$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa File: 2613f3f7-60d2-3644-87f5-381f608c7546.roa (raw, json) Hash identifier: vaZqAK9Zntjt0++NWvQBP22KE3mvJSJd3EaBb/B+Wxc= Subject key identifier: 98:4D:C3:F4:F5:E6:17:F2:8B:27:AF:A7:68:CB:44:67:28:33:D9:F3 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584851A571BE8CE475DBB31FE200 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa Signing time: Wed 25 Dec 2024 02:00:38 +0000 ROA not before: Wed 25 Dec 2024 02:00:38 +0000 ROA not after: Tue 25 Mar 2025 01:00:38 +0000 asID: 16509 IP address blocks: 216.157.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:a5:71:be:8c:e4:75:db:b3:1f:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Dec 25 02:00:38 2024 GMT Not After : Mar 25 01:00:38 2025 GMT Subject: CN=59fb303d-083f-49a2-b435-7e9417103bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a8:e9:9a:a2:02:1c:e7:14:65:2e:cf:85:be: 84:c1:42:66:58:c6:6b:4c:59:77:e3:ae:d1:42:05: 0c:03:4b:73:51:4f:fc:6b:6d:35:61:0c:c8:fc:cb: d9:ca:b3:a4:e6:05:02:6d:e1:e1:75:cd:11:c8:0f: 31:88:e5:2a:77:5b:c4:71:63:8f:06:11:d1:2c:33: 90:02:34:0a:91:94:04:a4:98:4e:1b:75:da:19:16: 9f:12:48:2f:ad:ad:61:2e:c1:6d:02:8b:94:15:67: 9a:69:1b:f9:52:8d:4f:04:f0:41:6f:10:a0:f1:17: 6c:f8:57:75:03:b2:24:69:5d:b4:21:ef:1e:1f:1f: 66:3e:b5:65:a2:92:e2:d3:99:47:0d:73:93:0e:b4: b5:d8:38:b6:15:de:f3:94:4c:7f:0e:02:59:2f:b7: ba:28:f7:e6:c8:44:ff:52:f5:40:d7:79:63:57:80: 1c:e4:5b:50:4b:c8:57:c6:be:ab:22:f5:28:8a:17: 58:19:90:fd:4d:26:1f:fa:07:0b:ff:ff:64:76:89: 38:ad:4f:54:0b:e1:48:92:d7:af:7b:f9:f1:2f:c0: 0d:4c:d4:e7:c6:a5:e6:f3:bd:3f:c7:4d:62:e6:74: 5c:22:34:07:f7:a3:10:77:7a:87:c4:d2:a0:f2:5b: 36:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4D:C3:F4:F5:E6:17:F2:8B:27:AF:A7:68:CB:44:67:28:33:D9:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0e:b1:fd:f7:6d:e1:57:f5:f0:6c:d2:ce:ad:72:11:76:e5: a8:46:c0:0b:49:6c:70:3a:a1:77:f7:0e:d0:bd:5c:7f:5b:de: e7:d5:c5:93:d5:a7:9a:8a:b8:39:b3:2b:3b:d1:7c:63:ae:d5: 5c:5d:75:d7:5c:0a:e2:e6:e2:19:01:c7:b5:9f:1f:3e:1c:86: 97:98:54:e7:2e:b8:06:c6:29:5b:b2:42:eb:d5:1a:e7:36:08: 62:50:aa:dc:71:79:35:bb:b0:7b:90:d8:7c:75:66:5a:bc:19: fc:ae:93:68:77:06:bd:7f:03:12:9b:99:82:44:cc:e2:b4:fb: 49:fc:2c:25:34:86:a5:f8:00:75:98:3c:b1:0e:51:56:f3:f8: 60:9a:f9:81:14:d3:54:d8:d3:39:83:28:80:00:e2:62:7b:6f: 4f:cf:a1:07:d1:e0:a0:71:08:97:71:d2:17:22:e4:f3:d8:9a: 23:10:41:a4:d0:02:58:a2:20:5f:97:01:83:0f:b3:72:2b:d0: 1d:ba:ef:79:96:2a:ba:ac:09:9a:29:c1:a7:4c:af:c3:dc:a7: c1:54:80:54:d9:92:2d:01:36:31:7a:0f:ea:28:b3:1c:04:d2: c9:9a:dd:f7:ee:97:c8:5d:96:f4:35:a6:0e:0b:83:c4:2d:a8: 00:0c:8a:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpXG+jOR127Mf4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk NTlmYjMwM2QtMDgzZi00OWEyLWI0MzUtN2U5NDE3MTAzYmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqjpmqICHOcUZS7Phb6EwUJmWMZrTFl3467R QgUMA0tzUU/8a201YQzI/MvZyrOk5gUCbeHhdc0RyA8xiOUqd1vEcWOPBhHRLDOQ AjQKkZQEpJhOG3XaGRafEkgvra1hLsFtAouUFWeaaRv5Uo1PBPBBbxCg8Rds+Fd1 A7IkaV20Ie8eHx9mPrVlopLi05lHDXOTDrS12Di2Fd7zlEx/DgJZL7e6KPfmyET/ UvVA13ljV4Ac5FtQS8hXxr6rIvUoihdYGZD9TSYf+gcL//9kdok4rU9UC+FIktev e/nxL8ANTNTnxqXm870/x01i5nRcIjQH96MQd3qHxNKg8ls2sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhNw/T15hfyiyevp2jLRGcoM9nzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMjYxM2YzZjctNjBkMi0z NjQ0LTg3ZjUtMzgxZjYwOGM3NTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUOsf33beFX9fBs0s6tchF25ahGwAtJbHA6oXf3DtC9XH9b3ufVxZPV p5qKuDmzKzvRfGOu1VxddddcCuLm4hkBx7WfHz4chpeYVOcuuAbGKVuyQuvVGuc2 CGJQqtxxeTW7sHuQ2Hx1Zlq8Gfyuk2h3Br1/AxKbmYJEzOK0+0n8LCU0hqX4AHWY PLEOUVbz+GCa+YEU01TY0zmDKIAA4mJ7b0/PoQfR4KBxCJdx0hci5PPYmiMQQaTQ AliiIF+XAYMPs3Ir0B2673mWKrqsCZopwadMr8Pcp8FUgFTZki0BNjF6D+oosxwE 0sma3fful8hdlvQ1pg4Lg8QtqAAMipU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:02 2025 by rpki-client