$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/fb8836a2-d944-301e-922b-b7a892dad6e5.roa File: fb8836a2-d944-301e-922b-b7a892dad6e5.roa (raw, json) Hash identifier: Z7lEVhbdpLP14NK5KkslaeCIXUgH7SDDQOYH2ee4AwI= Subject key identifier: 14:B7:05:48:69:3A:15:55:32:F0:5C:5E:BE:C3:F9:C8:A8:9A:7A:61 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858483B5001ED7CB40CE8229B3700 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/fb8836a2-d944-301e-922b-b7a892dad6e5.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 29731 IP address blocks: 159.18.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:50:01:ed:7c:b4:0c:e8:22:9b:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=54b69ea5-f781-415e-a3ab-798c3142f426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:a9:1b:63:00:f3:ac:55:95:78:ab:dd:97: b9:73:af:23:39:a3:46:90:40:93:66:fc:ff:8f:42: 02:76:f6:fb:9d:d7:82:e3:c3:bd:0e:e8:b4:2f:a8: 5f:03:f0:fd:77:14:b8:42:42:51:e3:d7:98:86:24: 1d:15:8e:ff:b9:32:85:c2:1d:06:bf:1a:4f:39:c1: 3c:85:b7:d3:91:88:3e:4a:6c:ca:ed:c0:fa:f5:32: e4:47:bf:d1:75:33:33:31:06:c3:a0:2c:b9:86:6d: de:a1:8e:b5:0d:0a:c0:78:51:8a:37:19:db:78:f1: d1:00:15:5a:d6:56:3d:27:00:f4:71:25:a3:6c:56: 83:22:d1:a6:c0:2b:71:97:0e:80:68:db:1c:3a:30: 44:bd:fb:52:90:4c:60:4a:4f:61:ae:b5:82:76:cc: 33:48:c9:f0:44:ae:39:ea:2a:2d:f8:ae:73:6c:c9: cb:32:17:17:9e:64:f3:32:f1:62:f4:93:69:bc:95: 3a:85:4c:17:c0:0f:63:81:d7:4e:bc:49:66:ee:7e: 97:62:79:c2:dd:a7:95:dd:04:f4:54:f4:2b:f0:f4: 22:39:80:71:17:04:39:d3:d4:c2:45:aa:ee:fc:a1: 77:04:d9:3a:03:c6:68:a2:2d:d3:db:98:bc:ac:70: ac:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B7:05:48:69:3A:15:55:32:F0:5C:5E:BE:C3:F9:C8:A8:9A:7A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/fb8836a2-d944-301e-922b-b7a892dad6e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 159.18.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f3:37:b1:5e:71:43:d0:b8:ca:53:8e:53:c3:8d:46:10:09: e5:f5:94:06:43:91:1b:51:45:ce:da:7b:c2:83:d9:b3:3c:39: 2d:98:a5:99:77:5f:ff:28:8b:93:a0:e4:d2:72:9f:dc:52:4a: 1d:0d:2d:04:ca:b7:07:47:75:b4:c5:98:83:93:b3:ac:b0:53: 0f:a5:ad:22:70:a0:6f:ba:b6:6b:bc:1c:79:7e:00:0c:ce:bb: e2:38:b3:21:89:38:de:06:7f:70:51:17:f3:43:e7:dc:d3:f0: 27:ad:25:4b:49:9d:03:86:51:76:51:0a:3b:34:09:ac:e0:72: 8b:39:4b:d4:5b:70:82:1b:0a:49:51:fe:9d:43:fe:2e:a9:a2: ac:bb:04:e2:94:28:96:9b:13:21:5b:db:b7:e1:cd:ac:69:03: 8c:fe:f3:ee:cc:81:38:1b:7c:58:60:d4:c9:76:8d:81:99:d6: 91:e9:27:a0:62:9e:9b:2f:f8:0b:b2:04:69:4e:d7:6a:fb:da: 4b:36:a2:3b:21:c6:cb:fb:06:c5:6b:2e:f6:c7:70:28:f9:29: a2:72:c7:bb:ad:b6:43:1b:3c:e3:2e:5f:c3:f6:d6:19:cf:df: a4:99:93:9e:a9:1a:1e:52:f0:6c:7f:ad:63:1b:ae:b4:ef:fc: f3:5e:a9:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UAHtfLQM6CKbNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk NTRiNjllYTUtZjc4MS00MTVlLWEzYWItNzk4YzMxNDJmNDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXepG2MA86xVlXir3Ze5c68jOaNGkECTZvz/ j0ICdvb7ndeC48O9Dui0L6hfA/D9dxS4QkJR49eYhiQdFY7/uTKFwh0GvxpPOcE8 hbfTkYg+SmzK7cD69TLkR7/RdTMzMQbDoCy5hm3eoY61DQrAeFGKNxnbePHRABVa 1lY9JwD0cSWjbFaDItGmwCtxlw6AaNscOjBEvftSkExgSk9hrrWCdswzSMnwRK45 6iot+K5zbMnLMhcXnmTzMvFi9JNpvJU6hUwXwA9jgddOvElm7n6XYnnC3aeV3QT0 VPQr8PQiOYBxFwQ509TCRaru/KF3BNk6A8Zooi3T25i8rHCsLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBS3BUhpOhVVMvBcXr7D+ciomnphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvZmI4ODM2YTItZDk0NC0z MDFlLTkyMmItYjdhODkyZGFkNmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnxLZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTzN7FecUPQuMpTjlPDjUYQCeX1lAZDkRtRRc7ae8KD2bM8OS2YpZl3 X/8oi5Og5NJyn9xSSh0NLQTKtwdHdbTFmIOTs6ywUw+lrSJwoG+6tmu8HHl+AAzO u+I4syGJON4Gf3BRF/ND59zT8CetJUtJnQOGUXZRCjs0Cazgcos5S9RbcIIbCklR /p1D/i6poqy7BOKUKJabEyFb27fhzaxpA4z+8+7MgTgbfFhg1Ml2jYGZ1pHpJ6Bi npsv+AuyBGlO12r72ks2ojshxsv7BsVrLvbHcCj5KaJyx7uttkMbPOMuX8P21hnP 36SZk56pGh5S8Gx/rWMbrrTv/PNeqSk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:21 2025 by rpki-client