$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb710018-ebd9-3e8e-8c04-e794a9471f2d.roa File: bb710018-ebd9-3e8e-8c04-e794a9471f2d.roa (raw, json) Hash identifier: LtNbS5ANWkglHHcJiTPqAWIY+5VTgFXbBL++/AvCPSI= Subject key identifier: 52:40:5C:3C:E4:83:23:A6:34:89:94:D2:2B:7D:45:D0:98:35:FC:EC Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584835BAA4E86B03C46914C57300 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb710018-ebd9-3e8e-8c04-e794a9471f2d.roa Signing time: Sun 15 Dec 2024 02:00:39 +0000 ROA not before: Sun 15 Dec 2024 02:00:39 +0000 ROA not after: Sat 15 Mar 2025 01:00:39 +0000 asID: 13335 IP address blocks: 204.195.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:35:ba:a4:e8:6b:03:c4:69:14:c5:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 15 02:00:39 2024 GMT Not After : Mar 15 01:00:39 2025 GMT Subject: CN=a1c0e84c-666a-4012-8545-120273866bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d8:4b:b5:a4:69:e4:03:ab:9e:d5:ca:01:19: 40:79:0c:11:64:c2:d7:12:6b:14:81:a5:e9:bd:54: 33:fe:5b:e6:a8:78:00:a4:19:85:de:55:16:3e:c8: 35:73:8b:c7:72:6b:51:41:db:3f:e5:15:5b:f9:00: 28:55:07:d1:5f:79:36:27:9b:ab:55:ea:fe:9d:d8: 8c:30:23:35:7b:73:1c:84:ae:a2:09:af:f9:89:fb: 1b:c0:8d:5e:e6:f4:e3:22:b1:5f:ac:5a:f3:65:c0: c2:6b:2f:ca:9b:ac:be:52:20:42:15:6b:e3:05:f9: 00:cd:0c:7a:5c:25:20:a5:a0:12:a4:a2:f0:b8:23: c7:cf:c3:70:49:4d:08:3f:34:de:84:da:cf:8d:61: 66:0f:a2:a6:c8:99:44:78:bc:88:1f:6d:3a:c3:c6: 50:9f:ee:8d:2b:51:2b:a0:43:30:92:2f:80:f4:fc: 29:b1:22:35:cb:97:1c:e9:be:cf:5c:05:79:3f:0e: de:87:e9:59:9e:e2:11:c0:88:89:a6:46:15:2f:58: fc:e3:36:ff:e0:2a:60:7b:3c:2a:5e:3e:0e:f0:1e: c4:b9:93:1f:e6:2e:4c:e2:e4:da:a1:a5:07:52:b7: f5:b0:56:b6:eb:18:52:4d:98:42:5d:f9:6b:7b:cc: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:40:5C:3C:E4:83:23:A6:34:89:94:D2:2B:7D:45:D0:98:35:FC:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb710018-ebd9-3e8e-8c04-e794a9471f2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d4:eb:91:79:06:0a:a6:8a:65:96:e3:b9:89:6c:5f:f2:6a: dd:07:02:b5:9b:e2:45:2e:42:19:d8:8b:1e:4d:df:9a:9e:46: 5a:a8:48:1f:ec:2a:01:58:a2:cb:1d:f0:8c:26:3f:28:f9:6e: 9f:12:12:02:10:ea:a1:e6:04:bc:71:45:a3:a3:e1:2d:88:72: de:7a:6e:0e:9e:80:ee:9e:94:b0:79:99:ba:c9:03:45:aa:eb: ef:b3:63:45:8c:16:88:97:58:ef:d8:b5:27:02:1c:f4:11:98: 25:d7:38:02:04:27:ae:ec:23:71:94:a2:44:62:58:c6:ed:0a: 73:50:90:5f:83:3f:e8:76:5a:b3:04:07:a3:b8:99:54:32:a3: 0b:c8:fc:d4:cf:c6:40:fc:49:8f:f8:da:ed:24:03:d0:2a:12: be:ad:a6:49:24:83:87:6c:5a:f7:c2:8a:ed:72:80:0d:94:42: 9d:4a:0e:54:c1:8b:52:2d:7e:b0:e7:83:c7:a4:e4:a7:e2:d4: 1f:c9:1f:78:dc:5b:c0:b3:3d:8c:bf:3e:ae:da:c7:19:be:d7: 45:55:7c:7f:4b:67:ce:a7:32:ef:a7:e8:c4:54:00:e0:34:fb: fe:3e:6d:71:b8:9a:2c:ed:62:19:48:2c:0e:3a:68:24:0f:43: 9e:c2:4e:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg1uqToawPEaRTFcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIxNTAyMDAzOVoXDTI1MDMxNTAxMDAzOVowLzEtMCsGA1UEAxMk YTFjMGU4NGMtNjY2YS00MDEyLTg1NDUtMTIwMjczODY2YmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9hLtaRp5AOrntXKARlAeQwRZMLXEmsUgaXp vVQz/lvmqHgApBmF3lUWPsg1c4vHcmtRQds/5RVb+QAoVQfRX3k2J5urVer+ndiM MCM1e3MchK6iCa/5ifsbwI1e5vTjIrFfrFrzZcDCay/Km6y+UiBCFWvjBfkAzQx6 XCUgpaASpKLwuCPHz8NwSU0IPzTehNrPjWFmD6KmyJlEeLyIH206w8ZQn+6NK1Er oEMwki+A9PwpsSI1y5cc6b7PXAV5Pw7eh+lZnuIRwIiJpkYVL1j84zb/4Cpgezwq Xj4O8B7EuZMf5i5M4uTaoaUHUrf1sFa26xhSTZhCXflre8zeCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJAXDzkgyOmNImU0it9RdCYNfzsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmI3MTAwMTgtZWJkOS0z ZThlLThjMDQtZTc5NGE5NDcxZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3U65F5BgqmimWW47mJbF/yat0HArWb4kUuQhnYix5N35qeRlqoSB/s KgFYossd8IwmPyj5bp8SEgIQ6qHmBLxxRaOj4S2Ict56bg6egO6elLB5mbrJA0Wq 6++zY0WMFoiXWO/YtScCHPQRmCXXOAIEJ67sI3GUokRiWMbtCnNQkF+DP+h2WrME B6O4mVQyowvI/NTPxkD8SY/42u0kA9AqEr6tpkkkg4dsWvfCiu1ygA2UQp1KDlTB i1ItfrDng8ek5Kfi1B/JH3jcW8CzPYy/Pq7axxm+10VVfH9LZ86nMu+n6MRUAOA0 +/4+bXG4miztYhlILA46aCQPQ57CTjI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:14 2025 by rpki-client