$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6777a298-71af-3ad7-b3d3-490488b7f2d5.roa File: 6777a298-71af-3ad7-b3d3-490488b7f2d5.roa (raw, json) Hash identifier: xJsJZE7p06tANjOzuAfl5o/edgCEFYLNzKAGn7rl1/c= Subject key identifier: 48:CF:8F:83:77:C5:37:BC:E3:0D:08:E8:92:D1:1A:62:5C:0B:D7:E7 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F432858480BDA5F12CF0CC9A7902ED700 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6777a298-71af-3ad7-b3d3-490488b7f2d5.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 62240 IP address blocks: 216.169.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:5f:12:cf:0c:c9:a7:90:2e:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=8af9da2f-67f9-4290-915f-0629ff7ffac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:9c:a5:8e:83:b3:c8:f5:3c:45:27:ed:18: 39:76:60:52:4a:92:73:f2:58:49:07:9a:de:93:61: a7:12:00:9b:d6:73:05:19:7b:69:d0:a0:00:98:8e: b6:38:27:2c:46:86:fd:01:51:20:03:3f:55:8b:b6: b3:e5:44:14:cf:4f:5e:bd:6d:3a:ae:d2:91:b5:11: 25:e1:5c:1e:46:0e:69:5c:ef:82:8e:7c:f7:04:3d: 30:46:e1:d4:aa:61:36:1c:06:6c:df:0c:7c:f3:ac: de:79:24:9b:95:6c:3c:ad:a2:99:bc:b8:26:13:05: 72:83:e8:a8:ca:3c:a0:7e:08:a0:be:be:83:c2:18: fe:5e:0e:c6:a1:b0:d3:90:5a:d5:23:34:dd:b4:1c: e7:41:5b:33:77:d1:c0:ba:36:8c:53:a1:27:b9:37: 62:2f:bb:07:3c:69:24:b3:fb:67:16:1e:1a:61:3d: 24:33:b5:2a:38:b7:78:7a:98:c0:d5:36:70:ea:9e: c8:83:cd:4d:01:54:f8:46:e1:96:7c:79:72:75:03: a3:d7:8e:69:13:29:ec:13:f3:1b:b7:c2:01:6f:29: 5b:47:c8:45:7f:3f:4c:7b:f7:af:5a:0a:70:c7:5f: 60:ed:e1:ae:82:c6:6f:8b:c4:63:83:4b:be:6f:b1: d0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CF:8F:83:77:C5:37:BC:E3:0D:08:E8:92:D1:1A:62:5C:0B:D7:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6777a298-71af-3ad7-b3d3-490488b7f2d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.169.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:dc:49:05:a0:1b:d7:2e:4f:f0:2d:25:1d:a6:87:46:73:69: cb:fd:3c:4f:53:10:b2:e6:e1:26:af:1c:4a:da:c2:64:ee:df: d2:94:e5:5d:ed:d5:47:80:b4:48:fb:6f:88:8a:a1:c3:90:fe: be:3e:32:d3:e7:3a:49:fe:f2:4e:43:fa:c5:f1:b0:ea:44:b3: b1:84:1f:1e:d8:96:6a:34:ff:c4:6f:d8:aa:3c:9c:89:b5:40: a9:8d:46:9a:f3:19:34:ec:f9:71:32:9e:03:51:10:61:98:e4: a5:20:eb:84:0c:1e:86:b1:c4:82:41:be:2e:77:70:50:82:f2: 2c:e0:61:e9:e3:e9:6d:0d:96:5f:c2:3b:20:14:51:d7:4f:c1: 70:e6:33:2d:d6:8f:17:07:6b:8e:11:6c:35:bc:2e:86:f0:7e: e0:7c:e2:75:bd:72:9c:ad:1b:ca:20:40:b4:c0:7c:40:ae:46: da:5d:cf:85:4f:09:ed:2f:e7:9c:4a:63:8c:8c:ff:66:cc:cc: 2f:e6:49:36:27:13:f3:66:ba:30:d4:87:36:bd:9c:99:b6:70: 4e:34:88:6f:7a:fa:f7:c2:04:23:42:14:ba:82:72:1a:71:1c: 5b:8c:fb:cc:83:b3:19:e0:7a:90:48:cb:4f:23:2b:0e:9e:77: 75:da:bd:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2l8SzwzJp5Au1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk OGFmOWRhMmYtNjdmOS00MjkwLTkxNWYtMDYyOWZmN2ZmYWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGucpY6Ds8j1PEUn7Rg5dmBSSpJz8lhJB5re k2GnEgCb1nMFGXtp0KAAmI62OCcsRob9AVEgAz9Vi7az5UQUz09evW06rtKRtREl 4VweRg5pXO+Cjnz3BD0wRuHUqmE2HAZs3wx886zeeSSblWw8raKZvLgmEwVyg+io yjygfgigvr6Dwhj+Xg7GobDTkFrVIzTdtBznQVszd9HAujaMU6EnuTdiL7sHPGkk s/tnFh4aYT0kM7UqOLd4epjA1TZw6p7Ig81NAVT4RuGWfHlydQOj145pEynsE/Mb t8IBbylbR8hFfz9Me/evWgpwx19g7eGugsZvi8Rjg0u+b7HQywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjPj4N3xTe84w0I6JLRGmJcC9fnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNjc3N2EyOTgtNzFhZi0z YWQ3LWIzZDMtNDkwNDg4YjdmMmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrcSQWgG9cuT/AtJR2mh0Zzacv9PE9TELLm4SavHErawmTu39KU5V3t 1UeAtEj7b4iKocOQ/r4+MtPnOkn+8k5D+sXxsOpEs7GEHx7Ylmo0/8Rv2Ko8nIm1 QKmNRprzGTTs+XEyngNREGGY5KUg64QMHoaxxIJBvi53cFCC8izgYenj6W0Nll/C OyAUUddPwXDmMy3WjxcHa44RbDW8LobwfuB84nW9cpytG8ogQLTAfECuRtpdz4VP Ce0v55xKY4yM/2bMzC/mSTYnE/NmujDUhza9nJm2cE40iG96+vfCBCNCFLqCchpx HFuM+8yDsxngepBIy08jKw6ed3XavTQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:27 2025 by rpki-client