$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/28683ee1-839e-346c-9ddf-6ce43a908966.roa File: 28683ee1-839e-346c-9ddf-6ce43a908966.roa (raw, json) Hash identifier: a8EaAfmoGGitJ11EBPdpK2fYyr5p6jkKu3e5Bc33d5o= Subject key identifier: 4E:00:5B:34:15:3D:C7:DA:D3:6B:7C:C6:6F:32:E0:FA:A2:F0:6E:D8 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858483B501163E5A65D1808F61C80 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/28683ee1-839e-346c-9ddf-6ce43a908966.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 15290 IP address blocks: 74.216.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:50:11:63:e5:a6:5d:18:08:f6:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=d5154ab0-d66d-4c48-bd89-6cd1168d515f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:73:38:ff:22:57:a9:df:72:ac:49:c1:33: 32:86:4f:01:c6:af:49:09:6f:ac:e7:46:09:ef:18: 11:68:6b:ad:82:76:ff:18:42:8e:b3:9e:e2:21:a7: 87:b9:d2:d4:f1:4a:7d:ba:72:8b:ff:8f:76:d2:f1: 9a:70:81:9f:9c:43:22:d3:62:b0:ed:4d:d7:75:42: f7:48:e3:09:de:c6:27:f3:28:9e:eb:c5:42:66:d9: c1:87:ff:b3:15:4b:38:4a:ac:e9:b5:60:91:6c:78: 89:d7:74:9c:48:c9:71:82:f2:cf:86:d0:9c:27:3e: be:70:69:56:b5:6c:93:4e:4e:81:25:5e:ae:c0:ca: ee:f4:64:32:8c:ea:c2:a8:3c:bf:4b:fa:ef:a1:90: 74:1d:5c:9b:ea:08:d0:23:51:6c:00:68:ac:24:f8: b1:21:fb:f5:69:b7:42:e3:36:d4:83:b6:91:12:75: b0:c4:b1:e3:ae:10:47:13:23:a3:8c:ab:0c:d6:0c: 52:91:fe:8d:31:68:f3:eb:fd:21:b0:b1:52:9d:a1: 20:b4:06:13:88:71:9c:2a:c0:ab:5c:c7:42:81:3d: 28:6b:aa:4c:0c:29:b7:86:85:47:30:c1:91:05:95: 6f:e2:d9:64:51:a0:76:ef:88:3d:30:25:7e:47:ca: 13:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:00:5B:34:15:3D:C7:DA:D3:6B:7C:C6:6F:32:E0:FA:A2:F0:6E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/28683ee1-839e-346c-9ddf-6ce43a908966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 74.216.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c8:7c:0e:b2:93:88:18:da:ac:78:3c:5d:98:75:96:90:43: 28:93:bb:7d:41:f9:09:5e:35:99:38:0f:b5:eb:f5:fa:86:6f: 67:61:b6:c6:56:6d:3c:3d:3b:4b:e2:13:01:bf:68:96:32:f5: 0c:0e:56:97:e3:97:a3:ae:88:54:08:0b:bb:f3:b1:04:13:ca: c0:ef:f0:f1:8c:0d:95:48:e0:2d:64:0a:48:22:58:ef:79:a4: 92:47:2f:af:8c:81:62:f6:75:35:c4:84:4e:91:8e:c5:83:83: cb:fd:83:2b:7f:c1:cf:86:5a:ae:08:98:c1:f6:8d:a0:74:ba: fc:90:e3:f9:49:a7:d6:44:49:94:39:44:23:b0:92:1e:5f:84: 76:71:65:63:58:fb:7e:03:30:82:2b:9e:6a:4b:fb:23:05:86: 05:3b:a7:27:7d:3a:f2:61:ab:cc:0f:11:d7:4f:e6:45:95:59: 27:d7:d3:49:a2:ef:ad:d2:b0:e8:e5:aa:37:94:0d:8f:77:7d: 6f:17:90:00:b1:42:7a:84:a1:c8:93:2b:9b:26:c8:91:6d:30: d2:cd:84:f8:49:18:54:d4:da:e1:5c:e8:ba:8e:83:69:f9:74: 9c:49:68:8c:a0:76:e8:7d:67:99:c0:ab:28:15:d6:e0:29:ee: fa:06:8a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UBFj5aZdGAj2HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk ZDUxNTRhYjAtZDY2ZC00YzQ4LWJkODktNmNkMTE2OGQ1MTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTxzOP8iV6nfcqxJwTMyhk8Bxq9JCW+s50YJ 7xgRaGutgnb/GEKOs57iIaeHudLU8Up9unKL/4920vGacIGfnEMi02Kw7U3XdUL3 SOMJ3sYn8yie68VCZtnBh/+zFUs4SqzptWCRbHiJ13ScSMlxgvLPhtCcJz6+cGlW tWyTTk6BJV6uwMru9GQyjOrCqDy/S/rvoZB0HVyb6gjQI1FsAGisJPixIfv1abdC 4zbUg7aREnWwxLHjrhBHEyOjjKsM1gxSkf6NMWjz6/0hsLFSnaEgtAYTiHGcKsCr XMdCgT0oa6pMDCm3hoVHMMGRBZVv4tlkUaB274g9MCV+R8oThwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4AWzQVPcfa02t8xm8y4Pqi8G7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMjg2ODNlZTEtODM5ZS0z NDZjLTlkZGYtNmNlNDNhOTA4OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStjTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/IfA6yk4gY2qx4PF2YdZaQQyiTu31B+QleNZk4D7Xr9fqGb2dhtsZW bTw9O0viEwG/aJYy9QwOVpfjl6OuiFQIC7vzsQQTysDv8PGMDZVI4C1kCkgiWO95 pJJHL6+MgWL2dTXEhE6RjsWDg8v9gyt/wc+GWq4ImMH2jaB0uvyQ4/lJp9ZESZQ5 RCOwkh5fhHZxZWNY+34DMIIrnmpL+yMFhgU7pyd9OvJhq8wPEddP5kWVWSfX00mi 763SsOjlqjeUDY93fW8XkACxQnqEociTK5smyJFtMNLNhPhJGFTU2uFc6LqOg2n5 dJxJaIygduh9Z5nAqygV1uAp7voGiv8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:10 2025 by rpki-client