEBRzfyirrkBo7378vsdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjRhNmI4NzgtMTRiNy0z M2RkLWIxZTAtZDNiMjM3OTg3ZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdaiXPcc/HtsMxIki/CEavZHcs3dccHnOwR8fJ7hofcYRBmMJJgO0Ht x+NqKODGFPwbUaOwIots2ieBXWm9CtxvieKqVbYiYx6YzD6uc+/CqNiZKOqYsT2p 1t14HnponK1HQr8diFSesRsq3CeIrKKcqcBNWZmojypMpwHiFb28RVaeC5UDlSHx b9aoCoPF5cMVYsehhaZxXJltQvfNVp6AqTTdN9DLRQT0/TjzF5LLPLSe6NJ7HRWD /LSla2y7lozOme/OOjSOaES2eESBfEQo0+iCQk1muJMWjw6GyRkst3cR4BEDdOZu DcdlcetnYFKUOVavyVdqNlqVgriW6AE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:00 2025 by rpki-client