$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa File: 0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa (raw, json) Hash identifier: DwgNazMTya2RPZEU61JMpjfacQz2OfOcDcoC+6RKWYM= Subject key identifier: D5:C7:97:FF:BB:41:87:8F:73:8E:5F:13:74:F3:0D:56:33:43:C9:9C Certificate issuer: /CN=e699b02b-ca04-4557-94f4-189989d49ccd Certificate serial: 010D0C9F432858483E1AAF5B400DF66AE9DBE588 Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 16509 IP address blocks: 72.18.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:af:5b:40:0d:f6:6a:e9:db:e5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=ea15bee9-3738-4484-95cf-1e61eac66b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:e7:17:d1:4c:15:23:97:9e:42:da:ac:8d: 62:64:22:c9:db:52:ce:d0:96:a1:da:da:87:6a:bc: c6:e1:0a:97:27:7e:ae:e4:c1:13:0c:6d:50:eb:22: 9c:3c:45:47:93:a4:d3:2f:8d:04:46:95:00:1d:5f: 10:b1:59:7b:29:3d:24:89:fd:f9:43:e0:e9:07:4b: 9c:46:58:fd:0d:b7:d0:c3:23:b8:65:7e:08:6e:20: 03:ab:52:fe:2c:81:8a:83:99:9e:d7:ee:20:53:44: 82:00:4d:13:72:57:00:f5:e0:24:80:bf:af:4c:3c: 46:9b:32:d6:09:4e:c5:81:e0:aa:5e:d9:99:d5:1f: fe:d9:01:9a:78:b0:ab:06:19:41:dd:c8:5c:41:ae: 78:4e:78:3d:d1:f6:55:40:6f:e3:48:88:c4:ae:43: 86:0a:58:0b:71:7a:c5:90:bb:f3:74:77:98:2d:7a: 0e:92:59:c3:4b:56:24:50:71:aa:48:a5:20:af:bd: 23:87:f4:6a:e4:65:56:c1:d3:c5:a1:91:89:bc:76: bf:9f:8a:ee:1b:56:8d:c2:f6:9f:ea:52:2b:a2:03: 8d:01:38:87:6e:a0:12:cd:b9:af:d4:37:34:59:18: 6d:85:07:59:e8:44:70:f4:0c:65:11:01:d2:a0:24: 0c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C7:97:FF:BB:41:87:8F:73:8E:5F:13:74:F3:0D:56:33:43:C9:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl X509v3 Authority Key Identifier: keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer sbgp-ipAddrBlock: critical IPv4: 72.18.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:81:c9:ec:9a:07:fe:39:0a:fb:9b:c1:8b:96:e1:c8:06:a3: cc:36:52:4d:b9:e9:72:b8:d0:6f:ba:91:d4:e5:23:de:df:3e: 31:72:90:ce:66:34:54:c5:4f:bb:52:f1:61:f5:b8:38:59:ea: 79:47:78:1f:7c:9b:95:03:e9:6b:4b:33:8c:61:22:28:85:0d: 4d:db:5c:0f:91:b6:fb:d9:87:e4:75:e7:cd:53:7e:5d:5e:66: 27:f7:a3:e0:f8:a0:81:5b:47:2d:a0:40:ce:f4:89:d3:ff:b1: 90:ff:cc:ee:8f:71:67:3e:04:9a:9c:e5:db:eb:0a:8b:ac:8e: 33:35:6a:2a:7e:ab:cb:11:1a:8e:09:36:d8:49:e3:dd:38:c2: 89:2a:ef:d8:4c:9e:20:81:68:ea:2c:59:30:d7:3a:27:3c:ba: 4a:7a:bb:11:23:27:d5:0f:39:45:10:ca:cd:aa:96:2f:f1:3c: f3:c5:5a:81:9f:16:43:d0:35:c7:05:18:72:1d:8b:a6:d5:9c: cb:5b:5c:11:ad:bc:a4:9e:c3:5e:75:ce:45:19:c9:ad:42:d1: c4:e1:7a:61:23:28:17:9b:6f:8c:e1:49:be:5b:3d:83:c9:42: 9d:3f:fd:52:8d:cc:cd:1f:7c:32:29:ec:94:71:db:e3:60:8a: 6e:29:87:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+Gq9bQA32aunb5YgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY5OWIwMmItY2EwNC00NTU3LTk0ZjQtMTg5OTg5ZDQ5 Y2NkMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk ZWExNWJlZTktMzczOC00NDg0LTk1Y2YtMWU2MWVhYzY2YjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRrnF9FMFSOXnkLarI1iZCLJ21LO0Jah2tqH arzG4QqXJ36u5METDG1Q6yKcPEVHk6TTL40ERpUAHV8QsVl7KT0kif35Q+DpB0uc Rlj9DbfQwyO4ZX4IbiADq1L+LIGKg5me1+4gU0SCAE0TclcA9eAkgL+vTDxGmzLW CU7FgeCqXtmZ1R/+2QGaeLCrBhlB3chcQa54Tng90fZVQG/jSIjErkOGClgLcXrF kLvzdHeYLXoOklnDS1YkUHGqSKUgr70jh/Rq5GVWwdPFoZGJvHa/n4ruG1aNwvaf 6lIrogONATiHbqASzbmv1Dc0WRhthQdZ6ERw9AxlEQHSoCQMLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXHl/+7QYePc45fE3TzDVYzQ8mcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5 YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5ODlkNDljY2QvMGMzMTlmMWYtNDk3Mi0z ZWRlLWJlMTAtMjk5YzhhMWNkN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTY5OWIwMmItY2EwNC00NTU3LTk0 ZjQtMTg5OTg5ZDQ5Y2NkL2U2OTliMDJiLWNhMDQtNDU1Ny05NGY0LTE4OTk4OWQ0 OWNjZC5jcmwwHwYDVR0jBBgwFoAUXq+Y0QCDzSh9pkhSkMpB2+xuMXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5 ODlkNDljY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBJNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICByeyaB/45CvubwYuW4cgGo8w2Uk256XK40G+6kdTlI97fPjFykM5m NFTFT7tS8WH1uDhZ6nlHeB98m5UD6WtLM4xhIiiFDU3bXA+RtvvZh+R1581Tfl1e Zif3o+D4oIFbRy2gQM70idP/sZD/zO6PcWc+BJqc5dvrCousjjM1aip+q8sRGo4J NthJ4904wokq79hMniCBaOosWTDXOic8ukp6uxEjJ9UPOUUQys2qli/xPPPFWoGf FkPQNccFGHIdi6bVnMtbXBGtvKSew151zkUZya1C0cThemEjKBebb4zhSb5bPYPJ Qp0//VKNzM0ffDIp7JRx2+Ngim4ph/I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:08 2025 by rpki-client