$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/945146cc-65ed-36a2-ae21-a4c8ad11e413.roa File: 945146cc-65ed-36a2-ae21-a4c8ad11e413.roa (raw, json) Hash identifier: +lrCU1nlZjo8IM4HEoQZcJKPXZaaD2vpMtcNzLrGLas= Subject key identifier: CF:F0:E9:D3:E2:BE:77:59:5F:DD:D1:D7:A0:F4:02:B3:B2:DC:53:58 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858483B501106A2D11916BC5B99B0 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/945146cc-65ed-36a2-ae21-a4c8ad11e413.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 15290 IP address blocks: 74.216.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:50:11:06:a2:d1:19:16:bc:5b:99:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=3fa8f554-8810-49b9-a73d-5c7771de2582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:46:5a:dc:56:dd:93:ae:b4:7a:60:e7:4f:e8: b3:8c:a8:84:d7:4c:0b:a5:70:e8:9c:de:72:84:ed: 55:9a:7b:1b:d7:b2:ec:aa:55:79:2e:cc:dc:44:e3: 27:c7:53:f5:c5:b4:e6:f2:df:bb:1f:7e:a7:d4:7b: 09:b4:b9:ea:c4:d3:0b:7b:23:d0:6f:ca:5f:1c:d5: c3:6e:0d:79:18:53:9e:94:47:85:bd:17:2e:3c:43: 8c:5f:c5:a1:15:ce:2e:c7:57:01:e1:9b:9a:09:af: e9:ea:e1:00:5b:24:b0:3a:40:49:e9:fc:80:a9:ef: 1e:40:f3:f1:8d:e7:30:44:5d:ea:ce:e9:ca:17:90: 49:86:63:36:b1:a1:5e:01:22:e1:2d:5e:d9:72:31: 31:90:0a:12:87:9f:32:32:c9:ff:d6:cd:be:55:30: 95:34:fc:c3:fa:ea:ee:13:18:93:ca:80:92:d8:87: bf:02:25:9d:ed:b1:bb:1f:9c:c1:d0:cf:55:de:7f: a9:69:68:18:9f:30:20:b6:e5:b3:e7:e1:21:4b:66: 57:f3:44:c6:bb:7f:33:11:d9:18:2d:5d:81:41:d9: ec:9c:70:89:6b:f4:ea:16:94:a4:d4:f3:4d:98:5a: 16:7e:51:e4:f7:a4:74:27:70:2f:53:d6:64:5e:96: 0d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F0:E9:D3:E2:BE:77:59:5F:DD:D1:D7:A0:F4:02:B3:B2:DC:53:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/945146cc-65ed-36a2-ae21-a4c8ad11e413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 74.216.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:22:e5:75:3e:c6:dc:ba:63:53:b8:e8:c5:4a:ac:13:6b:b6: 29:2d:7b:8e:c0:4e:b3:8a:0e:61:30:96:25:e7:ec:18:e0:6b: 6c:8f:8b:d1:33:d6:e9:6e:7c:79:d2:3c:a0:14:f6:17:45:5f: b6:df:a7:32:8a:8a:5a:4e:15:cf:a6:73:8c:1a:37:47:c3:63: 94:a6:de:5d:ef:fe:6d:aa:b7:c3:0b:72:80:f8:2c:b0:d4:31: 60:58:6e:35:d1:b3:43:ce:40:f4:ed:31:80:97:bf:9a:41:4a: 44:61:0d:01:d8:b8:6e:fc:0a:df:18:e9:0f:39:d7:5c:4a:c7: 60:62:a7:28:73:26:48:cb:75:08:24:a1:41:da:cb:e7:9e:a0: 96:11:7e:3e:ae:07:09:8d:56:71:3a:b4:9d:ba:44:f7:4e:56: b3:f0:ef:38:28:14:75:cf:77:35:5b:4a:8d:85:1d:33:82:d4: 21:fd:4a:a3:37:5e:a6:06:f2:e2:dc:bb:3a:53:9d:23:d5:fb: 5e:27:da:8b:f7:61:84:03:a1:a1:28:a9:7e:18:9d:c8:27:6d: f3:6a:a0:78:c4:11:27:b9:dd:85:af:22:a9:ea:97:93:ed:14: 03:0e:73:9a:db:9a:b2:3a:32:94:fd:fa:4d:a6:11:10:24:49: a0:98:a1:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UBEGotEZFrxbmbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk M2ZhOGY1NTQtODgxMC00OWI5LWE3M2QtNWM3NzcxZGUyNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUZa3Fbdk660emDnT+izjKiE10wLpXDonN5y hO1Vmnsb17LsqlV5LszcROMnx1P1xbTm8t+7H36n1HsJtLnqxNMLeyPQb8pfHNXD bg15GFOelEeFvRcuPEOMX8WhFc4ux1cB4ZuaCa/p6uEAWySwOkBJ6fyAqe8eQPPx jecwRF3qzunKF5BJhmM2saFeASLhLV7ZcjExkAoSh58yMsn/1s2+VTCVNPzD+uru ExiTyoCS2Ie/AiWd7bG7H5zB0M9V3n+paWgYnzAgtuWz5+EhS2ZX80TGu38zEdkY LV2BQdnsnHCJa/TqFpSk1PNNmFoWflHk96R0J3AvU9ZkXpYNtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/w6dPivndZX93R16D0ArOy3FNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvOTQ1MTQ2Y2MtNjVlZC0z NmEyLWFlMjEtYTRjOGFkMTFlNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASthvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUi5XU+xty6Y1O46MVKrBNrtikte47ATrOKDmEwliXn7Bjga2yPi9Ez 1ulufHnSPKAU9hdFX7bfpzKKilpOFc+mc4waN0fDY5Sm3l3v/m2qt8MLcoD4LLDU MWBYbjXRs0POQPTtMYCXv5pBSkRhDQHYuG78Ct8Y6Q8511xKx2BipyhzJkjLdQgk oUHay+eeoJYRfj6uBwmNVnE6tJ26RPdOVrPw7zgoFHXPdzVbSo2FHTOC1CH9SqM3 XqYG8uLcuzpTnSPV+14n2ov3YYQDoaEoqX4YncgnbfNqoHjEESe53YWvIqnql5Pt FAMOc5rbmrI6MpT9+k2mERAkSaCYoU0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:43 2025 by rpki-client