$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/678af622-1d34-32ad-b97d-84d097e0a1af.roa File: 678af622-1d34-32ad-b97d-84d097e0a1af.roa (raw, json) Hash identifier: VjaUAjWPhhN+FSBWf3m7nZB5rCKV8NLrnMf6FtB1QP0= Subject key identifier: D5:BE:27:66:49:C3:49:83:D1:D6:32:6A:44:A4:6C:A1:34:F7:F9:A8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848143DE9241503D7D9C0267380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/678af622-1d34-32ad-b97d-84d097e0a1af.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 7015 IP address blocks: 73.119.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3d:e9:24:15:03:d7:d9:c0:26:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=1b3dbe0a-940a-4a0c-80a2-c2d990b46edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:1e:8a:b6:b7:dc:04:b0:35:94:c5:6d:15: 22:97:02:fd:f4:12:41:70:d8:bf:da:d4:84:b8:dc: 2a:3b:0b:8d:e0:cc:1d:18:b6:09:8a:67:fc:0e:6a: 21:78:00:ad:d5:6e:60:88:d0:82:61:66:4f:f3:79: 77:c9:f6:ee:d8:cc:a1:b0:f4:e2:28:a8:41:a0:64: 33:e2:4f:c8:8c:fb:f9:e5:a9:92:a6:a9:e3:2d:f2: b5:67:59:82:0c:51:be:79:14:71:a6:fd:45:6f:2d: 0b:1e:28:76:49:12:3c:ac:d9:18:9b:51:37:b1:b6: 80:57:83:15:85:44:59:31:28:e3:97:76:68:99:9d: ec:81:fd:ff:94:27:66:29:58:62:36:66:f8:76:2c: 25:8b:ff:00:64:be:d3:55:a4:ef:d4:23:c3:8b:60: 51:e9:92:19:a1:02:d3:93:6a:e9:d4:fa:41:cc:7c: c6:5d:4e:3b:3a:18:7e:e6:49:aa:28:6d:46:c8:c8: 58:67:96:d9:b9:30:b7:d0:c4:02:25:45:72:a5:a1: 0d:38:48:ab:ca:40:36:17:b4:09:35:98:c8:f5:ff: b3:99:1f:c5:35:d9:c3:1b:df:f9:5c:78:9d:81:4a: 48:97:2d:0b:fc:d7:0d:c7:f3:87:84:52:1a:7a:5e: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BE:27:66:49:C3:49:83:D1:D6:32:6A:44:A4:6C:A1:34:F7:F9:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/678af622-1d34-32ad-b97d-84d097e0a1af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.119.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:2c:29:7d:e8:c2:ae:06:de:5e:9a:24:57:4c:f2:8d:33:36: 65:38:4b:fa:50:4a:e6:25:43:d2:2f:82:3f:7e:b7:6f:0d:f2: 60:b2:ab:a5:d7:3f:64:4d:dc:63:0d:ff:15:8b:4c:7b:44:14: a9:20:1e:e7:80:f0:28:95:19:51:ef:c8:11:70:3d:0b:8d:5c: 07:6c:65:e5:4b:26:57:a6:61:d8:7e:ad:25:42:3a:4c:16:38: e5:e0:d2:61:64:3c:13:76:ca:87:fa:3e:b5:7a:3e:83:2d:ca: f0:ee:24:75:1d:c5:04:9a:1e:47:31:52:45:ee:af:23:67:c1: 91:a5:4a:ad:ae:35:ae:9b:62:25:ae:21:98:60:fb:f6:c2:95: bf:a4:50:73:4d:4f:9d:dd:2d:02:57:ee:99:74:68:b5:cf:8e: 2b:33:5a:c2:12:de:aa:f5:04:32:bd:cf:86:38:fe:81:73:08: d2:00:b7:62:68:9a:d0:b8:62:80:ef:5c:9a:0a:e7:97:5c:f9: 7c:7a:1f:e6:06:2b:8a:3b:89:f0:6d:6f:bf:1b:19:a3:0f:58: 43:f8:f5:ca:b3:ad:fa:23:4a:51:81:82:01:f2:54:64:18:f8: 9c:86:ab:c3:3f:93:6e:06:bf:2e:7b:3b:e9:62:58:86:1b:bd: 29:51:b6:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPekkFQPX2cAmc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk MWIzZGJlMGEtOTQwYS00YTBjLTgwYTItYzJkOTkwYjQ2ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcoeira33ASwNZTFbRUilwL99BJBcNi/2tSE uNwqOwuN4MwdGLYJimf8DmoheACt1W5giNCCYWZP83l3yfbu2MyhsPTiKKhBoGQz 4k/IjPv55amSpqnjLfK1Z1mCDFG+eRRxpv1Fby0LHih2SRI8rNkYm1E3sbaAV4MV hURZMSjjl3ZomZ3sgf3/lCdmKVhiNmb4diwli/8AZL7TVaTv1CPDi2BR6ZIZoQLT k2rp1PpBzHzGXU47Ohh+5kmqKG1GyMhYZ5bZuTC30MQCJUVypaENOEirykA2F7QJ NZjI9f+zmR/FNdnDG9/5XHidgUpIly0L/NcNx/OHhFIael5CjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW+J2ZJw0mD0dYyakSkbKE09/moMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjc4YWY2MjItMWQzNC0z MmFkLWI5N2QtODRkMDk3ZTBhMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADssKX3owq4G3l6aJFdM8o0zNmU4S/pQSuYlQ9Ivgj9+t28N8mCyq6XX P2RN3GMN/xWLTHtEFKkgHueA8CiVGVHvyBFwPQuNXAdsZeVLJlemYdh+rSVCOkwW OOXg0mFkPBN2yof6PrV6PoMtyvDuJHUdxQSaHkcxUkXuryNnwZGlSq2uNa6bYiWu IZhg+/bClb+kUHNNT53dLQJX7pl0aLXPjiszWsIS3qr1BDK9z4Y4/oFzCNIAt2Jo mtC4YoDvXJoK55dc+Xx6H+YGK4o7ifBtb78bGaMPWEP49cqzrfojSlGBggHyVGQY +JyGq8M/k24Gvy57O+liWIYbvSlRtuw= -----END CERTIFICATE-----Generated at Sun Feb 16 21:06:42 2025 by rpki-client