$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa File: 5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa (raw, json) Hash identifier: QsK5/4ro3jTq6Kjsy0tvKnTuHYqjgLsFQcnJsxGdtFU= Subject key identifier: E5:AA:A5:57:B6:02:FC:80:F9:21:14:84:A7:E4:5D:3B:84:E9:33:EF Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487A207F5F0E9747D945883B80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 19795 IP address blocks: 208.85.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:7f:5f:0e:97:47:d9:45:88:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=a76989cf-4ed8-4205-9f6d-2de75cc61139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:77:ac:0b:4e:5a:52:82:00:45:0a:4a:bf:68: d5:9f:7a:5a:c1:82:07:84:d1:ea:cb:21:d7:86:b1: 7b:19:0c:bc:cf:84:a9:25:3f:63:8b:99:40:b2:f8: 75:8d:ff:bb:7c:45:8f:35:59:3a:e8:b5:18:dc:4b: 2e:0a:d2:43:fa:1e:6c:5e:f3:a2:ea:32:9b:ea:bc: e5:65:6f:8e:9c:d9:37:f0:03:39:b8:de:2a:ba:05: bf:83:39:10:7d:18:d9:5d:86:a2:f0:fb:78:ff:fc: 3c:f2:c5:a7:8d:1c:73:53:6f:ab:02:34:e1:db:29: d3:b2:de:1e:9e:c3:74:0b:93:6b:8f:9a:99:53:f4: 46:14:9e:12:2a:ce:73:f0:bf:ca:a7:13:8d:3c:11: 42:88:41:ac:65:ab:95:46:dc:0d:dc:a9:3c:57:16: 51:cb:c7:3b:ea:5d:aa:0b:81:3a:6c:b8:ee:9d:6f: ea:ae:9c:d4:f8:70:1e:05:45:61:f7:47:99:fe:61: 3a:44:85:62:7d:a0:ec:cd:32:9f:76:a7:fc:46:82: c5:1b:71:ba:46:1d:ed:9b:e9:5c:7d:ab:b8:cc:3f: 54:22:ba:b9:e4:c3:ba:53:b0:8c:a5:77:ce:38:89: 34:f8:68:70:87:aa:36:cd:0f:9c:74:b3:93:b5:a9: 21:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AA:A5:57:B6:02:FC:80:F9:21:14:84:A7:E4:5D:3B:84:E9:33:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:5d:32:1f:59:55:d3:58:15:ab:8c:07:7a:15:3a:23:87:75: 56:36:a7:48:8f:62:2f:f2:a0:53:f3:79:a0:d2:b4:f7:15:68: 02:ea:ed:a3:c7:05:30:99:4c:de:46:4c:58:8a:1e:7e:4f:aa: a0:62:1c:34:e0:59:2d:9c:19:12:27:8a:92:c7:11:fc:5c:11: 37:56:2f:ab:1d:69:cf:0b:4f:4e:2f:54:ca:ac:1e:d3:05:5a: 1f:b2:e2:d6:e1:3a:d5:70:6e:66:d7:a3:3f:f1:66:6f:0a:94: e2:49:23:62:84:b8:f5:84:01:22:eb:54:ab:c5:f0:bc:ad:32: c7:bc:fb:95:4e:c0:55:38:ec:e3:58:b4:3e:d4:2f:3b:56:32: e6:eb:da:ce:d0:0e:b8:47:c3:8d:bf:38:47:f8:de:07:ee:bf: ea:71:79:1a:ec:45:01:00:ae:e9:5c:9a:92:97:df:01:ea:f4: 26:1d:71:6e:0a:da:49:1d:3c:ae:82:09:d7:90:d8:61:e9:fd: fc:af:31:8f:b4:13:e6:7b:b2:20:16:96:ec:e0:3c:1a:99:2c: e3:bb:45:8b:67:9c:1e:44:b8:37:ab:42:d3:64:91:bb:13:2a: 08:ff:97:b2:9a:99:9d:9f:e8:1a:a1:55:59:54:70:19:82:40: 57:f1:28:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IH9fDpdH2UWIO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk YTc2OTg5Y2YtNGVkOC00MjA1LTlmNmQtMmRlNzVjYzYxMTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHesC05aUoIARQpKv2jVn3pawYIHhNHqyyHX hrF7GQy8z4SpJT9ji5lAsvh1jf+7fEWPNVk66LUY3EsuCtJD+h5sXvOi6jKb6rzl ZW+OnNk38AM5uN4qugW/gzkQfRjZXYai8Pt4//w88sWnjRxzU2+rAjTh2ynTst4e nsN0C5Nrj5qZU/RGFJ4SKs5z8L/KpxONPBFCiEGsZauVRtwN3Kk8VxZRy8c76l2q C4E6bLjunW/qrpzU+HAeBUVh90eZ/mE6RIVifaDszTKfdqf8RoLFG3G6Rh3tm+lc fau4zD9UIrq55MO6U7CMpXfOOIk0+Ghwh6o2zQ+cdLOTtakhMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWqpVe2AvyA+SEUhKfkXTuE6TPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNWE4YmUzNGItOGNmMi0z ZGUyLTkxYzctYTE2OWRlZTdiNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtdMh9ZVdNYFauMB3oVOiOHdVY2p0iPYi/yoFPzeaDStPcVaALq7aPH BTCZTN5GTFiKHn5PqqBiHDTgWS2cGRInipLHEfxcETdWL6sdac8LT04vVMqsHtMF Wh+y4tbhOtVwbmbXoz/xZm8KlOJJI2KEuPWEASLrVKvF8LytMse8+5VOwFU47ONY tD7ULztWMubr2s7QDrhHw42/OEf43gfuv+pxeRrsRQEArulcmpKX3wHq9CYdcW4K 2kkdPK6CCdeQ2GHp/fyvMY+0E+Z7siAWluzgPBqZLOO7RYtnnB5EuDerQtNkkbsT Kgj/l7KamZ2f6BqhVVlUcBmCQFfxKEQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:07 2025 by rpki-client