$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa File: 1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa (raw, json) Hash identifier: Ptu6Dx/OPt7fCPTyZJs2C78UzWg+ztXKN71aVVj8V1g= Subject key identifier: 2E:40:BE:2A:3B:1E:4F:E2:7D:0A:B1:FD:F6:4A:E9:47:2A:75:7B:3D Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F4328584858A055FFEDDFC6DA774C39E8 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 16509 IP address blocks: 72.18.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:55:ff:ed:df:c6:da:77:4c:39:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=ed3c1678-0acc-4dee-a22a-df5f1e07bb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:3e:fb:b2:1a:44:8c:ba:13:20:75:9c:06: 7d:21:3c:bf:03:2d:66:52:42:ca:c1:73:df:64:b1: be:95:35:83:d3:72:ea:2c:dc:84:85:46:66:a6:6c: 55:db:f9:30:8d:a5:05:cb:a3:16:ea:f5:3e:9c:2c: 0b:27:24:7d:62:37:55:e0:eb:64:5f:54:7d:55:06: 24:0c:1a:1a:6e:8f:a8:df:4c:fe:78:cc:21:02:d4: e1:eb:1f:21:86:5b:ec:f1:90:d8:dc:d7:4d:f8:07: 54:f9:f0:12:4d:4e:3c:b9:4b:11:d8:4d:45:97:53: 80:c5:5f:c0:62:5b:c5:2a:57:2e:40:3a:56:4e:c2: a6:ae:69:6f:10:6b:cc:03:72:d2:fa:c0:a2:cd:47: dc:da:46:ac:18:a1:6f:b5:93:56:12:83:98:ad:70: 97:8d:d4:52:6c:93:95:f2:86:28:38:29:c9:e7:85: 46:f2:8f:23:9f:97:82:e8:60:ed:08:6c:f6:a4:7d: ca:b8:64:2a:31:31:36:7e:6d:ff:3c:a6:7c:eb:d5: 72:b8:95:38:9d:a2:82:6f:2c:76:ba:33:97:40:80: 9a:e2:be:82:0d:27:dc:cc:c1:f6:32:fd:1b:aa:8d: 08:cf:8a:b9:d5:2b:d0:16:93:0c:d6:b0:d2:75:29: 7b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:40:BE:2A:3B:1E:4F:E2:7D:0A:B1:FD:F6:4A:E9:47:2A:75:7B:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 72.18.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:48:e2:77:6d:ca:54:b3:c2:2e:c9:74:bc:7e:49:ac:40:ac: 89:51:40:75:07:a8:d7:a4:5e:66:56:0c:dc:eb:0c:2a:0f:73: d2:17:4e:d3:0a:b5:9a:6b:18:af:30:51:ef:cc:8f:cc:e9:1e: bd:c0:7b:1c:c9:82:bc:48:82:f7:5e:2e:5e:99:41:f5:56:23: 6a:93:a9:f3:fc:e9:87:5b:9f:2f:45:4f:44:38:62:7a:9e:64: b7:c0:dd:08:55:4b:1c:06:7b:da:e8:27:89:b7:16:dd:d8:bc: 15:62:ca:ed:3e:7e:86:b9:97:f6:2c:f5:bf:e2:42:70:4b:26: bd:66:f6:c0:03:93:dd:2e:d0:4c:1d:d1:d0:ff:fa:96:75:c3: d1:f7:ec:e4:51:0d:d5:c9:73:63:54:f7:af:8d:86:c5:1f:5c: 24:88:99:50:f8:f1:5b:0f:a0:b7:f8:cb:2d:3c:51:d4:7e:a9: c5:e7:f0:9a:fd:f0:f7:df:e0:a8:a8:8d:04:75:d2:86:eb:ef: f6:e0:a6:cb:07:c9:f0:bf:e7:9d:39:76:16:f8:f6:5f:f9:88: ee:3f:6b:fe:85:1c:cd:8c:61:a7:0b:76:af:20:25:a0:18:39: a3:7a:25:2b:34:a0:36:31:d3:3f:c8:9c:87:26:c5:3c:92:83: a6:86:3c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoFX/7d/G2ndMOegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZWQzYzE2NzgtMGFjYy00ZGVlLWEyMmEtZGY1ZjFlMDdiYjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlw++7IaRIy6EyB1nAZ9ITy/Ay1mUkLKwXPf ZLG+lTWD03LqLNyEhUZmpmxV2/kwjaUFy6MW6vU+nCwLJyR9YjdV4OtkX1R9VQYk DBoabo+o30z+eMwhAtTh6x8hhlvs8ZDY3NdN+AdU+fASTU48uUsR2E1Fl1OAxV/A YlvFKlcuQDpWTsKmrmlvEGvMA3LS+sCizUfc2kasGKFvtZNWEoOYrXCXjdRSbJOV 8oYoOCnJ54VG8o8jn5eC6GDtCGz2pH3KuGQqMTE2fm3/PKZ869VyuJU4naKCbyx2 ujOXQICa4r6CDSfczMH2Mv0bqo0Iz4q51SvQFpMM1rDSdSl7KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5Avio7Hk/ifQqx/fZK6UcqdXs9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvMWIxY2U5YjEtYTBmYy0z YWE3LWFhNzctNzQ5ODY3NDUyNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBLeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFI4ndtylSzwi7JdLx+SaxArIlRQHUHqNekXmZWDNzrDCoPc9IXTtMK tZprGK8wUe/Mj8zpHr3AexzJgrxIgvdeLl6ZQfVWI2qTqfP86Ydbny9FT0Q4Ynqe ZLfA3QhVSxwGe9roJ4m3Ft3YvBViyu0+foa5l/Ys9b/iQnBLJr1m9sADk90u0Ewd 0dD/+pZ1w9H37ORRDdXJc2NU96+NhsUfXCSImVD48VsPoLf4yy08UdR+qcXn8Jr9 8Pff4KiojQR10obr7/bgpssHyfC/5505dhb49l/5iO4/a/6FHM2MYacLdq8gJaAY OaN6JSs0oDYx0z/InIcmxTySg6aGPK8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:55 2025 by rpki-client