$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/634590e3-58e0-332e-9bb0-08ef4137086d.roa File: 634590e3-58e0-332e-9bb0-08ef4137086d.roa (raw, json) Hash identifier: XsuX2ynBg0h/+mvsfyHD1Rbn410WUqjXvmpzAeLn3Ks= Subject key identifier: AB:20:24:25:E0:07:20:09:E7:A8:2D:22:8B:AE:79:35:DF:F3:11:11 Certificate issuer: /CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5 Certificate serial: 010D0C9F43285848ADC619805381B223142C21C0 Authority key identifier: 0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/634590e3-58e0-332e-9bb0-08ef4137086d.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 7311 IP address blocks: 216.126.77.0/24 maxlen: 24 216.126.79.0/24 maxlen: 24 216.126.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:19:80:53:81:b2:23:14:2c:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=fd52736c-baf6-4024-9877-786a07ae33de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ae:46:53:1b:d5:f6:ad:df:01:e9:5b:5f:64: 82:dc:4a:49:3a:b1:d5:6c:e9:f9:17:c8:3c:25:92: 84:18:f0:6c:ad:ff:c9:81:30:dd:ec:1d:16:22:ea: cd:15:9c:8d:c5:68:40:96:fc:5d:86:66:1f:19:e2: 5d:2c:9a:ba:b4:4d:33:56:90:9d:28:12:7a:59:f7: 29:a6:f9:dd:6c:2f:46:82:2f:54:b1:6d:31:62:2e: 2a:59:19:75:92:14:e8:9c:99:df:2a:0e:cd:47:67: d4:10:4c:90:c0:1c:20:74:34:44:e2:0b:64:a1:4e: 5d:c0:e8:8e:90:76:1b:b1:c1:f9:7c:51:c0:42:b6: fb:bd:9c:d3:c7:08:4a:23:3e:b5:95:a3:fd:da:c4: b2:cb:2d:94:65:9b:4f:aa:7d:40:2e:23:18:16:11: 03:07:c1:2a:28:a7:1b:9b:31:0d:22:69:b6:e5:fc: 91:98:01:f7:ed:04:fe:a3:83:2e:28:4e:51:d0:b8: 32:04:7c:f5:cf:ab:fc:5c:93:09:fc:05:b4:52:df: da:e8:c5:37:96:54:28:45:e2:3f:85:f1:f3:03:f1: c0:4c:c5:13:b0:b2:93:85:e3:02:eb:b4:ca:a2:ca: de:08:b2:d8:f1:d8:0d:55:02:bb:61:dc:be:51:2b: 88:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:20:24:25:E0:07:20:09:E7:A8:2D:22:8B:AE:79:35:DF:F3:11:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/634590e3-58e0-332e-9bb0-08ef4137086d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl X509v3 Authority Key Identifier: keyid:0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer sbgp-ipAddrBlock: critical IPv4: 216.126.77.0/24 216.126.79.0/24 216.126.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:8b:59:1c:32:36:af:a5:23:a7:fa:96:1d:66:62:71:0a:12: fc:f4:8f:68:90:7e:8d:65:c9:c6:a2:47:94:02:39:a4:68:a7: d8:eb:2d:b3:e2:1f:a4:1c:ec:3c:f3:2b:79:be:36:3b:45:38: 3e:8d:3b:ee:eb:e8:4b:33:b3:f0:93:0f:e9:ac:b1:b1:ea:8d: e6:24:86:45:65:05:d0:77:af:6d:54:09:a3:7b:58:8b:e7:20: cf:fc:6b:0b:ce:6b:47:6a:09:fb:80:e6:17:71:f5:ff:13:3a: 78:fa:cc:95:96:5e:c0:dc:64:f5:f3:0b:dd:70:f5:8d:69:6f: 65:a4:33:6a:68:93:be:15:fa:ff:e8:eb:09:4a:54:a6:b5:36: 65:a1:40:cc:5a:a1:c0:75:ae:cc:4a:52:3d:41:68:f4:3f:8a: 54:03:d5:b8:31:67:58:15:cc:42:31:a1:b7:09:69:fe:b2:93: 9b:57:3d:5f:09:87:37:93:58:00:31:f5:e0:b4:97:8c:e3:9f: 4c:58:ff:da:d9:eb:d6:a1:d9:f2:70:a3:9c:6a:af:06:6c:5b: 14:ef:48:fd:be:2f:d2:f1:87:47:12:98:77:95:aa:6d:93:7c: 27:d4:c7:8e:ba:70:8e:63:c8:61:55:4c:59:ad:3f:3f:31:11: 34:14:68:88 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEitxhmAU4GyIxQsIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTcyMDJlOGQtZDY3MS00ZmUzLWJmYTktNjA1ZTJjYTMy YWE1MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZmQ1MjczNmMtYmFmNi00MDI0LTk4NzctNzg2YTA3YWUzM2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt65GUxvV9q3fAelbX2SC3EpJOrHVbOn5F8g8 JZKEGPBsrf/JgTDd7B0WIurNFZyNxWhAlvxdhmYfGeJdLJq6tE0zVpCdKBJ6Wfcp pvndbC9Ggi9UsW0xYi4qWRl1khTonJnfKg7NR2fUEEyQwBwgdDRE4gtkoU5dwOiO kHYbscH5fFHAQrb7vZzTxwhKIz61laP92sSyyy2UZZtPqn1ALiMYFhEDB8EqKKcb mzENImm25fyRmAH37QT+o4MuKE5R0LgyBHz1z6v8XJMJ/AW0Ut/a6MU3llQoReI/ hfHzA/HATMUTsLKTheMC67TKosreCLLY8dgNVQK7Ydy+USuI/wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFKsgJCXgByAJ56gtIouueTXf8xERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NzIw MmU4ZC1kNjcxLTRmZTMtYmZhOS02MDVlMmNhMzJhYTUvNjM0NTkwZTMtNThlMC0z MzJlLTliYjAtMDhlZjQxMzcwODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTcyMDJlOGQtZDY3MS00ZmUzLWJm YTktNjA1ZTJjYTMyYWE1LzU3MjAyZThkLWQ2NzEtNGZlMy1iZmE5LTYwNWUyY2Ez MmFhNS5jcmwwHwYDVR0jBBgwFoAUCnAAShqgXKbExzVX102W390JTPswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NzIwMmU4ZC1kNjcxLTRmZTMtYmZhOS02MDVl MmNhMzJhYTUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA2H5NAwQA 2H5PAwQA2H5WMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAC+LWRwyNq+lI6f6lh1mYnEKEvz0j2iQfo1lycai R5QCOaRop9jrLbPiH6Qc7DzzK3m+NjtFOD6NO+7r6Eszs/CTD+mssbHqjeYkhkVl BdB3r21UCaN7WIvnIM/8awvOa0dqCfuA5hdx9f8TOnj6zJWWXsDcZPXzC91w9Y1p b2WkM2pok74V+v/o6wlKVKa1NmWhQMxaocB1rsxKUj1BaPQ/ilQD1bgxZ1gVzEIx obcJaf6yk5tXPV8JhzeTWAAx9eC0l4zjn0xY/9rZ69ah2fJwo5xqrwZsWxTvSP2+ L9Lxh0cSmHeVqm2TfCfUx466cI5jyGFVTFmtPz8xETQUaIg= -----END CERTIFICATE-----Generated at Sun Feb 16 20:24:17 2025 by rpki-client