$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa File: aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa (raw, json) Hash identifier: aaga1YDI1mDiKAofdgj7yr2R3hQuyZYSpTGkOiTN5U0= Subject key identifier: AC:95:BD:85:5F:31:31:88:64:56:67:EC:48:2D:8F:BE:01:31:E5:56 Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F4328584858A05625E0706FCAA6C374A0 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 14618 IP address blocks: 72.18.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:56:25:e0:70:6f:ca:a6:c3:74:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=5dcf6d19-21f9-4f25-b368-92b1147ca5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:43:93:3a:89:cb:eb:2b:fa:ae:a8:8b:96:39: 23:1b:37:53:8d:bc:96:23:05:7c:9c:11:17:78:93: 81:f3:ed:7d:2c:c0:93:3d:72:0c:5d:44:b1:d4:6b: 12:b4:cd:2e:96:1e:b1:fd:c5:92:d7:77:b6:56:06: f1:d8:5c:af:d4:d6:15:b6:f4:27:44:a8:fc:98:f9: 64:29:ed:51:a3:e9:31:e2:37:b8:0a:5a:ce:77:ab: 5f:c6:50:19:73:3a:33:c2:3b:f4:90:78:c2:ff:5d: ed:c9:1b:58:92:d4:77:78:40:7c:ab:73:e5:26:66: 94:93:54:53:ff:82:73:91:b8:c4:fc:f5:18:72:d7: fd:23:d4:b3:0c:46:e8:65:61:6c:28:34:e0:60:fd: 50:f1:28:fc:1c:77:7b:e6:18:6b:a5:cb:14:5b:d3: 20:b7:12:3a:44:50:3f:04:22:6f:4a:70:31:f5:a3: ab:9d:66:49:30:d7:e2:3b:e9:82:4b:f6:27:71:94: 12:24:ec:c6:73:04:71:73:80:dd:c7:0f:6f:5b:b6: 3a:35:94:ef:54:89:8e:80:a5:75:19:03:a4:fe:c3: 32:a2:5a:34:01:67:8b:ee:6e:c7:db:6d:50:6a:1a: 97:13:45:75:f5:e3:b8:38:54:f0:fb:92:66:4b:c6: c0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:95:BD:85:5F:31:31:88:64:56:67:EC:48:2D:8F:BE:01:31:E5:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 72.18.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d9:75:c7:bb:62:c6:20:7a:d3:f7:a3:d8:af:4c:8f:4e:d8: 9c:9c:70:26:18:89:3e:60:fd:b3:c3:b3:82:a7:62:44:94:ab: 6c:8b:73:b7:6e:1a:84:60:26:0c:39:f9:c8:d6:9a:d7:56:49: ef:d2:07:d2:31:04:62:f5:9b:88:fb:db:a2:92:fd:8b:c2:79: 8c:e8:07:76:86:77:ae:60:f8:c5:77:da:6c:27:38:60:e6:14: ff:18:8f:72:3b:c9:d1:8d:2d:0d:98:84:cc:37:09:02:9c:7d: 62:82:00:a6:51:b7:19:cf:73:17:fc:17:8b:05:99:37:5d:29: 94:98:b8:7d:36:b1:63:1e:06:8e:07:00:a3:07:78:05:d9:17: c7:ec:ce:14:72:35:f3:78:5d:4d:56:dd:99:79:5a:3b:d5:46: 1b:b8:e6:cd:55:bd:34:99:e8:16:49:97:60:0c:4c:13:37:7a: ef:c8:32:d1:4d:f9:d2:14:39:3b:ef:37:d4:52:0e:cd:d2:38: 82:3b:9a:1b:29:5c:4c:1a:be:93:54:33:a8:77:f8:7e:6a:83: 3b:d0:01:93:61:04:d4:4b:b6:72:2c:90:bb:92:bf:17:19:a8: bd:58:d7:cd:37:3e:88:17:dc:96:ec:4d:de:b6:47:e2:e8:64: 3c:ad:bf:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoFYl4HBvyqbDdKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk NWRjZjZkMTktMjFmOS00ZjI1LWIzNjgtOTJiMTE0N2NhNWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEOTOonL6yv6rqiLljkjGzdTjbyWIwV8nBEX eJOB8+19LMCTPXIMXUSx1GsStM0ulh6x/cWS13e2Vgbx2Fyv1NYVtvQnRKj8mPlk Ke1Ro+kx4je4ClrOd6tfxlAZczozwjv0kHjC/13tyRtYktR3eEB8q3PlJmaUk1RT /4JzkbjE/PUYctf9I9SzDEboZWFsKDTgYP1Q8Sj8HHd75hhrpcsUW9MgtxI6RFA/ BCJvSnAx9aOrnWZJMNfiO+mCS/YncZQSJOzGcwRxc4Ddxw9vW7Y6NZTvVImOgKV1 GQOk/sMyolo0AWeL7m7H221QahqXE0V19eO4OFTw+5JmS8bAGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyVvYVfMTGIZFZn7Egtj74BMeVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvYWE2ZTNmYmQtNWQ1Ny0z MDUyLWFhNzgtZDA4YTcyMmI3ODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBLeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvZdce7YsYgetP3o9ivTI9O2JyccCYYiT5g/bPDs4KnYkSUq2yLc7du GoRgJgw5+cjWmtdWSe/SB9IxBGL1m4j726KS/YvCeYzoB3aGd65g+MV32mwnOGDm FP8Yj3I7ydGNLQ2YhMw3CQKcfWKCAKZRtxnPcxf8F4sFmTddKZSYuH02sWMeBo4H AKMHeAXZF8fszhRyNfN4XU1W3Zl5WjvVRhu45s1VvTSZ6BZJl2AMTBM3eu/IMtFN +dIUOTvvN9RSDs3SOII7mhspXEwavpNUM6h3+H5qgzvQAZNhBNRLtnIskLuSvxcZ qL1Y1803PogX3JbsTd62R+LoZDytv5k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:01 2025 by rpki-client