$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa File: 767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa (raw, json) Hash identifier: 66p1le+Oi+/mbqXtsUCYZSlb+p5G73Z5/QvCKp20eAQ= Subject key identifier: BB:33:3B:0B:5F:CF:87:9C:8A:51:06:B1:05:7C:05:C7:2E:E0:21:0A Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F4328584832F02AA936200091334C7A00 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 40501 IP address blocks: 216.235.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:2a:a9:36:20:00:91:33:4c:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=72e30e56-4395-453f-86a0-111e196eda2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:bb:32:fd:4d:ee:37:89:3d:52:b8:e1:8c: d3:c7:b6:bf:1f:82:5e:76:af:c1:5f:3d:1e:7c:78: 31:68:c2:9b:d0:a7:dd:66:c5:24:80:c2:65:7f:27: e2:5f:d6:f8:d9:68:58:05:e5:01:31:db:7e:92:09: b7:ff:aa:70:58:49:a2:e4:d3:00:6c:b3:fa:99:aa: 9b:8d:2d:56:79:0d:15:ca:28:90:61:7b:ae:51:cf: da:2e:1e:22:f7:2b:51:bd:36:31:f9:8c:0f:b8:38: 67:a3:b9:af:aa:93:4f:fc:8d:1d:44:9f:17:50:28: 5f:66:59:94:55:80:4c:91:1d:b7:9a:a6:36:d6:00: 8a:ce:f6:30:19:bc:08:51:9f:03:46:d1:4f:1c:41: 7c:bc:9f:d4:bf:a3:70:e9:81:c7:37:f6:0a:a6:f4: f8:fa:06:eb:d9:b8:a2:86:78:55:b5:6e:2a:68:64: d9:e7:2e:77:23:c6:8e:55:49:51:a8:f8:01:53:b7: 58:f1:22:e3:c8:85:0a:65:1b:55:ab:12:4b:05:c2: 2c:21:5f:31:7b:c8:7b:71:b9:8a:95:f0:81:d7:e4: 55:bf:2f:7b:d2:62:33:48:8d:75:11:5b:c2:13:f7: 36:e2:53:b8:bf:ed:f4:26:b9:ce:e5:73:11:9d:c6: 64:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:33:3B:0B:5F:CF:87:9C:8A:51:06:B1:05:7C:05:C7:2E:E0:21:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b1:41:73:13:7f:38:37:eb:26:dc:84:77:c4:01:8b:08:df: 5b:06:b2:9e:4c:3e:ba:72:15:62:34:8b:17:32:a2:9f:c8:1b: cf:9a:78:12:0e:10:4f:a3:5a:3d:ba:f7:74:e7:6a:90:90:ae: 48:37:7e:77:85:04:2d:48:e4:45:24:89:64:c0:19:2c:46:06: af:57:41:cb:fd:06:6d:34:66:fb:ff:eb:9d:d7:17:f7:39:82: 4f:80:cf:d1:a3:3a:aa:51:1b:5f:b8:4f:29:20:c6:c5:48:8d: 3e:ba:aa:fa:4c:95:d1:96:69:69:c4:89:1a:ec:af:54:36:31: 72:13:1d:2a:ec:77:d8:f0:94:bd:d7:8e:05:a5:19:1a:69:06: 32:8b:ad:e0:9f:45:bd:f2:aa:3f:90:67:e6:01:5b:c0:08:f5: 83:51:03:f0:a3:9c:33:64:2e:de:70:74:c3:e3:4e:54:ee:2b: f1:2f:9c:50:32:7a:f5:01:9f:03:ee:73:ce:c8:f0:6c:d9:76: 81:30:9e:74:c0:cd:fb:c8:06:19:40:81:49:25:e2:dc:30:a5: a9:58:3f:11:64:6a:70:b8:dc:59:4c:0b:23:11:02:70:3c:f0: 5f:eb:4e:b9:b7:61:23:80:56:5d:3a:5d:6c:10:9a:20:d9:61: e3:e2:c5:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8CqpNiAAkTNMegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk NzJlMzBlNTYtNDM5NS00NTNmLTg2YTAtMTExZTE5NmVkYTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJm7Mv1N7jeJPVK44YzTx7a/H4Jedq/BXz0e fHgxaMKb0KfdZsUkgMJlfyfiX9b42WhYBeUBMdt+kgm3/6pwWEmi5NMAbLP6maqb jS1WeQ0VyiiQYXuuUc/aLh4i9ytRvTYx+YwPuDhno7mvqpNP/I0dRJ8XUChfZlmU VYBMkR23mqY21gCKzvYwGbwIUZ8DRtFPHEF8vJ/Uv6Nw6YHHN/YKpvT4+gbr2bii hnhVtW4qaGTZ5y53I8aOVUlRqPgBU7dY8SLjyIUKZRtVqxJLBcIsIV8xe8h7cbmK lfCB1+RVvy970mIzSI11EVvCE/c24lO4v+30JrnO5XMRncZk/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLszOwtfz4ecilEGsQV8Bccu4CEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvNzY3YTBkMzYtNzI3MC0z YzNiLWE3MTYtNWNhNGFiYTFlMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OtRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICxQXMTfzg36ybchHfEAYsI31sGsp5MPrpyFWI0ixcyop/IG8+aeBIO EE+jWj2693TnapCQrkg3fneFBC1I5EUkiWTAGSxGBq9XQcv9Bm00Zvv/653XF/c5 gk+Az9GjOqpRG1+4TykgxsVIjT66qvpMldGWaWnEiRrsr1Q2MXITHSrsd9jwlL3X jgWlGRppBjKLreCfRb3yqj+QZ+YBW8AI9YNRA/CjnDNkLt5wdMPjTlTuK/EvnFAy evUBnwPuc87I8GzZdoEwnnTAzfvIBhlAgUkl4twwpalYPxFkanC43FlMCyMRAnA8 8F/rTrm3YSOAVl06XWwQmiDZYePixSI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:09 2025 by rpki-client