$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/654966e7-4171-3ec2-8448-3233091cbe98.roa File: 654966e7-4171-3ec2-8448-3233091cbe98.roa (raw, json) Hash identifier: QX3XhtYQPw+tV3CRm4PIu721u52lEFt8Z4/Md4O7j78= Subject key identifier: 7D:28:4A:3D:E5:D9:A3:3D:10:4D:64:E7:24:AE:61:23:3F:F6:31:9C Certificate issuer: /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Certificate serial: 010D0C9F4328584863CB1211FD4EAACA627D1600 Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/654966e7-4171-3ec2-8448-3233091cbe98.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 14618 IP address blocks: 173.213.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:12:11:fd:4e:aa:ca:62:7d:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=a1b5a010-19b0-400c-9a2b-0356f0c31143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ff:30:80:75:27:d6:b2:d5:81:23:25:3a:95: 8a:4c:0e:07:24:dc:5a:78:73:87:03:27:3e:58:90: 84:a0:81:9a:9a:a1:55:b5:c2:95:c6:70:14:0a:d8: 0e:3c:d9:24:4c:56:44:ed:6f:89:6b:5b:1f:b3:38: 3c:c3:f3:98:1f:78:b9:9d:71:6b:91:48:fe:77:61: a5:c8:f1:9a:ed:5d:4b:38:7f:56:af:22:65:e4:67: 2c:d7:ba:41:4d:ae:bb:78:53:c8:09:93:e7:04:7a: d1:e7:11:37:af:1b:8b:89:e2:50:46:45:78:69:5b: b0:62:14:6f:c1:1f:a9:85:60:4a:ea:c6:76:c5:a1: 25:df:c7:81:93:ad:d4:2c:95:0b:5b:eb:5f:01:b6: bb:ed:03:62:9f:c5:8d:19:e4:63:19:05:a9:8b:90: 87:73:24:83:7e:a3:29:b9:aa:7c:68:8b:6f:b7:91: d0:d8:02:53:89:bc:63:d9:8a:b8:a0:ff:8f:06:9b: 94:cd:e9:bf:df:3c:eb:3f:22:f8:ba:6e:7c:77:68: b1:fe:03:ec:ff:6d:6d:bc:91:06:48:00:e9:d0:6e: 50:52:02:0c:1b:e4:83:32:e3:86:74:21:5e:a7:76: d1:e8:35:4d:1b:ad:cb:82:91:40:14:22:24:ed:7f: 59:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:28:4A:3D:E5:D9:A3:3D:10:4D:64:E7:24:AE:61:23:3F:F6:31:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/654966e7-4171-3ec2-8448-3233091cbe98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl X509v3 Authority Key Identifier: keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer sbgp-ipAddrBlock: critical IPv4: 173.213.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:98:aa:81:da:7a:da:22:5b:22:b4:9b:a1:60:48:14:8d:e8: 55:43:24:d1:2e:b4:55:d2:79:a0:30:16:88:4d:49:fa:e6:f4: 3c:ca:86:23:31:9b:b9:63:f8:b0:e5:58:e5:4c:ff:06:a4:01: ba:d8:c0:0d:65:ee:42:af:f3:91:4b:35:25:c4:1c:a1:25:22: 7b:b4:6c:1a:7b:4f:04:ba:98:f5:15:25:85:77:9b:b3:39:33: b5:20:77:fd:50:2a:ae:71:af:34:a5:47:3c:28:02:1f:f2:0c: 10:da:78:6c:be:4f:6b:ca:8c:a5:8f:44:98:54:82:d1:07:35: 27:10:bb:21:ba:3a:0f:14:30:6f:f7:14:d1:7e:1a:75:29:98: bd:06:d2:66:ac:1c:e7:0e:dc:9d:b2:75:19:e0:42:9f:6f:ed: 36:c1:be:44:9a:49:f6:33:bf:0b:4c:4c:02:14:c5:aa:ce:48: 34:80:5b:73:f5:e6:63:ff:86:ad:21:82:38:ca:64:b0:43:e1: 6c:fe:c2:4b:bd:f0:f1:0a:3d:96:3c:70:e4:da:3c:72:da:fc: ce:67:ef:10:e7:a0:e4:92:58:bd:18:1c:3d:48:d7:26:ad:1a: 6d:d6:7d:b1:5f:cb:e0:3d:fa:7d:83:c1:5f:1e:eb:a3:a9:ee: 56:ec:46:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjyxIR/U6qymJ9FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5MjE4OTYtM2MwZi00Y2I0LTljOTktZTJkNjBkMWQy ZTQxMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk YTFiNWEwMTAtMTliMC00MDBjLTlhMmItMDM1NmYwYzMxMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP8wgHUn1rLVgSMlOpWKTA4HJNxaeHOHAyc+ WJCEoIGamqFVtcKVxnAUCtgOPNkkTFZE7W+Ja1sfszg8w/OYH3i5nXFrkUj+d2Gl yPGa7V1LOH9WryJl5Gcs17pBTa67eFPICZPnBHrR5xE3rxuLieJQRkV4aVuwYhRv wR+phWBK6sZ2xaEl38eBk63ULJULW+tfAba77QNin8WNGeRjGQWpi5CHcySDfqMp uap8aItvt5HQ2AJTibxj2Yq4oP+PBpuUzem/3zzrPyL4um58d2ix/gPs/21tvJEG SADp0G5QUgIMG+SDMuOGdCFep3bR6DVNG63LgpFAFCIk7X9ZVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0oSj3l2aM9EE1k5ySuYSM/9jGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjky MTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2MGQxZDJlNDEvNjU0OTY2ZTctNDE3MS0z ZWMyLTg0NDgtMzIzMzA5MWNiZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzY5MjE4OTYtM2MwZi00Y2I0LTlj OTktZTJkNjBkMWQyZTQxL2M2OTIxODk2LTNjMGYtNGNiNC05Yzk5LWUyZDYwZDFk MmU0MS5jcmwwHwYDVR0jBBgwFoAUrleJtW5YGUcNRSVOWLJwANqTgo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjkyMTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2 MGQxZDJlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrdUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKYqoHaetoiWyK0m6FgSBSN6FVDJNEutFXSeaAwFohNSfrm9DzKhiMx m7lj+LDlWOVM/wakAbrYwA1l7kKv85FLNSXEHKElInu0bBp7TwS6mPUVJYV3m7M5 M7Ugd/1QKq5xrzSlRzwoAh/yDBDaeGy+T2vKjKWPRJhUgtEHNScQuyG6Og8UMG/3 FNF+GnUpmL0G0masHOcO3J2ydRngQp9v7TbBvkSaSfYzvwtMTAIUxarOSDSAW3P1 5mP/hq0hgjjKZLBD4Wz+wku98PEKPZY8cOTaPHLa/M5n7xDnoOSSWL0YHD1I1yat Gm3WfbFfy+A9+n2DwV8e66Op7lbsRjY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:54 2025 by rpki-client