$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/92644327-a520-3966-89ac-acf3f8d723e3.roa File: 92644327-a520-3966-89ac-acf3f8d723e3.roa (raw, json) Hash identifier: M+OYfMSpKCLGQVSbUdS/UrHUPcV36n80m6H5xdJBNw4= Subject key identifier: 75:BE:22:87:EB:5D:55:02:D9:9A:EC:0B:D6:28:CF:94:97:03:E1:D3 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858485B6B0361D4C75A6FD5993280 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/92644327-a520-3966-89ac-acf3f8d723e3.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 35908 IP address blocks: 173.214.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6b:03:61:d4:c7:5a:6f:d5:99:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=88f79f26-fb4a-4455-890b-ec2443e6798d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f2:cb:af:d0:ce:c1:49:1f:93:17:7a:8f:8a: 33:c5:19:64:18:71:95:af:61:b5:de:5e:c2:62:67: d7:bf:8e:eb:7c:cc:13:61:c3:81:e4:21:25:3a:cf: ad:ee:eb:be:f8:42:d5:37:3b:6e:42:ba:0e:db:52: 85:61:11:cf:63:07:d7:40:2e:8a:df:6f:69:8c:b5: 7d:61:f9:5b:f2:c4:af:e3:fa:cf:bd:42:a8:f3:43: a2:26:60:9a:3a:6c:51:a7:bf:8b:b2:a7:d7:ad:a6: 5e:43:5e:f1:c2:25:84:a6:f5:84:bd:41:b5:25:d2: c3:62:9b:e8:49:11:a4:68:bf:da:0f:a0:24:2c:61: 47:25:8d:ac:71:0c:46:f3:99:d3:16:52:b0:02:b1: 67:8f:84:91:a4:03:28:96:24:18:1f:e6:0c:18:bb: 78:93:9b:9c:dc:71:67:bb:af:e2:78:3c:0a:de:23: 30:22:63:54:64:d6:a9:af:1c:c2:5e:b7:a3:c9:0b: 6a:d0:d0:dc:8c:be:d2:d5:e3:b9:d8:28:49:13:f1: f3:b2:8c:3d:f3:bf:0d:20:78:11:69:74:e8:36:d0: 4f:14:d0:7d:a6:2b:2a:72:b4:ee:c5:b7:8a:ea:4d: a5:d2:66:9e:36:9f:60:5f:0a:5b:65:8e:f8:b4:da: 2c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BE:22:87:EB:5D:55:02:D9:9A:EC:0B:D6:28:CF:94:97:03:E1:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/92644327-a520-3966-89ac-acf3f8d723e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 173.214.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:58:04:ad:fd:a2:c6:62:5e:81:96:2a:7b:3c:d7:43:47:30: fb:7d:23:de:3d:d7:2b:a6:56:47:ab:43:3c:2b:47:43:a7:4b: ab:ff:a2:f8:9c:0e:7f:8f:d6:bf:9e:e4:8c:1b:fa:ec:bc:c8: e2:ff:4e:3e:b3:7f:2c:e9:f1:d0:a3:c2:ba:50:b1:d1:21:bf: 2c:5f:4e:55:97:32:81:f8:df:c0:c9:3d:b9:89:f9:59:d9:17: b4:18:27:be:b6:70:c9:13:a5:b8:22:46:e7:8f:f2:85:b8:30: 83:d4:8c:63:ec:27:81:9c:bc:5f:6d:fe:73:e0:2a:35:4b:04: e7:bb:f6:ee:98:7d:28:d0:d4:2a:f7:ba:9c:8f:87:83:94:2c: a0:1a:23:87:9a:5a:0b:90:92:b2:49:bd:88:81:69:35:4d:60: b6:5c:10:38:37:35:c3:b0:cc:d3:8d:6c:d5:56:b2:08:f0:e3: 7b:79:1d:2b:3c:13:60:3a:a8:e7:50:ab:b0:18:a2:8d:06:56: a8:a7:04:da:88:3f:e9:50:75:78:11:54:45:78:44:b6:e6:37: 47:c9:62:88:3f:0f:ba:76:31:f3:1e:c9:fa:4f:62:50:6c:8c: 8b:71:69:a1:39:b0:c5:a3:84:5e:5e:38:9c:bc:90:fe:9c:53: 1c:3a:4a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbawNh1Mdab9WZMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk ODhmNzlmMjYtZmI0YS00NDU1LTg5MGItZWMyNDQzZTY3OThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfLLr9DOwUkfkxd6j4ozxRlkGHGVr2G13l7C YmfXv47rfMwTYcOB5CElOs+t7uu++ELVNztuQroO21KFYRHPYwfXQC6K329pjLV9 Yflb8sSv4/rPvUKo80OiJmCaOmxRp7+LsqfXraZeQ17xwiWEpvWEvUG1JdLDYpvo SRGkaL/aD6AkLGFHJY2scQxG85nTFlKwArFnj4SRpAMoliQYH+YMGLt4k5uc3HFn u6/ieDwK3iMwImNUZNaprxzCXrejyQtq0NDcjL7S1eO52ChJE/Hzsow9878NIHgR aXToNtBPFNB9pisqcrTuxbeK6k2l0maeNp9gXwpbZY74tNosNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW+IofrXVUC2ZrsC9Yoz5SXA+HTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvOTI2NDQzMjctYTUyMC0z OTY2LTg5YWMtYWNmM2Y4ZDcyM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrdYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVYBK39osZiXoGWKns810NHMPt9I9491yumVkerQzwrR0OnS6v/ovic Dn+P1r+e5Iwb+uy8yOL/Tj6zfyzp8dCjwrpQsdEhvyxfTlWXMoH438DJPbmJ+VnZ F7QYJ762cMkTpbgiRueP8oW4MIPUjGPsJ4GcvF9t/nPgKjVLBOe79u6YfSjQ1Cr3 upyPh4OULKAaI4eaWguQkrJJvYiBaTVNYLZcEDg3NcOwzNONbNVWsgjw43t5HSs8 E2A6qOdQq7AYoo0GVqinBNqIP+lQdXgRVEV4RLbmN0fJYog/D7p2MfMeyfpPYlBs jItxaaE5sMWjhF5eOJy8kP6cUxw6SlM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:47 2025 by rpki-client