$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d47b0960-33c6-3924-9534-d4d3ae4f3ec4.roa File: d47b0960-33c6-3924-9534-d4d3ae4f3ec4.roa (raw, json) Hash identifier: gztuXBHTfzPr7XRmjUKSUrygegrOCQuJXM8AkpRuD1w= Subject key identifier: 74:27:B1:8E:E7:C3:C0:76:64:FB:3A:D8:DC:60:96:D2:78:18:CF:9B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473ADD5CEBC5BAF6CB00FB5880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d47b0960-33c6-3924-9534-d4d3ae4f3ec4.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.69.0.0/24 maxlen: 24 198.41.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:dd:5c:eb:c5:ba:f6:cb:00:fb:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=29dcd21d-1ab9-4777-bb82-64a35093f1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:ca:47:71:46:3a:fd:11:b3:8f:c9:6b:5b: 3c:70:d5:20:cb:20:14:ff:7b:4b:87:26:a8:0e:74: 4b:2b:67:1b:68:a1:5b:be:9e:f6:c8:d1:85:87:12: e8:a2:2f:fa:d0:ca:47:32:1f:63:21:2d:e6:8d:e9: 6c:43:a6:e7:47:88:cc:aa:93:f0:e4:b7:51:0c:14: 5b:81:9f:53:49:29:4d:70:da:de:0b:3a:a9:d0:6b: e4:af:30:fa:c0:86:50:92:c0:e4:ba:b5:3d:0e:aa: 67:74:7a:19:63:76:b0:61:1f:00:23:9b:6a:98:8a: 44:79:a8:b7:87:20:7d:7a:71:76:18:6f:46:e3:3e: 02:65:8c:e7:67:bd:85:02:4f:d6:ea:57:be:79:ca: e3:d4:b6:63:23:64:9a:5d:f9:48:9f:bc:29:0e:c0: dc:85:34:15:40:ec:6f:54:d5:f3:7c:ea:9e:3e:97: 9f:3d:ac:5a:c3:6a:c9:6f:ed:2e:09:d2:18:33:a7: aa:50:91:db:f7:0c:e4:99:a6:3a:31:58:e8:18:a1: fb:54:80:37:10:6d:13:20:63:06:45:79:38:80:95: bf:94:fb:88:5f:fa:6b:c3:d3:3b:c7:77:23:04:11: 36:fa:7c:13:01:15:ce:4f:ba:00:38:15:af:9d:a5: f1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:27:B1:8E:E7:C3:C0:76:64:FB:3A:D8:DC:60:96:D2:78:18:CF:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d47b0960-33c6-3924-9534-d4d3ae4f3ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.0.0/24 198.41.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:86:4e:cc:6a:1d:be:6e:df:3b:f6:3e:5f:f9:aa:d1:0b:e5: 6e:56:b2:82:61:45:14:54:55:2e:ec:c7:79:3b:c9:23:74:c1: 03:2b:ef:66:91:03:14:e4:4e:4f:f9:2a:74:74:85:94:de:95: 71:56:92:4f:09:08:33:df:d8:89:d8:bf:1c:33:9f:4d:37:bc: dc:ff:e1:19:15:00:5a:74:83:a3:b8:38:4c:cd:f4:13:db:10: f5:32:79:9d:ff:f0:4f:b2:a8:d5:de:0a:7f:18:4a:2c:d4:25: 83:e9:89:8d:45:75:d2:65:df:96:19:07:3e:00:cc:97:d5:18: 75:77:74:b5:42:3a:50:d7:6b:b3:47:fb:80:4f:5e:52:e2:cd: b9:d2:26:31:a2:ea:8f:bb:5a:f8:cd:18:3c:66:46:33:85:b3: cb:9e:78:0d:de:f2:e9:06:82:e2:96:50:4a:57:ac:c3:ec:e4: f0:34:cb:17:81:1d:a1:96:61:29:5b:71:49:61:cf:d7:bc:66: d7:42:04:e5:fc:90:e6:b9:3e:91:e0:57:75:09:ca:03:95:c6: fa:ac:a4:c6:9b:06:b4:04:02:01:b6:9e:a9:19:35:66:c2:ba: 5b:9e:64:1c:65:87:f7:ce:70:ce:45:94:0c:42:a0:d5:ae:44: 18:eb:75:65 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEc63Vzrxbr2ywD7WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk MjlkY2QyMWQtMWFiOS00Nzc3LWJiODItNjRhMzUwOTNmMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+HKR3FGOv0Rs4/Ja1s8cNUgyyAU/3tLhyao DnRLK2cbaKFbvp72yNGFhxLooi/60MpHMh9jIS3mjelsQ6bnR4jMqpPw5LdRDBRb gZ9TSSlNcNreCzqp0GvkrzD6wIZQksDkurU9DqpndHoZY3awYR8AI5tqmIpEeai3 hyB9enF2GG9G4z4CZYznZ72FAk/W6le+ecrj1LZjI2SaXflIn7wpDsDchTQVQOxv VNXzfOqePpefPaxaw2rJb+0uCdIYM6eqUJHb9wzkmaY6MVjoGKH7VIA3EG0TIGMG RXk4gJW/lPuIX/prw9M7x3cjBBE2+nwTARXOT7oAOBWvnaXxiwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHQnsY7nw8B2ZPs62NxgltJ4GM+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDQ3YjA5NjAtMzNjNi0z OTI0LTk1MzQtZDRkM2FlNGYzZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArEUAAwQA xinsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHGGTsxqHb5u3zv2Pl/5qtEL5W5WsoJhRRRUVS7sx3k7ySN0 wQMr72aRAxTkTk/5KnR0hZTelXFWkk8JCDPf2InYvxwzn003vNz/4RkVAFp0g6O4 OEzN9BPbEPUyeZ3/8E+yqNXeCn8YSizUJYPpiY1FddJl35YZBz4AzJfVGHV3dLVC OlDXa7NH+4BPXlLizbnSJjGi6o+7WvjNGDxmRjOFs8ueeA3e8ukGguKWUEpXrMPs 5PA0yxeBHaGWYSlbcUlhz9e8ZtdCBOX8kOa5PpHgV3UJygOVxvqspMabBrQEAgG2 nqkZNWbCulueZBxlh/fOcM5FlAxCoNWuRBjrdWU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:58 2025 by rpki-client