$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4aab42ce-78dc-3da2-ba07-030a87b4dad2.roa File: 4aab42ce-78dc-3da2-ba07-030a87b4dad2.roa (raw, json) Hash identifier: IBll8xx+NJsMPyRyoU3Rjn/6PxrxxB4eWEMchJTBWtY= Subject key identifier: 31:D7:45:60:9E:DA:96:8C:DB:BE:7D:4C:FB:C3:80:FB:7A:A3:E0:03 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487A207550982CC89B3ED337C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4aab42ce-78dc-3da2-ba07-030a87b4dad2.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 208.95.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:75:50:98:2c:c8:9b:3e:d3:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=541eca37-1a93-4e55-81d8-0895ca112c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7b:46:f7:18:f2:b4:6b:da:75:ef:a2:f4:6f: 66:6c:4b:4b:44:62:60:c8:cd:f4:4a:9c:4d:2f:32: ba:8c:f6:bf:04:36:46:da:65:28:c3:e6:af:09:2b: 19:26:00:f2:31:ba:1b:82:12:aa:a8:6b:fb:ea:15: d2:a2:8b:00:fc:49:32:54:9d:17:18:ea:cd:a2:36: 62:6d:c4:21:3e:d5:24:4d:e5:15:15:3d:24:4c:30: 5e:29:4e:da:15:f6:f7:8c:ab:96:6e:fa:56:51:e2: 69:55:2a:de:72:df:b4:98:d5:33:56:91:ba:38:c0: b1:67:91:d4:41:b3:af:2e:13:98:6c:1e:1a:dc:65: b2:55:54:54:7d:aa:58:5c:fe:8f:3d:56:ef:38:82: 3d:e2:22:c6:97:3c:a6:fa:bd:41:71:e5:e9:9d:2e: c6:69:bc:52:5c:de:e5:50:62:98:e4:6b:28:53:74: 0a:d7:bf:1e:55:50:ee:40:97:8a:1a:fd:4c:af:30: 9f:3d:b5:f1:9d:68:6b:63:79:c9:11:d0:bd:1d:6d: ec:d8:cd:f8:d4:b8:21:6b:7a:24:3b:0a:99:99:ab: f6:29:bd:ab:46:38:69:ba:02:3f:f6:89:c4:9e:f1: 10:53:ce:bb:3a:5e:01:fa:ab:e2:f1:ab:3a:7a:b9: 7d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D7:45:60:9E:DA:96:8C:DB:BE:7D:4C:FB:C3:80:FB:7A:A3:E0:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4aab42ce-78dc-3da2-ba07-030a87b4dad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a2:35:20:79:93:b1:2f:37:9b:a8:46:85:da:e6:7f:6c:dc: 83:31:1c:4a:4c:88:d0:cd:0f:11:cc:77:4d:67:17:be:dd:0d: ce:43:3b:78:68:a1:aa:99:a2:90:1d:4f:2e:9b:55:e7:51:a3: 49:7a:14:5d:b3:28:1a:41:e4:5c:72:e5:fe:5e:71:e3:46:8e: ee:2c:4a:e6:37:d5:d0:8e:20:53:a9:6c:56:f5:58:b3:ad:e5: 21:f6:8c:07:d2:b7:f5:10:9c:fd:40:d6:1b:3e:f4:83:96:90: f4:0a:8d:74:98:e6:f0:1d:b1:4b:df:0b:bc:9f:aa:72:89:9c: 88:b5:80:d5:be:2d:b5:4c:0b:aa:a2:11:a5:a2:42:09:ec:6d: a9:b2:47:cb:16:55:0a:d0:b8:74:5e:b0:e8:95:88:67:04:da: 89:ba:31:5d:a6:2e:f2:5e:f2:db:ba:1f:b7:c1:e5:f6:7c:e9: fe:d0:a8:d1:e7:58:b9:10:a8:6b:94:6e:f9:85:9e:bc:b2:43: 88:39:bc:52:72:76:af:8e:65:2d:d9:9c:52:91:e3:ff:6d:ba: 69:1a:95:69:8a:8a:bf:1e:3a:80:e0:f1:1f:af:7f:2c:f6:11: dd:d1:81:7d:b4:a7:31:c9:7d:63:65:2b:96:3c:dd:3d:7b:d4: 25:47:f0:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IHVQmCzImz7TN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk NTQxZWNhMzctMWE5My00ZTU1LTgxZDgtMDg5NWNhMTEyYzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXtG9xjytGvade+i9G9mbEtLRGJgyM30SpxN LzK6jPa/BDZG2mUow+avCSsZJgDyMbobghKqqGv76hXSoosA/EkyVJ0XGOrNojZi bcQhPtUkTeUVFT0kTDBeKU7aFfb3jKuWbvpWUeJpVSrect+0mNUzVpG6OMCxZ5HU QbOvLhOYbB4a3GWyVVRUfapYXP6PPVbvOII94iLGlzym+r1BceXpnS7GabxSXN7l UGKY5GsoU3QK178eVVDuQJeKGv1MrzCfPbXxnWhrY3nJEdC9HW3s2M341Lgha3ok OwqZmav2Kb2rRjhpugI/9onEnvEQU867Ol4B+qvi8as6erl9awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHXRWCe2paM2759TPvDgPt6o+ADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNGFhYjQyY2UtNzhkYy0z ZGEyLWJhMDctMDMwYTg3YjRkYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuiNSB5k7EvN5uoRoXa5n9s3IMxHEpMiNDNDxHMd01nF77dDc5DO3ho oaqZopAdTy6bVedRo0l6FF2zKBpB5Fxy5f5eceNGju4sSuY31dCOIFOpbFb1WLOt 5SH2jAfSt/UQnP1A1hs+9IOWkPQKjXSY5vAdsUvfC7yfqnKJnIi1gNW+LbVMC6qi EaWiQgnsbamyR8sWVQrQuHResOiViGcE2om6MV2mLvJe8tu6H7fB5fZ86f7QqNHn WLkQqGuUbvmFnryyQ4g5vFJydq+OZS3ZnFKR4/9tumkalWmKir8eOoDg8R+vfyz2 Ed3RgX20pzHJfWNlK5Y83T171CVH8D0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:13 2025 by rpki-client