$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3c829a11-727a-3693-9413-1dbca27bc52c.roa File: 3c829a11-727a-3693-9413-1dbca27bc52c.roa (raw, json) Hash identifier: dBnLiKSiZ5q9WvF2DjUwBP/E96n/E7D07/D8T5Z3BTY= Subject key identifier: 52:1E:C2:F1:5A:B8:E1:1A:D9:74:50:B6:60:51:3A:06:68:8F:2D:B5 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487755D941A2E772B861B3A420 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3c829a11-727a-3693-9413-1dbca27bc52c.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 14618 IP address blocks: 208.73.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d9:41:a2:e7:72:b8:61:b3:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=e17fe4f4-dbbb-430e-824f-7f1331b93492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:13:d2:aa:2a:1e:3b:dd:fd:97:92:0d:92:0b: 32:c1:eb:b8:6c:b5:7c:c7:f3:20:c8:08:27:47:07: bc:bc:d4:22:75:69:e1:2a:79:ad:21:34:de:20:76: b1:70:37:dc:0c:a8:bf:ec:e7:e2:42:6a:6b:ae:40: 5c:b6:1d:a6:92:7a:f7:d6:7d:ba:79:70:b6:c9:00: e9:73:79:26:00:5c:7f:5a:8c:ba:2f:2e:9c:42:75: 3e:9e:a7:b2:3b:36:05:85:ab:b8:ae:f9:16:f9:f1: 55:a3:2d:54:0a:4b:7b:91:38:4d:d1:f8:7f:76:91: 8e:cf:cf:a2:08:33:e0:c0:e8:02:78:f4:a7:57:e2: d2:c1:07:16:df:f8:92:d4:07:d2:4d:cd:4c:d3:31: 69:ef:b8:af:18:11:63:5f:62:cb:79:01:45:7a:40: 9f:a1:8b:65:b5:4c:46:51:8d:c6:f8:bc:a9:c0:2a: 32:59:43:4c:ec:7b:c0:7f:18:fd:ca:a1:c2:12:43: 78:13:c4:05:e0:26:30:6b:c7:0f:93:ff:4d:60:dc: 0f:71:8b:13:ec:fb:5b:fe:88:20:e8:5d:30:2c:e6: ac:64:38:40:87:07:ad:38:23:0b:9d:16:51:e1:2a: 2e:ac:f0:ac:5f:ce:8b:b8:5e:c9:24:9a:2b:64:a2: e9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1E:C2:F1:5A:B8:E1:1A:D9:74:50:B6:60:51:3A:06:68:8F:2D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3c829a11-727a-3693-9413-1dbca27bc52c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.73.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:db:30:18:11:2b:99:7d:22:44:37:23:49:84:fe:61:19:c5: f4:60:00:33:84:cf:5d:7b:27:e0:82:3d:da:c7:df:77:99:5b: fc:be:23:13:bb:b5:f4:3e:54:87:34:8d:23:a3:34:b1:bf:33: fd:33:16:f9:57:05:8c:71:b0:6c:cf:4e:cf:56:1d:29:10:8d: cf:cb:ef:f4:8a:b2:6f:0c:00:d0:96:69:1c:c6:b6:4d:14:33: b8:d3:04:59:9b:37:f2:d1:53:7c:b9:56:40:76:19:03:e8:13: d5:17:a3:31:a4:00:ad:be:6b:cf:2d:e3:cf:d4:22:47:79:95: eb:c8:50:c0:bc:31:c2:d8:ea:f7:83:35:a8:0a:94:78:c3:94: 84:b2:a7:66:2e:a7:f1:69:3d:69:ee:e1:11:c6:da:f4:60:1f: 3b:da:39:0c:ea:11:de:31:86:80:d5:e8:97:78:c9:8b:28:0c: 2d:b0:a9:60:93:7a:52:66:5b:bc:5f:4f:34:ed:e4:fb:68:ad: 0a:36:44:db:6d:03:dc:a5:1f:27:43:ee:cc:49:67:f9:c8:46: f0:20:4a:a5:1e:54:5f:76:68:ad:95:48:da:58:23:eb:c2:e2: 3a:75:48:5f:64:0f:76:91:12:f3:a6:4f:09:bb:b5:90:c4:42: c7:9b:a1:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdlBoudyuGGzpCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk ZTE3ZmU0ZjQtZGJiYi00MzBlLTgyNGYtN2YxMzMxYjkzNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRPSqioeO939l5INkgsyweu4bLV8x/MgyAgn Rwe8vNQidWnhKnmtITTeIHaxcDfcDKi/7OfiQmprrkBcth2mknr31n26eXC2yQDp c3kmAFx/Woy6Ly6cQnU+nqeyOzYFhau4rvkW+fFVoy1UCkt7kThN0fh/dpGOz8+i CDPgwOgCePSnV+LSwQcW3/iS1AfSTc1M0zFp77ivGBFjX2LLeQFFekCfoYtltUxG UY3G+LypwCoyWUNM7HvAfxj9yqHCEkN4E8QF4CYwa8cPk/9NYNwPcYsT7Ptb/ogg 6F0wLOasZDhAhwetOCMLnRZR4SourPCsX86LuF7JJJorZKLpeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIewvFauOEa2XRQtmBROgZojy21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvM2M4MjlhMTEtNzI3YS0z NjkzLTk0MTMtMWRiY2EyN2JjNTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzbMBgRK5l9IkQ3I0mE/mEZxfRgADOEz117J+CCPdrH33eZW/y+IxO7 tfQ+VIc0jSOjNLG/M/0zFvlXBYxxsGzPTs9WHSkQjc/L7/SKsm8MANCWaRzGtk0U M7jTBFmbN/LRU3y5VkB2GQPoE9UXozGkAK2+a88t48/UIkd5levIUMC8McLY6veD NagKlHjDlISyp2Yup/FpPWnu4RHG2vRgHzvaOQzqEd4xhoDV6Jd4yYsoDC2wqWCT elJmW7xfTzTt5PtorQo2RNttA9ylHydD7sxJZ/nIRvAgSqUeVF92aK2VSNpYI+vC 4jp1SF9kD3aREvOmTwm7tZDEQseboVs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:30 2025 by rpki-client