$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa File: ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa (raw, json) Hash identifier: Ar7OeNrM/uwwFt+rggQiAOZ6tYuwXAAAeMxhGPXMlJc= Subject key identifier: F0:83:B0:24:DC:77:E5:AE:8A:C9:D1:8F:3D:C9:3B:D5:09:D3:4E:EA Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Certificate serial: 010D0C9F4328584845158B45E4274B38445B24C0 Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 397287 IP address blocks: 72.21.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:8b:45:e4:27:4b:38:44:5b:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=e164b906-f6df-4c5e-935d-51c6c3386533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:de:c4:35:9d:35:4a:a8:01:66:df:57:1d: 8a:77:5f:fb:db:41:16:a8:29:11:2a:6e:da:a3:a4: a4:f8:08:cd:67:6a:3f:64:c3:ff:5e:84:55:97:e6: e3:f7:05:6a:47:87:09:dd:b6:cf:1c:1b:8e:81:b4: 82:ea:01:f1:9f:81:59:59:64:a2:94:2a:30:1c:28: 7e:c9:2f:9a:69:69:8a:c0:d6:0a:a0:a7:f2:4c:8e: 1f:47:fb:ce:c0:b7:82:06:33:a7:21:d7:cb:29:92: a8:c8:e0:b7:f5:6e:56:e6:6d:dd:33:e9:ae:0a:f2: b4:0c:c1:f6:a7:92:8a:c3:82:55:d2:18:75:d8:c3: b3:bc:41:f4:bd:ed:9a:01:fc:f3:2c:86:1b:bb:e4: 0d:cc:05:5c:63:dc:4a:2a:0f:34:f7:c5:5b:4b:2b: f8:fb:b6:9a:0a:e4:36:b6:30:ca:9f:01:55:c6:a7: b4:9a:7d:31:11:d9:82:8a:47:1d:3f:d7:a0:58:02: ee:69:c1:97:07:9e:b2:5b:ae:e4:01:5b:db:86:5b: a3:93:65:11:ca:57:be:99:62:22:1b:01:04:ca:56: c3:c8:39:7e:4c:6b:36:2f:e1:f3:d0:be:7b:0d:00: f4:5d:1b:32:a1:03:c3:f2:7e:31:05:8c:c0:e3:49: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:83:B0:24:DC:77:E5:AE:8A:C9:D1:8F:3D:C9:3B:D5:09:D3:4E:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl X509v3 Authority Key Identifier: keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer sbgp-ipAddrBlock: critical IPv4: 72.21.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:92:83:21:75:36:09:eb:93:66:ed:12:05:90:9f:50:6c:b5: f9:a5:02:56:2e:41:7d:22:73:a4:86:dd:6c:f6:d1:42:bf:d2: 08:4a:94:c6:f2:19:b2:2e:8a:32:f3:17:25:a8:79:1b:d0:bb: cb:7a:4f:3c:a0:a9:7e:e1:15:a2:07:fb:4c:1a:c3:67:1a:b0: f5:4c:a9:63:b4:de:6e:4e:fd:21:86:ab:bd:44:d8:2f:eb:40: a4:40:2c:fd:1a:c7:74:a4:a3:00:87:65:2a:f6:a0:e0:52:2f: fe:1f:62:ab:28:53:b9:d5:0d:30:6b:76:ce:76:93:0b:46:90: 89:90:f0:9d:08:7c:d5:1a:95:7a:46:4a:e8:e0:1b:9b:00:fb: d2:10:c7:30:d9:df:be:dc:d5:bb:02:ee:a2:40:b3:f0:4e:22: f1:bc:7d:4e:90:7f:fd:ef:10:cb:21:06:d6:d6:ed:c1:7d:b8: 24:75:71:78:a3:1e:9b:26:1f:77:10:6e:c3:03:69:bc:ed:c6: e1:ec:e5:20:7d:14:25:49:05:26:4e:26:b3:e0:f8:ca:41:93: 3a:34:23:ea:57:a5:8a:83:b8:29:de:5d:70:cd:30:ba:99:08: c9:d9:cd:3c:4e:b3:87:44:51:9c:ff:ad:d5:4e:00:2e:69:34: 17:1c:6c:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFYtF5CdLOERbJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk YTQ2MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk ZTE2NGI5MDYtZjZkZi00YzVlLTkzNWQtNTFjNmMzMzg2NTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplnexDWdNUqoAWbfVx2Kd1/720EWqCkRKm7a o6Sk+AjNZ2o/ZMP/XoRVl+bj9wVqR4cJ3bbPHBuOgbSC6gHxn4FZWWSilCowHCh+ yS+aaWmKwNYKoKfyTI4fR/vOwLeCBjOnIdfLKZKoyOC39W5W5m3dM+muCvK0DMH2 p5KKw4JV0hh12MOzvEH0ve2aAfzzLIYbu+QNzAVcY9xKKg8098VbSyv4+7aaCuQ2 tjDKnwFVxqe0mn0xEdmCikcdP9egWALuacGXB56yW67kAVvbhlujk2URyle+mWIi GwEEylbDyDl+TGs2L+Hz0L57DQD0XRsyoQPD8n4xBYzA40n1LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCDsCTcd+WuisnRjz3JO9UJ007qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvY2E3YTVmZTktNjA4ZC0z OTcwLThhZTktYzExNmFlOTU1ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4 NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWSgyF1Ngnrk2btEgWQn1BstfmlAlYuQX0ic6SG3Wz20UK/0ghKlMby GbIuijLzFyWoeRvQu8t6TzygqX7hFaIH+0waw2casPVMqWO03m5O/SGGq71E2C/r QKRALP0ax3SkowCHZSr2oOBSL/4fYqsoU7nVDTBrds52kwtGkImQ8J0IfNUalXpG SujgG5sA+9IQxzDZ377c1bsC7qJAs/BOIvG8fU6Qf/3vEMshBtbW7cF9uCR1cXij HpsmH3cQbsMDabztxuHs5SB9FCVJBSZOJrPg+MpBkzo0I+pXpYqDuCneXXDNMLqZ CMnZzTxOs4dEUZz/rdVOAC5pNBccbHQ= -----END CERTIFICATE-----Generated at Sun Feb 16 20:36:16 2025 by rpki-client