$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa File: d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa (raw, json) Hash identifier: gpHt8B4tMz7xhxP1SBCgUr40FF4viZluabK5mI1IlRU= Subject key identifier: 19:46:72:34:CA:B7:30:4E:3F:75:88:8D:C7:67:DA:FE:A0:32:00:FD Certificate issuer: /CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Certificate serial: 010D0C9F43285848265FF80F7B42ECA9B746CC00 Authority key identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa Signing time: Mon 09 Dec 2024 14:00:51 +0000 ROA not before: Mon 09 Dec 2024 14:00:51 +0000 ROA not after: Sun 09 Mar 2025 13:00:51 +0000 asID: 17103 IP address blocks: 208.90.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:26:5f:f8:0f:7b:42:ec:a9:b7:46:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Validity Not Before: Dec 9 14:00:51 2024 GMT Not After : Mar 9 13:00:51 2025 GMT Subject: CN=87ed8f7f-8ab8-4c29-b4a4-efd29cb3cf8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:2b:9f:94:0f:f8:94:8e:30:5f:d1:c0:ec: 97:f5:bc:5f:ed:76:4c:28:31:9d:8c:8c:6f:44:94: 81:c1:3d:31:2b:c6:a8:67:82:95:59:a1:6f:2b:b0: c4:bd:ec:d3:c5:75:8b:b4:98:37:60:3e:e5:45:06: 2d:97:07:b4:23:6c:c1:5a:c3:27:70:84:bd:ca:ef: 16:65:8a:a7:09:54:e0:12:ef:68:b6:ca:23:59:99: 6c:da:ed:28:16:44:5f:4e:05:0d:37:bc:a2:32:c1: d8:96:4d:6d:e0:70:e0:7f:bb:dc:aa:69:d4:a4:95: 30:61:cb:6f:b1:0b:ae:ac:0e:c7:e3:90:b1:03:d3: 67:63:b9:d2:79:3a:65:90:ad:04:49:15:8b:5d:21: b6:24:4b:21:74:df:dd:9e:50:ab:83:87:34:06:98: b5:a7:04:77:cf:3e:52:19:5c:a7:8a:b7:f5:c9:f4: 27:99:ce:64:41:ae:53:c2:8e:d4:f6:e7:91:4c:03: d1:7a:0e:86:3a:2d:0c:46:52:67:c9:b2:29:7c:38: a5:38:3b:b9:ce:16:ba:dd:70:e0:9c:08:96:5c:e6: 46:6d:18:41:69:09:94:75:56:b7:aa:3d:98:97:5a: fe:41:a8:9e:74:92:42:5f:26:e8:f6:d8:17:0d:6a: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:46:72:34:CA:B7:30:4E:3F:75:88:8D:C7:67:DA:FE:A0:32:00:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl X509v3 Authority Key Identifier: keyid:1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer sbgp-ipAddrBlock: critical IPv4: 208.90.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:06:10:31:38:5a:99:ea:6c:d1:fa:26:97:fc:24:62:3f:a2: 5d:5f:1b:f0:1d:b4:a0:70:fc:fe:1a:14:f7:dc:32:c0:04:af: 7e:bd:da:bc:eb:04:9d:5e:44:2e:c4:77:61:7a:81:80:e9:8e: 6d:46:b6:18:ba:22:5c:4c:82:d2:bc:89:78:43:41:24:0d:9b: ba:01:f8:ca:9a:0e:e8:41:0b:e0:79:05:86:b6:a3:59:fd:28: 80:22:6f:7e:5b:27:7d:f9:f0:0f:b4:a9:5a:45:2e:d7:72:18: aa:35:7e:dc:0e:36:9e:2e:37:cb:6b:d3:72:8c:e6:cc:06:07: c7:65:08:f6:ca:41:ad:cb:07:83:1d:bd:65:ce:2d:36:11:13: f5:6e:4e:e8:8b:dc:62:17:f5:3f:6e:99:99:4a:98:9c:ff:75: 8a:46:2d:74:2f:f4:e0:bc:c0:1c:0b:ba:3d:7e:94:e4:2d:70: 48:68:62:fa:6c:ca:7a:d6:9b:56:75:2c:70:40:2a:e9:0b:02: 55:18:01:80:44:12:24:f5:bd:18:26:8f:c6:35:f9:33:01:6f: 2e:15:87:ab:f9:2c:75:4a:23:f3:87:80:39:f1:24:a6:85:5a: db:5f:22:f5:7d:1b:39:5c:97:8b:a2:14:e1:cb:a4:1d:13:f0: 4b:1a:ea:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmX/gPe0LsqbdGzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMTAwMGEtZGRkZS00NGE3LWFkOWMtMTJkMDQ5YWNk ZTE3MB4XDTI0MTIwOTE0MDA1MVoXDTI1MDMwOTEzMDA1MVowLzEtMCsGA1UEAxMk ODdlZDhmN2YtOGFiOC00YzI5LWI0YTQtZWZkMjljYjNjZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuywrn5QP+JSOMF/RwOyX9bxf7XZMKDGdjIxv RJSBwT0xK8aoZ4KVWaFvK7DEvezTxXWLtJg3YD7lRQYtlwe0I2zBWsMncIS9yu8W ZYqnCVTgEu9otsojWZls2u0oFkRfTgUNN7yiMsHYlk1t4HDgf7vcqmnUpJUwYctv sQuurA7H45CxA9NnY7nSeTplkK0ESRWLXSG2JEshdN/dnlCrg4c0Bpi1pwR3zz5S GVynirf1yfQnmc5kQa5Two7U9ueRTAPReg6GOi0MRlJnybIpfDilODu5zha63XDg nAiWXOZGbRhBaQmUdVa3qj2Yl1r+QaiedJJCXybo9tgXDWpDcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlGcjTKtzBOP3WIjcdn2v6gMgD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNGIx MDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQwNDlhY2RlMTcvZDNkZGIxOGYtNWVmNi0z ZmVhLWI4ZTYtZDM4MGU1MTNhMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzRiMTAwMGEtZGRkZS00NGE3LWFk OWMtMTJkMDQ5YWNkZTE3LzM0YjEwMDBhLWRkZGUtNDRhNy1hZDljLTEyZDA0OWFj ZGUxNy5jcmwwHwYDVR0jBBgwFoAUHuwP9vEdh6YT86HbKJO1hz7Ht4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNGIxMDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQw NDlhY2RlMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUGEDE4WpnqbNH6Jpf8JGI/ol1fG/AdtKBw/P4aFPfcMsAEr3692rzr BJ1eRC7Ed2F6gYDpjm1Gthi6IlxMgtK8iXhDQSQNm7oB+MqaDuhBC+B5BYa2o1n9 KIAib35bJ3358A+0qVpFLtdyGKo1ftwONp4uN8tr03KM5swGB8dlCPbKQa3LB4Md vWXOLTYRE/VuTuiL3GIX9T9umZlKmJz/dYpGLXQv9OC8wBwLuj1+lOQtcEhoYvps ynrWm1Z1LHBAKukLAlUYAYBEEiT1vRgmj8Y1+TMBby4Vh6v5LHVKI/OHgDnxJKaF WttfIvV9Gzlcl4uiFOHLpB0T8Esa6jc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:55 2025 by rpki-client