$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa File: 0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa (raw, json) Hash identifier: CMgzw0CMJ362NAOXilMtOAGCo0fBtAjwEc47zo5Mk2Q= Subject key identifier: 63:8F:90:91:8C:05:46:63:FD:EC:A8:15:77:35:9F:65:63:20:37:4E Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487755D3A1DA87B8BC1F4D3000 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 14618 IP address blocks: 208.85.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d3:a1:da:87:b8:bc:1f:4d:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=090b1b62-76de-405f-9898-8a6e9b3564e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:86:82:cc:c7:40:f7:c4:29:a4:c4:fd:79:30: 23:72:4a:d4:57:90:2d:95:d7:b8:15:3b:91:6c:3d: 0c:83:18:1d:19:f7:f9:2c:bf:2f:b2:23:52:5d:b8: 59:f6:6e:7d:b2:da:29:f3:d2:ac:54:af:21:18:83: 6d:31:cf:f0:4b:15:84:74:58:7b:38:2e:c9:8b:91: 2c:c1:1b:fb:8f:d7:5a:4b:84:33:af:1a:94:bd:26: 67:78:dd:f2:19:03:5d:86:9c:0a:55:2f:ca:33:44: 85:e3:99:80:13:37:df:07:3c:03:be:55:69:d8:ef: cb:dc:c0:ae:c3:cd:b1:bd:06:33:3e:65:08:53:44: 86:d7:3a:66:40:5a:be:13:ed:ef:a1:c0:70:0a:42: e7:34:db:a5:68:a2:fe:09:f7:a5:dc:b7:3b:5f:2e: ce:5c:69:a7:92:32:ae:9c:70:5c:59:be:49:e2:8c: 6f:f1:10:3a:85:e1:36:5b:aa:0c:97:70:ea:62:d9: 62:e3:75:a6:ef:87:bc:a1:ce:12:c5:b0:2b:93:02: e7:55:6d:72:12:b7:ee:32:f7:f6:cc:d4:3a:d5:b3: 7a:54:03:d3:d9:f2:72:4d:f5:7f:f7:37:c1:14:0b: 94:c8:1a:46:8d:ae:84:c4:e9:20:82:8f:3a:cb:77: 62:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8F:90:91:8C:05:46:63:FD:EC:A8:15:77:35:9F:65:63:20:37:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:3a:13:dd:2f:fd:fa:77:22:fd:bd:1e:cd:fe:38:54:fc:7a: 68:ab:35:85:9a:38:d4:d4:e6:a8:8a:67:dc:da:84:1b:3e:5c: 63:b4:3c:a6:00:19:a1:c8:1f:f0:a5:38:7d:52:58:03:6c:76: 4d:9f:79:82:01:10:fb:a1:d9:59:28:eb:02:a8:86:dd:47:11: c2:4c:7a:37:92:8d:1c:9f:67:6a:72:23:56:b8:11:ae:db:2a: 88:fb:93:e2:3c:21:0b:c0:ad:1b:57:46:99:1d:65:01:28:dd: 84:38:0e:02:b1:2f:2d:c8:ef:b3:20:03:0d:5a:45:f6:60:45: 8d:b4:56:47:bb:91:31:96:91:6f:1b:74:f2:4e:47:c9:72:d4: e1:6a:d7:06:68:67:78:e0:9e:e1:45:4e:eb:59:ce:ee:ee:3b: 9c:72:ff:3a:7b:ef:0f:48:30:b9:93:85:d2:ad:b9:a5:6e:1a: 53:5d:41:52:7d:ce:64:45:51:41:09:3c:1f:ca:e8:ab:a7:cd: 0a:2d:96:e4:4f:22:89:da:65:e7:8c:4a:11:d3:03:63:7f:52: dc:16:2a:4a:5f:d9:b1:20:e7:b5:15:d8:7c:3b:06:e6:64:da: d9:d1:4f:ec:74:9b:72:30:5a:f4:27:37:96:66:c0:72:b7:a7: b0:1d:2b:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdOh2oe4vB9NMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk MDkwYjFiNjItNzZkZS00MDVmLTk4OTgtOGE2ZTliMzU2NGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYaCzMdA98QppMT9eTAjckrUV5Atlde4FTuR bD0MgxgdGff5LL8vsiNSXbhZ9m59stop89KsVK8hGINtMc/wSxWEdFh7OC7Ji5Es wRv7j9daS4QzrxqUvSZneN3yGQNdhpwKVS/KM0SF45mAEzffBzwDvlVp2O/L3MCu w82xvQYzPmUIU0SG1zpmQFq+E+3vocBwCkLnNNulaKL+Cfel3Lc7Xy7OXGmnkjKu nHBcWb5J4oxv8RA6heE2W6oMl3DqYtli43Wm74e8oc4SxbArkwLnVW1yErfuMvf2 zNQ61bN6VAPT2fJyTfV/9zfBFAuUyBpGja6ExOkggo86y3dizQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOPkJGMBUZj/eyoFXc1n2VjIDdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMGE3Y2U4YTEtOWI2Ni0z YjE3LTlhMjQtYWMwMmRiNmQ1Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABg6E90v/fp3Iv29Hs3+OFT8emirNYWaONTU5qiKZ9zahBs+XGO0PKYA GaHIH/ClOH1SWANsdk2feYIBEPuh2Vko6wKoht1HEcJMejeSjRyfZ2pyI1a4Ea7b Koj7k+I8IQvArRtXRpkdZQEo3YQ4DgKxLy3I77MgAw1aRfZgRY20Vke7kTGWkW8b dPJOR8ly1OFq1wZoZ3jgnuFFTutZzu7uO5xy/zp77w9IMLmThdKtuaVuGlNdQVJ9 zmRFUUEJPB/K6KunzQotluRPIonaZeeMShHTA2N/UtwWKkpf2bEg57UV2Hw7BuZk 2tnRT+x0m3IwWvQnN5ZmwHK3p7AdK8I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:58 2025 by rpki-client