$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/11a766c2-5bc6-35dc-b412-2d788c81802f.roa File: 11a766c2-5bc6-35dc-b412-2d788c81802f.roa (raw, json) Hash identifier: NK/PIScq2/HHj2UbIWpmjVQqteYr77m0sjIx9BoMntM= Subject key identifier: E1:AF:2A:44:09:4F:76:E2:55:97:BA:58:3F:7C:30:C0:F8:85:D0:DE Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F4328584812D53AD7FCBD8CE76C61E440 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/11a766c2-5bc6-35dc-b412-2d788c81802f.roa Signing time: Mon 02 Dec 2024 14:00:51 +0000 ROA not before: Mon 02 Dec 2024 14:00:51 +0000 ROA not after: Sun 02 Mar 2025 14:00:51 +0000 asID: 46238 IP address blocks: 70.37.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:12:d5:3a:d7:fc:bd:8c:e7:6c:61:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Dec 2 14:00:51 2024 GMT Not After : Mar 2 14:00:51 2025 GMT Subject: CN=cdf082ff-dcc9-4f1f-9d8e-148df3bb54e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:57:e7:0c:55:6c:48:4d:07:89:4a:c4:36:ca: 0c:23:d4:b0:3b:e8:11:aa:a2:32:e7:d2:41:47:1d: fc:09:56:7b:33:32:0d:e6:8b:4a:0f:32:17:44:f2: 1f:a0:5e:47:75:41:17:28:98:36:52:3a:c4:4c:ae: f1:f7:e1:6b:6b:d8:23:3d:57:17:db:4d:d2:f9:ff: d5:83:77:cb:0b:64:2c:be:f5:34:fa:09:7c:5d:c1: d0:ea:65:59:00:9d:17:af:d0:2a:4b:18:e2:9c:2d: 17:8c:64:9d:c5:75:b6:a8:52:7e:d0:83:cb:36:5f: 91:4e:7a:40:5c:a4:b6:1a:8c:cf:4b:83:37:2c:79: 86:c2:17:53:d7:fd:93:1b:ef:d8:88:b9:6b:3d:ce: 3b:80:bf:06:71:3e:50:31:fc:bd:c0:1c:e6:e4:c9: 0e:b4:4f:52:5f:af:f4:c1:90:c2:88:7c:1d:1d:16: 8e:bf:71:d1:8f:cd:09:6a:c1:59:f6:3f:1d:2f:28: c8:e5:3c:ea:93:a7:6e:c2:6e:d9:bd:20:90:6c:a0: d2:6a:aa:8a:3d:e4:b2:3e:5e:cb:9a:e7:ee:6a:ba: 6f:83:28:e7:70:11:75:02:c0:ea:08:da:f6:e7:09: d9:00:7c:4b:f1:80:53:2c:d9:f7:f7:7c:c2:71:1a: 74:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AF:2A:44:09:4F:76:E2:55:97:BA:58:3F:7C:30:C0:F8:85:D0:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/11a766c2-5bc6-35dc-b412-2d788c81802f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 70.37.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ce:ee:dc:38:03:af:ae:06:d0:4f:8f:7a:60:12:12:4a:17: 61:07:dd:7e:44:12:51:c7:2f:ae:29:74:62:bf:2d:85:2e:08: da:1f:ff:38:24:11:1d:bd:b0:bd:3d:72:73:7a:0e:1f:2b:98: 24:67:b5:41:05:f6:b4:fa:3b:e7:dd:94:f2:73:63:a8:71:4d: 94:d0:98:7b:80:0e:dc:e7:90:bb:c9:c8:bc:ae:be:c9:32:c2: d7:c2:3e:47:99:33:d7:3c:b1:9a:6d:0b:6a:48:30:13:86:17: 6a:c4:a7:52:0e:3b:2d:69:62:7e:30:59:98:9e:7b:d7:35:b7: 0d:c9:4b:c6:1e:2c:41:e0:ec:0b:b0:56:a0:af:62:28:b7:77: cc:29:9e:a1:e6:da:0c:f3:24:f5:8c:a3:d3:7d:f5:9a:e0:3c: 6d:e3:ed:a4:a5:05:15:7c:35:f0:73:85:e8:1b:8d:8e:5b:f7: 00:77:29:4f:0b:85:91:a3:3d:cf:1a:25:a6:fd:2d:b3:64:74: 6c:cc:cf:ce:fc:80:08:4b:1d:74:62:e5:14:b1:65:b6:1c:80: 73:a8:f7:7e:49:e5:08:3a:63:8a:ba:f6:65:e8:89:a7:22:3b: 60:a7:22:a6:4f:d5:d4:8d:81:51:22:7b:5d:0f:0c:61:31:56: a9:c5:91:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1TrX/L2M52xh5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk Y2RmMDgyZmYtZGNjOS00ZjFmLTlkOGUtMTQ4ZGYzYmI1NGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFfnDFVsSE0HiUrENsoMI9SwO+gRqqIy59JB Rx38CVZ7MzIN5otKDzIXRPIfoF5HdUEXKJg2UjrETK7x9+Fra9gjPVcX203S+f/V g3fLC2QsvvU0+gl8XcHQ6mVZAJ0Xr9AqSxjinC0XjGSdxXW2qFJ+0IPLNl+RTnpA XKS2GozPS4M3LHmGwhdT1/2TG+/YiLlrPc47gL8GcT5QMfy9wBzm5MkOtE9SX6/0 wZDCiHwdHRaOv3HRj80JasFZ9j8dLyjI5Tzqk6duwm7ZvSCQbKDSaqqKPeSyPl7L mufuarpvgyjncBF1AsDqCNr25wnZAHxL8YBTLNn393zCcRp0awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGvKkQJT3biVZe6WD98MMD4hdDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvMTFhNzY2YzItNWJjNi0z NWRjLWI0MTItMmQ3ODhjODE4MDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvO7tw4A6+uBtBPj3pgEhJKF2EH3X5EElHHL64pdGK/LYUuCNof/zgk ER29sL09cnN6Dh8rmCRntUEF9rT6O+fdlPJzY6hxTZTQmHuADtznkLvJyLyuvsky wtfCPkeZM9c8sZptC2pIMBOGF2rEp1IOOy1pYn4wWZiee9c1tw3JS8YeLEHg7Auw VqCvYii3d8wpnqHm2gzzJPWMo9N99ZrgPG3j7aSlBRV8NfBzhegbjY5b9wB3KU8L hZGjPc8aJab9LbNkdGzMz878gAhLHXRi5RSxZbYcgHOo935J5Qg6Y4q69mXoiaci O2CnIqZP1dSNgVEie10PDGExVqnFkcc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:25 2025 by rpki-client