$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa File: c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa (raw, json) Hash identifier: s4cDQu8EJgV7Clum66Ki4EA8yzY0ctYqlCzM9/Cj354= Subject key identifier: F5:0C:3D:67:99:36:B9:11:00:96:15:32:04:5D:3D:D0:50:8E:EE:FA Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F432858485E35AD7D986F1D31AF88C5C0 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa Signing time: Sun 29 Dec 2024 14:00:53 +0000 ROA not before: Sun 29 Dec 2024 14:00:53 +0000 ROA not after: Sat 29 Mar 2025 13:00:53 +0000 asID: 21928 IP address blocks: 65.76.0.0/16 maxlen: 24 167.20.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5e:35:ad:7d:98:6f:1d:31:af:88:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Dec 29 14:00:53 2024 GMT Not After : Mar 29 13:00:53 2025 GMT Subject: CN=643b1bc9-c297-44a4-a362-ea0eff7b8017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e0:fb:4c:34:e1:19:e7:dd:ad:c7:ba:65:68: df:f3:66:5b:f0:5c:04:27:ff:c5:99:c1:b4:32:14: 0e:14:37:ef:be:0e:be:cb:dc:63:d5:d4:18:da:e9: 78:70:29:01:6d:55:32:c3:16:52:50:4c:8c:88:dc: 79:e9:fb:21:0b:cf:16:05:9d:06:6e:28:52:e1:e7: 1f:03:ec:9c:e9:f5:a2:f8:6f:d1:b4:c2:5a:f9:f9: e7:75:66:ba:8c:05:51:35:87:27:76:61:92:f5:42: ee:e3:14:f8:23:f0:4d:6f:19:bd:f5:b4:f0:16:69: 1b:8c:7f:5f:51:26:35:1e:6d:58:8c:78:01:7e:4b: f8:db:39:09:92:a5:86:b0:15:14:08:72:f2:a1:13: 6d:f0:61:a1:e7:fc:a0:51:98:3d:8c:48:b9:95:e7: a3:26:f3:08:13:22:0d:fb:17:dd:fc:b1:06:21:2f: 00:78:34:16:db:81:1a:59:eb:bb:8c:03:de:e2:25: 0e:b7:5b:bc:5e:05:51:a3:c7:d9:1a:ab:10:5e:26: 41:a0:cf:5f:72:09:8b:bc:06:2d:e9:aa:3d:c8:2b: 5c:2b:d3:de:03:20:70:73:98:e0:86:2e:64:16:da: c3:c8:97:65:a6:e3:a2:63:0a:66:98:d8:cf:b3:e5: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0C:3D:67:99:36:B9:11:00:96:15:32:04:5D:3D:D0:50:8E:EE:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 65.76.0.0/16 167.20.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3b:c8:e8:9d:84:a9:a4:ea:cf:87:fa:3f:fd:98:76:08:89: 49:f2:36:40:a9:fd:e5:dd:a4:8d:ea:b0:65:19:99:e2:40:9b: 48:5d:f8:48:fa:dd:19:49:62:42:e4:61:c1:23:3b:03:c2:12: b7:d1:85:01:7c:0c:40:d7:a4:44:f8:18:f1:38:f1:74:6c:01: 6b:af:dc:71:1b:67:e6:4b:55:56:c1:8b:e0:ce:ee:43:06:26: 09:44:8f:a4:5e:89:62:5f:ee:4e:29:96:43:c2:ab:20:c9:d2: 87:68:c7:68:21:c6:db:fa:b5:6f:8b:99:59:26:96:ba:ab:63: 0c:97:b3:5f:47:4e:cc:73:a6:85:44:82:b2:b7:9c:d4:58:30: e1:44:cf:42:c5:9a:ac:38:e1:21:11:22:19:85:45:21:9e:f2: 18:71:fd:f8:2d:10:58:7d:07:fc:18:b9:6d:a3:38:de:91:0c: 1e:45:e4:00:cf:1b:93:d2:47:4d:89:20:70:5d:ca:7e:dc:04: a4:11:ab:1d:42:be:79:15:36:6a:1f:71:1a:d9:72:5e:16:89: 96:2e:45:17:ab:ea:a9:a9:2e:88:db:5f:a3:ca:7d:3d:75:4a: f5:32:c9:3e:53:88:fc:62:e3:88:1f:e8:05:0b:cf:1a:8b:27: 02:3b:68:09 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEheNa19mG8dMa+IxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk NjQzYjFiYzktYzI5Ny00NGE0LWEzNjItZWEwZWZmN2I4MDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOD7TDThGefdrce6ZWjf82Zb8FwEJ//FmcG0 MhQOFDfvvg6+y9xj1dQY2ul4cCkBbVUywxZSUEyMiNx56fshC88WBZ0GbihS4ecf A+yc6fWi+G/RtMJa+fnndWa6jAVRNYcndmGS9ULu4xT4I/BNbxm99bTwFmkbjH9f USY1Hm1YjHgBfkv42zkJkqWGsBUUCHLyoRNt8GGh5/ygUZg9jEi5leejJvMIEyIN +xfd/LEGIS8AeDQW24EaWeu7jAPe4iUOt1u8XgVRo8fZGqsQXiZBoM9fcgmLvAYt 6ao9yCtcK9PeAyBwc5jghi5kFtrDyJdlpuOiYwpmmNjPs+VWrQIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFPUMPWeZNrkRAJYVMgRdPdBQju76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvYzA4Y2RkZjktYmExYy0z MjZlLWI1ZjItZWFhOTFhYzk1YzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAQUwDAwCn FDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQA9O8jonYSppOrPh/o//Zh2CIlJ8jZAqf3l3aSN6rBlGZniQJtI XfhI+t0ZSWJC5GHBIzsDwhK30YUBfAxA16RE+BjxOPF0bAFrr9xxG2fmS1VWwYvg zu5DBiYJRI+kXoliX+5OKZZDwqsgydKHaMdoIcbb+rVvi5lZJpa6q2MMl7NfR07M c6aFRIKyt5zUWDDhRM9CxZqsOOEhESIZhUUhnvIYcf34LRBYfQf8GLltozjekQwe ReQAzxuT0kdNiSBwXcp+3ASkEasdQr55FTZqH3Ea2XJeFomWLkUXq+qpqS6I21+j yn09dUr1Msk+U4j8YuOIH+gFC88aiycCO2gJ -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:27 2025 by rpki-client