$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa File: d507668b-e70a-32a7-9458-c5a581f7b715.roa (raw, json) Hash identifier: jdCoCxpLZ+xEp4kSXgM3UqeHPacWQJplyMqAaEeo72g= Subject key identifier: 44:E7:68:1E:55:58:22:65:C8:DE:AB:E3:A7:12:0A:46:F0:1B:09:E2 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487A207597102C0F0EB32D5680 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 208.95.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:75:97:10:2c:0f:0e:b3:2d:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=38477809-939a-4921-b2de-695e3156b305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:10:a2:86:33:57:a6:c9:be:1f:c9:ae:83:44: 21:70:3c:2d:ba:a2:89:a2:d4:60:36:8b:91:39:10: d0:d4:f9:48:b3:02:66:29:15:88:ab:b5:42:b5:57: 7f:44:6c:3f:63:3a:57:61:a9:79:2a:21:35:25:0e: 04:6c:a7:a1:73:f6:76:6d:5a:0b:29:bb:a9:05:17: ce:82:c8:1d:67:e0:4c:18:2d:4e:64:b0:ac:41:20: dc:1d:4f:1d:ff:29:b6:22:42:94:f5:32:64:55:1d: 94:0f:fb:2c:40:2b:33:21:91:61:3a:a8:0e:4a:1d: b8:4a:55:7e:c7:10:cf:c5:99:27:4c:e1:04:a0:6d: b3:af:e8:45:3b:88:36:5e:e8:a9:0d:55:55:a0:f6: 13:b0:e7:3b:46:db:8e:05:ba:9f:41:8e:7f:ff:9a: 1e:58:f0:da:09:26:6e:6e:00:79:a3:4c:65:21:ae: 09:06:7a:ad:f8:2d:bc:c5:82:31:13:a5:b4:a5:b3: f7:ba:04:15:80:5f:11:48:71:67:35:74:76:37:10: a2:80:f6:04:56:8e:c7:d3:6d:a4:ba:eb:6b:96:a4: da:e2:0b:99:43:a0:e1:ae:d6:c6:98:52:26:a2:78: 3f:b8:60:82:b1:ff:20:2d:2e:80:20:6a:e5:d8:bb: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E7:68:1E:55:58:22:65:C8:DE:AB:E3:A7:12:0A:46:F0:1B:09:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:af:6a:0a:1c:85:32:8c:af:11:71:cc:30:63:74:c1:2b:27: 50:22:bf:0a:f0:51:76:a1:57:0b:0b:da:e9:ce:3d:b4:09:2e: 9e:89:d6:6d:7d:ec:2b:60:39:7b:bf:81:02:c1:07:e5:7a:e0: 5c:f6:4b:83:63:e2:9e:d8:da:5e:e2:a0:c5:d5:77:9f:cf:90: 46:22:d3:4a:d4:5d:5b:6c:1d:b7:95:0c:28:b3:21:c7:ab:b5: 2f:1c:34:4c:31:18:b4:af:34:67:3b:cc:ef:cd:e1:45:47:6c: d4:7f:16:f3:57:31:f6:26:b0:8b:92:b1:0a:87:76:4f:ad:66: 06:38:be:63:5e:60:9e:01:27:87:4b:a6:97:b5:87:e5:d7:eb: 25:b8:94:cf:48:ae:75:f6:2b:ae:00:06:23:38:dc:cd:53:c8: d9:16:26:67:4a:fe:0a:21:cc:8c:b5:de:e5:76:0e:51:3e:3f: ad:3d:e3:7d:95:28:47:40:52:1d:08:8d:d8:22:f0:25:60:e7: f0:9b:df:86:9d:67:8b:58:2c:69:1f:2a:07:26:4e:e2:c6:c2: ea:09:57:a7:db:77:4d:c8:d9:10:74:87:c7:ff:d7:ad:1e:67: 34:f7:04:2e:27:64:40:e6:df:7b:c0:43:1f:8e:36:f3:16:44: 50:e2:bf:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IHWXECwPDrMtVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk Mzg0Nzc4MDktOTM5YS00OTIxLWIyZGUtNjk1ZTMxNTZiMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBCihjNXpsm+H8mug0QhcDwtuqKJotRgNouR ORDQ1PlIswJmKRWIq7VCtVd/RGw/YzpXYal5KiE1JQ4EbKehc/Z2bVoLKbupBRfO gsgdZ+BMGC1OZLCsQSDcHU8d/ym2IkKU9TJkVR2UD/ssQCszIZFhOqgOSh24SlV+ xxDPxZknTOEEoG2zr+hFO4g2XuipDVVVoPYTsOc7RtuOBbqfQY5//5oeWPDaCSZu bgB5o0xlIa4JBnqt+C28xYIxE6W0pbP3ugQVgF8RSHFnNXR2NxCigPYEVo7H022k uutrlqTa4guZQ6DhrtbGmFImong/uGCCsf8gLS6AIGrl2LvfswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETnaB5VWCJlyN6r46cSCkbwGwniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZDUwNzY2OGItZTcwYS0z MmE3LTk0NTgtYzVhNTgxZjdiNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOvagochTKMrxFxzDBjdMErJ1AivwrwUXahVwsL2unOPbQJLp6J1m19 7CtgOXu/gQLBB+V64Fz2S4Nj4p7Y2l7ioMXVd5/PkEYi00rUXVtsHbeVDCizIcer tS8cNEwxGLSvNGc7zO/N4UVHbNR/FvNXMfYmsIuSsQqHdk+tZgY4vmNeYJ4BJ4dL ppe1h+XX6yW4lM9IrnX2K64ABiM43M1TyNkWJmdK/gohzIy13uV2DlE+P609432V KEdAUh0Ijdgi8CVg5/Cb34adZ4tYLGkfKgcmTuLGwuoJV6fbd03I2RB0h8f/160e ZzT3BC4nZEDm33vAQx+ONvMWRFDiv1U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:52 2025 by rpki-client