$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0372d795-3e4b-3d2a-818b-02070b564356.roa File: 0372d795-3e4b-3d2a-818b-02070b564356.roa (raw, json) Hash identifier: 1RjXhIDMN6Fz/jPCDktcjAQ1atCiJOTxoDaaIU7d2pM= Subject key identifier: AB:E0:2C:58:8C:C2:E3:79:AE:C4:D8:4C:72:E1:F9:57:90:BA:88:51 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858483B501194B2D32006C5E09500 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0372d795-3e4b-3d2a-818b-02070b564356.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 15290 IP address blocks: 74.216.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:50:11:94:b2:d3:20:06:c5:e0:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=b5e60aed-f295-499b-8a0c-205b15d24c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:1e:41:0b:43:c3:9c:99:6c:c9:32:3a:51: 4f:b7:61:1a:e5:bc:60:7d:17:5b:e1:20:fa:a2:af: 2d:d9:d5:e0:c8:42:de:a4:95:93:7d:f0:b5:b6:8e: a1:b0:cc:9f:ab:2e:09:ab:38:74:a6:30:5a:03:f1: 73:07:df:cb:ff:dd:44:8c:1b:35:50:96:c2:92:c8: d6:98:36:3c:f3:15:5f:be:a3:1b:80:c4:87:41:1b: 80:e3:46:4e:af:bc:19:75:26:76:c6:bf:a2:6d:1c: 16:15:2d:7f:ac:fe:da:28:c7:e6:17:3b:23:87:77: b0:e4:95:a8:64:60:23:bc:d9:51:8f:1f:c7:03:b6: ba:1a:d6:49:e1:8d:9d:d5:ff:94:a8:dc:2b:88:86: 47:5b:5e:eb:28:43:4c:0d:cc:b5:59:5f:c6:53:1c: a7:b2:d5:2a:08:01:5f:ff:a4:c0:1d:a7:03:b6:2d: c7:7c:b1:65:9e:72:6a:75:b5:c9:d4:b1:b1:ff:97: 87:ad:4f:fd:ea:ac:b2:bb:5f:4f:0e:5a:43:ef:05: 39:1c:53:47:04:46:78:4a:3f:39:cf:76:5f:32:5a: 71:10:bb:dc:7a:02:c0:84:7b:03:c3:48:6c:fb:27: 47:85:24:2f:3f:f3:24:b3:64:ff:1c:33:41:73:93: b4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E0:2C:58:8C:C2:E3:79:AE:C4:D8:4C:72:E1:F9:57:90:BA:88:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0372d795-3e4b-3d2a-818b-02070b564356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 74.216.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:32:89:bb:d4:eb:c8:3d:c0:3a:a5:3b:8c:7a:0e:66:f4:58: 3c:45:94:82:5f:15:9f:9a:7e:8e:56:21:61:97:5a:56:50:77: 05:55:55:02:f8:54:12:79:29:0c:62:26:d0:fd:36:ad:9d:6b: 9d:59:2a:4d:9f:9e:5a:66:68:4b:cd:09:a7:37:cc:46:e0:bd: 5a:b3:b5:1c:68:b5:bc:61:09:a1:2a:d8:ec:6e:46:68:f8:8b: 4c:ad:50:06:09:57:32:c6:57:34:3e:0a:64:31:59:ed:3c:48: 29:a5:88:e0:dd:61:cf:4e:da:20:5d:77:0b:f3:a0:98:08:d5: 9e:7c:ef:f9:bc:2a:82:31:94:8b:33:00:5c:46:3f:2d:38:74: da:3c:27:e2:5b:f9:6e:1f:59:15:a8:72:a7:2b:dc:34:aa:df: 5e:2e:be:da:d1:47:2c:a8:44:e3:11:1e:10:cb:e4:30:5a:76: d6:63:14:04:6f:6d:3c:ac:4d:05:ad:00:ad:66:c3:e2:c9:02: b0:b1:5d:e4:d7:3d:1d:11:71:a8:b6:92:2d:97:83:90:12:cb: 6a:1b:8c:28:37:91:cd:48:3c:47:c0:7b:5f:56:c0:47:3a:08: 91:25:28:02:94:f7:38:22:00:93:d1:5a:dd:17:b6:d4:4c:42: 55:2b:41:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UBGUstMgBsXglQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk YjVlNjBhZWQtZjI5NS00OTliLThhMGMtMjA1YjE1ZDI0YzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhUeQQtDw5yZbMkyOlFPt2Ea5bxgfRdb4SD6 oq8t2dXgyELepJWTffC1to6hsMyfqy4Jqzh0pjBaA/FzB9/L/91EjBs1UJbCksjW mDY88xVfvqMbgMSHQRuA40ZOr7wZdSZ2xr+ibRwWFS1/rP7aKMfmFzsjh3ew5JWo ZGAjvNlRjx/HA7a6GtZJ4Y2d1f+UqNwriIZHW17rKENMDcy1WV/GUxynstUqCAFf /6TAHacDti3HfLFlnnJqdbXJ1LGx/5eHrU/96qyyu19PDlpD7wU5HFNHBEZ4Sj85 z3ZfMlpxELvcegLAhHsDw0hs+ydHhSQvP/Mks2T/HDNBc5O0YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvgLFiMwuN5rsTYTHLh+VeQuohRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMDM3MmQ3OTUtM2U0Yi0z ZDJhLTgxOGItMDIwNzBiNTY0MzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStjqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgyibvU68g9wDqlO4x6Dmb0WDxFlIJfFZ+afo5WIWGXWlZQdwVVVQL4 VBJ5KQxiJtD9Nq2da51ZKk2fnlpmaEvNCac3zEbgvVqztRxotbxhCaEq2OxuRmj4 i0ytUAYJVzLGVzQ+CmQxWe08SCmliODdYc9O2iBddwvzoJgI1Z587/m8KoIxlIsz AFxGPy04dNo8J+Jb+W4fWRWocqcr3DSq314uvtrRRyyoROMRHhDL5DBadtZjFARv bTysTQWtAK1mw+LJArCxXeTXPR0Rcai2ki2Xg5ASy2objCg3kc1IPEfAe19WwEc6 CJElKAKU9zgiAJPRWt0XttRMQlUrQcY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:35 2025 by rpki-client