$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/3672ce80-0d2a-362b-ae2d-f084212a54ba.roa File: 3672ce80-0d2a-362b-ae2d-f084212a54ba.roa (raw, json) Hash identifier: e+jB/eym+xChRb8Rs4UeRK7RACf58+8b83y+sStsE3s= Subject key identifier: D5:D9:37:03:33:9F:A1:08:9D:68:25:93:BB:CB:DC:22:E9:55:B2:88 Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F4328584807AA6BAF72B5659E0A5BB620 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/3672ce80-0d2a-362b-ae2d-f084212a54ba.roa Signing time: Thu 28 Nov 2024 14:00:52 +0000 ROA not before: Thu 28 Nov 2024 14:00:52 +0000 ROA not after: Wed 26 Feb 2025 14:00:52 +0000 asID: 16509 IP address blocks: 144.81.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:07:aa:6b:af:72:b5:65:9e:0a:5b:b6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Nov 28 14:00:52 2024 GMT Not After : Feb 26 14:00:52 2025 GMT Subject: CN=7d50a71d-9071-4bfb-a08a-a94faaae71f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:ec:40:13:fc:f2:36:c0:93:5f:6f:2b:c3: 15:52:91:3c:e3:22:ac:e9:3f:c0:28:e8:21:96:20: 68:6b:ac:02:34:39:7b:ac:3f:80:19:e8:a8:b5:bc: e4:34:92:46:8a:cd:3b:86:e3:e8:c2:70:b7:3d:ba: 98:32:1c:5d:dd:5e:f4:03:ac:3e:ad:40:47:85:f1: 42:08:15:5b:f3:60:7e:a7:5e:d7:a7:88:d6:e7:b7: 08:0f:45:84:fb:d4:4f:22:be:b8:f9:03:2a:43:10: ea:36:47:af:78:26:d9:5b:1c:53:a7:1f:73:6f:3f: df:63:c3:ad:75:6e:e2:2b:30:de:d0:0d:39:60:3d: 57:69:53:07:11:8d:01:b3:0f:a5:12:8c:38:7c:87: b5:c8:80:de:66:3c:70:e9:2e:66:92:a4:42:9a:c7: a9:be:d9:9d:da:5a:47:66:b8:70:ca:c7:b5:eb:b0: 31:35:25:b7:36:f8:6a:76:ca:e2:76:58:5a:a8:ac: 58:a2:f1:02:94:82:14:09:fb:9e:7a:a9:1a:d7:8e: 00:d2:4a:1b:c9:2b:ce:30:39:f4:77:fb:8a:9f:98: 16:e0:03:b3:4a:b5:c3:81:31:9f:b9:a5:98:fb:74: 94:b8:8e:af:30:e5:11:e7:7d:79:c2:f6:2e:18:42: 22:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D9:37:03:33:9F:A1:08:9D:68:25:93:BB:CB:DC:22:E9:55:B2:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/3672ce80-0d2a-362b-ae2d-f084212a54ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:37:0c:c9:c9:fb:62:0d:b1:30:4b:85:55:fa:5a:47:18:67: 98:f6:e1:9d:37:4d:6b:cc:d0:c1:f1:30:0f:a0:4b:a4:7e:83: 29:3a:ed:ba:ce:9a:de:1b:40:79:f6:c4:e1:9f:60:c8:aa:08: 19:13:31:66:36:90:ff:53:7e:90:8b:6a:98:e0:e0:62:00:41: ed:6c:f7:05:1d:9c:e0:f0:ad:b1:b5:24:75:f6:e6:93:fc:2b: 24:46:6d:54:42:0e:82:44:e7:24:71:49:c6:82:40:84:95:b9: 8c:d5:73:11:da:a7:38:8f:77:58:f0:72:45:d9:91:e6:d0:31: 2f:99:83:8e:c8:93:06:7c:77:f1:93:3a:1a:0b:c2:06:42:e1: 6e:67:a9:fa:3d:84:5c:20:47:13:6f:62:b7:e8:a0:5b:45:3d: e1:0b:15:94:81:6e:cc:38:b8:8e:3d:73:0a:29:95:27:4e:13: e6:36:3c:b4:84:be:14:4a:2d:a7:6d:31:0f:73:8d:a8:71:e0: 58:7a:1f:20:a3:fd:47:8c:c1:46:8c:0d:35:93:b8:c1:45:43: 5d:41:2f:f0:5e:e3:68:70:30:20:47:57:f2:60:a4:36:91:d0: f4:e7:b5:a8:3c:39:5a:0b:4c:bb:c9:79:f6:b3:3e:34:6a:03: 2d:9d:5a:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgHqmuvcrVlngpbtiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI0MTEyODE0MDA1MloXDTI1MDIyNjE0MDA1MlowLzEtMCsGA1UEAxMk N2Q1MGE3MWQtOTA3MS00YmZiLWEwOGEtYTk0ZmFhYWU3MWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFDsQBP88jbAk19vK8MVUpE84yKs6T/AKOgh liBoa6wCNDl7rD+AGeiotbzkNJJGis07huPownC3PbqYMhxd3V70A6w+rUBHhfFC CBVb82B+p17Xp4jW57cID0WE+9RPIr64+QMqQxDqNkeveCbZWxxTpx9zbz/fY8Ot dW7iKzDe0A05YD1XaVMHEY0Bsw+lEow4fIe1yIDeZjxw6S5mkqRCmsepvtmd2lpH Zrhwyse167AxNSW3NvhqdsridlhaqKxYovEClIIUCfueeqka144A0kobySvOMDn0 d/uKn5gW4AOzSrXDgTGfuaWY+3SUuI6vMOUR5315wvYuGEIi1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXZNwMzn6EInWglk7vL3CLpVbKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvMzY3MmNlODAtMGQyYS0z NjJiLWFlMmQtZjA4NDIxMmE1NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw3DMnJ+2INsTBLhVX6WkcYZ5j24Z03TWvM0MHxMA+gS6R+gyk67brO mt4bQHn2xOGfYMiqCBkTMWY2kP9TfpCLapjg4GIAQe1s9wUdnODwrbG1JHX25pP8 KyRGbVRCDoJE5yRxScaCQISVuYzVcxHapziPd1jwckXZkebQMS+Zg47IkwZ8d/GT OhoLwgZC4W5nqfo9hFwgRxNvYrfooFtFPeELFZSBbsw4uI49cwoplSdOE+Y2PLSE vhRKLadtMQ9zjahx4Fh6HyCj/UeMwUaMDTWTuMFFQ11BL/Be42hwMCBHV/JgpDaR 0PTntag8OVoLTLvJefazPjRqAy2dWt8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:34 2025 by rpki-client