$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa File: d5ee5953-1179-38f3-9cd8-1324c853f484.roa (raw, json) Hash identifier: nfufY3XD209DaKXUoywGKLp2X/cOpLcWwQOc6E160T0= Subject key identifier: F5:FD:92:34:86:85:78:FA:FE:B1:95:BC:32:3B:8A:99:E9:43:00:69 Certificate issuer: /CN=b02b2a27-63d2-435f-8114-d98e289edc6c Certificate serial: 010D0C9F432858489075F73FE36703138F7BC800 Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 14618 IP address blocks: 208.71.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:f7:3f:e3:67:03:13:8f:7b:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=07426d08-bd0e-42a7-b6a5-510e662eb9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b4:90:56:44:8b:d3:6d:df:be:2b:28:82:25: 63:fc:97:c4:af:98:2b:4c:75:4b:36:04:f3:a8:e8: 41:5a:31:c3:e5:31:9b:a7:61:cb:43:d3:ef:7e:0d: c7:2f:2b:96:b3:cd:64:c5:f1:e7:5a:d3:11:9a:84: b1:3e:42:d1:7f:ee:09:60:17:4f:5b:3f:9f:8b:69: 18:09:47:cc:95:db:f2:c7:85:14:05:1f:58:8a:6e: 9d:e1:24:52:44:e0:92:ff:d3:51:88:a4:51:24:4d: df:6f:cb:f4:8b:40:eb:50:de:2e:94:ee:89:fc:09: 75:d7:3f:a8:13:7c:dd:1b:84:4e:ae:b3:67:b6:83: 06:37:d1:85:90:73:78:d2:d7:40:84:4e:c6:f2:dc: fe:39:0b:06:7d:b6:99:83:53:8c:ff:71:d2:e8:0a: 14:97:a7:d1:99:9e:b0:1b:2d:48:ae:60:11:77:86: b9:42:a4:46:8a:10:71:26:e3:60:bb:0b:da:9c:fb: 6c:26:e3:86:64:c4:c2:7b:35:13:52:c5:5a:c9:5e: 5c:4f:16:0e:d3:c8:a2:73:0b:0d:20:f0:40:96:eb: 5a:b0:ae:8b:c5:23:9f:32:43:53:dc:7c:f2:6c:46: f3:01:30:51:87:31:85:10:cd:9b:6b:b9:f2:75:91: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FD:92:34:86:85:78:FA:FE:B1:95:BC:32:3B:8A:99:E9:43:00:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl X509v3 Authority Key Identifier: keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer sbgp-ipAddrBlock: critical IPv4: 208.71.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:29:3c:ca:a8:9d:66:ce:3d:2c:1d:4f:52:f0:85:22:13:92: 13:38:bf:f2:32:12:3f:65:a2:ef:77:3b:c0:e3:37:dc:53:cd: 39:c0:1d:03:7e:90:c7:46:bb:71:6e:05:3e:c6:b9:4b:75:67: 8a:96:18:86:f2:e8:40:c2:72:48:74:62:0f:15:8e:fb:79:5f: 3c:70:c4:b3:46:da:e2:0e:a3:67:1e:fd:f2:ec:74:e1:d2:83: 2f:5e:50:96:a5:e2:53:5a:11:27:6c:03:a5:b9:3a:f0:19:6b: d3:ec:13:87:67:05:a4:bb:a6:70:4a:fb:13:8e:f2:86:a2:71: 90:8c:d1:5e:63:34:13:8c:dd:62:3c:b5:1a:ee:ef:2c:8f:60: df:77:f0:63:96:f6:57:d5:9b:27:e8:af:63:f9:15:aa:dc:cc: 7d:2f:89:71:3a:4e:e3:7f:75:7b:02:68:d1:8a:58:f6:3d:eb: 4b:f1:df:c6:af:ec:09:c5:7e:6f:4f:9c:5d:be:36:07:53:26: a8:61:d9:9d:cd:46:12:70:25:7c:0f:27:a2:4b:d7:fa:0f:9b: d6:54:74:85:57:6f:a6:03:84:3b:dc:10:75:33:c9:f1:ee:1a: ca:3f:ad:c4:8f:97:bd:1b:d1:1f:e0:92:76:20:56:c1:21:72: f2:6a:1f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfc/42cDE497yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyYjJhMjctNjNkMi00MzVmLTgxMTQtZDk4ZTI4OWVk YzZjMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk MDc0MjZkMDgtYmQwZS00MmE3LWI2YTUtNTEwZTY2MmViOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbSQVkSL023fvisogiVj/JfEr5grTHVLNgTz qOhBWjHD5TGbp2HLQ9Pvfg3HLyuWs81kxfHnWtMRmoSxPkLRf+4JYBdPWz+fi2kY CUfMldvyx4UUBR9Yim6d4SRSROCS/9NRiKRRJE3fb8v0i0DrUN4ulO6J/Al11z+o E3zdG4ROrrNntoMGN9GFkHN40tdAhE7G8tz+OQsGfbaZg1OM/3HS6AoUl6fRmZ6w Gy1IrmARd4a5QqRGihBxJuNguwvanPtsJuOGZMTCezUTUsVayV5cTxYO08iicwsN IPBAlutasK6LxSOfMkNT3HzybEbzATBRhzGFEM2ba7nydZGgBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPX9kjSGhXj6/rGVvDI7ipnpQwBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJi MmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5ZWRjNmMvZDVlZTU5NTMtMTE3OS0z OGYzLTljZDgtMTMyNGM4NTNmNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjAyYjJhMjctNjNkMi00MzVmLTgx MTQtZDk4ZTI4OWVkYzZjL2IwMmIyYTI3LTYzZDItNDM1Zi04MTE0LWQ5OGUyODll ZGM2Yy5jcmwwHwYDVR0jBBgwFoAUaP0QqXb6CaxECs/rlUyyMr81kckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThl Mjg5ZWRjNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAspPMqonWbOPSwdT1LwhSITkhM4v/IyEj9lou93O8DjN9xTzTnAHQN+ kMdGu3FuBT7GuUt1Z4qWGIby6EDCckh0Yg8Vjvt5XzxwxLNG2uIOo2ce/fLsdOHS gy9eUJal4lNaESdsA6W5OvAZa9PsE4dnBaS7pnBK+xOO8oaicZCM0V5jNBOM3WI8 tRru7yyPYN938GOW9lfVmyfor2P5FarczH0viXE6TuN/dXsCaNGKWPY960vx38av 7AnFfm9PnF2+NgdTJqhh2Z3NRhJwJXwPJ6JL1/oPm9ZUdIVXb6YDhDvcEHUzyfHu Gso/rcSPl70b0R/gknYgVsEhcvJqH8k= -----END CERTIFICATE-----Generated at Fri Apr 4 23:41:05 2025 by rpki-client