$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/504300da-e352-3b8a-a426-89293d3af339.roa File: 504300da-e352-3b8a-a426-89293d3af339.roa (raw, json) Hash identifier: xXcnqzSAzq8el14IFM5dR5H/C1HceilMLPAd9sdEusk= Subject key identifier: 6B:08:AE:ED:43:F4:8A:18:1B:02:3B:F1:29:BF:EB:14:51:BA:AF:D3 Certificate issuer: /CN=7386a5e1-ba73-408c-a7e4-df88e2f52603 Certificate serial: 010D0C9F432858481C9A884517C8BDE7CBFEA0DC Authority key identifier: 8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/504300da-e352-3b8a-a426-89293d3af339.roa Signing time: Fri 06 Dec 2024 02:00:39 +0000 ROA not before: Fri 06 Dec 2024 02:00:39 +0000 ROA not after: Thu 06 Mar 2025 02:00:39 +0000 asID: 13768 IP address blocks: 216.21.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:9a:88:45:17:c8:bd:e7:cb:fe:a0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7386a5e1-ba73-408c-a7e4-df88e2f52603 Validity Not Before: Dec 6 02:00:39 2024 GMT Not After : Mar 6 02:00:39 2025 GMT Subject: CN=fd1825c0-4ac9-47c7-9b13-bcdbb01222cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bd:68:1b:06:b7:74:85:82:fd:e8:55:13:1a: d8:28:00:53:3a:d5:87:4f:4a:d8:88:7c:ef:d1:5c: 3d:81:66:2e:9e:ef:d0:16:79:26:79:ef:41:ad:a4: 34:19:94:50:fa:56:7f:7e:05:bc:38:81:51:aa:fa: 8d:60:66:2d:b8:e2:68:42:66:95:86:f7:19:7b:4a: 6c:71:f8:ef:58:c5:79:c3:87:bb:49:f2:d2:73:a8: 20:f9:3a:74:ca:90:cf:5e:7d:4b:dd:50:99:97:5a: 2c:53:53:bc:2e:80:16:83:6b:83:ce:9f:27:26:34: 44:67:ff:31:ee:af:b3:92:c6:f4:c4:19:56:9f:d4: e5:c6:7a:25:18:5d:7f:60:09:14:a2:3e:01:9e:f5: 5e:95:14:b6:ca:c8:17:96:78:db:12:19:a6:9c:c3: a5:26:04:16:e6:3d:06:29:3c:28:a5:0d:bd:4b:cf: ad:c4:35:35:37:59:65:93:72:b9:b7:5d:1b:1e:15: 37:c1:ad:9b:8a:2b:61:41:70:77:d9:45:90:b9:a5: 7e:19:e3:69:8b:28:22:fd:a0:3e:41:a0:be:57:e1: 00:52:07:84:71:b3:76:c0:8b:af:7a:6a:f7:7c:a8: dc:0f:dc:86:ad:f3:cf:76:61:be:18:c5:4d:d4:fa: 83:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:08:AE:ED:43:F4:8A:18:1B:02:3B:F1:29:BF:EB:14:51:BA:AF:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/504300da-e352-3b8a-a426-89293d3af339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.crl X509v3 Authority Key Identifier: keyid:8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer sbgp-ipAddrBlock: critical IPv4: 216.21.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:83:3c:3b:34:1d:59:c4:33:98:f0:8b:8d:e1:2a:f5:1c:89: bc:5c:3f:4c:27:2b:7b:e1:62:c3:61:6d:9d:30:58:aa:08:d8: a9:a3:b5:85:b1:69:3b:5b:cc:7b:cf:96:84:39:5f:48:58:07: 7c:67:9e:44:76:b5:46:e5:23:41:c4:54:65:b9:b0:08:f7:84: 0a:54:af:cf:ed:f2:3d:bd:18:df:e4:de:98:36:a2:27:25:52: 76:fe:aa:38:dc:2e:ff:db:c6:38:50:49:b2:b0:63:7e:9f:ee: 27:36:da:6b:05:01:b9:bf:88:8f:f4:5c:02:be:f4:b7:dd:57: 1e:e4:fa:b3:38:aa:55:91:72:bb:7d:5a:40:a7:5b:92:80:dc: e7:86:cc:ca:9b:58:7b:c4:98:4f:72:61:39:29:00:2d:b5:6a: d1:77:34:cb:09:a3:0d:05:4b:f6:dd:93:27:28:07:21:e2:bc: 30:e9:f1:e9:20:e1:f3:8e:f7:8e:14:32:50:e1:61:e0:4b:f0: 3c:15:55:05:c2:6e:53:29:78:e7:44:3a:13:c7:b3:96:5a:73: bc:87:b8:3b:41:16:1b:1e:71:85:4a:62:f9:10:2e:8f:b4:62: e0:0f:1f:3e:da:9e:40:20:37:4b:1a:3f:2b:f3:41:04:2e:70: 4b:40:80:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmohFF8i958v+oNwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzM4NmE1ZTEtYmE3My00MDhjLWE3ZTQtZGY4OGUyZjUy NjAzMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk ZmQxODI1YzAtNGFjOS00N2M3LTliMTMtYmNkYmIwMTIyMmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr1oGwa3dIWC/ehVExrYKABTOtWHT0rYiHzv 0Vw9gWYunu/QFnkmee9BraQ0GZRQ+lZ/fgW8OIFRqvqNYGYtuOJoQmaVhvcZe0ps cfjvWMV5w4e7SfLSc6gg+Tp0ypDPXn1L3VCZl1osU1O8LoAWg2uDzp8nJjREZ/8x 7q+zksb0xBlWn9TlxnolGF1/YAkUoj4BnvVelRS2ysgXlnjbEhmmnMOlJgQW5j0G KTwopQ29S8+txDU1N1llk3K5t10bHhU3wa2biithQXB32UWQuaV+GeNpiygi/aA+ QaC+V+EAUgeEcbN2wIuvemr3fKjcD9yGrfPPdmG+GMVN1PqDZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsIru1D9IoYGwI78Sm/6xRRuq/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83Mzg2 YTVlMS1iYTczLTQwOGMtYTdlNC1kZjg4ZTJmNTI2MDMvNTA0MzAwZGEtZTM1Mi0z YjhhLWE0MjYtODkyOTNkM2FmMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzM4NmE1ZTEtYmE3My00MDhjLWE3 ZTQtZGY4OGUyZjUyNjAzLzczODZhNWUxLWJhNzMtNDA4Yy1hN2U0LWRmODhlMmY1 MjYwMy5jcmwwHwYDVR0jBBgwFoAUjvr5BbjeIbDevhsz0RqJYsOQBJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83Mzg2YTVlMS1iYTczLTQwOGMtYTdlNC1kZjg4 ZTJmNTI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BXtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuDPDs0HVnEM5jwi43hKvUcibxcP0wnK3vhYsNhbZ0wWKoI2KmjtYWx aTtbzHvPloQ5X0hYB3xnnkR2tUblI0HEVGW5sAj3hApUr8/t8j29GN/k3pg2oicl Unb+qjjcLv/bxjhQSbKwY36f7ic22msFAbm/iI/0XAK+9LfdVx7k+rM4qlWRcrt9 WkCnW5KA3OeGzMqbWHvEmE9yYTkpAC21atF3NMsJow0FS/bdkycoByHivDDp8ekg 4fOO944UMlDhYeBL8DwVVQXCblMpeOdEOhPHs5Zac7yHuDtBFhsecYVKYvkQLo+0 YuAPHz7ankAgN0saPyvzQQQucEtAgPY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:49 2025 by rpki-client