$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f00a0eae-8a29-37a2-9ebf-e61141ce003a.roa File: f00a0eae-8a29-37a2-9ebf-e61141ce003a.roa (raw, json) Hash identifier: 8OnYjIEGFrtFz78ZDk7dy7QiZZWamR4Iw6O5XpeB+O0= Subject key identifier: F7:89:56:2D:7F:A5:68:F5:43:A1:5B:7A:75:A3:C2:A4:94:01:C8:38 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858482D5AA4C2D27830E3ADE887B0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f00a0eae-8a29-37a2-9ebf-e61141ce003a.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 22773 IP address blocks: 72.196.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:a4:c2:d2:78:30:e3:ad:e8:87:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=27f92cd6-f1ea-444c-91ea-06d5490c2ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:22:33:b0:d4:17:24:54:33:a6:78:de:8f:6f: 0b:fb:a7:77:86:c3:cf:97:bb:29:ec:1f:a2:84:5d: a6:d0:88:4c:51:25:f6:b3:66:cf:50:32:b8:4a:8b: c4:b8:ce:3f:1b:d0:85:18:b3:80:07:e7:b0:f8:0e: 8e:9d:44:a9:9b:29:7c:de:da:44:f5:5e:1f:4a:5d: c1:e1:14:37:57:c7:26:fd:71:97:19:bd:1c:12:b1: 0b:c9:5d:58:9e:fd:ed:89:dd:3e:39:48:9b:ea:c6: 39:ee:8e:1b:27:6c:84:3a:4b:1d:a8:b7:cc:60:94: 58:55:66:aa:42:75:0c:d5:5e:66:a9:e4:d1:5b:8e: a8:28:49:21:ba:c6:68:f2:fd:a6:7d:25:35:12:9c: c6:11:6c:7b:11:b8:8c:85:a9:a6:32:04:74:f6:77: 86:cd:a3:35:c8:bb:c3:2b:6e:27:bb:5f:af:4c:cc: 55:c7:67:a4:a3:1e:8a:e1:fa:c4:25:52:8a:49:17: dd:0a:5e:5a:26:98:e5:97:a5:92:f5:cd:b2:2c:10: e0:1b:4f:94:05:b9:3b:36:2c:91:e2:de:5b:aa:90: 2d:99:58:14:ea:6a:6c:30:35:c0:d8:8d:e0:e6:8d: 67:c9:87:dc:f0:54:35:51:a6:9a:d9:34:02:1a:43: e5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:89:56:2D:7F:A5:68:F5:43:A1:5B:7A:75:A3:C2:A4:94:01:C8:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f00a0eae-8a29-37a2-9ebf-e61141ce003a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.196.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b6:a9:64:a3:3a:15:cd:d3:2b:dd:17:7a:2a:8b:34:91:41: 9d:80:30:64:dd:62:41:fe:2e:7e:db:e5:40:c6:90:13:6a:6b: fc:37:99:bf:50:c0:1e:a8:f1:7a:35:9a:0d:3a:81:63:8b:a1: 0a:66:f5:cb:98:f9:01:c9:01:41:c9:6d:4c:90:94:6f:0c:4b: f0:db:a4:02:2c:92:4c:81:73:f0:2a:86:7e:d8:fc:57:4b:ca: ca:09:f5:b0:92:a2:ef:fd:00:70:35:12:54:65:df:e4:69:c5: 17:05:8f:a4:2e:96:f0:54:f6:b3:75:df:83:c0:6c:d2:1a:70: 1e:65:f3:66:ad:c1:4e:69:77:10:d3:2d:3d:a6:b2:28:8a:89: d1:e0:55:8d:ec:34:a5:be:ce:0e:43:e9:2c:60:82:68:cd:96: 27:dd:d5:9c:e8:06:91:11:96:66:d4:1e:0d:fc:d2:93:cc:40: 1f:fb:35:95:08:d1:ec:ef:f3:82:89:bb:65:04:33:bb:11:6a: 83:1d:17:aa:02:1c:3e:38:31:60:8a:a6:e0:80:d6:4f:29:b4: 34:b8:98:75:ad:c0:9f:1e:e3:91:9e:43:19:eb:b7:59:d5:e5: cb:53:20:57:ce:aa:92:df:b7:6f:cc:e0:47:f2:26:a7:54:5d: a9:67:bc:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWqTC0ngw463oh7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk MjdmOTJjZDYtZjFlYS00NDRjLTkxZWEtMDZkNTQ5MGMyYWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyIzsNQXJFQzpnjej28L+6d3hsPPl7sp7B+i hF2m0IhMUSX2s2bPUDK4SovEuM4/G9CFGLOAB+ew+A6OnUSpmyl83tpE9V4fSl3B 4RQ3V8cm/XGXGb0cErELyV1Ynv3tid0+OUib6sY57o4bJ2yEOksdqLfMYJRYVWaq QnUM1V5mqeTRW46oKEkhusZo8v2mfSU1EpzGEWx7EbiMhammMgR09neGzaM1yLvD K24nu1+vTMxVx2ekox6K4frEJVKKSRfdCl5aJpjll6WS9c2yLBDgG0+UBbk7NiyR 4t5bqpAtmVgU6mpsMDXA2I3g5o1nyYfc8FQ1Uaaa2TQCGkPltQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeJVi1/pWj1Q6FbenWjwqSUAcg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjAwYTBlYWUtOGEyOS0z N2EyLTllYmYtZTYxMTQxY2UwMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu2qWSjOhXN0yvdF3oqizSRQZ2AMGTdYkH+Ln7b5UDGkBNqa/w3mb9Q wB6o8Xo1mg06gWOLoQpm9cuY+QHJAUHJbUyQlG8MS/DbpAIskkyBc/Aqhn7Y/FdL ysoJ9bCSou/9AHA1ElRl3+RpxRcFj6QulvBU9rN134PAbNIacB5l82atwU5pdxDT LT2msiiKidHgVY3sNKW+zg5D6SxggmjNlifd1ZzoBpERlmbUHg380pPMQB/7NZUI 0ezv84KJu2UEM7sRaoMdF6oCHD44MWCKpuCA1k8ptDS4mHWtwJ8e45GeQxnrt1nV 5ctTIFfOqpLft2/M4EfyJqdUXalnvHw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:21 2025 by rpki-client