$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f513d71c-8f60-33be-bd78-41b06d433626.roa File: f513d71c-8f60-33be-bd78-41b06d433626.roa (raw, json) Hash identifier: Zq2QMErF1tX3MsGcdS5fq/JE6SVBFmbAmtLiBIMyaD0= Subject key identifier: D8:3A:1F:2A:56:67:E6:14:0B:AE:6D:0C:27:8B:2C:8A:7D:74:B8:40 Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F4328584832F027B09FDA967337DC9780 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f513d71c-8f60-33be-bd78-41b06d433626.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 40501 IP address blocks: 216.235.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:27:b0:9f:da:96:73:37:dc:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=f142829e-d0ec-46c0-b786-e840f8fd0d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:59:3f:52:81:3b:62:27:e0:e7:8b:f3:8e:67: 32:00:50:7c:21:ad:37:18:24:5a:77:70:08:21:b3: 38:06:6e:b3:3b:2b:58:31:9f:6c:81:49:94:8b:5c: 24:20:3f:bc:da:82:5d:c4:1c:d5:64:2f:32:74:17: 38:9d:eb:7a:c4:05:73:c8:b9:c0:cd:12:11:ad:28: f4:8f:30:c7:84:29:ba:04:f4:b3:e1:5d:50:78:87: 3f:f4:74:48:2b:43:9a:70:ad:5a:75:eb:71:a7:b0: 1c:61:af:64:35:3f:99:68:4c:82:72:14:d9:f9:77: db:4c:4b:a0:0e:7d:93:3e:50:5d:5d:e7:d7:79:99: 6f:01:7b:00:04:2e:74:f5:01:2a:09:e2:bd:0b:25: e2:ff:23:e1:73:5c:cb:0f:0f:54:f7:ad:25:8b:b9: e4:5f:11:d3:09:d4:18:86:7f:98:be:db:18:4b:cc: 81:86:5e:4d:9d:a6:a8:07:2c:ea:1b:ad:e5:99:6a: f8:9f:72:43:6b:e4:4b:3b:33:b7:55:16:25:3e:d2: 2d:d9:99:c8:14:a4:da:63:1b:e4:31:13:45:19:96: 9c:f5:84:88:a0:c7:bc:08:aa:2e:84:dc:68:0c:c3: 0e:52:20:03:34:9f:47:d7:1d:3c:cb:75:13:40:d8: af:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3A:1F:2A:56:67:E6:14:0B:AE:6D:0C:27:8B:2C:8A:7D:74:B8:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f513d71c-8f60-33be-bd78-41b06d433626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:cf:30:98:54:ca:f5:44:61:7c:d1:bf:e4:e0:6e:e3:b5:76: 40:c9:8c:30:c8:5e:2f:22:28:6c:98:23:0c:47:d3:ee:b9:f3: 6d:8b:81:50:bf:e6:65:6a:74:20:f6:c5:7a:68:a4:46:a6:c8: aa:fe:fc:ff:6d:46:61:af:31:a8:10:bf:58:ba:e7:04:b9:79: 94:3a:9a:62:c6:2c:29:62:10:f4:86:7e:b5:44:21:04:80:50: 32:75:9d:8f:ce:5c:34:ed:70:53:9b:2f:b7:a5:25:01:84:39: da:b8:2d:7f:b6:32:f6:62:c6:3b:c4:61:7c:cd:40:19:d5:99: 9a:cd:62:18:ef:22:f3:fa:7e:e9:8d:ca:43:e2:4a:7b:14:0a: 52:83:a9:9e:ff:4b:10:57:fb:df:dd:76:cd:8c:8d:01:76:a4: 05:d7:7a:70:4b:56:42:84:c7:82:82:ec:de:97:26:89:31:3f: 69:6c:1d:c9:59:ce:dd:a1:c0:07:86:50:db:14:e5:b9:3f:76: d8:a1:64:86:92:58:08:8c:6d:65:42:c4:40:4b:c0:d9:29:8b: 34:b0:a2:54:8e:46:c3:36:90:47:b2:3e:81:06:6e:97:71:ba: a5:54:8a:cf:96:10:78:7c:aa:a7:f8:4d:78:ae:fe:f3:2d:fb: 0d:74:e3:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8Cewn9qWczfcl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk ZjE0MjgyOWUtZDBlYy00NmMwLWI3ODYtZTg0MGY4ZmQwZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilk/UoE7Yifg54vzjmcyAFB8Ia03GCRad3AI IbM4Bm6zOytYMZ9sgUmUi1wkID+82oJdxBzVZC8ydBc4net6xAVzyLnAzRIRrSj0 jzDHhCm6BPSz4V1QeIc/9HRIK0OacK1adetxp7AcYa9kNT+ZaEyCchTZ+XfbTEug Dn2TPlBdXefXeZlvAXsABC509QEqCeK9CyXi/yPhc1zLDw9U960li7nkXxHTCdQY hn+YvtsYS8yBhl5NnaaoByzqG63lmWr4n3JDa+RLOzO3VRYlPtIt2ZnIFKTaYxvk MRNFGZac9YSIoMe8CKouhNxoDMMOUiADNJ9H1x08y3UTQNivfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNg6HypWZ+YUC65tDCeLLIp9dLhAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvZjUxM2Q3MWMtOGY2MC0z M2JlLWJkNzgtNDFiMDZkNDMzNjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OtSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInPMJhUyvVEYXzRv+TgbuO1dkDJjDDIXi8iKGyYIwxH0+65822LgVC/ 5mVqdCD2xXpopEamyKr+/P9tRmGvMagQv1i65wS5eZQ6mmLGLCliEPSGfrVEIQSA UDJ1nY/OXDTtcFObL7elJQGEOdq4LX+2MvZixjvEYXzNQBnVmZrNYhjvIvP6fumN ykPiSnsUClKDqZ7/SxBX+9/dds2MjQF2pAXXenBLVkKEx4KC7N6XJokxP2lsHclZ zt2hwAeGUNsU5bk/dtihZIaSWAiMbWVCxEBLwNkpizSwolSORsM2kEeyPoEGbpdx uqVUis+WEHh8qqf4TXiu/vMt+w1044k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:51 2025 by rpki-client