$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/2241d61c-ed9e-3f82-8f52-309986a1176f.roa File: 2241d61c-ed9e-3f82-8f52-309986a1176f.roa (raw, json) Hash identifier: mAXjMTrrMqsbcc0kCvn4twSn+8G0e7xhZ5F25OFEK8w= Subject key identifier: 02:0E:49:F8:FD:89:95:F1:B7:E3:2B:3B:7A:B5:21:F1:F4:1E:B0:63 Certificate issuer: /CN=fdccefde-032f-46cb-9138-30e7726ea619 Certificate serial: 010D0C9F432858484C101FD66DD8E2A849B22000 Authority key identifier: 5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/2241d61c-ed9e-3f82-8f52-309986a1176f.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 14618 IP address blocks: 205.147.81.0/24 maxlen: 24 2604:f700:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:1f:d6:6d:d8:e2:a8:49:b2:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdccefde-032f-46cb-9138-30e7726ea619 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=89e0f5f3-888f-4dca-9dda-be7a1174bb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6c:cb:ab:68:12:67:18:54:68:2c:5a:81:b4: f2:94:5d:0c:3e:2f:d6:c0:eb:38:04:21:50:b0:49: 2b:e5:f3:81:53:61:e0:ee:cd:b0:f4:f5:bf:fe:72: a9:0b:a4:84:a6:be:3f:7e:d0:ea:cd:17:a2:af:60: c3:9d:ff:79:17:76:70:81:bf:50:52:1b:93:49:fe: 3d:06:85:8f:4e:cc:20:d4:94:f5:8d:d8:f2:cc:a5: 54:b8:6b:d7:ff:41:6a:9f:58:44:7c:a7:ad:72:2e: 47:91:e1:9c:9d:52:85:54:34:20:c9:66:2c:33:28: 93:3b:df:db:d3:d4:c9:c5:a6:99:0c:19:3d:65:63: 24:0f:90:ae:5b:93:ec:a3:1d:c2:4c:22:fe:7f:33: 86:c9:63:29:72:a3:5a:68:0b:9f:96:cf:37:b4:77: 5f:43:d1:ed:a1:0f:db:c0:98:94:4f:4c:c0:8a:a7: 08:2d:5b:bf:7d:9c:74:93:f6:d8:01:46:89:bb:6f: e8:3f:66:d6:0b:92:7a:ec:f1:49:fa:60:b8:1d:5d: 2b:3a:70:d2:34:d9:9b:20:6a:01:31:db:74:f9:7c: 84:82:cb:2c:97:0f:ed:db:0c:c4:29:c3:47:de:e2: 2b:06:0b:7b:1b:28:a9:35:4e:85:65:8f:96:cc:f1: 9d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0E:49:F8:FD:89:95:F1:B7:E3:2B:3B:7A:B5:21:F1:F4:1E:B0:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/2241d61c-ed9e-3f82-8f52-309986a1176f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.crl X509v3 Authority Key Identifier: keyid:5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer sbgp-ipAddrBlock: critical IPv4: 205.147.81.0/24 IPv6: 2604:f700:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6f:c5:39:f3:ba:24:e3:e9:69:48:9f:38:7c:c9:c4:b9:54: 5c:1d:c3:a4:82:fa:b8:76:42:91:fc:a4:dd:24:e6:b6:9b:68: 05:62:08:ca:6c:8b:56:2f:33:b8:ac:fd:12:07:45:aa:07:23: cf:82:5d:a0:4c:db:ce:6b:69:f9:df:19:13:43:9e:f5:c7:44: 2e:d1:d6:2d:7b:f0:ae:d6:18:ae:ae:c1:51:65:a0:8d:73:be: 32:62:cf:2b:08:5a:f9:65:bd:e5:fe:57:e0:da:9f:5c:b0:75: fa:60:4b:57:e2:9f:ef:5f:7b:ab:d8:b9:86:d4:bb:80:bd:d8: 8a:52:87:b4:b0:19:6c:38:a6:06:ac:4a:19:57:6f:8c:ee:f9: 30:a1:82:4b:e5:bf:9d:18:f0:bc:0c:34:9e:11:95:b2:0f:42: 33:0c:7e:21:cf:6d:0e:11:af:47:91:7d:0a:49:1e:f3:50:c2: 70:0c:0a:91:59:d7:a0:bb:9e:51:90:ee:23:e1:07:e1:a6:2c: bd:dd:e0:48:ec:29:bb:53:1c:15:88:1f:04:cf:65:14:46:67: 7c:47:24:b4:0b:fd:63:53:a8:66:2e:b5:d4:c5:1b:ea:9f:e7: 86:57:a6:8c:05:e8:91:67:c0:68:d1:93:be:2d:ac:03:8c:6e: 64:f7:52:20 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEhMEB/WbdjiqEmyIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRjY2VmZGUtMDMyZi00NmNiLTkxMzgtMzBlNzcyNmVh NjE5MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk ODllMGY1ZjMtODg4Zi00ZGNhLTlkZGEtYmU3YTExNzRiYjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWzLq2gSZxhUaCxagbTylF0MPi/WwOs4BCFQ sEkr5fOBU2Hg7s2w9PW//nKpC6SEpr4/ftDqzReir2DDnf95F3Zwgb9QUhuTSf49 BoWPTswg1JT1jdjyzKVUuGvX/0Fqn1hEfKetci5HkeGcnVKFVDQgyWYsMyiTO9/b 09TJxaaZDBk9ZWMkD5CuW5Psox3CTCL+fzOGyWMpcqNaaAufls83tHdfQ9HtoQ/b wJiUT0zAiqcILVu/fZx0k/bYAUaJu2/oP2bWC5J67PFJ+mC4HV0rOnDSNNmbIGoB Mdt0+XyEgssslw/t2wzEKcNH3uIrBgt7GyipNU6FZY+WzPGdTQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAIOSfj9iZXxt+MrO3q1IfH0HrBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGNj ZWZkZS0wMzJmLTQ2Y2ItOTEzOC0zMGU3NzI2ZWE2MTkvMjI0MWQ2MWMtZWQ5ZS0z ZjgyLThmNTItMzA5OTg2YTExNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRjY2VmZGUtMDMyZi00NmNiLTkx MzgtMzBlNzcyNmVhNjE5L2ZkY2NlZmRlLTAzMmYtNDZjYi05MTM4LTMwZTc3MjZl YTYxOS5jcmwwHwYDVR0jBBgwFoAUWqUackcgNHuI3y9yCbu0gYTNeCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGNjZWZkZS0wMzJmLTQ2Y2ItOTEzOC0zMGU3 NzI2ZWE2MTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzZNRMA8E AgACMAkDBwAmBPcAAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMW/FOfO6JOPpaUifOHzJxLlUXB3DpIL6 uHZCkfyk3STmtptoBWIIymyLVi8zuKz9EgdFqgcjz4JdoEzbzmtp+d8ZE0Oe9cdE LtHWLXvwrtYYrq7BUWWgjXO+MmLPKwha+WW95f5X4NqfXLB1+mBLV+Kf7197q9i5 htS7gL3YilKHtLAZbDimBqxKGVdvjO75MKGCS+W/nRjwvAw0nhGVsg9CMwx+Ic9t DhGvR5F9Ckke81DCcAwKkVnXoLueUZDuI+EH4aYsvd3gSOwpu1McFYgfBM9lFEZn fEcktAv9Y1OoZi611MUb6p/nhlemjAXokWfAaNGTvi2sA4xuZPdSIA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:02 2025 by rpki-client