$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e9b0b2ce-bcec-332c-ada8-d0d3bc2c233c.roa File: e9b0b2ce-bcec-332c-ada8-d0d3bc2c233c.roa (raw, json) Hash identifier: zpSLheco9gaNPyzbRo8lTrLAGjUST7/tafAnKN4hIsQ= Subject key identifier: 91:8B:E1:14:EC:27:12:A4:9F:82:02:E0:BF:DE:2D:01:91:EC:3D:64 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487A20750DEC987FEF84805900 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e9b0b2ce-bcec-332c-ada8-d0d3bc2c233c.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 208.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:75:0d:ec:98:7f:ef:84:80:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=f8ad92b0-960b-4a05-9213-b69286d23660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:55:85:5b:a1:e8:5f:3e:1b:a3:d3:0b:59:8c: f8:3c:5f:f6:19:0c:99:05:02:ae:f0:d4:3d:39:2d: 13:39:99:17:d0:5f:42:87:6a:6a:81:ef:78:13:63: e2:e8:5c:a3:74:d5:2a:20:90:32:16:fa:01:0c:68: 73:47:f8:f9:ee:95:4b:4a:2d:48:83:58:dd:39:09: 38:c8:9f:a9:6a:1e:2a:a1:78:ad:f2:b4:0a:02:d3: 8a:3d:7c:c9:b5:89:44:c7:01:79:21:bb:7c:b4:5f: 1e:7e:52:9c:de:d3:80:39:35:99:f4:a2:3a:74:a2: c3:97:6a:92:93:2e:8e:2f:ae:aa:f5:b5:6b:ce:e0: 03:5c:51:6a:1b:d5:87:ea:a3:fb:fc:8a:be:2d:4e: b5:83:aa:19:4e:8a:ca:03:b7:99:f7:c3:c5:80:bd: 5c:61:48:b7:2c:dd:77:04:d8:9c:10:30:b9:ec:bd: 4b:9d:7e:8d:94:a4:fe:ca:40:90:af:3a:09:cc:78: 6b:ff:5f:96:fd:30:ef:f1:d5:4b:f3:e9:6c:11:4f: 48:95:f6:ea:6f:2d:e9:dc:90:14:c2:d3:7a:ae:f1: 2c:cb:ea:05:70:50:df:82:24:6a:6f:08:02:87:52: 14:5c:a5:e6:a1:a6:63:84:07:5e:7d:89:1e:36:30: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8B:E1:14:EC:27:12:A4:9F:82:02:E0:BF:DE:2D:01:91:EC:3D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e9b0b2ce-bcec-332c-ada8-d0d3bc2c233c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d8:de:78:fe:8b:40:dc:6f:2c:6b:0d:27:76:ec:f8:94:1f: 58:54:c3:8d:3d:13:f1:b4:e6:37:3c:33:30:9f:1f:26:fd:35: ef:6b:56:8d:20:8d:5e:6e:eb:7a:ff:6f:82:53:7f:e0:3d:6c: ee:1f:e9:be:27:59:f7:5a:9f:7f:d0:7a:5e:75:4a:94:b8:62: ed:7f:83:31:b7:7c:8d:cc:6a:cc:a2:2d:27:30:40:f4:6b:cf: 33:33:54:49:31:06:bc:b0:56:1c:a2:5c:aa:3d:69:68:0a:96: 90:d4:09:03:c0:af:0e:5e:d9:fa:d5:a8:35:50:95:83:ed:ac: 1b:2f:c1:ea:29:d9:cf:2f:6e:4d:61:86:81:e5:8d:92:7e:9b: bc:d2:14:3d:c3:3c:05:28:47:c6:18:1a:5c:f2:44:3a:31:1e: 06:6d:ee:7e:d6:90:46:e5:d0:01:f0:c8:43:49:aa:59:0b:dc: 79:e2:f8:fa:a3:9c:35:71:b1:de:46:36:cb:60:e7:5f:0c:ce: 1b:68:b6:f8:aa:42:47:3d:49:0e:d1:c0:dd:27:6b:10:55:bd: 07:bc:b6:a0:2c:37:88:5b:66:8d:9b:97:99:c9:75:e3:07:64: fd:e8:08:df:17:1b:42:7b:11:f6:3b:e6:1b:ad:86:49:28:d3: 0b:a3:d5:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IHUN7Jh/74SAWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk ZjhhZDkyYjAtOTYwYi00YTA1LTkyMTMtYjY5Mjg2ZDIzNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFWFW6HoXz4bo9MLWYz4PF/2GQyZBQKu8NQ9 OS0TOZkX0F9Ch2pqge94E2Pi6FyjdNUqIJAyFvoBDGhzR/j57pVLSi1Ig1jdOQk4 yJ+pah4qoXit8rQKAtOKPXzJtYlExwF5Ibt8tF8eflKc3tOAOTWZ9KI6dKLDl2qS ky6OL66q9bVrzuADXFFqG9WH6qP7/Iq+LU61g6oZTorKA7eZ98PFgL1cYUi3LN13 BNicEDC57L1LnX6NlKT+ykCQrzoJzHhr/1+W/TDv8dVL8+lsEU9Ilfbqby3p3JAU wtN6rvEsy+oFcFDfgiRqbwgCh1IUXKXmoaZjhAdefYkeNjB/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGL4RTsJxKkn4IC4L/eLQGR7D1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZTliMGIyY2UtYmNlYy0z MzJjLWFkYTgtZDBkM2JjMmMyMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvY3nj+i0DcbyxrDSd27PiUH1hUw409E/G05jc8MzCfHyb9Ne9rVo0g jV5u63r/b4JTf+A9bO4f6b4nWfdan3/Qel51SpS4Yu1/gzG3fI3MasyiLScwQPRr zzMzVEkxBrywVhyiXKo9aWgKlpDUCQPArw5e2frVqDVQlYPtrBsvweop2c8vbk1h hoHljZJ+m7zSFD3DPAUoR8YYGlzyRDoxHgZt7n7WkEbl0AHwyENJqlkL3Hni+Pqj nDVxsd5GNstg518MzhtotviqQkc9SQ7RwN0naxBVvQe8tqAsN4hbZo2bl5nJdeMH ZP3oCN8XG0J7EfY75huthkko0wuj1a8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:25 2025 by rpki-client