$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/3b03f0cc-1829-3c8b-9574-9db3799988c7.roa File: 3b03f0cc-1829-3c8b-9574-9db3799988c7.roa (raw, json) Hash identifier: zGukyzgRkG8LOpKsB1qKmrS5HX4pq8VwFKPk24eyB88= Subject key identifier: 90:14:53:68:70:B9:D3:E3:7D:F9:1C:22:A7:B1:AC:43:92:CA:F5:EE Certificate issuer: /CN=f37ae11d-629c-4443-bc37-2c3eebd09453 Certificate serial: 010D0C9F432858483B500C7108024BCE13239800 Authority key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/3b03f0cc-1829-3c8b-9574-9db3799988c7.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 394708 IP address blocks: 209.143.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:50:0c:71:08:02:4b:ce:13:23:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f37ae11d-629c-4443-bc37-2c3eebd09453 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=1e33ede5-8f1b-4ae8-b0fa-0d43b6b79e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:e4:18:d2:74:ec:a1:62:4b:23:82:fd:44: b9:df:99:33:26:24:e0:d3:94:0b:7d:62:4e:2a:e1: 89:72:a9:d0:d4:39:0a:53:65:e2:83:15:15:13:d3: fc:a9:14:fb:df:61:72:9e:b6:27:62:fe:d9:3f:b6: b0:aa:08:9c:70:ee:a9:29:57:3e:d7:98:18:17:81: 38:a8:e0:2a:f1:21:9b:27:c4:d8:b3:d3:76:bd:c3: 5a:c0:3a:d5:94:cf:a8:38:48:9c:ad:b7:b5:88:84: ab:98:2b:49:d4:3e:2e:e9:0f:90:ea:bf:84:c6:ce: f8:05:ef:f7:70:1d:34:d5:88:f4:80:59:54:25:7e: 8f:6b:d3:49:6e:e0:f8:7a:74:0b:f2:ac:da:9f:cb: 7e:5b:38:29:5c:13:41:fc:3c:d7:6f:a0:4b:fc:79: a2:2c:83:11:c7:30:f3:cf:de:31:5a:cc:9c:78:90: 26:c3:f5:51:ee:31:57:17:8c:2d:d9:29:85:75:20: 90:5b:0a:f3:16:03:af:21:36:cd:ba:e1:77:4f:2f: 1d:38:e4:79:4d:b6:c9:26:32:d7:89:f8:0d:f8:a9: 07:2d:f6:31:87:24:30:70:8f:c2:19:e3:20:3d:66: 2e:ca:e0:62:53:dc:d2:72:a2:a0:4c:78:20:f8:c1: be:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:14:53:68:70:B9:D3:E3:7D:F9:1C:22:A7:B1:AC:43:92:CA:F5:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/3b03f0cc-1829-3c8b-9574-9db3799988c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl X509v3 Authority Key Identifier: keyid:57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer sbgp-ipAddrBlock: critical IPv4: 209.143.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a4:d6:4c:43:31:da:a9:4e:4e:18:d1:72:79:97:9b:43:de: 4c:6f:89:82:32:8c:8d:6f:26:93:46:03:63:7d:f7:d4:4b:28: 32:e7:5e:01:ab:9d:fe:35:9f:2a:a7:8d:21:f3:6b:c5:fd:6e: 59:35:b5:03:64:00:d6:5e:48:94:6d:dd:63:fe:3f:5f:0e:2b: bd:da:b2:e7:6e:7e:cb:14:3d:10:47:6d:4b:be:d7:94:00:a3: 17:56:7b:cf:b0:23:9c:7a:ac:33:0f:dc:2c:4c:95:fe:3b:26: af:b0:4f:1f:90:7d:0a:eb:e7:63:b5:b4:e8:a4:ef:87:ea:4c: cf:48:4e:d9:68:ca:68:f1:08:c4:91:30:f8:60:32:07:cc:00: 84:15:4e:7b:94:3e:c8:04:66:1f:ce:fa:e0:0a:27:67:22:a2: 14:ce:c5:38:b0:23:e5:a9:24:df:2f:1f:eb:af:85:62:cf:a3: 9a:ce:02:d2:ec:05:4a:91:0e:51:af:8c:c3:7d:0d:a7:48:87: 0b:d4:61:cb:30:f2:62:26:c1:49:6f:c2:1e:53:b3:e0:0d:a3: 20:48:0a:eb:80:02:3e:fd:4e:66:c9:c6:88:40:fb:3a:d8:05: 04:fe:5c:0c:7c:76:ff:c7:d3:83:03:fe:ba:66:b8:95:df:7b: 97:8e:a7:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UAxxCAJLzhMjmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3YWUxMWQtNjI5Yy00NDQzLWJjMzctMmMzZWViZDA5 NDUzMB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk MWUzM2VkZTUtOGYxYi00YWU4LWIwZmEtMGQ0M2I2Yjc5ZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL/kGNJ07KFiSyOC/US535kzJiTg05QLfWJO KuGJcqnQ1DkKU2XigxUVE9P8qRT732FynrYnYv7ZP7awqgiccO6pKVc+15gYF4E4 qOAq8SGbJ8TYs9N2vcNawDrVlM+oOEicrbe1iISrmCtJ1D4u6Q+Q6r+Exs74Be/3 cB001Yj0gFlUJX6Pa9NJbuD4enQL8qzan8t+WzgpXBNB/DzXb6BL/HmiLIMRxzDz z94xWsyceJAmw/VR7jFXF4wt2SmFdSCQWwrzFgOvITbNuuF3Ty8dOOR5TbbJJjLX ifgN+KkHLfYxhyQwcI/CGeMgPWYuyuBiU9zScqKgTHgg+MG+5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAUU2hwudPjffkcIqexrEOSyvXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mMzdh ZTExZC02MjljLTQ0NDMtYmMzNy0yYzNlZWJkMDk0NTMvM2IwM2YwY2MtMTgyOS0z YzhiLTk1NzQtOWRiMzc5OTk4OGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjM3YWUxMWQtNjI5Yy00NDQzLWJj MzctMmMzZWViZDA5NDUzL2YzN2FlMTFkLTYyOWMtNDQ0My1iYzM3LTJjM2VlYmQw OTQ1My5jcmwwHwYDVR0jBBgwFoAUVzrzYfnlwTsn5iE24vcdpWrauOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mMzdhZTExZC02MjljLTQ0NDMtYmMzNy0yYzNl ZWJkMDk0NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y8/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIak1kxDMdqpTk4Y0XJ5l5tD3kxviYIyjI1vJpNGA2N999RLKDLnXgGr nf41nyqnjSHza8X9blk1tQNkANZeSJRt3WP+P18OK73asudufssUPRBHbUu+15QA oxdWe8+wI5x6rDMP3CxMlf47Jq+wTx+QfQrr52O1tOik74fqTM9ITtloymjxCMSR MPhgMgfMAIQVTnuUPsgEZh/O+uAKJ2ciohTOxTiwI+WpJN8vH+uvhWLPo5rOAtLs BUqRDlGvjMN9DadIhwvUYcsw8mImwUlvwh5Ts+ANoyBICuuAAj79TmbJxohA+zrY BQT+XAx8dv/H04MD/rpmuJXfe5eOpxI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:18 2025 by rpki-client