$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2945037-f57d-4ca6-848a-9343c4a6c452/392993d2-53bf-3a1b-9ace-df881a305e09.roa File: 392993d2-53bf-3a1b-9ace-df881a305e09.roa (raw, json) Hash identifier: VHyf7/acvZzPInaL0Rf9SunBlRhff+O8bEhOHjZYlK4= Subject key identifier: E7:9D:17:91:82:0D:4D:0F:13:83:F3:B2:B5:07:0A:26:02:91:36:79 Certificate issuer: /CN=a2945037-f57d-4ca6-848a-9343c4a6c452 Certificate serial: 010D0C9F43285848E59BC7DFB2AD6A0C33BB7200 Authority key identifier: 6D:9D:58:D5:31:68:2D:8E:83:F7:01:8A:C2:EB:22:F0:68:35:AC:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2945037-f57d-4ca6-848a-9343c4a6c452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2945037-f57d-4ca6-848a-9343c4a6c452/392993d2-53bf-3a1b-9ace-df881a305e09.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16509 IP address blocks: 208.93.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2945037-f57d-4ca6-848a-9343c4a6c452/a2945037-f57d-4ca6-848a-9343c4a6c452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2945037-f57d-4ca6-848a-9343c4a6c452/a2945037-f57d-4ca6-848a-9343c4a6c452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2945037-f57d-4ca6-848a-9343c4a6c452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c7:df:b2:ad:6a:0c:33:bb:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2945037-f57d-4ca6-848a-9343c4a6c452 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=b5c27e21-8358-425c-a24b-f0e8b6c02b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3b:af:cd:fc:df:0b:ca:0c:81:29:21:f6:84: 97:d1:21:c0:df:68:df:da:ab:17:90:13:aa:d9:1c: 69:90:85:5a:15:ed:79:3a:1a:8b:19:d6:8c:2b:20: 2e:3d:3b:1c:c9:ca:69:98:f9:88:3b:51:19:4e:d9: 5e:c4:08:d4:ba:50:e9:c7:c2:0d:bf:5e:38:4d:2e: a9:55:dc:77:d5:98:72:da:b4:94:86:6e:7f:6b:f4: ce:94:6f:b8:2e:8e:7a:2e:f7:c0:72:db:3c:26:b3: ea:98:fd:23:dd:65:1e:76:c7:d6:62:d4:6f:37:e9: 20:56:94:98:da:32:6e:1e:f8:a6:1e:43:48:6b:bf: b9:20:ff:4c:34:4b:a8:d5:3c:b4:cb:26:c3:d3:60: b4:e4:98:6a:2b:5d:3f:23:90:a2:03:e3:97:d0:d0: 7c:7a:14:92:5d:43:d8:fe:26:f8:7d:bf:4b:44:a0: a0:e7:b8:3c:d1:07:0c:73:ad:9d:e2:3a:df:f2:4c: d0:25:5a:b8:8a:0d:62:18:49:ff:83:a0:6f:d9:3f: 88:cc:c4:00:d7:3e:d0:5b:26:fe:88:5d:68:bd:13: 8c:00:71:1d:e9:a7:65:a7:ca:fe:20:38:98:5a:14: a1:49:1e:91:e9:7d:f8:ef:80:c7:90:e8:85:e6:80: bd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9D:17:91:82:0D:4D:0F:13:83:F3:B2:B5:07:0A:26:02:91:36:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2945037-f57d-4ca6-848a-9343c4a6c452/392993d2-53bf-3a1b-9ace-df881a305e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2945037-f57d-4ca6-848a-9343c4a6c452/a2945037-f57d-4ca6-848a-9343c4a6c452.crl X509v3 Authority Key Identifier: keyid:6D:9D:58:D5:31:68:2D:8E:83:F7:01:8A:C2:EB:22:F0:68:35:AC:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a2945037-f57d-4ca6-848a-9343c4a6c452.cer sbgp-ipAddrBlock: critical IPv4: 208.93.