$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d98a63f5-e0de-35bf-ac2d-d4c829125068.roa File: d98a63f5-e0de-35bf-ac2d-d4c829125068.roa (raw, json) Hash identifier: IBVZAbmw3qIRthvbwY0Kk/hGlOBoYhxehnb76sW+t0A= Subject key identifier: 5B:16:8D:29:80:F0:5A:A6:D1:87:4B:E5:BC:DF:E3:2E:85:CE:F3:37 Certificate issuer: /CN=7334a22a-f222-4457-889f-5478966ecf96 Certificate serial: 010D0C9F432858487755CDB8D6841E3B35C86E80 Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d98a63f5-e0de-35bf-ac2d-d4c829125068.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 397085 IP address blocks: 208.91.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:cd:b8:d6:84:1e:3b:35:c8:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=0adacf0a-6cad-41d0-97cf-fd3c0cbf3c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:d8:ba:bd:d2:5b:29:7e:f4:a4:38:1c:9e: 0c:45:c3:f9:01:b2:2b:61:d4:ff:0f:7e:10:37:e7: 8f:e3:83:84:7c:3f:05:4f:3e:a2:55:7f:91:ba:05: 35:e8:5c:e8:a1:bc:1a:62:af:a1:3c:df:54:e0:d1: 00:3d:2b:28:65:ce:8c:7e:1b:ac:2e:6e:4c:69:75: 24:57:2a:fd:3a:34:36:57:92:d8:f8:38:8c:66:5c: bb:d2:ab:90:c4:08:ee:a7:a8:22:92:a5:48:88:84: 34:26:41:65:72:76:71:5e:13:55:fd:34:0a:80:ec: 98:eb:25:92:e0:ae:e4:54:48:fd:6a:bf:90:b9:05: 6d:5e:de:3a:2e:dd:e1:22:8d:3c:47:d9:93:75:4e: 60:3d:2f:08:e4:d6:6e:ee:6b:da:96:ab:24:24:23: 07:bd:60:85:26:f2:07:44:f9:02:02:74:d0:b1:62: 78:c4:90:4b:06:94:da:22:f0:4e:48:1a:44:7e:4f: 8a:0c:23:b3:da:24:d0:c9:f3:05:46:93:2f:43:19: f3:d2:d0:69:92:e0:b6:d0:62:22:8f:1b:e3:e9:80: c8:31:ee:ee:e5:ab:d1:17:5a:1d:dc:78:00:55:a7: 93:5a:ce:5c:6f:b4:6e:b1:9d:bf:b6:c9:8e:23:1e: ff:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:16:8D:29:80:F0:5A:A6:D1:87:4B:E5:BC:DF:E3:2E:85:CE:F3:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d98a63f5-e0de-35bf-ac2d-d4c829125068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl X509v3 Authority Key Identifier: keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer sbgp-ipAddrBlock: critical IPv4: 208.91.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e1:e9:43:d7:d3:5c:78:a8:d8:2b:9f:7d:82:79:78:95:22: bb:50:f3:fc:cc:ef:fa:b0:98:94:d2:15:0d:ba:d6:33:0d:a0: e1:1e:7d:f2:3c:eb:c2:b5:a6:07:c1:1a:75:3d:6d:97:23:40: 18:a8:e3:7f:09:e9:e7:af:33:de:45:e5:74:4c:72:b3:97:ce: cc:b9:66:f9:b4:db:33:81:ea:1c:2d:7c:39:3c:49:a0:6a:2b: 85:cf:12:1f:24:c0:95:ac:e3:a8:3b:5f:cd:fa:68:b4:e2:15: ff:19:41:05:10:03:0f:7a:7e:14:46:03:31:69:9b:53:9d:90: f1:fa:ba:a2:4a:6b:0e:b3:5f:45:a9:09:b4:32:4d:74:17:08: 82:03:c1:56:01:33:c9:3c:db:56:d6:7c:cb:fd:a0:e1:24:23: 1d:3d:e9:5f:0a:a6:5c:bf:05:b2:33:77:c5:9f:80:dc:b7:0b: ba:e8:8e:46:f3:b2:e5:ff:da:ff:df:38:36:92:5b:8a:d9:04: 18:3f:76:85:1d:29:9f:90:cc:3b:e6:e7:06:ba:8e:e4:df:d3: 35:93:ca:85:1c:54:6d:9e:67:e0:8f:b1:46:22:d8:40:5a:5a: f8:cd:00:e3:f1:e4:f8:b5:6a:0d:43:66:8f:dd:94:c7:16:d3: 6c:12:96:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3Vc241oQeOzXIboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzNGEyMmEtZjIyMi00NDU3LTg4OWYtNTQ3ODk2NmVj Zjk2MB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk MGFkYWNmMGEtNmNhZC00MWQwLTk3Y2YtZmQzYzBjYmYzYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrLYur3SWyl+9KQ4HJ4MRcP5AbIrYdT/D34Q N+eP44OEfD8FTz6iVX+RugU16FzoobwaYq+hPN9U4NEAPSsoZc6MfhusLm5MaXUk Vyr9OjQ2V5LY+DiMZly70quQxAjup6gikqVIiIQ0JkFlcnZxXhNV/TQKgOyY6yWS 4K7kVEj9ar+QuQVtXt46Lt3hIo08R9mTdU5gPS8I5NZu7mvalqskJCMHvWCFJvIH RPkCAnTQsWJ4xJBLBpTaIvBOSBpEfk+KDCOz2iTQyfMFRpMvQxnz0tBpkuC20GIi jxvj6YDIMe7u5avRF1od3HgAVaeTWs5cb7RusZ2/tsmOIx7/5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsWjSmA8Fqm0YdL5bzf4y6FzvM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0 YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4OTY2ZWNmOTYvZDk4YTYzZjUtZTBkZS0z NWJmLWFjMmQtZDRjODI5MTI1MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMzNGEyMmEtZjIyMi00NDU3LTg4 OWYtNTQ3ODk2NmVjZjk2LzczMzRhMjJhLWYyMjItNDQ1Ny04ODlmLTU0Nzg5NjZl Y2Y5Ni5jcmwwHwYDVR0jBBgwFoAUxD6lHNb69S8W1kOiw33sM4//SG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4 OTY2ZWNmOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FtmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3h6UPX01x4qNgrn32CeXiVIrtQ8/zM7/qwmJTSFQ261jMNoOEeffI8 68K1pgfBGnU9bZcjQBio438J6eevM95F5XRMcrOXzsy5Zvm02zOB6hwtfDk8SaBq K4XPEh8kwJWs46g7X836aLTiFf8ZQQUQAw96fhRGAzFpm1OdkPH6uqJKaw6zX0Wp CbQyTXQXCIIDwVYBM8k821bWfMv9oOEkIx096V8Kply/BbIzd8WfgNy3C7rojkbz suX/2v/fODaSW4rZBBg/doUdKZ+QzDvm5wa6juTf0zWTyoUcVG2eZ+CPsUYi2EBa WvjNAOPx5Pi1ag1DZo/dlMcW02wSlvE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:53 2025 by rpki-client