$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/b0717bf9-d2d0-328e-b7cf-04ba8c087bf2.roa File: b0717bf9-d2d0-328e-b7cf-04ba8c087bf2.roa (raw, json) Hash identifier: N6vzbvkmvjfzmtjIBM+WKT2T1dqA788a26PO/qHMtw4= Subject key identifier: 35:61:63:73:22:7C:D7:4D:EB:A4:3D:B4:50:BD:13:B4:6B:83:04:82 Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b Certificate serial: 010D0C9F432858488AE0A70A7D8C49C2CEA8D900 Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/b0717bf9-d2d0-328e-b7cf-04ba8c087bf2.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 109 IP address blocks: 192.133.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:a7:0a:7d:8c:49:c2:ce:a8:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=f544102f-b3b1-4568-bb2a-cb9595730035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:82:09:51:46:ff:e6:af:96:42:42:9e:6d:c1: 05:af:31:0d:a6:6a:4d:80:cf:e3:3f:1b:2a:fa:55: 8e:ad:80:cd:80:12:a5:67:c1:39:20:e8:a0:76:22: 0c:c4:88:cf:3d:ba:ed:ce:52:dd:57:c7:eb:5c:be: 51:6a:4b:08:67:52:1a:b9:1c:84:9f:fa:4b:5e:6b: b0:71:f7:4e:51:5a:be:69:af:26:a2:62:5e:be:16: 07:4f:b8:c4:97:2d:d4:0b:38:a6:99:ef:56:24:75: 05:2d:b4:dc:01:7d:63:20:d2:d0:c4:b4:c5:61:26: f6:0b:0e:58:c7:ca:bd:b7:eb:9b:71:eb:b8:4c:9a: 09:2b:38:22:a8:05:53:ee:07:62:0a:29:2c:3e:b8: 40:a4:fd:5a:21:88:80:93:29:8d:35:ba:fe:b6:b1: ba:8d:c3:86:0a:73:84:22:0b:58:02:1e:84:86:d2: fc:82:41:67:a1:60:a7:8b:86:a0:47:57:68:b5:5d: a4:93:f4:3a:0f:9a:87:c5:fb:96:46:35:3d:23:28: 8d:6d:75:13:71:c2:69:1f:39:62:13:35:42:fc:17: 0d:ee:93:ec:c9:94:49:c9:fc:ef:5b:32:54:dc:08: b7:aa:e5:29:12:2a:97:d9:94:fe:95:46:d3:0e:09: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:61:63:73:22:7C:D7:4D:EB:A4:3D:B4:50:BD:13:B4:6B:83:04:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/b0717bf9-d2d0-328e-b7cf-04ba8c087bf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl X509v3 Authority Key Identifier: keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer sbgp-ipAddrBlock: critical IPv4: 192.133.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c4:66:83:95:fb:83:a9:b9:8f:0b:1d:d1:e2:46:f5:5f:bc: 22:6a:ca:cc:5a:d9:c8:48:af:03:47:c8:1b:5d:45:58:2b:c2: 9d:cf:22:38:2d:4f:32:b7:39:86:58:7d:3b:0e:95:9b:8b:92: d2:12:8d:ca:f7:bf:f5:f2:29:97:17:99:8f:f5:99:f9:ef:24: ff:74:66:01:38:3e:cb:2f:c7:c7:e3:04:5f:1a:98:74:28:2b: eb:7d:05:af:e6:5a:2f:71:c9:b1:ff:3b:af:e2:73:5c:ed:63: 23:5b:ec:4b:4c:0e:54:10:e6:1e:50:be:5e:e9:c2:d2:0f:b1: 1c:ee:1c:b3:c6:20:d0:56:eb:47:2d:f1:a9:55:6f:60:02:13: 07:fa:eb:5e:6e:c8:86:2b:ed:25:b5:9f:98:cc:d3:eb:dd:16: 19:e1:e3:3d:70:19:cd:0d:b5:cd:7a:65:5a:47:5f:be:63:54: 59:8b:c7:bc:11:8f:8c:74:ea:35:ae:e7:88:fa:8d:0d:26:1a: d7:a8:0d:ab:97:8a:8f:f0:8d:78:53:8b:2d:27:0c:21:d2:8c: cb:de:ec:59:68:1e:a3:5a:4d:bd:c8:44:ad:59:73:ea:76:3a: 02:ea:d0:d7:05:a2:8c:41:8d:7a:1a:8b:fb:14:0a:6e:3d:a2: 32:e8:c0:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4KcKfYxJws6o2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy MDZiMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk ZjU0NDEwMmYtYjNiMS00NTY4LWJiMmEtY2I5NTk1NzMwMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIIJUUb/5q+WQkKebcEFrzENpmpNgM/jPxsq +lWOrYDNgBKlZ8E5IOigdiIMxIjPPbrtzlLdV8frXL5RaksIZ1IauRyEn/pLXmuw cfdOUVq+aa8momJevhYHT7jEly3UCzimme9WJHUFLbTcAX1jINLQxLTFYSb2Cw5Y x8q9t+ubceu4TJoJKzgiqAVT7gdiCiksPrhApP1aIYiAkymNNbr+trG6jcOGCnOE IgtYAh6EhtL8gkFnoWCni4agR1dotV2kk/Q6D5qHxfuWRjU9IyiNbXUTccJpHzli EzVC/BcN7pPsyZRJyfzvWzJU3Ai3quUpEiqX2ZT+lUbTDgn0LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVhY3MifNdN66Q9tFC9E7RrgwSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5 NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvYjA3MTdiZjktZDJkMC0z MjhlLWI3Y2YtMDRiYThjMDg3YmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1 M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0 NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwIXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvEZoOV+4OpuY8LHdHiRvVfvCJqysxa2chIrwNHyBtdRVgrwp3PIjgt TzK3OYZYfTsOlZuLktISjcr3v/XyKZcXmY/1mfnvJP90ZgE4Pssvx8fjBF8amHQo K+t9Ba/mWi9xybH/O6/ic1ztYyNb7EtMDlQQ5h5Qvl7pwtIPsRzuHLPGINBW60ct 8alVb2ACEwf6615uyIYr7SW1n5jM0+vdFhnh4z1wGc0Ntc16ZVpHX75jVFmLx7wR j4x06jWu54j6jQ0mGteoDauXio/wjXhTiy0nDCHSjMve7FloHqNaTb3IRK1Zc+p2 OgLq0NcFooxBjXoai/sUCm49ojLowAs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:46 2025 by rpki-client