$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d845fc1-12f3-3105-b3d4-0be58de97346.roa File: 3d845fc1-12f3-3105-b3d4-0be58de97346.roa (raw, json) Hash identifier: 2Xmr9CRnoLAcOxkQlXAFd4bMdvcTlVqpszzuFFldiFE= Subject key identifier: 70:46:4E:0D:6D:A8:BD:DD:A7:0A:A5:A7:C7:7B:6D:7C:EE:99:90:F1 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584845157F94678A8DD52A171700 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d845fc1-12f3-3105-b3d4-0be58de97346.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 14061 IP address blocks: 204.48.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:7f:94:67:8a:8d:d5:2a:17:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=d640256d-7e79-4605-83fc-7a199529ac6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:30:be:6e:0a:20:21:db:ea:f0:bc:15:a4:65: 56:c6:b2:7f:33:7d:8f:62:5c:24:0a:dc:ba:c0:c2: 6e:d1:59:36:e6:9c:40:b0:5f:23:91:45:3f:53:55: 12:18:44:ce:b2:7b:97:7d:e5:f5:17:8c:af:79:cd: 01:f3:f4:38:99:60:86:56:2c:f6:92:59:11:f0:1c: ea:49:fb:1a:a3:19:6a:d2:03:10:9b:83:95:14:ce: 7b:fe:c0:cf:0f:c6:0e:32:8a:aa:f0:2e:ff:d3:a7: 29:aa:29:c3:46:68:24:06:9f:aa:08:a9:09:23:10: 11:0a:79:46:f8:f4:5d:07:ae:af:46:c4:41:64:ec: ba:be:fb:d7:06:3a:8f:3d:9a:c1:05:2d:9f:2e:b6: cb:8d:eb:88:05:a6:cf:2f:bb:7e:6a:cb:11:c8:95: c5:28:f2:f7:87:62:4d:17:ac:17:b1:6d:0a:99:bb: a2:a5:a1:85:f8:03:44:38:92:7b:78:a2:ae:94:c4: 81:41:6b:fc:3a:4b:d0:32:68:9e:41:cc:5d:98:d7: 10:79:76:9a:44:21:d8:cd:ff:e7:d2:ec:36:db:dc: 17:95:f5:ef:11:83:d6:de:5f:89:7b:c9:5e:f3:c5: 34:4a:ee:a7:72:4d:bf:8b:c3:4f:13:9d:4a:6a:e7: 69:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:46:4E:0D:6D:A8:BD:DD:A7:0A:A5:A7:C7:7B:6D:7C:EE:99:90:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d845fc1-12f3-3105-b3d4-0be58de97346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 204.48.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:1e:bb:50:0a:b0:9a:34:39:9f:87:d4:fc:43:03:94:7a:62: b4:f8:79:57:06:35:d8:ad:a6:60:c7:d6:60:ce:03:bf:b5:15: 03:49:f2:8f:22:94:33:be:61:aa:a4:25:c2:10:9f:ae:83:4f: 36:70:ac:cd:ca:d9:b3:05:d0:79:89:bd:28:a5:46:4d:98:74: 2c:43:ff:81:07:91:18:dc:2e:6f:38:85:9c:02:79:1c:6c:50: 7a:64:e2:f3:0b:5e:e5:53:e9:a8:b1:dc:f9:ab:21:ce:ea:4d: c3:33:89:17:48:c6:bf:ac:7e:4c:0d:31:0a:a6:26:4d:b9:c3: ba:1d:93:75:de:f1:55:cd:a0:6c:55:3a:ea:fa:3c:5b:c7:26: eb:08:05:21:26:73:d5:f8:24:07:e6:3d:1d:c5:5e:9f:3c:dd: 1c:fb:42:5d:95:41:23:d7:0f:30:0d:f3:41:3f:bb:f5:8e:3d: 6c:6e:05:3e:92:66:e9:35:cb:07:cc:67:97:99:73:e2:15:bf: 79:3c:b6:09:ed:ac:96:2c:08:59:82:c3:2f:6b:f0:ea:63:c9: 6b:54:70:ee:4a:e7:b7:24:1d:45:4a:67:e6:61:ce:f5:fd:58: 76:92:b6:50:be:a3:52:d7:a4:74:29:b1:7f:f5:d6:83:db:4e: 42:f5:4f:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFX+UZ4qN1SoXFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk ZDY0MDI1NmQtN2U3OS00NjA1LTgzZmMtN2ExOTk1MjlhYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDC+bgogIdvq8LwVpGVWxrJ/M32PYlwkCty6 wMJu0Vk25pxAsF8jkUU/U1USGETOsnuXfeX1F4yvec0B8/Q4mWCGViz2klkR8Bzq Sfsaoxlq0gMQm4OVFM57/sDPD8YOMoqq8C7/06cpqinDRmgkBp+qCKkJIxARCnlG +PRdB66vRsRBZOy6vvvXBjqPPZrBBS2fLrbLjeuIBabPL7t+assRyJXFKPL3h2JN F6wXsW0KmbuipaGF+ANEOJJ7eKKulMSBQWv8OkvQMmieQcxdmNcQeXaaRCHYzf/n 0uw229wXlfXvEYPW3l+Je8le88U0Su6nck2/i8NPE51KaudpJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBGTg1tqL3dpwqlp8d7bXzumZDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvM2Q4NDVmYzEtMTJmMy0z MTA1LWIzZDQtMGJlNThkZTk3MzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzDAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEeu1AKsJo0OZ+H1PxDA5R6YrT4eVcGNditpmDH1mDOA7+1FQNJ8o8i lDO+YaqkJcIQn66DTzZwrM3K2bMF0HmJvSilRk2YdCxD/4EHkRjcLm84hZwCeRxs UHpk4vMLXuVT6aix3PmrIc7qTcMziRdIxr+sfkwNMQqmJk25w7odk3Xe8VXNoGxV Our6PFvHJusIBSEmc9X4JAfmPR3FXp883Rz7Ql2VQSPXDzAN80E/u/WOPWxuBT6S Zuk1ywfMZ5eZc+IVv3k8tgntrJYsCFmCwy9r8OpjyWtUcO5K57ckHUVKZ+ZhzvX9 WHaStlC+o1LXpHQpsX/11oPbTkL1T+I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:47 2025 by rpki-client