$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d02666a6-65ce-3ca5-b449-7c0c2f63de17.roa File: d02666a6-65ce-3ca5-b449-7c0c2f63de17.roa (raw, json) Hash identifier: +MQhXLksfxOyirC149+QU9YnRXelxM9Wr3WtyN8sw3o= Subject key identifier: 8F:2C:FF:02:CA:C8:CE:CC:6E:FE:98:DB:47:F8:28:BC:A9:C0:00:04 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584863CB0875EFCEE3A2B2D8D000 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d02666a6-65ce-3ca5-b449-7c0c2f63de17.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 2495 IP address blocks: 198.248.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:08:75:ef:ce:e3:a2:b2:d8:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=843a3295-ad1e-4569-853c-e3de0b70a946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:62:5b:40:6f:5f:75:cc:d5:b8:84:6c:2f: 66:f5:4a:66:f3:99:c7:4d:9a:d6:97:79:a4:bf:e5: 31:03:ea:1e:c5:7d:0f:da:d7:73:91:bb:17:84:d7: 8d:74:77:e1:f2:aa:96:d8:57:38:ff:65:57:d2:b8: 14:45:0d:48:b4:af:df:88:27:e0:d5:64:f6:2d:3c: b1:60:6d:c6:32:29:96:25:aa:bb:71:d5:1b:6c:6d: bd:44:ff:81:75:36:7f:59:23:cd:15:84:3d:da:70: 40:8c:f8:58:62:96:52:40:b0:c0:91:76:35:a5:0e: 2a:32:8a:7e:da:11:d5:ff:d4:25:13:c4:0a:fd:6b: 3d:da:25:b0:3b:2f:fc:0d:3d:a2:45:11:4c:4c:0a: 04:37:75:b4:c2:31:7a:4c:18:15:63:65:71:d1:6b: 2c:02:f6:a0:43:22:ae:ed:e5:61:60:67:b8:48:86: 99:02:d8:ea:58:28:07:90:9e:9f:9a:3f:7b:c4:46: b4:f4:85:10:94:1a:f1:16:98:89:f8:2a:7c:c7:65: 5b:ae:be:83:3f:62:b4:34:f2:cf:72:ef:fb:2a:8c: 3c:9d:e3:4f:f6:02:16:c1:e4:ec:f6:71:81:44:cd: e3:c8:34:4f:54:5c:d7:f2:a5:d1:8d:7f:f5:28:d4: 29:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2C:FF:02:CA:C8:CE:CC:6E:FE:98:DB:47:F8:28:BC:A9:C0:00:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d02666a6-65ce-3ca5-b449-7c0c2f63de17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:30:86:da:d1:83:21:6e:41:cb:e3:9f:79:ff:93:e8:1d:79: 82:92:01:24:ac:98:15:e3:b6:df:a2:d8:5f:8a:07:40:7f:61: 25:39:29:7c:92:9c:a9:64:2c:06:7c:46:25:18:58:3f:37:30: d4:39:c2:dd:ea:13:64:a9:28:ee:62:57:b4:7d:b3:29:03:b7: b1:5d:cd:5d:bc:52:53:7d:a9:9e:62:24:61:2d:6c:d5:6c:71: a9:ac:cf:54:37:70:fd:6f:c2:fd:c5:9e:63:6e:6a:31:8e:eb: cc:ad:d0:73:09:78:8d:ef:2f:10:b6:2a:65:95:e7:49:ae:83: 41:a5:b0:89:4d:3f:1c:87:3e:61:79:94:5b:2b:01:d2:ed:79: e0:04:58:c3:01:f2:59:07:62:66:e4:d9:b5:2b:39:89:00:e0: db:db:a5:97:20:59:54:61:f2:83:e7:fc:52:8e:7f:23:52:eb: e3:8b:a6:28:a2:09:f3:2c:d5:a5:ba:13:4a:48:92:60:c1:ab: 05:a6:7a:98:40:8f:79:61:53:6d:bd:d6:62:20:ad:5c:d0:e0: 6d:28:cf:56:d9:33:20:d7:bc:ff:6e:f1:66:44:ac:7e:89:94: c3:92:47:47:8f:6a:fa:a7:85:a2:9b:03:c7:c0:b5:51:80:35: a6:fd:8c:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjywh1787jorLY0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk ODQzYTMyOTUtYWQxZS00NTY5LTg1M2MtZTNkZTBiNzBhOTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4NiW0BvX3XM1biEbC9m9Upm85nHTZrWl3mk v+UxA+oexX0P2tdzkbsXhNeNdHfh8qqW2Fc4/2VX0rgURQ1ItK/fiCfg1WT2LTyx YG3GMimWJaq7cdUbbG29RP+BdTZ/WSPNFYQ92nBAjPhYYpZSQLDAkXY1pQ4qMop+ 2hHV/9QlE8QK/Ws92iWwOy/8DT2iRRFMTAoEN3W0wjF6TBgVY2Vx0WssAvagQyKu 7eVhYGe4SIaZAtjqWCgHkJ6fmj97xEa09IUQlBrxFpiJ+Cp8x2Vbrr6DP2K0NPLP cu/7Kow8neNP9gIWweTs9nGBRM3jyDRPVFzX8qXRjX/1KNQprQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8s/wLKyM7Mbv6Y20f4KLypwAAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvZDAyNjY2YTYtNjVjZS0z Y2E1LWI0NDktN2MwYzJmNjNkZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxviYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYwhtrRgyFuQcvjn3n/k+gdeYKSASSsmBXjtt+i2F+KB0B/YSU5KXyS nKlkLAZ8RiUYWD83MNQ5wt3qE2SpKO5iV7R9sykDt7FdzV28UlN9qZ5iJGEtbNVs camsz1Q3cP1vwv3FnmNuajGO68yt0HMJeI3vLxC2KmWV50mug0GlsIlNPxyHPmF5 lFsrAdLteeAEWMMB8lkHYmbk2bUrOYkA4NvbpZcgWVRh8oPn/FKOfyNS6+OLpiii CfMs1aW6E0pIkmDBqwWmephAj3lhU2291mIgrVzQ4G0oz1bZMyDXvP9u8WZErH6J lMOSR0ePavqnhaKbA8fAtVGANab9jGE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:11 2025 by rpki-client