$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa File: a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa (raw, json) Hash identifier: xQINbBcY2YotrODuCPNQt1KAoAHFXNLzflY0Hz5myn4= Subject key identifier: 92:C2:4E:9C:CA:31:2B:8A:DC:36:12:BD:51:80:FD:79:A1:05:E6:A2 Certificate issuer: /CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b Certificate serial: 010D0C9F43285848DEA11A10375DB8ACC6AD4DC0 Authority key identifier: 9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 12059 IP address blocks: 216.223.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:1a:10:37:5d:b8:ac:c6:ad:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=672a50fd-d8cc-4432-962b-80cf800c5151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bb:d1:36:24:48:10:dd:74:ea:4e:56:1a:c9: b9:96:e4:87:d5:69:68:89:60:c0:bb:7f:17:e7:52: 23:99:a3:42:68:48:7a:b7:45:fe:34:65:a7:e8:94: e9:cd:42:dd:ae:16:3e:47:1d:63:3b:47:b0:40:0d: d5:34:61:25:14:33:90:89:35:30:8c:82:7a:d3:c8: 41:64:ee:c2:d7:32:8a:ef:e5:fd:28:43:2a:f2:2c: 26:fd:a0:37:51:b4:5e:b3:1b:1e:19:1f:a2:bc:62: 6c:fe:27:4b:ec:6e:04:29:2a:cb:98:b7:38:65:8e: 97:f0:53:17:11:75:2d:a0:81:23:89:c0:62:5c:f8: c9:63:6d:b0:12:46:b5:68:22:10:46:d6:5e:e5:a8: 3b:a3:07:b9:79:d6:c9:52:37:ce:f8:7b:b1:7a:a7: 7e:1a:3b:48:13:2e:6b:d0:7d:27:f3:14:8f:20:97: 3f:6e:32:45:25:71:76:a0:f8:68:9a:a7:85:8a:c2: ea:a0:a2:08:39:45:ac:a6:2b:39:6a:66:84:b9:3b: 00:da:a1:9f:d8:cd:f0:f0:3f:e5:4e:cd:ae:2d:d2: 26:b3:3f:3a:62:d7:45:fa:e3:33:0e:ce:6e:04:4d: 10:62:08:62:21:66:ef:20:0e:69:88:6d:30:91:8e: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C2:4E:9C:CA:31:2B:8A:DC:36:12:BD:51:80:FD:79:A1:05:E6:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.crl X509v3 Authority Key Identifier: keyid:9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer sbgp-ipAddrBlock: critical IPv4: 216.223.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:41:9c:a0:02:04:b2:3b:01:41:eb:b3:34:ca:a5:e3:81:37: bc:54:2c:44:7a:c3:f7:29:31:72:c4:9c:ba:7e:85:0a:ee:18: d2:ff:08:39:c4:64:0a:7f:58:02:ce:fa:5b:e2:32:36:c1:ec: 6b:25:20:94:2e:7c:cb:74:11:65:10:6b:13:c9:d2:fc:cc:89: 16:f8:8a:15:a1:5c:75:18:48:4c:46:d5:de:15:6e:33:1c:b1: 0e:5b:ef:2d:db:92:28:be:b8:8b:f8:32:6b:4f:4d:5f:30:78: 44:d2:b7:37:d7:8b:ea:38:64:c4:e1:b4:83:3f:9d:02:06:4a: 36:5e:8d:18:86:f7:a0:90:ac:55:90:5e:1e:7f:17:7d:7f:d2: cc:93:78:0d:a9:97:7d:12:98:4d:3c:90:f3:8d:59:5a:75:94: 77:a6:f9:60:bb:da:e2:fd:59:f0:32:4c:07:e8:bc:c1:75:d2: 4c:81:27:fa:b9:2e:38:75:ad:75:d2:40:04:51:c2:5c:29:1c: 28:63:92:9e:fe:69:64:b6:8e:62:03:9d:0b:51:14:b9:76:77: a3:47:36:88:1b:46:07:8d:cf:82:d4:16:9e:25:2b:ed:56:93: 1f:6e:69:ac:81:4e:8f:a6:f1:b7:4f:d2:98:3f:2c:56:aa:fd: e5:3a:4a:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoRoQN124rMatTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVlMWM5NTQtNjdmYy00YjFjLTg1ZWEtOGYyYjI1N2Zk MzdiMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NjcyYTUwZmQtZDhjYy00NDMyLTk2MmItODBjZjgwMGM1MTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLvRNiRIEN106k5WGsm5luSH1WloiWDAu38X 51IjmaNCaEh6t0X+NGWn6JTpzULdrhY+Rx1jO0ewQA3VNGElFDOQiTUwjIJ608hB ZO7C1zKK7+X9KEMq8iwm/aA3UbResxseGR+ivGJs/idL7G4EKSrLmLc4ZY6X8FMX EXUtoIEjicBiXPjJY22wEka1aCIQRtZe5ag7owe5edbJUjfO+Huxeqd+GjtIEy5r 0H0n8xSPIJc/bjJFJXF2oPhomqeFisLqoKIIOUWspis5amaEuTsA2qGf2M3w8D/l Ts2uLdImsz86YtdF+uMzDs5uBE0QYghiIWbvIA5piG0wkY6E6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLCTpzKMSuK3DYSvVGA/XmhBeaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NWUx Yzk1NC02N2ZjLTRiMWMtODVlYS04ZjJiMjU3ZmQzN2IvYTI0OWU3ZTctNzNlYS0z Njg2LWIyNmEtNTFmNDQ0ZjliNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjVlMWM5NTQtNjdmYy00YjFjLTg1 ZWEtOGYyYjI1N2ZkMzdiLzY1ZTFjOTU0LTY3ZmMtNGIxYy04NWVhLThmMmIyNTdm ZDM3Yi5jcmwwHwYDVR0jBBgwFoAUnOc/exeZAcO0K6LdzNctgB749OAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NWUxYzk1NC02N2ZjLTRiMWMtODVlYS04ZjJi MjU3ZmQzN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2N+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRBnKACBLI7AUHrszTKpeOBN7xULER6w/cpMXLEnLp+hQruGNL/CDnE ZAp/WALO+lviMjbB7GslIJQufMt0EWUQaxPJ0vzMiRb4ihWhXHUYSExG1d4VbjMc sQ5b7y3bkii+uIv4MmtPTV8weETStzfXi+o4ZMThtIM/nQIGSjZejRiG96CQrFWQ Xh5/F31/0syTeA2pl30SmE08kPONWVp1lHem+WC72uL9WfAyTAfovMF10kyBJ/q5 Ljh1rXXSQARRwlwpHChjkp7+aWS2jmIDnQtRFLl2d6NHNogbRgeNz4LUFp4lK+1W kx9uaayBTo+m8bdP0pg/LFaq/eU6SpI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:34 2025 by rpki-client