$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/3486fd0a-6efc-3a3f-b2d1-15acb69feac0.roa File: 3486fd0a-6efc-3a3f-b2d1-15acb69feac0.roa (raw, json) Hash identifier: PFxg2IhxaJPQtGrsJAKrbMb5m1wIoKfppeAqyCmIh7k= Subject key identifier: 0C:CF:34:CD:99:A1:52:81:6C:A4:89:3E:CC:C6:29:15:E7:45:8C:3E Certificate issuer: /CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Certificate serial: 010D0C9F4328584800AF7F6A3777DDEDDC28CF00 Authority key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/3486fd0a-6efc-3a3f-b2d1-15acb69feac0.roa Signing time: Tue 26 Nov 2024 02:00:26 +0000 ROA not before: Tue 26 Nov 2024 02:00:26 +0000 ROA not after: Mon 24 Feb 2025 02:00:26 +0000 asID: 14445 IP address blocks: 185.216.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Feb 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:00:af:7f:6a:37:77:dd:ed:dc:28:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Validity Not Before: Nov 26 02:00:26 2024 GMT Not After : Feb 24 02:00:26 2025 GMT Subject: CN=eacc9dc2-710e-400b-9a48-ad2a7db2b13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:46:b4:8f:10:0a:4f:50:ca:f5:1b:a2:7d: 5b:b9:54:ec:9f:18:00:03:1d:47:4d:38:6f:85:95: 1d:55:1f:71:7a:5a:b9:5f:05:21:f0:3f:32:1b:93: 79:50:f6:4b:a7:70:a6:55:c5:e5:9c:62:39:cc:37: 32:87:c8:5c:30:25:35:32:b6:c0:7b:8c:a4:cc:47: c0:93:08:fa:2b:53:05:24:50:cb:a3:5d:0f:22:2b: 0f:ef:dd:7f:2e:e8:cc:61:b0:54:05:66:54:30:0d: 02:8f:99:d6:fd:79:a2:85:41:9f:af:8d:8a:82:4a: a5:92:7b:be:19:b6:3b:70:dd:05:68:c1:3b:17:e7: 38:5f:91:5d:22:cb:50:7d:3f:6b:f3:40:c4:9f:3c: e0:f9:56:1a:0f:4a:a1:5f:b8:7d:0f:d3:c4:3b:ee: b2:8e:56:b1:21:99:1e:5e:6a:32:55:af:f9:ec:2f: cb:5c:dd:dd:64:fd:62:97:d8:f5:4a:3e:25:3e:99: 25:e0:7f:3e:7d:40:e9:93:2f:f4:d5:8e:86:c2:3b: ba:f6:48:4d:fb:3f:c5:e7:80:d4:2f:99:06:88:60: 41:c5:73:d1:5d:47:b6:07:a8:ec:3e:97:2a:5d:9d: 00:04:7a:57:84:8e:6e:c4:d2:76:77:14:31:5c:d0: 0f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CF:34:CD:99:A1:52:81:6C:A4:89:3E:CC:C6:29:15:E7:45:8C:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/3486fd0a-6efc-3a3f-b2d1-15acb69feac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl X509v3 Authority Key Identifier: keyid:21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer sbgp-ipAddrBlock: critical IPv4: 185.216.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:eb:d0:ed:c0:36:d4:66:d6:4b:92:0c:58:a1:cd:7a:94:be: 2d:be:6f:a1:d7:14:d1:98:ca:4a:cb:8a:06:e9:57:d4:5c:96: 6b:74:88:21:31:fb:95:dd:65:6d:01:59:49:2b:e9:89:b6:10: f8:90:42:ad:2e:5b:da:de:44:24:a1:3e:84:45:df:6e:2a:58: e6:34:e2:40:8c:f2:e1:3b:92:f5:27:bf:01:a9:99:e0:25:82: 63:8d:43:86:9c:3f:2c:ac:bf:ad:c9:d4:1d:ec:a3:c5:89:24: 86:4b:4e:c3:d0:cd:3f:c9:30:d2:55:34:ca:e7:9a:3b:6b:72: 33:20:60:58:fe:6c:f1:1e:98:ce:7b:05:e4:8f:48:49:b8:9d: e2:6d:b6:30:be:eb:60:48:df:7c:75:f3:fe:65:11:8e:8c:ba: c0:e3:62:66:e6:19:c2:5c:71:3c:e8:be:30:4f:27:a0:ab:64: 4c:35:6a:60:c0:eb:a5:a9:e5:33:63:e7:aa:b6:62:b7:04:d3: 19:14:1d:56:5a:6e:d7:4e:b4:1c:68:0f:02:2d:61:c3:b2:21: 00:24:67:cc:e2:af:68:11:35:e5:10:32:c5:b0:52:35:9e:35: d8:69:28:90:15:38:00:14:99:85:c4:17:ea:93:9e:04:4a:ba: 8c:b4:46:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgAr39qN3fd7dwozwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVmYTg4MjktNTZmNS00YWMxLTk4YzYtZTRiZjExOWJk ODgyMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk ZWFjYzlkYzItNzEwZS00MDBiLTlhNDgtYWQyYTdkYjJiMTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMJGtI8QCk9QyvUbon1buVTsnxgAAx1HTThv hZUdVR9xelq5XwUh8D8yG5N5UPZLp3CmVcXlnGI5zDcyh8hcMCU1MrbAe4ykzEfA kwj6K1MFJFDLo10PIisP791/LujMYbBUBWZUMA0Cj5nW/XmihUGfr42Kgkqlknu+ GbY7cN0FaME7F+c4X5FdIstQfT9r80DEnzzg+VYaD0qhX7h9D9PEO+6yjlaxIZke XmoyVa/57C/LXN3dZP1il9j1Sj4lPpkl4H8+fUDpky/01Y6Gwju69khN+z/F54DU L5kGiGBBxXPRXUe2B6jsPpcqXZ0ABHpXhI5uxNJ2dxQxXNAP+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzPNM2ZoVKBbKSJPszGKRXnRYw+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZh ODgyOS01NmY1LTRhYzEtOThjNi1lNGJmMTE5YmQ4ODIvMzQ4NmZkMGEtNmVmYy0z YTNmLWIyZDEtMTVhY2I2OWZlYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmVmYTg4MjktNTZmNS00YWMxLTk4 YzYtZTRiZjExOWJkODgyLzZlZmE4ODI5LTU2ZjUtNGFjMS05OGM2LWU0YmYxMTli ZDg4Mi5jcmwwHwYDVR0jBBgwFoAUIQdQimQNva+rxX/XYBlsUIFiUdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZhODgyOS01NmY1LTRhYzEtOThjNi1lNGJm MTE5YmQ4ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudh/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETr0O3ANtRm1kuSDFihzXqUvi2+b6HXFNGYykrLigbpV9Rclmt0iCEx +5XdZW0BWUkr6Ym2EPiQQq0uW9reRCShPoRF324qWOY04kCM8uE7kvUnvwGpmeAl gmONQ4acPyysv63J1B3so8WJJIZLTsPQzT/JMNJVNMrnmjtrcjMgYFj+bPEemM57 BeSPSEm4neJttjC+62BI33x18/5lEY6MusDjYmbmGcJccTzovjBPJ6CrZEw1amDA 66Wp5TNj56q2YrcE0xkUHVZabtdOtBxoDwItYcOyIQAkZ8zir2gRNeUQMsWwUjWe NdhpKJAVOAAUmYXEF+qTngRKuoy0Rnk= -----END CERTIFICATE-----Generated at Sun Feb 9 15:14:12 2025 by rpki-client