$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/039f5692-e754-3499-b816-cf4abdf29fae.roa File: 039f5692-e754-3499-b816-cf4abdf29fae.roa (raw, json) Hash identifier: d+glzjUXYIiYGGyzeOXhGeRabZp3hFVnXayW2HEcMms= Subject key identifier: C3:D4:36:9C:17:8D:02:78:94:9F:7B:C5:70:BC:A8:70:69:41:31:E9 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858483B50020D79D7372D41CA6F80 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/039f5692-e754-3499-b816-cf4abdf29fae.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 18563 IP address blocks: 159.18.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:50:02:0d:79:d7:37:2d:41:ca:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=744d50c2-43c6-4261-a77c-b5e17f19a422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:09:0a:6c:a8:42:4c:f1:3a:b2:10:ac:1a:76: 4c:0d:49:68:51:c4:93:11:72:48:00:fa:86:de:c0: f8:cd:85:20:9b:c7:5d:91:e3:29:e8:68:52:92:c9: 6c:3e:7b:0c:69:9b:59:19:28:f1:7f:30:24:2c:d9: b5:33:44:0c:17:9f:40:49:5f:90:8f:ff:08:01:44: c6:9d:c7:ac:63:43:2a:56:0b:ee:67:5b:fa:98:c3: 39:f1:b0:83:74:f0:00:51:cb:6c:b2:93:77:9c:bd: ea:eb:49:57:df:0d:d2:99:83:ab:ac:a1:b9:93:59: 6d:09:21:2f:01:da:46:44:ce:7c:47:fe:51:dc:06: cd:85:df:c4:b5:fc:7c:71:bd:35:25:23:c4:bb:60: da:f4:81:7a:7d:dd:ff:da:1a:6b:b2:de:2a:65:a5: d6:0f:1b:7d:1f:5f:fa:73:b2:08:7b:3f:75:f0:6f: 7c:6c:cf:9f:65:d2:e1:d8:33:9c:25:8c:f9:ca:78: e9:d8:39:c5:0d:56:9e:a8:93:64:a6:b3:93:8b:e6: 08:4c:8d:46:02:e2:a4:df:ee:68:d4:d2:a3:16:3f: 12:05:58:f0:76:18:73:71:eb:ec:58:ef:ad:5e:bb: cc:07:e4:e6:e6:bb:a7:fa:46:9b:b9:b7:f0:35:75: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D4:36:9C:17:8D:02:78:94:9F:7B:C5:70:BC:A8:70:69:41:31:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/039f5692-e754-3499-b816-cf4abdf29fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 159.18.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:43:46:f7:df:6f:b5:e5:2e:57:a8:e7:50:c0:90:4e:09:f4: 57:33:4e:07:73:87:9b:7e:15:23:e9:72:17:72:39:9e:29:63: f8:36:39:5d:62:f3:41:00:5e:cf:87:07:01:48:98:93:44:ab: d6:97:f4:15:94:e9:e2:de:9f:7b:8f:3d:47:18:dc:c4:81:76: 7c:f8:ec:21:75:21:cc:d8:26:8f:77:7e:8a:fe:37:e2:77:b7: c2:ba:f1:94:74:0b:fe:6b:12:57:02:80:ca:98:d6:68:4f:e0: 57:23:6d:cd:30:f2:3a:61:d3:e9:24:55:d3:4a:fe:04:77:13: 38:30:12:32:d0:a8:e2:8f:29:39:cf:c1:52:32:5d:d0:94:8e: 33:d8:9a:4c:2f:54:f9:1c:11:cf:39:26:35:ad:ba:74:3e:33: 3e:70:44:ce:54:e7:eb:82:55:8b:41:da:41:9f:4a:57:df:5f: c1:54:d1:0a:ad:41:7a:7c:2b:95:87:d9:53:5f:3e:e0:15:4a: d4:5d:45:a0:95:f7:1b:6f:46:c1:59:02:b3:f0:a8:97:f9:23: 35:03:43:4c:11:0f:c5:2e:df:1d:64:bf:2c:81:ea:9f:3d:e6: 99:97:a6:46:75:bb:0c:19:23:e3:ce:87:73:62:4b:78:3a:95: 60:9d:e4:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UAINedc3LUHKb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk NzQ0ZDUwYzItNDNjNi00MjYxLWE3N2MtYjVlMTdmMTlhNDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AkKbKhCTPE6shCsGnZMDUloUcSTEXJIAPqG 3sD4zYUgm8ddkeMp6GhSkslsPnsMaZtZGSjxfzAkLNm1M0QMF59ASV+Qj/8IAUTG ncesY0MqVgvuZ1v6mMM58bCDdPAAUctsspN3nL3q60lX3w3SmYOrrKG5k1ltCSEv AdpGRM58R/5R3AbNhd/Etfx8cb01JSPEu2Da9IF6fd3/2hprst4qZaXWDxt9H1/6 c7IIez918G98bM+fZdLh2DOcJYz5ynjp2DnFDVaeqJNkprOTi+YITI1GAuKk3+5o 1NKjFj8SBVjwdhhzcevsWO+tXrvMB+Tm5run+kabubfwNXVLTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPUNpwXjQJ4lJ97xXC8qHBpQTHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMDM5ZjU2OTItZTc1NC0z NDk5LWI4MTYtY2Y0YWJkZjI5ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnxLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJDRvffb7XlLleo51DAkE4J9FczTgdzh5t+FSPpchdyOZ4pY/g2OV1i 80EAXs+HBwFImJNEq9aX9BWU6eLen3uPPUcY3MSBdnz47CF1IczYJo93for+N+J3 t8K68ZR0C/5rElcCgMqY1mhP4Fcjbc0w8jph0+kkVdNK/gR3EzgwEjLQqOKPKTnP wVIyXdCUjjPYmkwvVPkcEc85JjWtunQ+Mz5wRM5U5+uCVYtB2kGfSlffX8FU0Qqt QXp8K5WH2VNfPuAVStRdRaCV9xtvRsFZArPwqJf5IzUDQ0wRD8Uu3x1kvyyB6p89 5pmXpkZ1uwwZI+POh3NiS3g6lWCd5BA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:24 2025 by rpki-client