$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/32dde319-0457-358d-a7bd-2a910a0b3183.roa File: 32dde319-0457-358d-a7bd-2a910a0b3183.roa (raw, json) Hash identifier: CMBRB6tXRjXQwXNyphiTLbTSrqYTEnAApCTljbHM97Q= Subject key identifier: D0:9A:17:04:FA:00:FB:56:1F:16:34:E3:A2:95:FE:BE:3A:66:97:37 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584835BAA7D02B02C1266BFEDE80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/32dde319-0457-358d-a7bd-2a910a0b3183.roa Signing time: Sun 15 Dec 2024 02:00:39 +0000 ROA not before: Sun 15 Dec 2024 02:00:39 +0000 ROA not after: Sat 15 Mar 2025 01:00:39 +0000 asID: 13335 IP address blocks: 204.195.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:35:ba:a7:d0:2b:02:c1:26:6b:fe:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 15 02:00:39 2024 GMT Not After : Mar 15 01:00:39 2025 GMT Subject: CN=ff995f9b-4e10-4459-9238-231a4212e825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:ff:fb:ba:5b:d8:c9:18:7b:f5:55:3a:8b: 05:97:01:c8:c3:aa:54:0b:7a:d8:25:c5:9c:c3:e0: 29:69:c9:b9:4f:9a:b2:3b:fb:da:08:db:ab:6a:7a: 6b:e4:1f:e6:2c:17:87:e7:12:8b:79:9e:31:ca:69: 95:3d:88:a1:72:81:63:66:10:48:38:28:82:15:c3: 7b:6e:6e:be:ac:83:5e:06:b6:3c:71:20:06:cd:38: 0a:0b:d5:c4:2d:00:37:a8:bc:a1:1b:5a:60:97:bb: b1:ae:85:b4:b9:7f:1e:1d:c8:3f:41:53:be:ad:4f: 98:16:fc:1f:7b:77:23:43:b2:1c:1b:25:22:a4:84: 15:83:9b:6e:58:09:33:5e:57:c4:03:72:d9:86:d3: 52:4a:c8:4c:42:77:86:e7:5d:1c:5d:00:7f:98:16: 01:d4:3f:db:4e:ce:fc:8e:52:7b:5b:8d:fc:3d:d4: d6:57:4f:45:21:36:9c:78:59:52:17:67:58:5e:ec: 39:0f:8b:32:9c:fe:c2:a7:ff:4b:42:ad:9f:36:ff: 9e:55:30:f6:67:f5:9a:29:63:19:95:85:75:e8:73: 58:5d:39:6b:91:0f:76:b2:44:c0:0c:55:8e:61:79: 27:23:2c:1c:80:d8:80:5f:61:eb:24:31:d6:92:bd: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9A:17:04:FA:00:FB:56:1F:16:34:E3:A2:95:FE:BE:3A:66:97:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/32dde319-0457-358d-a7bd-2a910a0b3183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:3f:e0:d4:03:f3:4e:84:65:5f:5c:f6:80:ce:7f:3f:d6:dd: b1:59:d7:72:6f:80:7b:a2:db:15:1c:bb:0f:34:2c:63:67:5e: d6:b2:1a:43:db:66:04:1b:a4:72:11:e2:16:23:fa:cd:9d:c3: 2e:ce:59:7b:9e:c5:42:31:55:80:be:b5:0d:fb:21:13:e3:8d: 85:af:44:3a:6c:15:1e:ec:ed:d8:d2:cf:5e:5a:61:5a:83:1c: 67:de:52:bd:0d:03:82:fc:f2:a8:50:c1:53:c6:19:de:84:1b: b0:a7:f3:a3:2d:af:20:f1:24:ca:c8:c1:32:6b:80:f8:5c:c7: fd:b6:e5:12:25:f3:c9:25:a2:97:45:c7:f3:c2:9a:ee:e1:9b: d3:76:f5:eb:d5:5d:d4:f7:74:b8:73:c7:b3:bb:a6:2a:fd:21: 27:0c:82:3e:79:be:df:42:3b:18:7f:92:f7:96:77:41:98:2c: 55:96:57:08:2a:30:b4:98:b1:39:8c:35:c2:f9:d2:39:01:4f: d4:f3:18:4b:23:51:60:ce:62:c8:0b:b0:6e:aa:57:27:56:26: 8f:61:19:20:84:11:43:95:34:63:73:e1:ee:24:f8:f2:0c:03: 8f:1e:d0:f4:20:62:b2:3c:01:0e:58:8c:ba:41:1f:c2:66:90: 08:a0:2b:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg1uqfQKwLBJmv+3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIxNTAyMDAzOVoXDTI1MDMxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZmY5OTVmOWItNGUxMC00NDU5LTkyMzgtMjMxYTQyMTJlODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TT/+7pb2MkYe/VVOosFlwHIw6pUC3rYJcWc w+Apacm5T5qyO/vaCNuranpr5B/mLBeH5xKLeZ4xymmVPYihcoFjZhBIOCiCFcN7 bm6+rINeBrY8cSAGzTgKC9XELQA3qLyhG1pgl7uxroW0uX8eHcg/QVO+rU+YFvwf e3cjQ7IcGyUipIQVg5tuWAkzXlfEA3LZhtNSSshMQneG510cXQB/mBYB1D/bTs78 jlJ7W438PdTWV09FITaceFlSF2dYXuw5D4synP7Cp/9LQq2fNv+eVTD2Z/WaKWMZ lYV16HNYXTlrkQ92skTADFWOYXknIywcgNiAX2HrJDHWkr1b5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCaFwT6APtWHxY046KV/r46Zpc3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzJkZGUzMTktMDQ1Ny0z NThkLWE3YmQtMmE5MTBhMGIzMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMP1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo/4NQD806EZV9c9oDOfz/W3bFZ13JvgHui2xUcuw80LGNnXtayGkPb ZgQbpHIR4hYj+s2dwy7OWXuexUIxVYC+tQ37IRPjjYWvRDpsFR7s7djSz15aYVqD HGfeUr0NA4L88qhQwVPGGd6EG7Cn86MtryDxJMrIwTJrgPhcx/225RIl88klopdF x/PCmu7hm9N29evVXdT3dLhzx7O7pir9IScMgj55vt9COxh/kveWd0GYLFWWVwgq MLSYsTmMNcL50jkBT9TzGEsjUWDOYsgLsG6qVydWJo9hGSCEEUOVNGNz4e4k+PIM A48e0PQgYrI8AQ5YjLpBH8JmkAigKwg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:03 2025 by rpki-client