$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5c5cb01a-5c42-3b08-82f6-746db8624a23.roa File: 5c5cb01a-5c42-3b08-82f6-746db8624a23.roa (raw, json) Hash identifier: xesSNHlQoXP33bzBzcOdZQdeO2Kzb6mTMZvNpCyncJY= Subject key identifier: 99:86:FE:A2:9F:5D:2E:F9:89:E7:20:E6:CC:1C:42:5C:FC:46:89:B8 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F432858484D75970CA899F78ECDCD0040 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5c5cb01a-5c42-3b08-82f6-746db8624a23.roa Signing time: Mon 23 Dec 2024 14:00:51 +0000 ROA not before: Mon 23 Dec 2024 14:00:51 +0000 ROA not after: Sun 23 Mar 2025 13:00:51 +0000 asID: 13768 IP address blocks: 64.34.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:75:97:0c:a8:99:f7:8e:cd:cd:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Dec 23 14:00:51 2024 GMT Not After : Mar 23 13:00:51 2025 GMT Subject: CN=cb7d1286-6301-437c-8a99-6d9bdfa53a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:2b:97:3a:5d:dd:f4:5f:f6:6a:a5:07:8d: b6:8e:ca:59:0a:a2:c1:17:ef:ed:76:e7:ea:de:a3: d1:e7:10:0f:b4:72:86:4f:00:05:7c:28:c8:3e:62: 61:84:87:0c:91:35:b1:21:57:61:11:d6:d1:61:89: db:52:c2:4d:f0:fb:d5:e1:27:f9:49:4c:b5:a3:13: be:79:5c:49:19:8c:a3:84:bc:bf:7c:11:61:65:1a: f3:2c:18:07:bf:ff:65:2e:34:e4:92:f4:8f:d9:83: 37:91:fe:60:0c:18:74:bd:fe:d6:88:fe:bb:b0:9e: 03:39:d7:59:24:6b:6b:d0:e7:61:02:40:5f:26:d4: 3b:1f:5b:ca:27:75:e2:bf:cd:8a:f2:e0:77:01:bb: 64:c1:cc:ac:45:d4:e6:09:6d:76:c1:e3:ce:d9:45: aa:a1:97:95:77:b2:2f:7d:23:38:26:76:7f:3a:50: f0:57:0d:7c:7c:9b:21:61:f5:73:04:b3:36:7e:bd: 22:6e:f4:d2:5b:27:52:e0:9b:89:33:2b:22:79:cb: 0a:4b:ef:ef:e6:54:a1:c9:33:04:ba:2b:5f:25:0f: 10:21:31:f4:26:7e:db:91:b9:8f:a2:3b:59:0d:26: eb:6c:40:b4:42:b0:33:8e:75:c7:e6:a6:13:c5:fd: 6c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:86:FE:A2:9F:5D:2E:F9:89:E7:20:E6:CC:1C:42:5C:FC:46:89:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5c5cb01a-5c42-3b08-82f6-746db8624a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f4:f1:f6:7b:27:5a:28:56:22:76:40:13:67:05:1f:70:07: 95:aa:19:e0:6c:e7:f4:9c:fa:c3:b9:84:23:c0:a5:d6:1f:2f: 5b:2c:56:21:65:25:7d:b6:ee:b2:85:b0:49:94:38:3b:19:46: e1:5f:67:45:33:47:a4:b9:52:ea:e8:76:ce:d1:31:22:05:8c: bf:69:74:68:47:43:6d:96:50:69:13:7b:44:31:c8:0e:d8:df: ac:b0:97:cf:1a:f3:a1:f8:81:28:ee:28:03:50:f3:b7:49:5d: c6:34:e9:5d:2b:80:73:08:ce:f7:72:8b:17:89:5d:da:02:45: db:06:bd:4b:b7:d6:05:c5:3a:07:df:75:9c:31:2d:f5:78:d1: 45:2f:72:8e:b9:95:b8:87:29:f6:88:19:bc:41:67:ec:07:5e: cc:b3:8d:f3:f5:43:8a:10:51:0d:a4:37:67:42:6f:0f:e3:37: be:0e:16:34:a4:7e:9d:e8:47:23:a8:d8:8e:4b:62:56:0e:6d: b8:41:74:df:fe:d3:87:9a:ca:6a:60:a6:c5:16:e1:26:89:2c: c0:c9:fd:fa:ca:a4:c6:87:00:00:3f:29:be:d1:40:41:31:4f: d3:ee:70:77:66:e3:d5:2b:07:4a:b4:9a:62:95:a9:97:28:d7: 2c:23:40:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdZcMqJn3js3NAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk Y2I3ZDEyODYtNjMwMS00MzdjLThhOTktNmQ5YmRmYTUzYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApccrlzpd3fRf9mqlB422jspZCqLBF+/tdufq 3qPR5xAPtHKGTwAFfCjIPmJhhIcMkTWxIVdhEdbRYYnbUsJN8PvV4Sf5SUy1oxO+ eVxJGYyjhLy/fBFhZRrzLBgHv/9lLjTkkvSP2YM3kf5gDBh0vf7WiP67sJ4DOddZ JGtr0OdhAkBfJtQ7H1vKJ3Xiv82K8uB3AbtkwcysRdTmCW12wePO2UWqoZeVd7Iv fSM4JnZ/OlDwVw18fJshYfVzBLM2fr0ibvTSWydS4JuJMysiecsKS+/v5lShyTME uitfJQ8QITH0Jn7bkbmPojtZDSbrbEC0QrAzjnXH5qYTxf1sUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmG/qKfXS75iecg5swcQlz8Rom4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNWM1Y2IwMWEtNWM0Mi0z YjA4LTgyZjYtNzQ2ZGI4NjI0YTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH08fZ7J1ooViJ2QBNnBR9wB5WqGeBs5/Sc+sO5hCPApdYfL1ssViFl JX227rKFsEmUODsZRuFfZ0UzR6S5Uurods7RMSIFjL9pdGhHQ22WUGkTe0QxyA7Y 36ywl88a86H4gSjuKANQ87dJXcY06V0rgHMIzvdyixeJXdoCRdsGvUu31gXFOgff dZwxLfV40UUvco65lbiHKfaIGbxBZ+wHXsyzjfP1Q4oQUQ2kN2dCbw/jN74OFjSk fp3oRyOo2I5LYlYObbhBdN/+04eaympgpsUW4SaJLMDJ/frKpMaHAAA/Kb7RQEEx T9PucHdm49UrB0q0mmKVqZco1ywjQAs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:04 2025 by rpki-client