$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa File: d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa (raw, json) Hash identifier: kVW07WqnwhxK9lGbuJu1bFZHZ5Did1M2whC6xvW9TYc= Subject key identifier: CB:F3:C5:23:B7:C1:E6:E8:D9:3C:39:2E:7C:F8:A1:68:76:61:A3:ED Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F43285848090FAC4F6E00326E39935700 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 16509 IP address blocks: 208.71.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:ac:4f:6e:00:32:6e:39:93:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=4fe34409-cdaa-42f8-8f2a-22d9c2cb9c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ac:89:30:e5:67:66:16:d2:0d:af:19:45:bf: 37:74:b0:14:0a:0f:9a:3f:a5:1c:1a:0b:2e:23:94: 32:5a:89:57:43:e8:63:a9:df:79:5d:20:e1:24:be: ce:7f:5e:d7:3c:bf:a5:18:06:31:48:12:0c:74:2a: e2:b0:28:bd:28:9f:11:b8:2e:bd:cd:97:a7:e8:ce: fe:e1:15:a5:45:b5:40:ef:c5:1c:8a:d7:b7:ab:a4: f9:45:03:ae:03:f0:a5:8f:b2:e4:3f:b6:98:e2:39: 6d:00:f3:fa:45:b5:11:39:bc:d1:2e:e9:fc:2c:30: f5:93:0b:04:d4:98:bd:e8:8a:b8:4f:66:d3:db:aa: 52:f8:85:31:a6:dd:6c:ad:17:0f:d5:bf:74:7c:d4: 28:39:1c:49:c7:9c:70:2e:99:01:dd:25:79:42:3b: 3b:8b:dd:47:62:cc:06:50:d2:ce:b0:41:c0:f4:4c: 4d:4c:3d:72:35:74:1b:b0:a6:87:e2:51:b6:78:5d: d7:43:c0:c9:a0:46:26:77:66:05:f7:74:0d:c0:fa: 7c:e2:c5:f7:90:18:94:c5:1f:a6:29:94:0d:10:d5: 37:de:20:a8:db:83:ed:a1:88:6f:6e:51:81:2a:7e: 1e:79:28:1c:03:92:7f:75:87:9f:e0:3f:80:df:39: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F3:C5:23:B7:C1:E6:E8:D9:3C:39:2E:7C:F8:A1:68:76:61:A3:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: 208.71.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:09:09:fc:26:89:31:34:db:94:da:24:4f:f8:f3:bb:4a:e8: cd:9e:96:3f:b6:52:9f:9b:02:75:7a:d1:4e:1b:19:4c:6a:5f: a7:c8:22:c9:5c:43:7e:b5:b1:d9:2a:ea:65:57:36:4b:64:18: 86:3c:64:51:25:8a:1b:ab:ab:f7:6b:29:ec:df:06:56:4d:2a: 92:91:e9:1b:7e:3e:69:0d:9f:7b:e6:9d:6a:57:8f:48:2c:fd: 03:93:2d:8a:ba:2f:d8:97:62:a3:2d:31:c1:d8:73:4f:d3:44: fc:b2:63:b6:3b:6f:80:1f:41:44:24:77:62:dd:98:3f:15:38: 21:c8:05:e1:76:82:ea:1d:6e:66:6c:29:33:c6:8f:0e:25:18: 0b:e1:08:c8:ae:b3:05:2c:cd:6b:ec:ad:4b:eb:92:98:48:04: ef:67:f9:cb:bd:99:49:88:cf:bb:75:92:af:2b:cd:cd:6a:a6: 05:29:e9:b1:ff:6a:73:e2:5b:17:63:14:76:76:4c:fa:46:39: 76:64:c2:f9:39:85:03:92:c8:52:bc:f0:99:2c:b6:a9:f0:bc: f9:8b:14:84:5e:10:25:ec:ee:d8:96:f9:f3:77:a1:2c:f0:a2: fa:fb:29:73:e5:b8:25:c6:ac:3b:5f:25:65:ae:02:66:91:d2: d5:22:35:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD6xPbgAybjmTVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk NGZlMzQ0MDktY2RhYS00MmY4LThmMmEtMjJkOWMyY2I5YzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qyJMOVnZhbSDa8ZRb83dLAUCg+aP6UcGgsu I5QyWolXQ+hjqd95XSDhJL7Of17XPL+lGAYxSBIMdCrisCi9KJ8RuC69zZen6M7+ 4RWlRbVA78Ucite3q6T5RQOuA/Clj7LkP7aY4jltAPP6RbURObzRLun8LDD1kwsE 1Ji96Iq4T2bT26pS+IUxpt1srRcP1b90fNQoORxJx5xwLpkB3SV5Qjs7i91HYswG UNLOsEHA9ExNTD1yNXQbsKaH4lG2eF3XQ8DJoEYmd2YF93QNwPp84sX3kBiUxR+m KZQNENU33iCo24PtoYhvblGBKn4eeSgcA5J/dYef4D+A3zkYkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvzxSO3webo2Tw5Lnz4oWh2YaPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvZDA1YmNiYWUtOWI2NC0z MGVlLWI2YjUtOTM0NmEzZTJmZDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EcXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYJCfwmiTE025TaJE/487tK6M2elj+2Up+bAnV60U4bGUxqX6fIIslc Q361sdkq6mVXNktkGIY8ZFElihurq/drKezfBlZNKpKR6Rt+PmkNn3vmnWpXj0gs /QOTLYq6L9iXYqMtMcHYc0/TRPyyY7Y7b4AfQUQkd2LdmD8VOCHIBeF2guodbmZs KTPGjw4lGAvhCMiuswUszWvsrUvrkphIBO9n+cu9mUmIz7t1kq8rzc1qpgUp6bH/ anPiWxdjFHZ2TPpGOXZkwvk5hQOSyFK88JkstqnwvPmLFIReECXs7tiW+fN3oSzw ovr7KXPluCXGrDtfJWWuAmaR0tUiNdI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:35 2025 by rpki-client