$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/fe10d7f5-e32f-34fe-936a-06f7e0f904c3.roa File: fe10d7f5-e32f-34fe-936a-06f7e0f904c3.roa (raw, json) Hash identifier: K6xobadcOWdAhpydiL8oUeV3kfVIN2uDqO6TaAb0Bw4= Subject key identifier: EB:DB:2F:34:2A:52:C9:5D:A0:13:0A:F4:3F:F2:9E:38:98:E8:75:E0 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487755D3EF5982AA523957EA00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/fe10d7f5-e32f-34fe-936a-06f7e0f904c3.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 208.85.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d3:ef:59:82:aa:52:39:57:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=cfc4a2c7-9757-4426-8841-3f75b64b8062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:e3:36:5b:d3:fd:f1:a6:1b:d6:c0:0f:63: a3:54:bd:cd:3e:49:64:54:ab:45:bb:b6:17:d9:66: 76:ae:aa:b1:cb:23:47:28:f7:e8:12:62:46:c1:91: 70:44:31:66:30:09:94:d0:4d:ae:43:3f:fb:1c:9e: 4e:e2:f1:c8:90:86:a0:6a:a4:5d:5d:a2:23:a6:5f: 71:ce:23:88:34:34:49:37:13:c6:59:c0:30:80:33: c8:be:18:ab:3f:f9:be:6a:2e:c6:87:f1:24:32:c5: 73:8c:96:fa:0b:93:ce:de:4a:b6:11:10:98:4f:5c: f5:3f:94:78:4f:05:60:aa:6c:d9:ee:dd:2e:26:29: 79:9d:f5:82:b7:42:bd:68:f5:95:02:d4:51:57:3c: 24:fd:70:a6:30:21:d5:b4:3d:c7:cc:0a:03:d0:3b: e2:02:0a:31:4b:f1:4e:d7:f7:d8:16:62:90:2a:f7: ae:9a:00:10:3b:b8:fa:59:98:af:2f:5c:ca:52:5c: c1:51:44:1c:60:e3:ff:c9:52:26:43:f7:5b:60:37: 05:e8:37:5a:d1:54:f8:3a:c8:b6:8d:fb:09:0c:e8: 6b:1b:61:b8:a4:72:71:94:ce:c6:56:4e:70:dc:cf: 92:7e:d5:84:e5:bc:a3:3c:1d:a0:e8:74:e8:20:2b: 53:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DB:2F:34:2A:52:C9:5D:A0:13:0A:F4:3F:F2:9E:38:98:E8:75:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/fe10d7f5-e32f-34fe-936a-06f7e0f904c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b6:0f:a6:39:ee:df:12:b0:ed:3d:40:c2:ee:91:cc:af:7a: 8c:68:25:b0:9a:2a:b6:00:e1:c8:bb:73:0a:27:bd:8c:5a:57: 6f:fd:3e:09:ed:c7:be:bc:b3:5d:c0:0c:38:de:d6:2d:79:6e: 87:ba:6e:44:b1:ba:7e:49:53:e1:73:17:fa:ac:35:6e:8c:a6: 09:27:03:a6:dc:9f:3f:be:d5:e7:49:1d:21:66:27:9f:45:09: 33:75:78:b8:05:04:9e:b9:16:9b:32:9e:fe:30:10:86:65:93: d9:55:ed:5f:64:ce:5a:e4:9a:d0:57:37:ff:1c:df:d4:11:f5: 0d:4e:c2:81:70:71:d9:08:f6:c3:2d:6b:79:ca:75:8c:a5:7d: 7b:ba:6d:64:f1:c0:1c:5c:99:47:d6:42:e5:75:5c:e8:ab:9a: 2f:ce:f7:e6:0c:e2:36:da:52:5d:26:08:f2:c3:57:71:0a:a7: 05:8a:f8:50:54:71:34:30:0e:f0:57:36:64:8e:00:e7:4d:4c: 02:12:ed:8e:03:db:68:75:96:54:36:bb:e0:77:76:f8:04:53: 58:0a:40:17:c0:25:5a:78:24:83:c7:a6:79:cb:22:27:80:31: 08:e0:ca:f2:ed:d0:08:09:41:43:46:fd:25:9d:77:a8:f2:4a: c2:2a:b6:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdPvWYKqUjlX6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk Y2ZjNGEyYzctOTc1Ny00NDI2LTg4NDEtM2Y3NWI2NGI4MDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKvjNlvT/fGmG9bAD2OjVL3NPklkVKtFu7YX 2WZ2rqqxyyNHKPfoEmJGwZFwRDFmMAmU0E2uQz/7HJ5O4vHIkIagaqRdXaIjpl9x ziOINDRJNxPGWcAwgDPIvhirP/m+ai7Gh/EkMsVzjJb6C5PO3kq2ERCYT1z1P5R4 TwVgqmzZ7t0uJil5nfWCt0K9aPWVAtRRVzwk/XCmMCHVtD3HzAoD0DviAgoxS/FO 1/fYFmKQKveumgAQO7j6WZivL1zKUlzBUUQcYOP/yVImQ/dbYDcF6Dda0VT4Osi2 jfsJDOhrG2G4pHJxlM7GVk5w3M+SftWE5byjPB2g6HToICtTswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvbLzQqUsldoBMK9D/ynjiY6HXgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZmUxMGQ3ZjUtZTMyZi0z NGZlLTkzNmEtMDZmN2UwZjkwNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm2D6Y57t8SsO09QMLukcyveoxoJbCaKrYA4ci7cwonvYxaV2/9Pgnt x768s13ADDje1i15boe6bkSxun5JU+FzF/qsNW6MpgknA6bcnz++1edJHSFmJ59F CTN1eLgFBJ65Fpsynv4wEIZlk9lV7V9kzlrkmtBXN/8c39QR9Q1OwoFwcdkI9sMt a3nKdYylfXu6bWTxwBxcmUfWQuV1XOirmi/O9+YM4jbaUl0mCPLDV3EKpwWK+FBU cTQwDvBXNmSOAOdNTAIS7Y4D22h1llQ2u+B3dvgEU1gKQBfAJVp4JIPHpnnLIieA MQjgyvLt0AgJQUNG/SWdd6jySsIqtss= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:37 2025 by rpki-client