$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/880cf9ab-e7ce-391d-a9f9-3b725d7a3993.roa File: 880cf9ab-e7ce-391d-a9f9-3b725d7a3993.roa (raw, json) Hash identifier: mH3Ikl8CKaMiAYulZaITrE8yMeJx66TvsCZb6/J8MZ8= Subject key identifier: F2:B4:E6:50:1A:30:1F:A7:FC:05:CD:FA:2E:1D:85:38:E2:3F:D7:D7 Certificate issuer: /CN=17c62883-899d-4b86-8800-e9715d10a482 Certificate serial: 010D0C9F432858482EC00416314692FD77146180 Authority key identifier: DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/880cf9ab-e7ce-391d-a9f9-3b725d7a3993.roa Signing time: Thu 12 Dec 2024 14:00:51 +0000 ROA not before: Thu 12 Dec 2024 14:00:51 +0000 ROA not after: Wed 12 Mar 2025 13:00:51 +0000 asID: 3356 IP address blocks: 74.113.192.0/21 maxlen: 24 199.175.184.0/22 maxlen: 24 204.86.64.0/19 maxlen: 24 206.201.64.0/20 maxlen: 24 208.93.241.0/24 maxlen: 24 208.93.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2e:c0:04:16:31:46:92:fd:77:14:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c62883-899d-4b86-8800-e9715d10a482 Validity Not Before: Dec 12 14:00:51 2024 GMT Not After : Mar 12 13:00:51 2025 GMT Subject: CN=b04a7654-20e2-43ba-8ade-f6f5b1d0595b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e1:a0:36:88:92:d6:87:81:2e:5e:ea:91:80: 94:cd:37:2d:9c:cb:f9:af:fc:a6:b1:46:5e:ef:a9: c1:13:8f:2d:c2:2d:5e:79:43:1c:83:0a:67:fb:2b: 08:cb:3b:16:37:68:e0:f4:87:65:52:26:60:47:a5: 30:2f:91:4c:0b:dd:9e:b7:2c:97:34:9b:6a:ef:66: 0c:96:3e:1b:7d:5d:49:3f:a3:f0:64:95:56:e9:53: 02:1c:c3:4c:c3:d6:8d:f3:60:1d:01:e3:c7:3f:e9: f9:e2:12:ba:e8:d8:ad:d5:42:17:a2:98:41:cc:2f: 61:79:36:d6:ab:a2:89:13:ab:61:67:38:52:46:61: 26:29:21:38:b8:ee:e6:ea:19:43:68:e4:65:df:c5: 6b:d5:06:53:2b:9c:25:f2:f8:ee:cb:11:38:ab:ca: 3d:1a:ed:5d:57:a7:d9:56:ec:fe:83:54:6f:fe:14: 53:cd:7e:2c:14:37:64:97:35:72:49:d9:ca:6d:b2: 1e:4a:b3:91:a4:48:4d:7a:34:2f:ee:38:1b:32:b8: 7c:d6:fc:34:27:74:aa:dc:2e:bd:1a:fb:ab:e3:d0: bc:28:e8:41:9e:10:0d:d3:f0:4d:60:29:09:a0:de: 61:b6:47:bd:79:58:c7:ad:7a:32:d0:7e:2e:7a:bc: f5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B4:E6:50:1A:30:1F:A7:FC:05:CD:FA:2E:1D:85:38:E2:3F:D7:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/880cf9ab-e7ce-391d-a9f9-3b725d7a3993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl X509v3 Authority Key Identifier: keyid:DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer sbgp-ipAddrBlock: critical IPv4: 74.113.192.0/21 199.175.184.0/22 204.86.64.0/19 206.201.64.0/20 208.93.241.0-208.93.243.