$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa File: 423c23a3-fd63-3040-9f8b-286fc8843cee.roa (raw, json) Hash identifier: QskHCapyRGo2M6TApdjZgCsqU9tmgynyPu3L3y0UOg4= Subject key identifier: 70:70:64:EA:E2:F3:54:3F:39:F9:C7:DF:60:A7:86:51:65:12:DD:3F Certificate issuer: /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Certificate serial: 010D0C9F432858487A20730A65C6A7CB6B338B00 Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 7057 IP address blocks: 216.8.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:73:0a:65:c6:a7:cb:6b:33:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=99e542ce-cfb3-4239-8922-45ef6f76db5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:db:de:8a:e3:33:34:83:6a:93:67:e2:cf: 3d:16:21:06:4f:b3:b9:ea:74:b1:54:d6:99:12:ad: 8f:67:26:7b:56:b5:c2:d3:02:fa:07:aa:f1:67:64: 18:1b:9e:28:51:96:1a:29:15:af:35:4b:5e:51:d4: 59:ef:08:a0:bc:d8:ac:96:8f:28:5b:70:c5:0f:5d: ff:b1:d0:90:bc:29:72:c0:60:26:10:25:a7:64:2f: a9:a8:7c:1c:87:b4:a7:08:65:b0:db:0b:be:91:b9: 7c:8a:6d:c4:94:45:55:25:15:18:5b:78:26:f4:48: 92:ca:0a:3d:f8:b7:bb:cc:4f:a7:91:8f:e2:40:01: d3:00:7d:8e:fc:a6:0e:7d:d4:3f:00:b7:48:22:b0: b3:d1:ab:b1:0d:d7:12:70:65:fd:a6:db:36:17:5b: 9e:77:1a:34:78:99:fc:71:0d:6b:39:de:bb:9d:4a: 26:42:b1:3c:b9:6e:e1:70:11:2a:11:1b:83:53:16: f0:de:2f:a7:4e:ff:e3:8c:c0:d3:dd:73:b1:74:93: d3:5b:d2:6f:5b:fc:fc:39:a8:c1:bd:ac:af:8e:d8: 5b:41:da:3e:a5:68:7f:e0:d4:80:b3:8e:17:6f:f5: d6:1c:ad:00:c6:a1:65:fa:b3:63:f5:f0:8f:fc:f2: 45:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:70:64:EA:E2:F3:54:3F:39:F9:C7:DF:60:A7:86:51:65:12:DD:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl X509v3 Authority Key Identifier: keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer sbgp-ipAddrBlock: critical IPv4: 216.8.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:cb:40:f1:3f:6b:39:e8:9b:8e:6b:db:77:ef:18:a4:09:ad: b3:b7:e0:da:b3:f2:90:e3:51:7d:e2:e9:80:7a:c5:08:5c:1b: f1:d9:73:6f:17:f6:10:e2:63:36:65:a9:4b:55:6f:76:07:b5: 09:27:0c:05:bb:ec:0c:c1:cc:3e:d3:bb:cd:3d:5b:16:f5:78: f1:44:f7:43:e9:33:eb:31:c0:08:d5:3c:f1:16:e4:46:bb:48: 7d:42:39:80:f6:ee:c4:9b:3b:41:15:fd:3d:cf:b8:37:dc:3b: e8:f5:5c:f5:6d:21:6f:20:41:71:8f:36:33:c5:68:a3:eb:48: a0:a9:3c:fb:42:17:d1:0c:20:09:f6:f1:75:a6:75:80:8b:fd: 42:58:25:4c:43:67:21:fe:cd:c8:1e:7d:79:7f:23:4c:28:85: e4:7d:68:48:13:83:72:fb:03:dc:0e:a7:15:9d:2c:dc:76:28: 88:0a:7d:80:53:ef:d3:5d:82:d6:8b:29:3a:b0:fd:b4:6d:28: a6:30:7d:94:74:3f:f2:73:90:2d:75:e2:0d:f8:0a:8a:1f:36: ae:2f:fe:a6:ad:6e:8e:ba:73:5f:fa:16:d7:53:1a:8e:c2:11: f2:ef:e2:ec:0c:71:38:77:02:8a:9e:aa:51:b6:8d:18:ea:16: 13:e3:3f:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IHMKZcany2sziwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIz OWM4MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk OTllNTQyY2UtY2ZiMy00MjM5LTg5MjItNDVlZjZmNzZkYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxPb3orjMzSDapNn4s89FiEGT7O56nSxVNaZ Eq2PZyZ7VrXC0wL6B6rxZ2QYG54oUZYaKRWvNUteUdRZ7wigvNislo8oW3DFD13/ sdCQvClywGAmECWnZC+pqHwch7SnCGWw2wu+kbl8im3ElEVVJRUYW3gm9EiSygo9 +Le7zE+nkY/iQAHTAH2O/KYOfdQ/ALdIIrCz0auxDdcScGX9pts2F1uedxo0eJn8 cQ1rOd67nUomQrE8uW7hcBEqERuDUxbw3i+nTv/jjMDT3XOxdJPTW9JvW/z8OajB vayvjthbQdo+pWh/4NSAs44Xb/XWHK0AxqFl+rNj9fCP/PJFdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBwZOri81Q/OfnH32CnhlFlEt0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdi YzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvNDIzYzIzYTMtZmQ2My0z MDQwLTlmOGItMjg2ZmM4ODQzY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0 ZDQtODQzMWRjOTIzOWM4LzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzky MzljOC5jcmwwHwYDVR0jBBgwFoAUT2hGCOzA/DWcXU1xd+vJ0MqBG1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMx ZGM5MjM5YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2AiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/LQPE/aznom45r23fvGKQJrbO34Nqz8pDjUX3i6YB6xQhcG/HZc28X 9hDiYzZlqUtVb3YHtQknDAW77AzBzD7Tu809Wxb1ePFE90PpM+sxwAjVPPEW5Ea7 SH1COYD27sSbO0EV/T3PuDfcO+j1XPVtIW8gQXGPNjPFaKPrSKCpPPtCF9EMIAn2 8XWmdYCL/UJYJUxDZyH+zcgefXl/I0woheR9aEgTg3L7A9wOpxWdLNx2KIgKfYBT 79NdgtaLKTqw/bRtKKYwfZR0P/JzkC114g34CoofNq4v/qatbo66c1/6FtdTGo7C EfLv4uwMcTh3AoqeqlG2jRjqFhPjPxE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:03 2025 by rpki-client