$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa File: f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa (raw, json) Hash identifier: qZMrG/Cd+yMnz7qKl3IXlEH7l9oSnDyxRr7RPwzuWR4= Subject key identifier: 06:B7:DE:03:FD:8F:2A:01:3A:21:AF:5A:C2:E3:4A:69:D6:1B:7A:0C Certificate issuer: /CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Certificate serial: 010D0C9F432858485F9AE6462F3FF2CFB36C7B80 Authority key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 16509 IP address blocks: 198.160.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:e6:46:2f:3f:f2:cf:b3:6c:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=d1dd04a6-0c88-4b23-9fae-be1b61618e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:a0:2e:75:94:41:bc:f9:f2:4d:79:d9:60: f0:1a:99:72:e0:c8:0f:21:2b:e9:10:0d:55:74:1d: 89:c2:2b:45:07:98:d9:22:a7:08:34:f9:cc:9f:a0: 2f:e6:ae:48:f7:ef:62:77:73:02:d6:dc:48:f8:76: ee:45:c1:81:0f:23:dd:46:13:5c:c1:32:df:86:f5: ed:52:4b:b3:51:05:ef:83:23:88:df:4e:f1:f0:2b: 88:b7:03:33:a6:3b:05:51:9f:44:d4:b6:2c:15:a5: 2d:8d:00:0b:dc:32:89:3f:39:56:21:e5:29:f4:59: 01:37:44:c1:86:36:5c:e6:13:20:e1:35:cb:2e:88: 1f:01:e4:5c:93:34:2b:27:d3:f0:04:cf:c9:dc:5a: 8f:ac:e9:56:32:c3:e5:93:05:cc:1c:5f:10:cd:08: 8d:83:55:93:5a:3d:af:7c:26:2e:7c:9f:21:d8:f2: fa:f4:8d:7e:6f:06:f1:aa:be:96:83:25:7e:39:f5: 49:88:1b:93:82:ae:a5:1a:1e:49:ca:59:7c:c1:4d: 6e:3b:21:83:43:d0:62:5a:d1:26:6e:33:29:03:e4: e5:ec:32:a0:b9:b2:97:1d:e4:e9:b7:ac:16:28:95: e2:36:9f:fc:9b:ee:b4:1a:f7:6a:95:28:82:06:48: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B7:DE:03:FD:8F:2A:01:3A:21:AF:5A:C2:E3:4A:69:D6:1B:7A:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl X509v3 Authority Key Identifier: keyid:EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer sbgp-ipAddrBlock: critical IPv4: 198.160.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:f5:be:55:6d:da:5d:31:26:e6:90:94:73:35:04:ad:17:25: f4:f4:ce:a0:24:96:b7:4e:e2:4f:48:58:75:80:b1:0b:b9:2b: 74:0d:4e:3a:e2:f2:b2:c0:22:04:0f:3b:3e:7d:76:08:1b:5c: 59:b3:bf:b8:08:24:99:df:cd:fb:ec:2d:b6:f7:87:08:49:3e: 2e:1d:50:c7:d2:db:a7:d9:c4:35:23:68:a7:c0:39:8c:3b:5a: 9f:92:4e:b2:81:09:2f:5c:6d:f0:86:a6:5a:46:f4:48:6a:ce: 78:95:30:06:39:76:aa:be:5c:3d:72:9c:db:3a:87:f5:3e:98: 96:10:4b:ad:bc:d6:ec:ef:18:f6:01:c3:e7:85:52:8d:6e:47: 56:bf:43:e7:a4:22:c4:db:f6:c5:06:e7:e3:4a:ff:3d:71:1f: b1:f9:c6:c0:cb:60:3b:b9:fb:ef:e0:44:5f:8d:0e:bd:d3:c8: 45:98:60:a3:43:bf:d3:a2:1c:8b:b2:95:0e:03:ae:d1:14:6e: ea:f5:b5:4e:4a:9c:ca:c3:40:57:26:73:ad:f9:e6:2b:3a:82: 39:07:dd:e3:f9:ad:19:73:9a:56:67:af:80:03:c6:e8:e5:8b: 95:43:d1:75:3e:fe:e8:7b:8a:5e:54:8c:18:3a:27:b2:f7:f2: ef:97:4e:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmuZGLz/yz7Nse4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5MWItN2JlMTJkNTMz ZGE3MB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDFkZDA0YTYtMGM4OC00YjIzLTlmYWUtYmUxYjYxNjE4ZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoigLnWUQbz58k152WDwGply4MgPISvpEA1V dB2JwitFB5jZIqcINPnMn6Av5q5I9+9id3MC1txI+HbuRcGBDyPdRhNcwTLfhvXt UkuzUQXvgyOI307x8CuItwMzpjsFUZ9E1LYsFaUtjQAL3DKJPzlWIeUp9FkBN0TB hjZc5hMg4TXLLogfAeRckzQrJ9PwBM/J3FqPrOlWMsPlkwXMHF8QzQiNg1WTWj2v fCYufJ8h2PL69I1+bwbxqr6WgyV+OfVJiBuTgq6lGh5Jyll8wU1uOyGDQ9BiWtEm bjMpA+Tl7DKgubKXHeTpt6wWKJXiNp/8m+60GvdqlSiCBkj9ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAa33gP9jyoBOiGvWsLjSmnWG3oMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZh OTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1MzNkYTcvZjE1N2Q1YTgtMWY0OC0z ZmExLWE1YzQtZmQzZjhiODIwNmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5 MWItN2JlMTJkNTMzZGE3L2I4ZmE5NWNhLWFhNDItNGI4Ni04OTFiLTdiZTEyZDUz M2RhNy5jcmwwHwYDVR0jBBgwFoAU7sOjJy3EvbNgvZp5M5mA/c2R1/0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUx MmQ1MzNkYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqCPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMD1vlVt2l0xJuaQlHM1BK0XJfT0zqAklrdO4k9IWHWAsQu5K3QNTjri 8rLAIgQPOz59dggbXFmzv7gIJJnfzfvsLbb3hwhJPi4dUMfS26fZxDUjaKfAOYw7 Wp+STrKBCS9cbfCGplpG9EhqzniVMAY5dqq+XD1ynNs6h/U+mJYQS6281uzvGPYB w+eFUo1uR1a/Q+ekIsTb9sUG5+NK/z1xH7H5xsDLYDu5++/gRF+NDr3TyEWYYKND v9OiHIuylQ4DrtEUbur1tU5KnMrDQFcmc6355is6gjkH3eP5rRlzmlZnr4ADxujl i5VD0XU+/uh7il5UjBg6J7L38u+XTio= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:18 2025 by rpki-client