$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa File: cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa (raw, json) Hash identifier: 9Au1JTHe4QlCn4ujK7QyUOtyGLaMKI2OCoyoQiTOhNc= Subject key identifier: B4:0E:29:AE:09:BE:73:8B:31:09:E7:0A:25:1B:11:42:25:34:A9:1A Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584847E02844769F259CB6EF4280 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa Signing time: Sat 21 Dec 2024 14:00:52 +0000 ROA not before: Sat 21 Dec 2024 14:00:52 +0000 ROA not after: Fri 21 Mar 2025 13:00:52 +0000 asID: 1239 IP address blocks: 68.24.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:47:e0:28:44:76:9f:25:9c:b6:ef:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Dec 21 14:00:52 2024 GMT Not After : Mar 21 13:00:52 2025 GMT Subject: CN=1fd493ba-7255-4644-a5b9-a98d47d80fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:47:5d:98:d3:5f:f2:e8:2d:52:95:ca:b3:d8: b1:21:7e:97:61:e0:b2:41:a9:ad:7a:62:f2:88:37: 11:12:8a:c4:a5:a3:b4:4f:87:88:ef:08:31:22:7d: d5:db:4c:9f:18:30:e5:32:55:a0:f1:37:1f:3b:f3: 27:9a:a1:ee:71:5d:d9:cc:92:7a:cc:1b:14:5e:eb: 0b:1f:58:70:f1:15:23:f6:66:f3:f3:87:6d:d3:0f: e8:d9:7b:78:f9:ee:b0:c7:ab:ae:d6:eb:ad:3d:74: 29:a8:72:c5:02:a3:c1:66:53:07:02:1c:46:32:07: 6a:d2:42:19:ab:c3:79:ef:e7:5d:64:d4:f4:90:06: 8e:88:0f:b1:2f:bc:2e:06:02:bd:59:e2:73:04:22: e8:11:87:f4:21:2d:c1:a3:59:5a:6c:54:d8:67:0f: 35:17:15:0d:b4:e6:56:27:cb:f7:5d:56:c1:51:f8: c7:be:e0:bc:d9:b1:9c:50:56:85:80:d2:32:c2:e2: dd:b4:b6:bb:1f:21:6b:d7:2a:ce:86:1b:0e:06:a0: ef:9f:14:78:1a:3a:81:e2:6e:de:53:3f:4c:a1:0b: 3d:14:9f:f6:c7:82:ed:23:d4:7c:9c:2d:ad:c3:73: 23:86:9d:02:c6:9a:83:90:26:90:11:f0:4e:21:27: d6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0E:29:AE:09:BE:73:8B:31:09:E7:0A:25:1B:11:42:25:34:A9:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 68.24.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:d3:b1:b7:b6:98:2d:96:c8:7f:2f:a0:89:12:b7:f7:6a:fe: dc:02:d9:79:45:0e:1a:65:19:a0:38:ce:81:b5:45:92:19:56: 4e:fd:1a:a2:a1:b5:ca:fe:57:d1:9f:0c:1b:b3:3a:00:f8:ac: 5b:4c:4d:93:1e:60:63:87:1c:a1:83:67:a5:89:aa:97:b0:7b: cb:85:04:83:e3:c6:e5:c5:67:4c:16:fc:54:66:f7:72:47:1c: 7f:dc:b9:23:d2:e6:0c:0e:cd:86:f6:cd:4d:ef:a0:ff:39:a7: 7b:5a:ef:df:5e:29:81:b8:d4:ed:99:e4:41:38:fc:0b:e6:e2: f0:56:9e:57:cd:7d:ea:e4:40:0a:17:94:49:9d:60:af:d1:f1: 60:24:08:b2:c1:85:d3:d3:93:80:02:56:33:0d:ba:d0:d5:44: df:0c:ba:d9:35:87:63:7c:58:2d:1b:0f:db:5e:88:87:ee:5c: 2d:d8:8c:e7:13:22:3a:dc:b9:fa:b7:77:69:a4:54:f1:c9:e4: 2c:dc:c4:a9:2c:64:44:c2:3d:8f:a9:4b:1c:98:70:18:86:c2: e1:53:2e:7c:7e:c2:0b:da:1a:7c:af:e3:45:e9:0a:cc:d9:5a: 5e:6a:c0:ad:df:34:5f:9c:6e:19:8c:2d:3b:ac:27:85:75:96: 7d:55:b5:99 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhH4ChEdp8lnLbvQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI0MTIyMTE0MDA1MloXDTI1MDMyMTEzMDA1MlowLzEtMCsGA1UEAxMk MWZkNDkzYmEtNzI1NS00NjQ0LWE1YjktYTk4ZDQ3ZDgwZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUddmNNf8ugtUpXKs9ixIX6XYeCyQamtemLy iDcREorEpaO0T4eI7wgxIn3V20yfGDDlMlWg8TcfO/MnmqHucV3ZzJJ6zBsUXusL H1hw8RUj9mbz84dt0w/o2Xt4+e6wx6uu1uutPXQpqHLFAqPBZlMHAhxGMgdq0kIZ q8N57+ddZNT0kAaOiA+xL7wuBgK9WeJzBCLoEYf0IS3Bo1labFTYZw81FxUNtOZW J8v3XVbBUfjHvuC82bGcUFaFgNIywuLdtLa7HyFr1yrOhhsOBqDvnxR4GjqB4m7e Uz9MoQs9FJ/2x4LtI9R8nC2tw3Mjhp0CxpqDkCaQEfBOISfWCwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLQOKa4JvnOLMQnnCiUbEUIlNKkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvY2IzZWM0YzAtNjZjMy0z NjI1LWFlM2EtMzZhMWFjMzU2Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDRBgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA3dOxt7aYLZbIfy+giRK392r+3ALZeUUOGmUZoDjOgbVFkhlWTv0aoqG1 yv5X0Z8MG7M6APisW0xNkx5gY4ccoYNnpYmql7B7y4UEg+PG5cVnTBb8VGb3ckcc f9y5I9LmDA7NhvbNTe+g/zmne1rv314pgbjU7ZnkQTj8C+bi8FaeV8196uRACheU SZ1gr9HxYCQIssGF09OTgAJWMw260NVE3wy62TWHY3xYLRsP216Ih+5cLdiM5xMi Oty5+rd3aaRU8cnkLNzEqSxkRMI9j6lLHJhwGIbC4VMufH7CC9oafK/jRekKzNla XmrArd80X5xuGYwtO6wnhXWWfVW1mQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:02 2025 by rpki-client