$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa File: d24168f5-a980-3a14-a89b-7351a9920158.roa (raw, json) Hash identifier: xba2YGmLBJU9G2ClokW9jkoSse9EXr7AbhJ3NgDXJvg= Subject key identifier: B1:01:E0:50:D0:CE:1B:83:D9:8D:5D:F3:01:F5:67:64:11:D0:3F:DB Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F43285848EC96929A1343AAB3B2185980 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 22147 IP address blocks: 208.118.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:92:9a:13:43:aa:b3:b2:18:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=e7a034b2-7c67-4549-9a73-cdaad4f21359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:dd:d4:98:8a:57:a6:9f:66:e6:09:ef:3f:82: 86:d8:e7:d3:b5:68:c1:0a:6e:3a:24:50:2a:0e:85: bb:60:c2:37:11:3d:dc:a3:8f:c4:ab:c1:ed:d6:63: cc:df:10:a9:7a:8c:98:f0:91:88:0b:e9:0b:24:72: 23:42:b3:48:7c:de:f8:0a:01:44:75:42:7a:5b:66: bf:1d:82:ab:3f:f2:97:f6:c9:09:0b:fd:14:6e:11: 51:2b:8b:12:8e:c4:05:0f:75:c8:96:6c:95:99:49: 97:ef:38:7a:7d:74:26:f4:ec:b7:f6:01:07:cf:72: f8:05:d3:d4:91:33:2a:2b:e3:5a:95:21:03:d1:37: 3c:7c:d8:22:7e:10:ff:f5:59:97:54:aa:2e:6d:b3: 7b:c2:cc:6f:55:9a:00:7a:d9:86:95:66:79:3c:4f: 25:6d:c1:0c:29:b9:8f:9e:30:51:d8:23:41:50:53: b9:f4:8e:55:e4:67:9e:17:8b:75:01:67:a8:30:0f: 26:0a:88:f6:57:a2:3d:6e:40:bb:13:36:50:58:2e: 65:2b:31:20:17:65:ad:88:94:00:ca:af:6d:9f:e0: d5:73:2f:87:59:7b:ac:77:87:44:33:c0:4d:c9:ae: 78:6f:c1:5c:eb:e2:71:6a:2c:8c:84:73:11:c4:d8: 59:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:01:E0:50:D0:CE:1B:83:D9:8D:5D:F3:01:F5:67:64:11:D0:3F:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7b:87:a1:5c:ae:74:96:5e:7e:8f:15:29:ee:3c:28:fe:e9: 81:ad:9d:00:29:5c:04:81:08:62:34:f1:d0:e0:d7:fe:8b:50: 1e:32:0c:28:1b:d4:0c:8c:f1:2c:9a:99:2f:23:5f:a0:5d:e3: 7b:12:5a:d2:02:49:ec:de:b8:3e:1f:0b:94:a4:dd:a5:93:04: 7a:53:81:6d:32:f3:a6:71:bf:65:11:8d:0e:2a:34:0e:4e:18: 51:34:6d:94:25:72:ba:11:16:48:43:b2:26:26:c4:79:02:6d: f3:05:99:03:b3:4c:47:3c:a0:58:4e:3a:3d:78:9c:06:b3:ce: ed:4c:f7:2f:f1:9c:38:f2:34:40:69:26:de:17:b6:21:f8:bc: 61:a4:8a:2d:0e:25:53:1f:5f:3e:ad:78:33:11:58:31:70:13: 49:a0:92:ef:57:9c:2e:ee:e1:7c:87:48:f4:71:32:03:ed:44: 8d:5f:a8:da:a5:9a:b9:8d:af:6a:b7:e8:51:ae:5e:e4:81:d0: 85:eb:88:e2:c4:d4:fb:74:96:a5:be:2a:d9:7b:cb:6c:71:b2: 54:d4:2d:b7:59:9b:35:2f:c7:4e:ea:2d:20:ee:b6:84:a9:74: be:fd:f7:3a:cf:69:e0:ee:a7:ae:2d:74:1d:63:b2:bb:e6:ca: 2c:9f:48:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpKaE0Oqs7IYWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZTdhMDM0YjItN2M2Ny00NTQ5LTlhNzMtY2RhYWQ0ZjIxMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9N3UmIpXpp9m5gnvP4KG2OfTtWjBCm46JFAq DoW7YMI3ET3co4/Eq8Ht1mPM3xCpeoyY8JGIC+kLJHIjQrNIfN74CgFEdUJ6W2a/ HYKrP/KX9skJC/0UbhFRK4sSjsQFD3XIlmyVmUmX7zh6fXQm9Oy39gEHz3L4BdPU kTMqK+NalSED0Tc8fNgifhD/9VmXVKoubbN7wsxvVZoAetmGlWZ5PE8lbcEMKbmP njBR2CNBUFO59I5V5GeeF4t1AWeoMA8mCoj2V6I9bkC7EzZQWC5lKzEgF2WtiJQA yq9tn+DVcy+HWXusd4dEM8BNya54b8Fc6+JxaiyMhHMRxNhZ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEB4FDQzhuD2Y1d8wH1Z2QR0D/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvZDI0MTY4ZjUtYTk4MC0z YTE0LWE4OWItNzM1MWE5OTIwMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh7h6FcrnSWXn6PFSnuPCj+6YGtnQApXASBCGI08dDg1/6LUB4yDCgb 1AyM8SyamS8jX6Bd43sSWtICSezeuD4fC5Sk3aWTBHpTgW0y86Zxv2URjQ4qNA5O GFE0bZQlcroRFkhDsiYmxHkCbfMFmQOzTEc8oFhOOj14nAazzu1M9y/xnDjyNEBp Jt4XtiH4vGGkii0OJVMfXz6teDMRWDFwE0mgku9XnC7u4XyHSPRxMgPtRI1fqNql mrmNr2q36FGuXuSB0IXriOLE1Pt0lqW+Ktl7y2xxslTULbdZmzUvx07qLSDutoSp dL799zrPaeDup64tdB1jsrvmyiyfSBc= -----END CERTIFICATE-----Generated at Fri Mar 14 09:17:29 2025 by rpki-client