$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/406eba2c-c49a-3a8b-9ce9-0aafa0beca4b.roa File: 406eba2c-c49a-3a8b-9ce9-0aafa0beca4b.roa (raw, json) Hash identifier: UVyhL+jb2YWmIN5SsUAVoQZVg5C/qNBI41sx6YXX6so= Subject key identifier: E8:96:65:47:09:9A:F8:41:79:42:57:E3:8A:8C:B0:F6:1A:41:4D:C8 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584835BAA327049877F510C0FB00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/406eba2c-c49a-3a8b-9ce9-0aafa0beca4b.roa Signing time: Sun 15 Dec 2024 02:00:39 +0000 ROA not before: Sun 15 Dec 2024 02:00:39 +0000 ROA not after: Sat 15 Mar 2025 01:00:39 +0000 asID: 13335 IP address blocks: 204.195.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:35:ba:a3:27:04:98:77:f5:10:c0:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 15 02:00:39 2024 GMT Not After : Mar 15 01:00:39 2025 GMT Subject: CN=577e7fe3-82a5-4c90-b490-60c49be4f48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:51:b1:43:06:b4:51:9b:aa:48:e4:9c:9d:63: 8b:13:e0:5c:63:61:05:67:ae:92:fb:0b:3c:5d:f1: ee:4b:35:8f:ff:8b:38:57:4b:6d:0d:f2:5c:25:ff: 26:32:49:3a:b7:80:5f:70:ab:c9:98:71:e5:86:c2: e8:fc:b6:9f:7b:ce:e7:be:e6:b9:b5:1c:77:66:de: b3:c1:37:41:82:31:6e:8d:41:0d:33:79:78:28:37: 08:d9:9e:3b:c3:da:90:a6:8c:57:de:03:37:68:83: a7:63:66:df:94:84:d3:75:2f:2b:58:fd:04:8b:2a: 9a:87:b3:40:81:c5:50:8e:1c:e9:84:fd:e6:33:83: 44:cb:4c:bc:02:d7:c0:e4:19:8b:a9:7c:30:87:2f: d9:6f:83:40:17:22:7e:77:86:94:76:64:ff:0c:ad: df:5c:8f:ed:a7:8c:eb:5d:ed:95:3e:8d:77:68:21: f8:65:c6:67:62:19:16:76:79:e5:8f:7f:9c:fb:07: 03:57:40:13:f8:7d:b6:8e:6c:a5:8f:54:bb:1b:72: 77:00:0b:c3:0b:e3:fb:9e:05:55:bf:da:e4:66:ef: c9:f6:21:eb:f2:7c:73:d0:31:e8:41:70:c0:84:a4: 96:24:e9:64:b3:91:2f:4a:b5:54:8e:18:c2:1c:08: 17:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:96:65:47:09:9A:F8:41:79:42:57:E3:8A:8C:B0:F6:1A:41:4D:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/406eba2c-c49a-3a8b-9ce9-0aafa0beca4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f5:92:c7:dc:16:2a:7e:dd:c1:b5:62:e4:ca:a8:7f:86:86: 6e:19:b9:6b:08:fe:eb:9c:33:b9:27:18:84:b0:57:76:94:a4: 0f:88:06:ee:54:ba:2b:0e:e0:06:cc:2f:20:6f:06:74:09:62: 02:e7:4a:16:a4:7d:ba:f8:c5:5b:c4:a8:1b:9e:cc:bd:37:88: 8d:29:58:95:27:ad:c5:6b:80:45:ae:4a:c4:92:7b:ca:1e:9f: 84:34:2a:91:62:e8:02:76:59:d8:a3:46:83:23:88:00:4a:92: 79:0d:93:49:11:bf:59:a3:43:f1:22:60:e4:2e:5c:1a:da:3e: e8:23:f4:89:27:b0:c1:4c:a0:58:36:7b:1b:b8:65:02:59:e4: 70:a3:04:86:48:1a:ac:fb:64:93:15:9f:a7:b2:4c:87:47:ce: 87:ba:d1:01:3d:2a:2b:77:81:18:01:19:9f:ec:28:dc:eb:df: 82:0c:3b:e1:9d:23:10:da:a6:4b:83:83:27:f2:a5:5c:11:4d: 42:3d:b1:84:60:e4:fd:80:f0:73:5b:ef:ca:a9:8e:89:32:3c: 8f:b6:c5:0a:f0:6f:b5:8c:7c:9f:cc:a6:84:eb:b9:09:f3:52: 88:e2:82:ca:f8:fe:0c:58:2a:d8:78:2c:9c:5d:46:d9:00:31: 3e:5e:79:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg1uqMnBJh39RDA+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIxNTAyMDAzOVoXDTI1MDMxNTAxMDAzOVowLzEtMCsGA1UEAxMk NTc3ZTdmZTMtODJhNS00YzkwLWI0OTAtNjBjNDliZTRmNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilGxQwa0UZuqSOScnWOLE+BcY2EFZ66S+ws8 XfHuSzWP/4s4V0ttDfJcJf8mMkk6t4BfcKvJmHHlhsLo/Lafe87nvua5tRx3Zt6z wTdBgjFujUENM3l4KDcI2Z47w9qQpoxX3gM3aIOnY2bflITTdS8rWP0Eiyqah7NA gcVQjhzphP3mM4NEy0y8AtfA5BmLqXwwhy/Zb4NAFyJ+d4aUdmT/DK3fXI/tp4zr Xe2VPo13aCH4ZcZnYhkWdnnlj3+c+wcDV0AT+H22jmylj1S7G3J3AAvDC+P7ngVV v9rkZu/J9iHr8nxz0DHoQXDAhKSWJOlks5EvSrVUjhjCHAgX8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiWZUcJmvhBeUJX44qMsPYaQU3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDA2ZWJhMmMtYzQ5YS0z YThiLTljZTktMGFhZmEwYmVjYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP1ksfcFip+3cG1YuTKqH+Ghm4ZuWsI/uucM7knGISwV3aUpA+IBu5U uisO4AbMLyBvBnQJYgLnShakfbr4xVvEqBuezL03iI0pWJUnrcVrgEWuSsSSe8oe n4Q0KpFi6AJ2WdijRoMjiABKknkNk0kRv1mjQ/EiYOQuXBraPugj9IknsMFMoFg2 exu4ZQJZ5HCjBIZIGqz7ZJMVn6eyTIdHzoe60QE9Kit3gRgBGZ/sKNzr34IMO+Gd IxDapkuDgyfypVwRTUI9sYRg5P2A8HNb78qpjokyPI+2xQrwb7WMfJ/MpoTruQnz Uojigsr4/gxYKth4LJxdRtkAMT5eeQU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:46 2025 by rpki-client