$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/daa3984a-971f-369a-8b1b-16e8e5227f04.roa File: daa3984a-971f-369a-8b1b-16e8e5227f04.roa (raw, json) Hash identifier: tX2QmZSAJZWyyUZn5Hr58CcCoLwMibK9ALBXypLclns= Subject key identifier: E0:04:A3:FD:CA:93:41:90:C4:31:7C:14:B9:D1:50:E3:C7:04:E5:CA Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F432858482AD1C3D3D29823E887740990 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/daa3984a-971f-369a-8b1b-16e8e5227f04.roa Signing time: Wed 11 Dec 2024 04:13:29 +0000 ROA not before: Wed 11 Dec 2024 04:13:29 +0000 ROA not after: Tue 11 Mar 2025 03:13:29 +0000 asID: 137283 IP address blocks: 107.151.248.0/22 maxlen: 24 198.44.166.0/23 maxlen: 24 198.44.168.0/23 maxlen: 24 198.44.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2a:d1:c3:d3:d2:98:23:e8:87:74:09:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Dec 11 04:13:29 2024 GMT Not After : Mar 11 03:13:29 2025 GMT Subject: CN=a0eba7f7-cbd7-4a24-8d35-d46146a2cc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:c6:ba:c7:aa:19:c9:39:52:cb:51:fa:d6: 78:70:12:14:70:85:12:7e:2c:2d:80:5d:97:7e:79: 11:61:f6:a1:85:29:15:53:07:74:cb:95:d1:b5:bb: 63:5c:fb:98:67:8c:9c:6a:a1:f0:63:32:c8:39:2c: 0b:2b:bb:9e:7c:b5:ee:85:3d:3d:ed:33:a5:01:c1: cd:16:80:97:e0:49:99:e7:61:de:59:92:39:3b:de: ee:1b:70:23:53:d2:b7:13:df:85:2e:66:be:c3:76: bb:fe:d6:8d:57:06:01:f9:d7:78:07:c2:ca:2e:d1: 58:56:84:d1:ed:39:23:4e:7d:f8:56:90:67:f7:14: f9:0b:3b:8f:8c:54:0c:d0:e2:b1:e2:0f:fd:d1:17: e2:46:ba:18:53:65:76:b1:6e:2d:35:7f:1c:0d:11: 4d:7b:66:de:0d:a4:3e:ee:50:ab:b6:8e:f3:00:9c: 55:f9:7d:8a:6c:c4:3e:40:3f:ee:02:71:bb:2d:85: ae:33:ef:00:f4:f8:53:20:68:7f:70:f3:dc:93:68: 07:5d:de:1e:7b:cb:16:92:32:6d:f5:17:7f:09:5b: 73:f0:7d:23:b3:99:00:16:75:68:83:26:ba:6e:51: 02:32:7a:19:8d:56:1b:a7:e7:de:65:2e:4a:9f:71: 53:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:04:A3:FD:CA:93:41:90:C4:31:7C:14:B9:D1:50:E3:C7:04:E5:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/daa3984a-971f-369a-8b1b-16e8e5227f04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.248.0/22 198.44.166.0-198.44.169.255 198.44.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:7e:b2:8c:bc:03:a3:9d:68:3d:87:71:c5:ac:46:ac:27:42: c7:7f:0d:e3:35:b0:91:a8:a2:83:6a:bd:bd:08:5b:e3:4a:bf: 2a:2a:47:f2:71:55:38:95:11:4e:4e:86:45:36:5b:99:66:53: bf:ce:eb:1e:b8:bd:26:7b:30:b4:d0:22:5c:f0:97:ca:dc:e8: 20:ae:33:4a:2e:bf:c6:25:55:fe:38:44:58:6d:61:c4:14:a9: 42:77:38:4a:97:a3:c3:b4:8d:d5:be:25:48:db:02:68:b8:bf: bb:0c:da:2d:b8:12:1b:91:f3:b4:ac:0b:d3:c1:18:12:79:6c: ea:3a:82:2a:5b:74:6a:5c:70:71:c9:24:d5:0f:6d:11:19:42: be:8e:40:82:23:c6:1e:dd:b9:14:0c:69:a1:f2:74:f6:fa:f7: 9b:3c:91:60:f3:37:9b:d0:72:43:56:56:7e:99:78:38:7c:86: 3e:21:0f:69:0a:0a:f8:21:7e:39:d2:78:2e:b8:e8:ac:d8:0e: d2:84:29:2b:9f:d9:31:d5:3c:cf:7c:89:60:1a:46:08:9a:ef: 5e:e4:5d:81:3b:f3:11:61:20:1a:1b:94:4b:b1:84:de:d0:d3: 14:74:de:86:b8:1c:75:de:99:3c:d3:a8:84:98:32:1d:1b:86: c0:38:cf:b7 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEgq0cPT0pgj6Id0CZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI0MTIxMTA0MTMyOVoXDTI1MDMxMTAzMTMyOVowLzEtMCsGA1UEAxMk YTBlYmE3ZjctY2JkNy00YTI0LThkMzUtZDQ2MTQ2YTJjYzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5DGuseqGck5UstR+tZ4cBIUcIUSfiwtgF2X fnkRYfahhSkVUwd0y5XRtbtjXPuYZ4ycaqHwYzLIOSwLK7uefLXuhT097TOlAcHN FoCX4EmZ52HeWZI5O97uG3AjU9K3E9+FLma+w3a7/taNVwYB+dd4B8LKLtFYVoTR 7TkjTn34VpBn9xT5CzuPjFQM0OKx4g/90RfiRroYU2V2sW4tNX8cDRFNe2beDaQ+ 7lCrto7zAJxV+X2KbMQ+QD/uAnG7LYWuM+8A9PhTIGh/cPPck2gHXd4ee8sWkjJt 9Rd/CVtz8H0js5kAFnVogya6blECMnoZjVYbp+feZS5Kn3FT0QIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFOAEo/3Kk0GQxDF8FLnRUOPHBOXKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZGFhMzk4NGEtOTcxZi0z NjlhLThiMWItMTZlOGU1MjI3ZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCa5f4MAwD BAHGLKYDBAHGLKgDBALGLLgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfn6yjLwDo51oPYdxxaxGrCdCx38N 4zWwkaiig2q9vQhb40q/KipH8nFVOJURTk6GRTZbmWZTv87rHri9JnswtNAiXPCX ytzoIK4zSi6/xiVV/jhEWG1hxBSpQnc4Spejw7SN1b4lSNsCaLi/uwzaLbgSG5Hz tKwL08EYEnls6jqCKlt0alxwcckk1Q9tERlCvo5AgiPGHt25FAxpofJ09vr3mzyR YPM3m9ByQ1ZWfpl4OHyGPiEPaQoK+CF+OdJ4LrjorNgO0oQpK5/ZMdU8z3yJYBpG CJrvXuRdgTvzEWEgGhuUS7GE3tDTFHTehrgcdd6ZPNOohJgyHRuGwDjPtw== -----END CERTIFICATE-----Generated at Sat Feb 22 04:38:44 2025 by rpki-client