$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/2428c353-c4d1-359c-b8d8-9f2d3be3aac0.roa File: 2428c353-c4d1-359c-b8d8-9f2d3be3aac0.roa (raw, json) Hash identifier: sYxx8/mRI6+mkcZZxky1zj+SPMJ+ROfxP2Wm7P0W7+k= Subject key identifier: DD:7C:55:F3:E4:87:16:1C:64:49:29:B1:4C:E6:AB:41:B5:59:28:96 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F432858484D75915AF30328A73AB104C0 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/2428c353-c4d1-359c-b8d8-9f2d3be3aac0.roa Signing time: Mon 23 Dec 2024 14:00:51 +0000 ROA not before: Mon 23 Dec 2024 14:00:51 +0000 ROA not after: Sun 23 Mar 2025 13:00:51 +0000 asID: 393740 IP address blocks: 206.180.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:75:91:5a:f3:03:28:a7:3a:b1:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Dec 23 14:00:51 2024 GMT Not After : Mar 23 13:00:51 2025 GMT Subject: CN=a1ba80f0-ecd3-4c00-a44c-e69abe159b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fd:0e:a6:3a:6c:6a:32:3c:84:5f:bf:7a:b7: ce:a3:db:53:c7:ee:59:74:a1:95:f7:da:b9:3d:90: 3b:4f:d0:a8:38:1f:e3:67:fb:dd:fa:50:db:98:40: bf:2b:53:f2:96:4b:15:23:2a:df:1f:e7:ce:29:78: 10:dc:56:7b:80:a9:d3:1e:02:5d:bf:51:ce:f7:8d: b5:c0:04:14:9a:c6:2a:c6:e4:fc:3f:ae:1f:c8:0a: 77:f4:69:eb:e5:12:22:cb:c8:6a:a6:23:5e:e3:8a: 6c:0d:90:1e:8a:56:39:3f:0e:cf:47:37:90:74:eb: a7:11:ba:c5:89:fb:d3:96:e1:d9:86:6d:c8:24:3f: 2d:ca:b1:9e:b3:85:29:2b:ca:ba:3a:a6:26:36:cc: 6b:e3:a5:b7:25:34:e2:3a:69:28:b9:3f:78:6a:99: a1:71:89:58:04:0f:df:f7:2b:60:0d:01:bf:78:88: 6f:6e:9a:fe:f8:f2:b3:9e:25:f9:00:d4:3e:dd:27: 98:32:fc:1f:94:30:3e:94:76:d9:16:e6:21:87:76: 87:98:af:d0:83:ab:a8:e7:68:ce:b6:3c:f9:f9:fd: f7:7f:cf:d8:af:08:d7:84:54:f7:ae:a1:dd:bd:14: 56:73:ed:be:56:7a:09:67:08:08:11:4f:a4:5f:57: da:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7C:55:F3:E4:87:16:1C:64:49:29:B1:4C:E6:AB:41:B5:59:28:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/2428c353-c4d1-359c-b8d8-9f2d3be3aac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 206.180.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7c:b1:3f:93:c8:dc:02:ba:8c:8b:dc:2e:f3:92:29:74:6a: f4:1c:b0:38:b7:d5:04:f6:44:da:71:a0:b3:c0:04:94:27:b4: dd:25:15:b0:2f:8e:a9:69:cd:2e:9b:0f:23:ea:76:02:1c:2d: 0f:00:97:62:39:63:0b:6e:26:81:ae:d8:da:ce:24:fe:a8:8b: 03:7d:fd:20:4b:0d:3f:23:2a:fc:f2:3f:9c:ae:55:46:46:36: 1f:62:01:d1:0e:8f:8e:ff:bc:47:e1:01:10:d1:88:12:a6:e1: 59:05:11:ef:29:e1:5a:3b:9b:bb:d6:3a:25:7b:de:ee:5f:8f: 43:a6:55:46:0f:7c:70:0e:a8:5b:ff:e4:5a:4b:1c:51:4a:49: 4a:ee:e7:9c:3e:1c:67:a6:50:b1:6b:bf:03:af:ab:4c:7f:86: c8:c4:fe:f6:e4:98:8d:2c:c1:1b:2d:39:0b:9c:6c:0e:74:b7: 33:2f:b0:36:a2:7f:50:ba:a1:2a:33:c4:36:51:94:4b:3c:8c: 3e:21:eb:93:a6:6f:7c:2a:c9:57:2b:bf:d5:28:8a:8c:96:95: af:02:2c:45:0a:b6:58:b6:0f:ab:41:c7:be:15:18:4c:19:aa: 97:ed:0e:b3:0d:10:e7:38:81:28:b1:bf:fe:12:e6:59:12:e7: c9:e9:f2:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdZFa8wMopzqxBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk YTFiYTgwZjAtZWNkMy00YzAwLWE0NGMtZTY5YWJlMTU5YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf0OpjpsajI8hF+/erfOo9tTx+5ZdKGV99q5 PZA7T9CoOB/jZ/vd+lDbmEC/K1PylksVIyrfH+fOKXgQ3FZ7gKnTHgJdv1HO9421 wAQUmsYqxuT8P64fyAp39Gnr5RIiy8hqpiNe44psDZAeilY5Pw7PRzeQdOunEbrF ifvTluHZhm3IJD8tyrGes4UpK8q6OqYmNsxr46W3JTTiOmkouT94apmhcYlYBA/f 9ytgDQG/eIhvbpr++PKzniX5ANQ+3SeYMvwflDA+lHbZFuYhh3aHmK/Qg6uo52jO tjz5+f33f8/YrwjXhFT3rqHdvRRWc+2+VnoJZwgIEU+kX1faPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN18VfPkhxYcZEkpsUzmq0G1WSiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvMjQyOGMzNTMtYzRkMS0z NTljLWI4ZDgtOWYyZDNiZTNhYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzrSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV8sT+TyNwCuoyL3C7zkil0avQcsDi31QT2RNpxoLPABJQntN0lFbAv jqlpzS6bDyPqdgIcLQ8Al2I5YwtuJoGu2NrOJP6oiwN9/SBLDT8jKvzyP5yuVUZG Nh9iAdEOj47/vEfhARDRiBKm4VkFEe8p4Vo7m7vWOiV73u5fj0OmVUYPfHAOqFv/ 5FpLHFFKSUru55w+HGemULFrvwOvq0x/hsjE/vbkmI0swRstOQucbA50tzMvsDai f1C6oSozxDZRlEs8jD4h65Omb3wqyVcrv9UoioyWla8CLEUKtli2D6tBx74VGEwZ qpftDrMNEOc4gSixv/4S5lkS58np8lY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:53 2025 by rpki-client