$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/0da20598-0c78-3593-9468-c1e87c1f6bd2.roa File: 0da20598-0c78-3593-9468-c1e87c1f6bd2.roa (raw, json) Hash identifier: CaPp2G1ZqOg0ugrKPoiz9eF96Ji9zwP0RL/Tc0s0TgA= Subject key identifier: 64:78:21:85:48:B1:2F:BA:65:93:16:31:6F:F3:0A:9F:3F:24:BA:A9 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F432858480BDA6000C5F1043E377E7500 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/0da20598-0c78-3593-9468-c1e87c1f6bd2.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 42 IP address blocks: 63.246.32.0/20 maxlen: 24 66.185.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:60:00:c5:f1:04:3e:37:7e:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=744a21ae-536a-4d0f-9798-0837ce5ec49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:12:09:37:e8:a8:d3:95:ee:19:5e:16:df:0e: 66:0c:73:8f:d7:6d:6b:29:22:ca:35:cd:62:65:3e: c5:55:64:33:d8:5f:51:e3:cc:89:42:cf:90:6a:a7: 13:85:2d:f4:1a:ef:28:c0:c8:b5:04:d2:6e:26:a6: 07:fb:52:b9:43:72:47:ff:cd:c7:85:df:af:c9:2d: 59:ed:20:af:2a:3b:a7:39:f5:82:73:12:ea:b2:cf: d8:3a:b3:f6:53:6b:c6:18:41:3c:1f:01:c6:28:90: f2:78:d2:43:93:99:c0:ea:11:80:f5:30:6f:3a:8a: f5:39:2b:c7:39:48:f5:38:6f:ba:c4:93:d9:8f:6a: 4e:50:b6:19:1a:d2:f3:d7:1a:8a:4b:2a:04:c0:c2: 19:32:20:70:41:37:46:bf:74:ba:f9:f3:c2:13:53: 4a:0c:19:a4:0e:a5:07:c2:29:5e:64:07:42:21:fb: e1:cf:b3:e7:38:a3:7e:fe:ed:d0:d5:8d:3d:26:1f: 2f:82:ad:00:bd:9f:1f:98:b6:d8:d6:cf:e6:af:df: 40:c6:4c:18:a5:92:9f:fd:32:00:af:08:73:92:d3: a1:9d:12:ad:07:ac:ab:64:e1:11:51:b0:a3:4c:65: 95:35:d0:d3:3d:23:c2:52:b9:5d:e5:a2:8b:c5:0f: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:78:21:85:48:B1:2F:BA:65:93:16:31:6F:F3:0A:9F:3F:24:BA:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/0da20598-0c78-3593-9468-c1e87c1f6bd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 63.246.32.0/20 66.185.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:27:0c:e0:d8:d7:42:36:8a:22:60:86:94:64:32:ab:f6:73: e0:60:2e:f8:8d:63:e2:b5:a9:a6:7a:9b:bc:19:e0:17:0e:90: 0a:9a:1b:3c:4e:04:08:5c:d7:9c:37:6f:97:8c:ae:8e:ab:c8: 39:c5:84:fa:6c:87:40:34:f0:42:d8:96:77:14:33:91:b9:5f: 61:2f:b8:d5:99:a0:2d:96:5e:1d:ff:ed:4e:a6:04:09:22:67: c1:7a:82:2d:7c:f4:e7:3a:6d:c6:1e:a5:c8:e5:e4:0b:fa:88: 4f:a6:bd:4e:3e:fa:a6:f8:94:f4:d7:8d:58:cc:18:71:6f:4e: 76:09:77:57:0c:c5:f3:ba:3a:cc:bd:72:ed:59:b7:55:ee:e4: 5d:3a:c1:d6:11:50:36:07:21:88:85:14:53:13:c1:da:32:12: 4c:89:c5:8b:78:e7:aa:ce:dc:46:70:4b:d0:ba:00:13:7c:67: 50:00:3b:09:ad:31:97:40:4f:ce:42:c5:8c:3e:84:8b:03:f0: 91:10:b3:4c:db:e2:77:f2:1d:e0:9e:bb:59:79:44:cd:88:3a: a5:40:74:aa:fe:38:64:fe:64:61:bf:36:14:49:f9:36:0b:e7: b2:5b:a2:e5:01:0f:40:95:cc:c7:b9:61:aa:e5:be:8d:69:3c: a6:ac:16:98 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgL2mAAxfEEPjd+dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk NzQ0YTIxYWUtNTM2YS00ZDBmLTk3OTgtMDgzN2NlNWVjNDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBIJN+io05XuGV4W3w5mDHOP121rKSLKNc1i ZT7FVWQz2F9R48yJQs+QaqcThS30Gu8owMi1BNJuJqYH+1K5Q3JH/83Hhd+vyS1Z 7SCvKjunOfWCcxLqss/YOrP2U2vGGEE8HwHGKJDyeNJDk5nA6hGA9TBvOor1OSvH OUj1OG+6xJPZj2pOULYZGtLz1xqKSyoEwMIZMiBwQTdGv3S6+fPCE1NKDBmkDqUH wileZAdCIfvhz7PnOKN+/u3Q1Y09Jh8vgq0AvZ8fmLbY1s/mr99AxkwYpZKf/TIA rwhzktOhnRKtB6yrZOERUbCjTGWVNdDTPSPCUrld5aKLxQ9W6QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGR4IYVIsS+6ZZMWMW/zCp8/JLqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvMGRhMjA1OTgtMGM3OC0z NTkzLTk0NjgtYzFlODdjMWY2YmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEP/YgAwQE QrlwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABgnDODY10I2iiJghpRkMqv2c+BgLviNY+K1qaZ6m7wZ4BcO kAqaGzxOBAhc15w3b5eMro6ryDnFhPpsh0A08ELYlncUM5G5X2EvuNWZoC2WXh3/ 7U6mBAkiZ8F6gi189Oc6bcYepcjl5Av6iE+mvU4++qb4lPTXjVjMGHFvTnYJd1cM xfO6Osy9cu1Zt1Xu5F06wdYRUDYHIYiFFFMTwdoyEkyJxYt456rO3EZwS9C6ABN8 Z1AAOwmtMZdAT85CxYw+hIsD8JEQs0zb4nfyHeCeu1l5RM2IOqVAdKr+OGT+ZGG/ NhRJ+TYL57JbouUBD0CVzMe5Yarlvo1pPKasFpg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:14 2025 by rpki-client