$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43642964-cbf2-3ca2-9493-2d182d19d342.roa File: 43642964-cbf2-3ca2-9493-2d182d19d342.roa (raw, json) Hash identifier: 1XOPiyYRziexSB9sDq0XObSXdhJWx8OOmNZYlV3daqk= Subject key identifier: B6:C8:7D:8F:E2:43:9D:D9:B1:CC:46:A6:C9:D5:70:98:F8:C5:33:19 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858482D5A9AF4EADD9F6D12DBA400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43642964-cbf2-3ca2-9493-2d182d19d342.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 22773 IP address blocks: 70.166.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:9a:f4:ea:dd:9f:6d:12:db:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=67d351c3-149c-43e6-9e49-24d7a5d37ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:d7:9f:a9:ad:4f:1b:85:18:4b:54:33:31: 60:35:f7:20:47:8e:47:70:e8:2c:bb:d3:db:69:87: 73:4f:07:ca:d9:d1:2f:1b:0c:ef:e9:61:74:c9:2d: 81:b5:b9:1d:96:9a:a4:98:fd:11:ad:07:18:aa:f7: 6b:13:48:a4:0c:e8:a7:23:c1:15:9f:cb:91:89:bd: 27:71:76:12:8d:63:54:68:0e:4c:81:5b:6e:40:5a: 07:36:60:4d:73:c1:10:c6:67:5c:e9:5a:c7:89:9f: 34:df:4a:42:4f:fb:ba:ac:6f:a9:14:ac:90:59:d2: 93:f1:41:25:03:fb:86:80:af:a7:67:b2:22:b7:58: 74:21:83:d3:9f:3b:9a:73:88:ee:c4:6d:ac:be:00: 6f:97:d7:7f:17:5c:8d:62:eb:f9:78:49:c0:35:d3: b6:0a:88:bf:4a:e5:00:c5:2d:6f:8e:30:7a:46:ad: 90:90:7f:4e:50:51:e1:3a:df:9a:ec:4e:38:39:5b: ad:9c:ae:08:34:8d:86:fb:b1:4e:ef:cf:d6:5c:63: 3a:a8:41:c5:e3:98:7e:99:fd:98:73:44:ef:60:e5: 39:74:a2:6d:20:98:7b:41:ed:a5:45:3c:29:1f:b0: f5:62:20:b6:0e:92:e6:81:94:61:1c:58:f2:fe:65: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C8:7D:8F:E2:43:9D:D9:B1:CC:46:A6:C9:D5:70:98:F8:C5:33:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43642964-cbf2-3ca2-9493-2d182d19d342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.166.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:58:ce:ce:ab:d3:32:75:bb:6c:ac:77:a7:07:b7:c5:6c:72: ae:21:88:9c:cc:e9:8f:aa:a3:bc:23:b8:e5:e0:08:fd:e0:9e: 7a:6d:e6:50:f2:66:68:f0:94:b6:76:cb:71:2b:01:b5:ba:fe: 11:33:77:e6:24:41:7e:6a:20:ab:17:d2:50:d4:e3:87:24:83: 2f:5a:43:09:1a:f9:13:65:15:9e:cf:b4:17:61:5b:14:05:6c: ce:d4:78:0f:dc:27:20:16:11:4f:d5:44:1a:cd:f9:3a:e8:b9: 3f:58:5f:b9:af:1c:ab:e5:4a:6b:7b:63:dc:97:68:32:70:75: 75:1e:68:f8:cf:6c:8d:27:5b:ff:bc:c9:02:e4:0e:fe:a4:7b: d9:37:de:f3:d7:73:e3:c5:04:21:e6:26:3d:10:15:a8:4c:73: 11:7c:86:d7:33:f4:c1:5c:ae:1f:c5:72:3c:dd:7a:cc:06:80: 44:23:52:45:61:ae:b5:6e:71:cf:c3:6f:0b:05:e4:ac:79:f1: 13:5f:cf:fa:0f:f2:57:a6:f8:f1:22:1b:4d:22:a5:25:52:0a: 67:ea:93:d2:4b:77:a2:29:19:92:4d:2f:0b:c7:ef:59:82:61: 66:a8:39:6b:96:9a:7e:e4:c6:e6:b6:e7:99:2d:69:ae:0f:b1: f4:e3:f6:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWpr06t2fbRLbpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk NjdkMzUxYzMtMTQ5Yy00M2U2LTllNDktMjRkN2E1ZDM3ZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uPXn6mtTxuFGEtUMzFgNfcgR45HcOgsu9Pb aYdzTwfK2dEvGwzv6WF0yS2BtbkdlpqkmP0RrQcYqvdrE0ikDOinI8EVn8uRib0n cXYSjWNUaA5MgVtuQFoHNmBNc8EQxmdc6VrHiZ8030pCT/u6rG+pFKyQWdKT8UEl A/uGgK+nZ7Iit1h0IYPTnzuac4juxG2svgBvl9d/F1yNYuv5eEnANdO2Coi/SuUA xS1vjjB6Rq2QkH9OUFHhOt+a7E44OVutnK4INI2G+7FO78/WXGM6qEHF45h+mf2Y c0TvYOU5dKJtIJh7Qe2lRTwpH7D1YiC2DpLmgZRhHFjy/mU9CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbIfY/iQ53ZscxGpsnVcJj4xTMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM2NDI5NjQtY2JmMi0z Y2EyLTk0OTMtMmQxODJkMTlkMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqaOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRYzs6r0zJ1u2ysd6cHt8Vscq4hiJzM6Y+qo7wjuOXgCP3gnnpt5lDy ZmjwlLZ2y3ErAbW6/hEzd+YkQX5qIKsX0lDU44ckgy9aQwka+RNlFZ7PtBdhWxQF bM7UeA/cJyAWEU/VRBrN+TrouT9YX7mvHKvlSmt7Y9yXaDJwdXUeaPjPbI0nW/+8 yQLkDv6ke9k33vPXc+PFBCHmJj0QFahMcxF8htcz9MFcrh/FcjzdeswGgEQjUkVh rrVucc/DbwsF5Kx58RNfz/oP8lem+PEiG00ipSVSCmfqk9JLd6IpGZJNLwvH71mC YWaoOWuWmn7kxua255ktaa4PsfTj9h8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:47 2025 by rpki-client