$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/84c7cebd-5039-388c-bb84-61029b80011b.roa File: 84c7cebd-5039-388c-bb84-61029b80011b.roa (raw, json) Hash identifier: VGkJ4SNW/ZjNCveoaCJ4YaFD+j59fFPr1FGmawMQcyQ= Subject key identifier: E3:46:53:AB:DC:64:CC:31:B3:8B:B1:6D:FB:4F:40:3F:3F:C3:95:47 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487755D393BF8A7D768CF10E80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/84c7cebd-5039-388c-bb84-61029b80011b.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 208.85.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d3:93:bf:8a:7d:76:8c:f1:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=952201d1-a10b-4e75-969f-ebfcfed090bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:9f:c2:61:bd:82:37:ad:a3:5b:d7:7c:f5: cc:e6:ef:92:3f:d7:63:fe:66:db:b0:a2:cf:df:dc: 9f:15:53:58:e4:e4:7e:6b:4b:08:5c:68:ca:9e:61: 4b:71:d5:c6:ef:11:9e:95:69:c9:d8:56:4f:f5:76: eb:a8:98:bb:59:18:02:8f:af:ed:e3:2c:8c:3d:6f: f4:b2:5c:30:eb:c0:bf:6c:40:30:c6:b6:03:73:c9: 25:62:20:94:72:49:03:25:2a:3b:59:6a:1f:95:86: e1:f0:b9:ba:1d:1d:48:51:db:22:2e:20:4b:12:68: 94:d0:bd:70:3c:48:82:23:22:13:63:60:c6:99:b6: e4:3b:82:12:e1:e4:52:59:0f:c3:9d:30:8b:a5:cc: 2d:48:d2:1e:ce:6a:1a:cd:be:6d:8e:ef:58:d8:16: d5:53:02:5d:53:16:a4:3f:fd:1c:0b:be:a4:55:62: 6c:cf:da:a6:27:e2:44:79:b6:73:9e:39:d7:99:39: 80:ed:c6:58:e3:79:b7:9a:c2:d5:25:b6:b9:b1:61: 1e:6c:9a:a1:48:65:b3:19:97:53:bc:fc:f3:a3:02: 4d:b9:8e:32:25:54:9c:23:4b:0f:8a:2d:35:95:d9: f5:ee:97:67:fe:60:9d:f4:c4:46:27:70:58:b8:99: 9b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:46:53:AB:DC:64:CC:31:B3:8B:B1:6D:FB:4F:40:3F:3F:C3:95:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/84c7cebd-5039-388c-bb84-61029b80011b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:58:b1:f6:56:e9:8b:33:aa:c8:07:6e:44:ab:72:22:e4:0e: 4e:ab:38:48:32:4a:5a:1d:94:52:36:d5:97:fb:be:ce:9a:2f: 20:c0:93:bc:24:5d:54:97:9f:38:ec:28:28:65:8c:6b:75:6f: ad:af:35:ae:5f:7b:ea:eb:ff:61:66:4d:0e:ef:a9:7a:05:f0: 0a:66:b1:0c:eb:e1:09:74:3c:96:09:5d:b2:71:65:d9:4e:a2: 26:6b:1f:d9:a8:a9:5d:8c:c6:51:99:5b:be:b1:1d:fa:68:44: 47:25:fa:85:e3:a6:29:6f:d5:02:e8:fa:78:99:c0:34:b8:f6: 8c:5f:06:3e:3c:fd:79:92:8d:14:84:79:e8:96:9d:70:9e:ba: 14:0e:8a:c0:3e:85:04:db:19:4e:53:aa:f8:b5:94:92:5d:3c: 70:43:4b:f7:92:2a:ec:2a:8f:24:8d:97:28:13:91:a9:47:d0: ce:a1:42:f4:a4:41:85:f2:e1:10:29:f1:70:b3:87:8a:75:d5: 16:2b:e9:d0:40:44:eb:78:2e:81:98:e5:35:44:7f:78:36:b5: b2:f4:a9:ff:5c:76:71:9e:34:ef:00:57:72:f2:a6:55:6d:fc: e1:cc:81:4d:42:7c:7c:2a:e2:cb:c5:61:c7:de:71:b2:f3:0d: c9:61:1a:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdOTv4p9dozxDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk OTUyMjAxZDEtYTEwYi00ZTc1LTk2OWYtZWJmY2ZlZDA5MGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIWfwmG9gjeto1vXfPXM5u+SP9dj/mbbsKLP 39yfFVNY5OR+a0sIXGjKnmFLcdXG7xGelWnJ2FZP9XbrqJi7WRgCj6/t4yyMPW/0 slww68C/bEAwxrYDc8klYiCUckkDJSo7WWoflYbh8Lm6HR1IUdsiLiBLEmiU0L1w PEiCIyITY2DGmbbkO4IS4eRSWQ/DnTCLpcwtSNIezmoazb5tju9Y2BbVUwJdUxak P/0cC76kVWJsz9qmJ+JEebZznjnXmTmA7cZY43m3msLVJba5sWEebJqhSGWzGZdT vPzzowJNuY4yJVScI0sPii01ldn17pdn/mCd9MRGJ3BYuJmbqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONGU6vcZMwxs4uxbftPQD8/w5VHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvODRjN2NlYmQtNTAzOS0z ODhjLWJiODQtNjEwMjliODAwMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxYsfZW6YszqsgHbkSrciLkDk6rOEgySlodlFI21Zf7vs6aLyDAk7wk XVSXnzjsKChljGt1b62vNa5fe+rr/2FmTQ7vqXoF8ApmsQzr4Ql0PJYJXbJxZdlO oiZrH9moqV2MxlGZW76xHfpoREcl+oXjpilv1QLo+niZwDS49oxfBj48/XmSjRSE eeiWnXCeuhQOisA+hQTbGU5Tqvi1lJJdPHBDS/eSKuwqjySNlygTkalH0M6hQvSk QYXy4RAp8XCzh4p11RYr6dBAROt4LoGY5TVEf3g2tbL0qf9cdnGeNO8AV3LyplVt /OHMgU1CfHwq4svFYcfecbLzDclhGls= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:42 2025 by rpki-client