$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa File: 8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa (raw, json) Hash identifier: 0u3sbCa4DbWrUSYUw+YpC6WPW6Boz/n8JSGmxP/XOVs= Subject key identifier: E7:87:08:0F:0F:D8:20:1D:21:15:72:CE:01:12:B1:DA:80:0C:1F:69 Certificate issuer: /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Certificate serial: 010D0C9F432858485B6AFD85D2494E361B303340 Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 6509 IP address blocks: 199.212.24.0/24 maxlen: 24 205.189.32.0/24 maxlen: 24 2001:410:101::/48 maxlen: 48 2001:410:10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6a:fd:85:d2:49:4e:36:1b:30:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=2bc67a8f-5155-4a09-9259-a85e43ff9dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e9:54:3e:da:b8:3b:75:e5:86:75:5b:42:cd: 9a:aa:20:45:79:9e:ba:70:75:ec:cb:77:e5:e0:af: a1:07:17:22:51:9c:ea:eb:ed:13:1b:7e:3e:86:78: 80:75:de:8a:0c:0a:51:f8:ee:df:48:02:6e:43:5c: 6f:ef:c9:1e:79:32:3b:88:c4:34:d8:e9:e0:62:29: 3e:39:45:c5:46:28:6e:31:d8:f1:4b:87:6f:bb:bc: 06:e4:55:e5:25:77:16:45:ad:0f:6d:c6:16:57:1d: 85:ab:f8:b5:30:8a:25:95:1c:ef:29:0a:4f:05:3e: a1:a8:cc:b9:a3:86:a9:77:0b:c7:df:00:10:b4:37: ac:0b:d3:16:55:07:18:05:a9:9b:ce:26:0f:0c:ca: 58:12:a2:24:8a:da:3d:79:5b:fc:59:07:25:eb:bc: ec:08:68:04:cb:63:4e:12:e7:53:6a:14:82:ca:f7: 77:d2:bf:95:ed:ac:c3:1b:17:4e:1d:75:8a:81:30: 75:31:9e:c5:a8:55:1b:a1:cc:5e:39:9b:54:f4:93: a8:71:d4:ae:09:fa:b0:99:23:05:66:4f:70:bd:3d: 5c:47:5c:60:15:60:75:2e:66:f1:ee:49:b6:5b:87: cc:35:71:d1:84:51:06:fb:4c:6e:1f:a8:e9:2a:98: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:87:08:0F:0F:D8:20:1D:21:15:72:CE:01:12:B1:DA:80:0C:1F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl X509v3 Authority Key Identifier: keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer sbgp-ipAddrBlock: critical IPv4: 199.212.24.0/24 205.189.32.0/24 IPv6: 2001:410:101::/48 2001:410:10a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:74:3f:73:b1:c0:81:b4:c1:bd:e6:45:fe:26:5c:a0:90:47: 5a:7d:1c:49:2f:71:ac:68:3c:29:17:45:14:20:83:0a:04:2c: 56:86:fa:4a:8b:ea:e5:c9:45:7c:f6:cc:af:6e:d3:a2:d8:f7: 4b:2f:b4:aa:99:64:97:cf:d2:a0:ff:11:88:32:57:58:de:04: c3:2b:97:f5:93:08:f0:41:3f:7c:83:4c:a5:a3:2c:d6:5b:cf: 6f:58:3f:d2:42:0c:ce:32:ea:f6:35:75:f6:a2:eb:a1:48:b9: e3:1e:59:8d:b2:2e:f6:7f:a9:50:cd:11:36:90:ab:8a:1b:ac: d0:f1:15:91:5c:0f:79:b6:01:e7:60:a7:5b:40:c7:12:6b:98: 29:e5:da:03:89:76:85:1a:7e:3c:28:d3:6e:e4:47:aa:27:31: f1:45:18:e6:45:2c:99:90:72:f8:77:93:1b:3a:25:33:c0:ea: 7a:cc:83:e1:2a:1f:2d:63:30:1d:cd:9d:c0:af:79:1e:77:33: 12:ae:64:0c:04:7a:d5:95:bc:73:85:82:84:15:e0:75:d6:fa: 41:02:25:6f:be:51:63:b8:91:38:e4:07:c6:5f:c0:55:44:44: e5:4f:ce:d4:c0:e1:54:e3:e6:46:6b:c7:5c:88:df:96:13:4d: 50:7e:21:50 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEhbav2F0klONhswM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5ZjUzYzctZTY0ZC00ZjE0LWE1ZTEtYzE0ZThiMWUz OGI1MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk MmJjNjdhOGYtNTE1NS00YTA5LTkyNTktYTg1ZTQzZmY5ZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlulUPtq4O3XlhnVbQs2aqiBFeZ66cHXsy3fl 4K+hBxciUZzq6+0TG34+hniAdd6KDApR+O7fSAJuQ1xv78keeTI7iMQ02OngYik+ OUXFRihuMdjxS4dvu7wG5FXlJXcWRa0PbcYWVx2Fq/i1MIollRzvKQpPBT6hqMy5 o4apdwvH3wAQtDesC9MWVQcYBambziYPDMpYEqIkito9eVv8WQcl67zsCGgEy2NO EudTahSCyvd30r+V7azDGxdOHXWKgTB1MZ7FqFUbocxeOZtU9JOocdSuCfqwmSMF Zk9wvT1cR1xgFWB1Lmbx7km2W4fMNXHRhFEG+0xuH6jpKpjczQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFOeHCA8P2CAdIRVyzgESsdqADB9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Yzlm NTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRlOGIxZTM4YjUvODIyNGE3ZDUtNGIzYi0z ZGFhLThlMjQtZmIzNmQ3MzU1ZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGM5ZjUzYzctZTY0ZC00ZjE0LWE1 ZTEtYzE0ZThiMWUzOGI1LzhjOWY1M2M3LWU2NGQtNGYxNC1hNWUxLWMxNGU4YjFl MzhiNS5jcmwwHwYDVR0jBBgwFoAUkgQ6o8r4DzyNRaFJtV9LrfXD2Q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YzlmNTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRl OGIxZTM4YjUuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAx9QYAwQA zb0gMBgEAgACMBIDBwAgAQQQAQEDBwAgAQQQAQowVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQHQ/c7HAgbTB veZF/iZcoJBHWn0cSS9xrGg8KRdFFCCDCgQsVob6Sovq5clFfPbMr27Totj3Sy+0 qplkl8/SoP8RiDJXWN4EwyuX9ZMI8EE/fINMpaMs1lvPb1g/0kIMzjLq9jV19qLr oUi54x5ZjbIu9n+pUM0RNpCrihus0PEVkVwPebYB52CnW0DHEmuYKeXaA4l2hRp+ PCjTbuRHqicx8UUY5kUsmZBy+HeTGzolM8DqesyD4SofLWMwHc2dwK95HnczEq5k DAR61ZW8c4WChBXgddb6QQIlb75RY7iROOQHxl/AVURE5U/O1MDhVOPmRmvHXIjf lhNNUH4hUA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:48 2025 by rpki-client