$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa File: 2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa (raw, json) Hash identifier: ujzTHYCV1CjjStajs/zndecExAFB7Nx58PnxDHImMA8= Subject key identifier: 95:79:02:A6:F8:67:94:01:97:A3:6D:79:0B:3C:CD:C8:C1:99:9A:4F Certificate issuer: /CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Certificate serial: 010D0C9F432858483E1AB4611E54D4A7D423F3E0 Authority key identifier: 58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 53423 IP address blocks: 192.171.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:b4:61:1e:54:d4:a7:d4:23:f3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=b905580c-9af5-48fc-ae20-b93b7852b8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:ac:57:ef:9d:5f:f8:da:1c:6a:15:1e:df: 17:67:db:c1:60:8f:f0:69:df:bf:d5:ad:5a:2a:bf: cc:4d:ea:c3:59:34:87:af:71:49:c4:33:f2:ff:a2: fe:99:20:4b:1e:89:17:b3:0c:64:2d:bd:7d:81:e7: 6d:8c:35:54:47:6a:f7:8d:d7:08:8c:ad:8c:5a:62: 92:4f:7e:cd:8f:0e:76:d7:32:29:21:8a:7e:1f:91: 74:c7:f2:31:6a:3b:49:4c:eb:5f:00:c7:4d:31:96: f0:8b:f0:f6:dd:2d:b3:85:44:00:02:80:da:4b:2b: 19:ad:c2:57:8f:1c:c1:04:58:6f:6e:6c:b3:2b:94: 3d:b3:09:61:eb:f7:50:52:49:3a:d7:27:ad:f5:ba: 58:9b:18:7c:e0:36:32:a3:fe:c9:79:93:26:c0:d5: b7:a9:3f:91:10:e0:e1:e5:da:9c:25:78:bc:b8:d2: da:4c:52:67:e7:3c:76:44:be:68:62:e7:e4:79:53: 76:f7:3d:f9:49:90:9e:97:68:5d:a4:e2:0a:ae:7f: a1:5c:d8:51:31:7e:36:d3:5b:67:69:b5:b1:e5:68: 41:c3:ce:c1:0b:18:90:dc:48:d1:70:38:f5:9b:00: df:0e:37:33:80:10:69:fe:34:ff:6d:c6:ae:3a:e5: 14:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:79:02:A6:F8:67:94:01:97:A3:6D:79:0B:3C:CD:C8:C1:99:9A:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl X509v3 Authority Key Identifier: keyid:58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer sbgp-ipAddrBlock: critical IPv4: 192.171.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:fd:e2:e6:3a:c9:53:28:8e:cc:0f:db:28:14:c8:ce:38:3e: 0f:3d:22:eb:2b:33:e1:a9:b6:83:e6:03:b6:7d:e1:51:51:47: aa:81:dc:b7:e5:41:e2:6d:b7:d0:2b:ba:4a:b0:f2:1f:71:a3: 7e:1b:fa:c9:78:8b:a8:7c:21:a8:3d:e9:d5:4c:ce:1a:a6:c8: 9a:e2:58:4a:92:19:db:57:0f:14:8e:b1:91:17:47:ac:84:13: 4e:c2:9a:ee:cb:0b:25:0c:c4:46:7b:21:d2:4e:73:ab:20:70: 1a:11:b9:ee:8a:69:0b:50:2a:56:a4:c1:65:88:84:39:e2:c8: 83:0a:d2:7e:37:6a:a8:2a:94:44:77:9a:1a:41:74:ab:a0:38: 99:cc:68:a5:ed:b5:38:cd:82:ed:a1:6b:df:d7:1f:ed:f4:83: 72:d7:39:04:2b:fe:79:b0:72:f4:70:49:cf:1d:b9:4f:f6:49: 35:9a:48:08:4a:9d:31:67:f9:71:ca:9a:d5:da:a2:fc:54:c7: 16:15:49:34:cd:d5:cb:c4:f8:5a:29:9e:96:77:eb:17:d4:36: 39:67:17:94:26:ab:37:84:c6:15:f8:e5:1b:ce:55:19:78:08: a2:c2:01:f3:14:66:43:65:28:c4:81:66:8d:2a:aa:ed:6b:28: 13:aa:c5:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GrRhHlTUp9Qj8+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmNjQ1YWMtODRhYS00MmUzLWI4NWEtN2FmOTY4ODg5 OGE2MB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk YjkwNTU4MGMtOWFmNS00OGZjLWFlMjAtYjkzYjc4NTJiOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhWsV++dX/jaHGoVHt8XZ9vBYI/wad+/1a1a Kr/MTerDWTSHr3FJxDPy/6L+mSBLHokXswxkLb19gedtjDVUR2r3jdcIjK2MWmKS T37Njw521zIpIYp+H5F0x/IxajtJTOtfAMdNMZbwi/D23S2zhUQAAoDaSysZrcJX jxzBBFhvbmyzK5Q9swlh6/dQUkk61yet9bpYmxh84DYyo/7JeZMmwNW3qT+REODh 5dqcJXi8uNLaTFJn5zx2RL5oYufkeVN29z35SZCel2hdpOIKrn+hXNhRMX4201tn abWx5WhBw87BCxiQ3EjRcDj1mwDfDjczgBBp/jT/bcauOuUUwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV5Aqb4Z5QBl6NteQs8zcjBmZpPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jOWY2 NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5Njg4ODk4YTYvMjYxMmRjMDItMzAzNi0z Y2VkLWJhMmMtOGUxYzA0YTJiMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzlmNjQ1YWMtODRhYS00MmUzLWI4 NWEtN2FmOTY4ODg5OGE2L2M5ZjY0NWFjLTg0YWEtNDJlMy1iODVhLTdhZjk2ODg4 OThhNi5jcmwwHwYDVR0jBBgwFoAUWDton2ItqVzW8+xVfihjXKiBhBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jOWY2NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5 Njg4ODk4YTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwKvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj94uY6yVMojswP2ygUyM44Pg89IusrM+GptoPmA7Z94VFRR6qB3Lfl QeJtt9Arukqw8h9xo34b+sl4i6h8Iag96dVMzhqmyJriWEqSGdtXDxSOsZEXR6yE E07Cmu7LCyUMxEZ7IdJOc6sgcBoRue6KaQtQKlakwWWIhDniyIMK0n43aqgqlER3 mhpBdKugOJnMaKXttTjNgu2ha9/XH+30g3LXOQQr/nmwcvRwSc8duU/2STWaSAhK nTFn+XHKmtXaovxUxxYVSTTN1cvE+FopnpZ36xfUNjlnF5QmqzeExhX45RvOVRl4 CKLCAfMUZkNlKMSBZo0qqu1rKBOqxVg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:20 2025 by rpki-client