$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa File: 33e552c1-7aab-3972-924b-9a4b94e54a0b.roa (raw, json) Hash identifier: ln/nYmkv1+gCsEUGMKppttJAqYtEHHk1LQpXqAyQ5nk= Subject key identifier: 90:86:14:22:41:D7:87:B2:11:54:9B:77:93:3C:3D:CE:92:C5:59:28 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F432858484AAAE3EB8E4B48AA60EED980 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa Signing time: Sun 22 Dec 2024 14:00:51 +0000 ROA not before: Sun 22 Dec 2024 14:00:51 +0000 ROA not after: Sat 22 Mar 2025 13:00:51 +0000 asID: 13768 IP address blocks: 64.34.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4a:aa:e3:eb:8e:4b:48:aa:60:ee:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Dec 22 14:00:51 2024 GMT Not After : Mar 22 13:00:51 2025 GMT Subject: CN=3ff611ff-8f10-4166-a117-55b32f4c137e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9c:41:62:ca:80:f9:f0:c2:e2:b9:81:3d:07: b2:d6:aa:3c:a8:07:49:52:14:43:06:16:ae:58:23: a5:c6:29:e1:e6:f1:a2:e0:ad:43:af:39:30:47:89: 56:72:1f:81:37:8a:16:a4:00:aa:53:05:8e:72:b2: 3e:f0:4b:d0:fc:a3:52:ab:2e:55:ac:58:6b:a6:30: 1a:be:9a:50:a8:89:22:f1:c9:fb:ea:75:3f:57:41: bb:73:2d:07:82:62:72:70:2a:30:03:b4:7b:fd:19: c2:ca:f5:ad:1c:b4:62:19:69:51:79:be:fe:2d:b4: cc:5d:33:e5:85:e0:60:f9:ec:5d:48:61:65:fe:ae: b9:f4:ea:02:ac:40:3c:13:a9:c4:e4:16:41:c2:80: dc:b8:21:64:0d:a7:cc:ee:7a:41:3c:34:cc:19:e1: 23:45:06:c3:33:d7:d9:94:f2:ca:45:b6:cf:b5:3a: a9:33:a6:dc:94:43:c3:fc:40:14:56:cb:4d:2f:76: 00:cf:bb:ff:25:1e:0c:61:ed:8d:5f:09:7c:71:e1: 7f:34:d9:72:55:f0:b5:ce:41:a7:4b:7e:58:90:dd: 96:23:c0:79:57:0e:4b:f8:30:00:e6:1e:dc:f2:c7: e0:6d:3a:d0:eb:65:07:9b:af:e5:4b:ef:f2:7b:1c: be:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:86:14:22:41:D7:87:B2:11:54:9B:77:93:3C:3D:CE:92:C5:59:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3e:a2:d0:a4:48:24:49:80:e1:0e:4d:41:ce:d7:18:06:7b: eb:d9:7a:75:17:41:af:10:77:cc:06:c0:ae:fa:db:49:4f:19: 8f:2e:46:02:89:4c:89:74:6b:0a:d0:fb:8a:53:27:c8:0c:53: 6d:a5:92:72:39:04:f3:8e:e8:15:97:17:cb:87:d0:9f:7d:f6: e8:bb:2c:08:83:ca:d8:14:1e:f3:93:53:f9:34:a8:67:d1:77: c8:f5:45:48:37:1e:a7:99:91:a9:b6:f0:e0:04:10:7a:b2:c8: 88:ff:6e:9b:2d:24:1f:64:2c:5c:45:c8:f1:c9:6f:d8:b1:20: 1e:33:2b:e0:cb:61:12:28:05:f3:7d:48:51:a2:5f:ea:9c:6c: de:28:3c:9f:d7:44:2c:fe:15:5d:c3:05:de:cc:1a:35:9a:e8: ee:cf:9a:df:bc:63:a4:3c:86:c5:1f:35:ca:2e:4f:1e:30:e4: 38:34:a0:e9:67:4b:78:82:be:f7:df:7f:e8:38:eb:30:0e:c6: e0:1e:6b:fe:de:3c:90:90:08:66:84:1e:c1:d7:aa:f9:59:55: 67:e5:5b:d9:a1:d8:e5:87:11:e3:a5:67:fe:76:f1:88:3e:e7: 48:0e:5f:59:1f:97:c2:a0:6f:fe:1a:cd:f4:9b:9e:35:d9:01: f9:f1:d7:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhKquPrjktIqmDu2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk M2ZmNjExZmYtOGYxMC00MTY2LWExMTctNTViMzJmNGMxMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5xBYsqA+fDC4rmBPQey1qo8qAdJUhRDBhau WCOlxinh5vGi4K1DrzkwR4lWch+BN4oWpACqUwWOcrI+8EvQ/KNSqy5VrFhrpjAa vppQqIki8cn76nU/V0G7cy0HgmJycCowA7R7/RnCyvWtHLRiGWlReb7+LbTMXTPl heBg+exdSGFl/q659OoCrEA8E6nE5BZBwoDcuCFkDafM7npBPDTMGeEjRQbDM9fZ lPLKRbbPtTqpM6bclEPD/EAUVstNL3YAz7v/JR4MYe2NXwl8ceF/NNlyVfC1zkGn S35YkN2WI8B5Vw5L+DAA5h7c8sfgbTrQ62UHm6/lS+/yexy+YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCGFCJB14eyEVSbd5M8Pc6SxVkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMzNlNTUyYzEtN2FhYi0z OTcyLTkyNGItOWE0Yjk0ZTU0YTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE+otCkSCRJgOEOTUHO1xgGe+vZenUXQa8Qd8wGwK7620lPGY8uRgKJ TIl0awrQ+4pTJ8gMU22lknI5BPOO6BWXF8uH0J999ui7LAiDytgUHvOTU/k0qGfR d8j1RUg3HqeZkam28OAEEHqyyIj/bpstJB9kLFxFyPHJb9ixIB4zK+DLYRIoBfN9 SFGiX+qcbN4oPJ/XRCz+FV3DBd7MGjWa6O7Pmt+8Y6Q8hsUfNcouTx4w5Dg0oOln S3iCvvfff+g46zAOxuAea/7ePJCQCGaEHsHXqvlZVWflW9mh2OWHEeOlZ/528Yg+ 50gOX1kfl8Kgb/4azfSbnjXZAfnx1wM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:35 2025 by rpki-client