$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ba84ab8-21a0-397f-a467-ee76f4f9500d.roa File: 3ba84ab8-21a0-397f-a467-ee76f4f9500d.roa (raw, json) Hash identifier: tHBF9dIUcQIbItVO7tPVp9mlZX+r3LZvrfOMlAQLTfg= Subject key identifier: 5C:A1:3C:CD:0C:9F:DC:54:B2:E5:B6:0A:15:3A:C2:AD:F6:0C:17:4D Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487A207F50ECD96AE87653EE20 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ba84ab8-21a0-397f-a467-ee76f4f9500d.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 14618 IP address blocks: 208.85.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:7f:50:ec:d9:6a:e8:76:53:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=3c038d21-e441-4b7a-afe5-57aab253ed6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:42:e1:a7:94:3f:08:7e:3b:46:ef:be:98: 02:eb:86:e2:b4:e8:dc:3d:9d:58:16:e7:f0:50:f3: 77:13:e3:1e:1d:55:38:96:5a:b9:ad:98:a8:0f:6a: 17:db:58:9a:e3:53:ca:2e:79:4f:73:2a:5b:42:e6: 71:33:40:1b:e1:75:0f:36:da:b1:b0:d7:83:cd:b3: 00:06:8c:82:81:2f:c9:69:07:45:dd:77:11:e0:4f: ce:b9:c6:41:e6:82:50:27:78:26:40:be:f7:1c:ec: 43:0e:bb:8d:fd:37:69:c9:77:e1:8e:6b:d4:4e:14: b5:2e:17:64:e1:1f:31:bf:79:72:0c:c6:65:aa:5a: 0f:4a:04:0b:41:6a:39:de:b1:c4:e1:11:6a:23:37: 21:4e:8c:6e:38:6b:a7:12:f7:03:60:87:d4:be:7f: 79:d8:10:d9:7e:ea:9f:cb:80:81:7a:6b:17:69:a3: 96:15:cf:48:a4:24:6d:cd:df:62:66:da:f8:3b:aa: 89:77:54:bd:cf:31:00:6a:82:15:d1:f1:cb:4b:48: e0:9f:62:a3:5e:25:90:b9:74:2f:a8:08:cc:3d:db: 23:02:84:4c:b1:51:35:ad:1c:f7:45:a0:13:32:61: 8d:b5:60:e0:20:94:33:11:29:c2:1c:78:b4:e2:65: 45:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A1:3C:CD:0C:9F:DC:54:B2:E5:B6:0A:15:3A:C2:AD:F6:0C:17:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ba84ab8-21a0-397f-a467-ee76f4f9500d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:02:e7:9f:27:76:20:20:c9:7f:fb:50:b1:f5:3e:b4:71:b6: 03:55:c8:1d:90:b5:7b:91:f2:02:5b:49:0d:da:eb:32:49:60: 3e:56:d2:3b:98:2d:2e:71:e7:7f:fe:e8:6c:9b:50:00:7e:12: f5:f9:d9:69:41:92:4e:59:20:b5:92:6d:ec:89:9d:a7:4d:14: eb:96:d8:46:54:ba:e9:b5:1d:e1:a8:73:21:3a:4c:2d:8d:b6: 88:a6:96:30:d5:52:6b:88:29:c6:14:e8:3a:7f:cd:aa:9d:f0: d5:05:b5:7a:75:ec:2c:5f:58:53:7a:b6:67:b2:5d:23:f6:c0: 07:83:4c:69:66:e3:aa:87:36:67:fa:57:57:6c:89:97:e7:55: 43:70:f1:a2:34:1f:f7:1b:5f:4c:59:b3:56:8f:23:92:63:6b: fa:66:46:2d:dc:d1:6d:cf:73:bc:97:b9:4c:63:43:20:1c:6e: 37:b5:46:01:dc:75:66:ce:31:0a:b8:5b:70:b9:44:e1:58:41: b3:84:c4:e1:ad:99:20:8a:ea:bd:21:9b:b1:2b:7c:3d:1d:ea: e7:a4:40:a3:92:d1:8d:8c:b7:3e:03:ae:ed:bd:c7:18:2b:8b: 62:9a:c4:c3:37:d4:98:84:5e:c2:7a:e6:03:a8:48:c4:6f:e3: 7f:c3:d0:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IH9Q7Nlq6HZT7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk M2MwMzhkMjEtZTQ0MS00YjdhLWFmZTUtNTdhYWIyNTNlZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxlC4aeUPwh+O0bvvpgC64bitOjcPZ1YFufw UPN3E+MeHVU4llq5rZioD2oX21ia41PKLnlPcypbQuZxM0Ab4XUPNtqxsNeDzbMA BoyCgS/JaQdF3XcR4E/OucZB5oJQJ3gmQL73HOxDDruN/TdpyXfhjmvUThS1Lhdk 4R8xv3lyDMZlqloPSgQLQWo53rHE4RFqIzchToxuOGunEvcDYIfUvn952BDZfuqf y4CBemsXaaOWFc9IpCRtzd9iZtr4O6qJd1S9zzEAaoIV0fHLS0jgn2KjXiWQuXQv qAjMPdsjAoRMsVE1rRz3RaATMmGNtWDgIJQzESnCHHi04mVFlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyhPM0Mn9xUsuW2ChU6wq32DBdNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvM2JhODRhYjgtMjFhMC0z OTdmLWE0NjctZWU3NmY0Zjk1MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIC558ndiAgyX/7ULH1PrRxtgNVyB2QtXuR8gJbSQ3a6zJJYD5W0juY LS5x53/+6GybUAB+EvX52WlBkk5ZILWSbeyJnadNFOuW2EZUuum1HeGocyE6TC2N toimljDVUmuIKcYU6Dp/zaqd8NUFtXp17CxfWFN6tmeyXSP2wAeDTGlm46qHNmf6 V1dsiZfnVUNw8aI0H/cbX0xZs1aPI5Jja/pmRi3c0W3Pc7yXuUxjQyAcbje1RgHc dWbOMQq4W3C5ROFYQbOExOGtmSCK6r0hm7ErfD0d6uekQKOS0Y2Mtz4Dru29xxgr i2KaxMM31JiEXsJ65gOoSMRv43/D0G8= -----END CERTIFICATE-----Generated at Fri Mar 14 13:16:50 2025 by rpki-client