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:0d:8d:04:53:1e:ba:d3:56:f7:9d:84:d0:82:de:6b:a6:15: a7:47:ca:5c:d6:a0:0f:9e:48:b9:cf:95:ff:32:03:5e:ac:18: 0a:09:ca:3f:6a:92:a6:27:65:fb:27:a1:fd:b0:15:44:cc:52: d6:f7:fe:52:0f:f3:1d:82:65:7d:ff:b6:89:16:c4:d0:71:6d: bd:04:07:fe:83:db:8d:ac:e9:20:31:cd:f9:56:69:6f:a0:aa: 45:1a:c6:4f:8b:79:40:af:b8:c1:5d:83:78:5e:a1:8e:be:4f: 8b:c9:fc:c2:46:20:5c:61:a1:1a:34:9e:b2:bb:42:bb:86:3e: 11:ae:76:87:a4:dd:26:d2:c5:c5:36:14:39:c0:ba:97:3e:07: b7:6c:ea:e6:af:83:7a:64:c6:1f:98:3a:a2:3a:58:68:f0:b8: f3:9f:97:04:5b:45:13:83:77:d6:2c:c4:22:89:0e:d7:fe:a5: f0:a1:26:de:dc:d5:5e:3b:5a:de:e2:39:4a:fc:16:d6:c1:92: 8e:70:66:32:92:63:4d:cb:ee:08:02:18:bf:09:18:48:80:3e: b5:9b:b3:bd:30:19:fa:08:07:36:60:fc:a6:5a:24:91:44:e2: 79:2a:c4:68:e3:c6:b8:f3:44:74:50:c2:d7:00:2f:70:ba:de: 2c:d5:2a:65 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEguwAQWMUaS/XcUYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdjNjI4ODMtODk5ZC00Yjg2LTg4MDAtZTk3MTVkMTBh NDgyMB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk YjA0YTc2NTQtMjBlMi00M2JhLThhZGUtZjZmNWIxZDA1OTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeGgNoiS1oeBLl7qkYCUzTctnMv5r/ymsUZe 76nBE48twi1eeUMcgwpn+ysIyzsWN2jg9IdlUiZgR6UwL5FMC92etyyXNJtq72YM lj4bfV1JP6PwZJVW6VMCHMNMw9aN82AdAePHP+n54hK66Nit1UIXophBzC9heTbW q6KJE6thZzhSRmEmKSE4uO7m6hlDaORl38Vr1QZTK5wl8vjuyxE4q8o9Gu1dV6fZ Vuz+g1Rv/hRTzX4sFDdklzVySdnKbbIeSrORpEhNejQv7jgbMrh81vw0J3Sq3C69 Gvur49C8KOhBnhAN0/BNYCkJoN5htke9eVjHrXoy0H4uerz1uQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFPK05lAaMB+n/AXN+i4dhTjiP9fXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xN2M2 Mjg4My04OTlkLTRiODYtODgwMC1lOTcxNWQxMGE0ODIvODgwY2Y5YWItZTdjZS0z OTFkLWE5ZjktM2I3MjVkN2EzOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTdjNjI4ODMtODk5ZC00Yjg2LTg4 MDAtZTk3MTVkMTBhNDgyLzE3YzYyODgzLTg5OWQtNGI4Ni04ODAwLWU5NzE1ZDEw YTQ4Mi5jcmwwHwYDVR0jBBgwFoAU3RSJnAK92EnUJKV7aIh0t2HdE4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xN2M2Mjg4My04OTlkLTRiODYtODgwMC1lOTcx NWQxMGE0ODIuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQDSnHAAwQC x6+4AwQFzFZAAwQEzslAMAwDBADQXfEDBALQXfAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQw2NBFMeutNW 952E0ILea6YVp0fKXNagD55Iuc+V/zIDXqwYCgnKP2qSpidl+yeh/bAVRMxS1vf+ Ug/zHYJlff+2iRbE0HFtvQQH/oPbjazpIDHN+VZpb6CqRRrGT4t5QK+4wV2DeF6h jr5Pi8n8wkYgXGGhGjSesrtCu4Y+Ea52h6TdJtLFxTYUOcC6lz4Ht2zq5q+DemTG H5g6ojpYaPC485+XBFtFE4N31izEIokO1/6l8KEm3tzVXjta3uI5SvwW1sGSjnBm MpJjTcvuCAIYvwkYSIA+tZuzvTAZ+ggHNmD8plokkUTieSrEaOPGuPNEdFDC1wAv cLreLNUqZQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:16 2025 by rpki-client