$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa File: cd834625-5e03-3003-a219-1f2ecf641d36.roa (raw, json) Hash identifier: xq3wE4Fkbleq1mcaBixBnxa1GdKDbMXdP4Yvy595W3U= Subject key identifier: E2:FD:00:D4:7A:5A:98:93:11:0F:B0:80:30:C8:A1:3E:A3:4D:CD:18 Certificate issuer: /CN=da6a16ad-9697-4d95-a04c-86394f7b78c8 Certificate serial: 010D0C9F43285848424AD1FCDC5BEC0907A6E840 Authority key identifier: F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa Signing time: Thu 19 Dec 2024 14:00:52 +0000 ROA not before: Thu 19 Dec 2024 14:00:52 +0000 ROA not after: Wed 19 Mar 2025 13:00:52 +0000 asID: 16509 IP address blocks: 204.10.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:4a:d1:fc:dc:5b:ec:09:07:a6:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6a16ad-9697-4d95-a04c-86394f7b78c8 Validity Not Before: Dec 19 14:00:52 2024 GMT Not After : Mar 19 13:00:52 2025 GMT Subject: CN=4f5c016f-c429-45d5-9146-cf8ae0ec39ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9f:2b:06:8d:6a:01:a1:37:98:62:65:b6:2c: d1:d5:77:ad:90:68:25:d1:50:c5:32:17:5f:01:ed: ad:d4:6d:c7:66:7d:65:fd:d8:35:3a:1b:df:ab:ef: 64:e2:e6:be:2c:4d:51:f8:ca:12:ba:2f:9b:c3:b4: ec:30:f6:14:68:80:e7:c0:64:e5:b1:2a:ad:c1:50: f0:97:22:bf:70:54:9a:e4:ea:36:39:a5:b6:72:64: a8:63:87:23:74:78:13:5a:f0:54:0f:22:ab:4b:7f: b1:93:5f:b6:91:b2:78:bb:bc:54:c1:4a:e8:96:c7: 12:15:ab:5a:68:41:de:ec:61:bc:23:e1:ff:15:7f: b2:c2:5e:d1:d6:13:37:7f:34:89:19:79:2a:f1:c5: ff:5a:a6:d7:07:8e:54:2a:f4:47:83:45:b4:9d:74: ef:17:1f:93:79:07:d3:fc:1a:a5:dc:c6:0a:34:b3: 4e:ca:a4:65:4f:b2:c1:92:b4:47:2a:3e:89:9d:5e: 79:3c:b0:58:e8:b1:f4:64:14:98:e7:0d:8c:02:3a: 61:ce:e9:e2:5b:eb:c2:55:57:08:30:3f:91:18:41: a9:7a:74:a5:9c:d3:45:6c:0a:8b:6d:4d:6f:8e:58: 6d:4f:18:43:8b:5e:73:ba:c7:ee:59:18:c7:57:f0: e6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FD:00:D4:7A:5A:98:93:11:0F:B0:80:30:C8:A1:3E:A3:4D:CD:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.crl X509v3 Authority Key Identifier: keyid:F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer sbgp-ipAddrBlock: critical IPv4: 204.10.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:26:16:90:8a:c3:a4:1a:fc:5a:9a:6e:87:9e:71:3c:06:72: 65:38:60:23:b0:2e:cb:bb:8c:2b:45:1c:6e:c3:57:81:b4:7a: 34:dc:c8:22:30:fd:13:fd:85:c2:04:d5:e2:57:fe:56:40:35: fb:9d:a1:d7:77:77:c4:70:d6:cf:77:01:ce:e9:74:57:19:f5: 27:82:df:6e:4c:4f:e9:94:79:b5:05:77:9d:28:81:57:8c:38: 5e:5e:c2:fc:09:ae:84:b5:69:25:d8:d7:10:f3:32:0a:1a:ac: 1a:34:0b:1c:da:41:26:ab:05:67:98:8e:54:1d:fe:87:98:43: a9:bc:f2:80:be:77:2e:9f:9e:79:ce:b0:40:5b:95:ac:bc:88: 75:78:96:67:97:25:16:62:57:24:9e:a9:da:73:71:16:42:1e: 90:65:f7:0e:a1:74:7e:79:f1:3a:46:98:ef:34:ca:8a:06:4a: 74:3b:ab:b4:0c:a1:d9:38:4a:7d:5a:61:c0:cd:2e:8b:18:d0: a8:a3:bb:63:58:b3:df:90:3c:50:e9:84:e3:f0:a7:ab:6c:27: 41:3b:f0:e6:fa:0b:62:d8:09:6b:41:34:0f:9f:d2:ff:83:d3: 27:af:53:bb:05:74:ad:f1:64:0c:53:2c:e7:43:27:59:62:68: fe:d0:8e:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCStH83FvsCQem6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2YTE2YWQtOTY5Ny00ZDk1LWEwNGMtODYzOTRmN2I3 OGM4MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk NGY1YzAxNmYtYzQyOS00NWQ1LTkxNDYtY2Y4YWUwZWMzOWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq58rBo1qAaE3mGJltizR1XetkGgl0VDFMhdf Ae2t1G3HZn1l/dg1Ohvfq+9k4ua+LE1R+MoSui+bw7TsMPYUaIDnwGTlsSqtwVDw lyK/cFSa5Oo2OaW2cmSoY4cjdHgTWvBUDyKrS3+xk1+2kbJ4u7xUwUrolscSFata aEHe7GG8I+H/FX+ywl7R1hM3fzSJGXkq8cX/WqbXB45UKvRHg0W0nXTvFx+TeQfT /Bql3MYKNLNOyqRlT7LBkrRHKj6JnV55PLBY6LH0ZBSY5w2MAjphzuniW+vCVVcI MD+RGEGpenSlnNNFbAqLbU1vjlhtTxhDi15zusfuWRjHV/DmswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOL9ANR6WpiTEQ+wgDDIoT6jTc0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTZh MTZhZC05Njk3LTRkOTUtYTA0Yy04NjM5NGY3Yjc4YzgvY2Q4MzQ2MjUtNWUwMy0z MDAzLWEyMTktMWYyZWNmNjQxZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGE2YTE2YWQtOTY5Ny00ZDk1LWEw NGMtODYzOTRmN2I3OGM4L2RhNmExNmFkLTk2OTctNGQ5NS1hMDRjLTg2Mzk0Zjdi NzhjOC5jcmwwHwYDVR0jBBgwFoAU9GfqmmCwnE5urS68W5wIlLqmBFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTZhMTZhZC05Njk3LTRkOTUtYTA0Yy04NjM5 NGY3Yjc4YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzApgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANImFpCKw6Qa/FqaboeecTwGcmU4YCOwLsu7jCtFHG7DV4G0ejTcyCIw /RP9hcIE1eJX/lZANfudodd3d8Rw1s93Ac7pdFcZ9SeC325MT+mUebUFd50ogVeM OF5ewvwJroS1aSXY1xDzMgoarBo0CxzaQSarBWeYjlQd/oeYQ6m88oC+dy6fnnnO sEBblay8iHV4lmeXJRZiVySeqdpzcRZCHpBl9w6hdH558TpGmO80yooGSnQ7q7QM odk4Sn1aYcDNLosY0Kiju2NYs9+QPFDphOPwp6tsJ0E78Ob6C2LYCWtBNA+f0v+D 0yevU7sFdK3xZAxTLOdDJ1liaP7Qjss= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:43 2025 by rpki-client