$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/649b9f37-36b9-3d81-84ab-2b0a1b8e1f2e.roa File: 649b9f37-36b9-3d81-84ab-2b0a1b8e1f2e.roa (raw, json) Hash identifier: FfLK3YvJO2Fkqf2Yl3pr9bN39/PBZdJjD3wuGHtyI/4= Subject key identifier: 70:2E:0D:92:73:AF:1A:96:61:52:CF:A5:2B:65:E9:61:81:BF:96:94 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F43285848388543440E0001FA42F8DF80 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/649b9f37-36b9-3d81-84ab-2b0a1b8e1f2e.roa Signing time: Mon 16 Dec 2024 02:00:39 +0000 ROA not before: Mon 16 Dec 2024 02:00:39 +0000 ROA not after: Sun 16 Mar 2025 01:00:39 +0000 asID: 376 IP address blocks: 132.219.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:85:43:44:0e:00:01:fa:42:f8:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Dec 16 02:00:39 2024 GMT Not After : Mar 16 01:00:39 2025 GMT Subject: CN=fbaa0f9f-b450-4882-a1f1-4d2a522b2c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b1:e7:28:ef:30:47:00:db:34:61:61:d2:13: 47:7c:88:26:2d:59:a9:57:05:86:2d:4d:a0:52:f5: d4:9c:b7:64:d9:73:be:6f:58:0c:f6:7f:33:e2:94: 4f:30:9d:5e:60:00:3b:18:d6:aa:35:04:aa:86:ef: 0a:a0:8f:e2:31:50:3b:ed:a7:35:46:8b:ae:a2:85: 74:2c:2b:d5:fc:6e:b8:f8:4b:9c:28:97:7f:d3:a0: ff:89:b4:c8:41:6a:05:43:80:b9:75:2d:7a:ae:09: b7:10:a4:94:d4:12:91:a7:d1:3e:89:66:9f:ff:0c: 5a:be:b9:a9:be:09:af:87:e5:44:e0:2e:d1:5e:ed: e2:7f:d4:ac:dd:c3:82:8a:b4:08:3a:07:01:37:2c: 87:ee:48:de:58:f5:ac:aa:73:b9:97:8c:91:97:20: 16:59:5c:d6:92:15:f2:1e:f6:ab:cd:36:c5:77:7c: 07:92:28:a8:61:6e:b7:2d:c7:c8:01:79:50:e9:a7: d5:53:da:cf:53:0c:1a:09:e3:7d:df:4c:1b:e2:48: d1:c8:8b:5c:27:85:b2:b8:c8:3f:40:a0:35:88:b3: d8:9c:87:41:dd:12:28:8f:4c:56:7e:da:7a:4b:7b: d8:41:85:27:39:08:aa:33:db:81:58:de:d6:35:2b: 47:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2E:0D:92:73:AF:1A:96:61:52:CF:A5:2B:65:E9:61:81:BF:96:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/649b9f37-36b9-3d81-84ab-2b0a1b8e1f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 132.219.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:da:f1:48:1c:b6:aa:f4:82:db:31:79:82:da:2d:f6:54:f8: 0d:9f:60:93:8f:50:fd:e3:2c:8e:56:1b:eb:d9:fc:ee:99:46: c2:9e:36:bc:09:50:fb:36:74:96:ea:3d:a4:36:9d:5e:c1:1e: 39:a9:23:0c:7c:83:06:2f:31:9c:26:84:d8:dd:24:25:22:41: 47:85:60:2d:89:a1:7c:0f:2d:07:92:d2:67:5c:c3:e3:76:a8: 98:f8:68:fc:4c:7b:3d:5a:30:d9:4c:d1:38:6a:b0:0b:1b:81: d9:9e:99:85:80:d8:2a:64:89:4c:58:fb:7b:75:7b:4e:a1:d8: 6a:c9:0c:1b:eb:ea:db:07:53:88:6e:b5:b3:83:e8:3b:2e:9d: 45:6f:d9:eb:43:1c:af:c9:87:62:42:28:c0:57:12:09:da:52: 7e:47:4f:9d:24:19:44:48:c9:c7:c0:0a:9f:5b:50:ff:5e:ee: ea:ed:db:fa:a5:c9:12:7f:00:6c:e6:f6:f7:05:d9:49:13:2d: 00:07:1c:1a:ee:cb:cf:5d:de:94:c2:03:51:b7:bc:88:51:aa: 21:de:58:62:6c:e6:36:5a:49:cf:cd:2f:19:48:7b:d3:14:3d: b2:d1:40:71:bf:b1:0f:c9:c6:fc:fd:aa:6f:fb:03:5e:c3:d3: 37:59:0f:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hUNEDgAB+kL434AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZmJhYTBmOWYtYjQ1MC00ODgyLWExZjEtNGQyYTUyMmIyYzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLHnKO8wRwDbNGFh0hNHfIgmLVmpVwWGLU2g UvXUnLdk2XO+b1gM9n8z4pRPMJ1eYAA7GNaqNQSqhu8KoI/iMVA77ac1RouuooV0 LCvV/G64+EucKJd/06D/ibTIQWoFQ4C5dS16rgm3EKSU1BKRp9E+iWaf/wxavrmp vgmvh+VE4C7RXu3if9Ss3cOCirQIOgcBNyyH7kjeWPWsqnO5l4yRlyAWWVzWkhXy HvarzTbFd3wHkiioYW63LcfIAXlQ6afVU9rPUwwaCeN930wb4kjRyItcJ4WyuMg/ QKA1iLPYnIdB3RIoj0xWftp6S3vYQYUnOQiqM9uBWN7WNStH8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAuDZJzrxqWYVLPpStl6WGBv5aUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvNjQ5YjlmMzctMzZiOS0z ZDgxLTg0YWItMmIwYTFiOGUxZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhNuHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3a8Ugctqr0gtsxeYLaLfZU+A2fYJOPUP3jLI5WG+vZ/O6ZRsKeNrwJ UPs2dJbqPaQ2nV7BHjmpIwx8gwYvMZwmhNjdJCUiQUeFYC2JoXwPLQeS0mdcw+N2 qJj4aPxMez1aMNlM0ThqsAsbgdmemYWA2CpkiUxY+3t1e06h2GrJDBvr6tsHU4hu tbOD6DsunUVv2etDHK/Jh2JCKMBXEgnaUn5HT50kGURIycfACp9bUP9e7urt2/ql yRJ/AGzm9vcF2UkTLQAHHBruy89d3pTCA1G3vIhRqiHeWGJs5jZaSc/NLxlIe9MU PbLRQHG/sQ/Jxvz9qm/7A17D0zdZDz4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:14 2025 by rpki-client