$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa File: 9850d129-378e-38bd-a615-acb2a6e4e18b.roa (raw, json) Hash identifier: aImhXIf7ZLPzpEjP8R72lXbGvTUlo/3lPBx1nnkBE5U= Subject key identifier: DF:96:56:9F:79:CC:5D:BB:C7:8E:BE:A5:A9:7E:4A:49:28:FE:56:60 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487755D952FB32CF2D57E57900 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 19795 IP address blocks: 208.85.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d9:52:fb:32:cf:2d:57:e5:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=b3d70cf6-5022-4f96-a788-1e911b81ad1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b3:14:6b:68:fb:9a:e8:00:34:63:83:6b:c6: 9b:a0:c7:1b:21:d2:0d:00:45:8f:25:e7:49:cb:ef: 71:6f:65:f3:05:9e:1b:8e:7e:a8:db:74:35:c4:e7: 04:c5:06:22:f4:81:6f:89:97:0c:3d:93:d1:e8:d6: a6:a4:69:f7:ec:a6:e0:82:8c:9e:96:bf:d8:c1:ad: 54:28:8d:41:06:7f:21:a7:9f:a2:47:43:91:ea:13: 1a:60:f7:fb:ce:00:00:79:cf:15:b1:4c:77:e4:0a: 19:f9:cb:ae:64:82:ac:3e:e3:55:4b:5e:3d:b2:c9: 13:a0:01:9e:9b:9d:e8:e5:4b:ea:94:c6:b5:9b:e4: 35:da:74:a6:25:96:3c:c5:f6:a7:95:6c:7a:8b:d4: b9:fd:c5:e9:95:84:a7:38:54:55:90:90:26:c6:e9: df:70:c9:e8:c4:a6:74:f8:90:49:54:62:f1:79:83: 8b:89:00:cb:a0:78:2e:78:87:5f:71:f9:ca:20:21: 4d:d0:25:dd:2e:39:b7:3d:51:a0:e3:71:ce:a1:92: 1a:8e:74:bc:9a:17:ce:87:fe:5e:de:e7:03:e1:03: cd:56:64:64:88:14:67:75:41:7f:0a:a8:f0:58:52: db:ae:8b:78:31:50:0f:bd:f0:f6:fc:86:3f:3b:ca: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:96:56:9F:79:CC:5D:BB:C7:8E:BE:A5:A9:7E:4A:49:28:FE:56:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a5:4e:ef:69:88:ec:be:cb:cf:04:44:9a:89:20:ed:f4:db: 8a:48:60:e0:ac:55:36:69:87:96:f5:cb:9f:ff:67:3a:e3:b4: 17:11:e3:82:50:8e:61:1a:91:ea:f0:08:05:58:7e:7c:b8:08: 01:0c:48:c9:fa:bc:19:48:33:41:f5:60:f6:9a:60:76:96:20: 58:4d:c9:30:30:60:6d:49:6e:88:45:f0:0f:1a:8c:08:9d:0c: a7:a6:06:bb:98:bf:a4:23:58:2a:4c:78:a5:0b:df:52:20:6b: 72:af:2d:0f:9c:e6:b2:06:8a:b1:70:db:37:6f:30:32:c6:79: 2b:bd:82:23:5d:e9:25:e9:a8:23:ca:b5:29:bd:79:2b:17:c8: 8c:51:54:f9:4b:2a:6a:19:c5:ab:e1:55:f5:0b:45:76:1f:40: bc:97:56:ae:dd:d0:26:f2:a8:7d:97:fc:5d:26:c6:9f:21:37: ca:a6:9a:51:83:8a:0a:e9:ed:72:e1:a6:e1:30:99:6f:c3:91: 2c:82:ea:6e:19:6b:4a:46:aa:6b:da:a0:e7:df:30:35:0b:d2: 48:3e:63:c6:30:82:2d:fa:37:a8:b1:2f:df:c5:e5:51:eb:f9: bd:d5:fe:a6:d8:c5:16:7d:66:7d:22:f4:93:d0:ad:e6:e8:a7: a0:8e:e2:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdlS+zLPLVfleQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk YjNkNzBjZjYtNTAyMi00Zjk2LWE3ODgtMWU5MTFiODFhZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbMUa2j7mugANGODa8aboMcbIdINAEWPJedJ y+9xb2XzBZ4bjn6o23Q1xOcExQYi9IFviZcMPZPR6NampGn37Kbggoyelr/Ywa1U KI1BBn8hp5+iR0OR6hMaYPf7zgAAec8VsUx35AoZ+cuuZIKsPuNVS149sskToAGe m53o5UvqlMa1m+Q12nSmJZY8xfanlWx6i9S5/cXplYSnOFRVkJAmxunfcMnoxKZ0 +JBJVGLxeYOLiQDLoHgueIdfcfnKICFN0CXdLjm3PVGg43HOoZIajnS8mhfOh/5e 3ucD4QPNVmRkiBRndUF/CqjwWFLbrot4MVAPvfD2/IY/O8psJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+WVp95zF27x46+pal+Skko/lZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOTg1MGQxMjktMzc4ZS0z OGJkLWE2MTUtYWNiMmE2ZTRlMThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqlTu9piOy+y88ERJqJIO3024pIYOCsVTZph5b1y5//ZzrjtBcR44JQ jmEakerwCAVYfny4CAEMSMn6vBlIM0H1YPaaYHaWIFhNyTAwYG1JbohF8A8ajAid DKemBruYv6QjWCpMeKUL31Iga3KvLQ+c5rIGirFw2zdvMDLGeSu9giNd6SXpqCPK tSm9eSsXyIxRVPlLKmoZxavhVfULRXYfQLyXVq7d0CbyqH2X/F0mxp8hN8qmmlGD igrp7XLhpuEwmW/DkSyC6m4Za0pGqmvaoOffMDUL0kg+Y8Ywgi36N6ixL9/F5VHr +b3V/qbYxRZ9Zn0i9JPQrebop6CO4kc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:32 2025 by rpki-client