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:33:db:a3:7c:95:92:91:6a:33:99:e1:a7:e7:db:67:eb:80: 54:9a:bb:62:60:6f:7d:5e:e4:8b:40:3a:b8:d5:12:33:f9:1c: 84:b1:b4:01:4d:79:f3:75:b7:cd:4c:40:f5:9c:48:a0:53:76: 17:90:c1:7e:50:be:b3:c3:4d:ac:b3:dd:6e:dc:43:26:0c:fd: 41:e8:ed:66:9c:1c:d3:b4:8e:41:f8:64:7c:15:24:a1:94:34: 44:ed:c8:9a:ac:a0:be:4e:bd:ef:3d:2c:f2:aa:1b:1e:0b:4d: 81:a0:04:0a:9f:32:9d:11:7d:8e:e9:67:bf:e6:98:3e:47:28: 65:35:52:d0:bb:d7:7d:f5:ea:ea:44:7a:7c:d2:7e:20:b4:64: c0:94:75:d0:7f:0c:22:4d:83:e5:59:e9:d0:da:7a:d3:a6:2a: 21:6d:3d:73:ed:d8:ef:d3:6c:c2:b0:c6:29:5a:f3:24:99:f6: d8:44:c1:21:68:2d:58:83:71:43:00:4c:5d:20:5f:2c:c8:c8: ff:da:d5:11:50:fe:6e:de:9c:e5:1d:5e:48:08:8a:02:2f:17: fa:9e:53:6a:ac:b6:cd:09:6d:3f:32:71:8a:50:f6:9e:7e:06: d6:23:4b:a1:65:cd:f2:29:26:06:1f:67:b6:2f:d5:b8:de:fa: f4:61:26:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8ffsq1qDDO7cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NDUwMzctZjU3ZC00Y2E2LTg0OGEtOTM0M2M0YTZj NDUyMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YjVjMjdlMjEtODM1OC00MjVjLWEyNGItZjBlOGI2YzAyYjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DuvzfzfC8oMgSkh9oSX0SHA32jf2qsXkBOq 2RxpkIVaFe15OhqLGdaMKyAuPTscycppmPmIO1EZTtlexAjUulDpx8INv144TS6p Vdx31Zhy2rSUhm5/a/TOlG+4Lo56LvfActs8JrPqmP0j3WUedsfWYtRvN+kgVpSY 2jJuHvimHkNIa7+5IP9MNEuo1Ty0yybD02C05JhqK10/I5CiA+OX0NB8ehSSXUPY /ib4fb9LRKCg57g80QcMc62d4jrf8kzQJVq4ig1iGEn/g6Bv2T+IzMQA1z7QWyb+ iF1ovROMAHEd6adlp8r+IDiYWhShSR6R6X3474DHkOiF5oC9XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOedF5GCDU0PE4PzsrUHCiYCkTZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMjk0 NTAzNy1mNTdkLTRjYTYtODQ4YS05MzQzYzRhNmM0NTIvMzkyOTkzZDItNTNiZi0z YTFiLTlhY2UtZGY4ODFhMzA1ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTI5NDUwMzctZjU3ZC00Y2E2LTg0 OGEtOTM0M2M0YTZjNDUyL2EyOTQ1MDM3LWY1N2QtNGNhNi04NDhhLTkzNDNjNGE2 YzQ1Mi5jcmwwHwYDVR0jBBgwFoAUbZ1Y1TFoLY6D9wGKwusi8Gg1rKcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMjk0NTAzNy1mNTdkLTRjYTYtODQ4YS05MzQz YzRhNmM0NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F1nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAz26N8lZKRajOZ4afn22frgFSau2Jgb31e5ItAOrjVEjP5HISxtAFN efN1t81MQPWcSKBTdheQwX5QvrPDTayz3W7cQyYM/UHo7WacHNO0jkH4ZHwVJKGU NETtyJqsoL5Ove89LPKqGx4LTYGgBAqfMp0RfY7pZ7/mmD5HKGU1UtC713316upE enzSfiC0ZMCUddB/DCJNg+VZ6dDaetOmKiFtPXPt2O/TbMKwxila8ySZ9thEwSFo LViDcUMATF0gXyzIyP/a1RFQ/m7enOUdXkgIigIvF/qeU2qsts0JbT8ycYpQ9p5+ BtYjS6FlzfIpJgYfZ7Yv1bje+vRhJlQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:26 2025 by rpki-client