$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa File: ef167bf0-e97f-3b1d-8343-53f8aceab489.roa (raw, json) Hash identifier: 4+RlkmOqSJHv1yocn07ytzytV0ehj/TLYVs4QaAS+O0= Subject key identifier: 4B:32:90:F1:2E:7D:63:61:DD:3E:5B:3A:DC:46:CE:25:ED:81:B8:45 Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F432858483E1AAA4C32A00C94FD489BC0 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 174 IP address blocks: 216.21.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:aa:4c:32:a0:0c:94:fd:48:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=df1f5d58-abae-439d-97b9-b3fea098133e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a6:0a:cd:e0:53:b1:bb:fe:d2:a3:03:84:1e: c7:98:fe:54:df:39:a7:b8:07:2f:1b:02:7c:8e:c7: 46:8d:c8:d3:6d:23:e4:93:0a:52:f5:59:52:2a:d4: 75:dd:2b:77:cc:ee:f0:c5:40:01:9e:96:9d:7d:5d: 03:a3:45:21:f2:8a:29:79:70:8f:32:9f:15:9f:3f: ce:be:da:d8:5f:32:3f:ab:16:f4:ee:e6:08:86:69: 11:37:26:33:ec:df:a9:37:57:82:a4:0e:70:12:3d: f2:c8:4f:81:3f:14:46:a5:fa:d0:92:e7:23:8a:34: d3:8c:a2:a3:e0:3d:d0:ee:16:fc:42:a7:06:0d:e1: d8:82:55:92:13:0a:8f:23:d7:7b:28:06:b4:1f:c5: e1:9a:d6:70:63:12:b0:98:ec:d8:26:54:c9:e2:7f: f1:57:f6:5d:0a:90:00:75:21:3d:47:22:82:e5:cd: 54:65:2d:69:e1:0c:e7:17:13:28:e6:6e:c2:b5:1b: 2d:5d:13:09:05:86:ca:f4:40:18:a0:c3:91:0f:20: 29:fa:c0:f2:a8:5c:8b:0b:97:d0:c3:ad:24:fe:36: 8c:9d:cb:51:3b:08:5d:43:46:1a:5f:43:b7:e1:85: 06:cf:4a:91:f3:52:c6:92:72:ad:86:53:a9:22:77: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:32:90:F1:2E:7D:63:61:DD:3E:5B:3A:DC:46:CE:25:ED:81:B8:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv4: 216.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b5:8e:46:3e:fc:a3:13:30:5d:26:d8:26:2e:b6:80:73:d4: a1:13:82:a2:57:42:df:2b:40:68:7c:49:a8:18:06:1c:d2:ef: 0b:bf:72:32:8f:63:1c:27:98:17:cf:ed:f3:8a:bb:0a:95:99: d3:05:43:0d:3e:3c:fc:d6:0e:c3:d2:2c:25:ca:41:b7:43:cc: 66:8f:9e:21:35:6b:1c:f7:8b:63:8f:82:92:e2:e5:5e:10:6d: aa:31:92:80:7e:b1:a6:0e:79:04:da:51:65:4f:46:4a:45:ab: f9:35:9d:85:b2:37:b3:46:22:a4:4b:d3:54:56:9e:41:59:f7: a4:dd:0f:05:20:7a:11:d5:d6:6c:93:36:d4:aa:58:e5:ba:12: 8a:78:78:d5:f5:e0:e4:71:c5:d1:58:23:31:89:15:f4:47:05: 46:5a:a8:0d:9e:20:48:8d:45:cf:84:eb:ab:ad:1b:18:8e:ac: d6:7e:3a:66:b9:52:de:b7:55:83:d0:a2:45:a1:60:e3:2c:bd: 9b:ef:80:9d:98:bc:dc:31:f1:d4:00:9d:25:42:9c:80:61:de: 8b:8d:bb:ff:3a:60:b0:0f:b1:56:07:e6:17:7d:b8:70:e0:90: db:8b:3f:c2:84:dd:e1:dd:42:7c:5d:12:0e:81:22:2e:18:0d: 8f:c5:33:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqpMMqAMlP1Im8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk ZGYxZjVkNTgtYWJhZS00MzlkLTk3YjktYjNmZWEwOTgxMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6YKzeBTsbv+0qMDhB7HmP5U3zmnuAcvGwJ8 jsdGjcjTbSPkkwpS9VlSKtR13St3zO7wxUABnpadfV0Do0Uh8oopeXCPMp8Vnz/O vtrYXzI/qxb07uYIhmkRNyYz7N+pN1eCpA5wEj3yyE+BPxRGpfrQkucjijTTjKKj 4D3Q7hb8QqcGDeHYglWSEwqPI9d7KAa0H8XhmtZwYxKwmOzYJlTJ4n/xV/ZdCpAA dSE9RyKC5c1UZS1p4QznFxMo5m7CtRstXRMJBYbK9EAYoMORDyAp+sDyqFyLC5fQ w60k/jaMnctROwhdQ0YaX0O34YUGz0qR81LGknKthlOpIndyVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsykPEufWNh3T5bOtxGziXtgbhFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvZWYxNjdiZjAtZTk3Zi0z YjFkLTgzNDMtNTNmOGFjZWFiNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2BXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa1jkY+/KMTMF0m2CYutoBz1KETgqJXQt8rQGh8SagYBhzS7wu/cjKP YxwnmBfP7fOKuwqVmdMFQw0+PPzWDsPSLCXKQbdDzGaPniE1axz3i2OPgpLi5V4Q baoxkoB+saYOeQTaUWVPRkpFq/k1nYWyN7NGIqRL01RWnkFZ96TdDwUgehHV1myT NtSqWOW6Eop4eNX14ORxxdFYIzGJFfRHBUZaqA2eIEiNRc+E66utGxiOrNZ+Oma5 Ut63VYPQokWhYOMsvZvvgJ2YvNwx8dQAnSVCnIBh3ouNu/86YLAPsVYH5hd9uHDg kNuLP8KE3eHdQnxdEg6BIi4YDY/FM7w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:18 2025 by rpki-client