$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/4c16f448-b373-391e-b0c6-01474106fbae.roa File: 4c16f448-b373-391e-b0c6-01474106fbae.roa (raw, json) Hash identifier: YAJFtOzrvQaReX29TX1zynVLISfemSg8hPehsTrniMk= Subject key identifier: CA:C7:D2:69:17:76:A3:06:1E:C7:2F:EA:54:91:80:0B:D2:77:06:CC Certificate issuer: /CN=09a6e101-d379-454b-8947-39f1f150481a Certificate serial: 010D0C9F43285848A13619DB302384AEF46C9D40 Authority key identifier: BD:4D:C0:AA:9B:E0:60:F8:77:5B:E3:76:97:40:14:1B:93:A2:A8:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/4c16f448-b373-391e-b0c6-01474106fbae.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 26658 IP address blocks: 216.12.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:19:db:30:23:84:ae:f4:6c:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a6e101-d379-454b-8947-39f1f150481a Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=3c7368d3-6d42-4f1b-9942-cf111ed1b705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:9d:52:79:7d:e1:66:2c:bd:5c:89:fe:84: 7f:13:e5:64:8a:51:14:4e:89:e4:e1:cf:37:03:df: f9:fb:4b:25:25:34:c1:f5:16:ba:cc:dd:a2:77:f7: a8:39:f2:43:a1:03:33:6b:ae:22:77:1d:bd:10:55: c7:43:c9:3f:a5:cf:f0:d7:3a:02:f2:13:c2:5c:e3: ee:7d:92:9a:dc:ca:14:44:42:d2:b0:f1:32:32:3d: 75:b4:ec:6e:97:b0:4e:0b:69:de:3f:84:bb:84:25: ee:e1:f2:9c:6f:bd:33:38:fc:9c:19:00:f4:dc:39: 2f:d2:67:66:95:d2:5e:1d:25:22:ab:51:08:4b:91: 9d:f0:b1:1d:e7:b7:df:ea:ee:f4:6f:4e:5d:b2:93: f5:5c:91:7f:a4:e5:07:a0:b2:eb:3e:87:6e:cf:4f: b6:bf:b9:16:03:3c:77:fb:0c:d3:96:3b:38:93:67: 2f:f1:76:2c:38:83:88:44:64:b1:c6:7f:7d:79:14: 6b:87:c0:57:e4:03:cc:c1:e6:9c:04:ed:75:f1:9f: 0f:4e:02:3a:46:d1:dc:8e:bc:50:55:dc:97:2f:1e: 5c:3b:5e:8d:94:5d:91:3c:a4:ca:bd:2d:64:b2:68: dc:d3:37:30:f5:46:ff:3e:4a:0e:8b:df:01:87:d6: ae:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C7:D2:69:17:76:A3:06:1E:C7:2F:EA:54:91:80:0B:D2:77:06:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/4c16f448-b373-391e-b0c6-01474106fbae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.crl X509v3 Authority Key Identifier: keyid:BD:4D:C0:AA:9B:E0:60:F8:77:5B:E3:76:97:40:14:1B:93:A2:A8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a.cer sbgp-ipAddrBlock: critical IPv4: 216.12.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:c5:d2:63:e6:de:3e:16:bf:32:e2:2b:3e:04:c3:a5:bf:f7: 0b:cb:a1:29:d8:94:bf:9e:c2:0d:70:43:4e:dd:c8:7a:ae:4b: 78:67:53:a9:a8:3d:b7:6d:e6:01:df:a1:a8:a7:8d:ad:b4:ab: a2:41:62:11:5e:93:54:42:3a:a4:ce:9f:e0:f4:4e:d6:ea:f5: fb:04:6e:48:af:50:03:42:44:47:98:00:95:ec:02:ff:ce:ec: 19:2d:fe:be:0b:b6:4a:97:56:6f:d9:19:e3:24:1e:24:a6:0b: cb:95:91:53:86:de:da:67:b4:f2:49:13:5a:f0:d4:58:d4:02: 0b:3f:de:dd:35:e1:82:01:32:f1:cc:7a:8a:7f:35:c0:ec:31: a1:fa:47:b3:e4:3c:4e:bf:61:54:a9:ed:49:aa:4e:7b:2f:38: 5a:c1:ff:4e:23:78:e3:7f:1b:f8:b4:20:e5:45:59:c0:9b:c6: 45:45:f6:b4:83:03:83:30:ef:54:27:24:f2:f2:39:31:ca:68: d9:75:2e:a3:93:a0:8b:89:4d:bf:aa:e9:9b:97:20:aa:0d:37: 3b:74:17:6a:ff:46:6c:82:a7:83:79:33:1e:53:a4:b5:ff:79: ef:13:ea:61:6d:04:8f:b4:72:58:d8:d3:be:09:5b:52:28:9a: 69:16:b4:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhnbMCOErvRsnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhNmUxMDEtZDM3OS00NTRiLTg5NDctMzlmMWYxNTA0 ODFhMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk M2M3MzY4ZDMtNmQ0Mi00ZjFiLTk5NDItY2YxMTFlZDFiNzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOWdUnl94WYsvVyJ/oR/E+VkilEUTonk4c83 A9/5+0slJTTB9Ra6zN2id/eoOfJDoQMza64idx29EFXHQ8k/pc/w1zoC8hPCXOPu fZKa3MoURELSsPEyMj11tOxul7BOC2neP4S7hCXu4fKcb70zOPycGQD03Dkv0mdm ldJeHSUiq1EIS5Gd8LEd57ff6u70b05dspP1XJF/pOUHoLLrPoduz0+2v7kWAzx3 +wzTljs4k2cv8XYsOIOIRGSxxn99eRRrh8BX5APMweacBO118Z8PTgI6RtHcjrxQ VdyXLx5cO16NlF2RPKTKvS1ksmjc0zcw9Ub/PkoOi98Bh9auUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrH0mkXdqMGHscv6lSRgAvSdwbMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wOWE2 ZTEwMS1kMzc5LTQ1NGItODk0Ny0zOWYxZjE1MDQ4MWEvNGMxNmY0NDgtYjM3My0z OTFlLWIwYzYtMDE0NzQxMDZmYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDlhNmUxMDEtZDM3OS00NTRiLTg5 NDctMzlmMWYxNTA0ODFhLzA5YTZlMTAxLWQzNzktNDU0Yi04OTQ3LTM5ZjFmMTUw NDgxYS5jcmwwHwYDVR0jBBgwFoAUvU3AqpvgYPh3W+N2l0AUG5OiqNAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wOWE2ZTEwMS1kMzc5LTQ1NGItODk0Ny0zOWYx ZjE1MDQ4MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2AygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvF0mPm3j4WvzLiKz4Ew6W/9wvLoSnYlL+ewg1wQ07dyHquS3hnU6mo Pbdt5gHfoainja20q6JBYhFek1RCOqTOn+D0Ttbq9fsEbkivUANCREeYAJXsAv/O 7Bkt/r4LtkqXVm/ZGeMkHiSmC8uVkVOG3tpntPJJE1rw1FjUAgs/3t014YIBMvHM eop/NcDsMaH6R7PkPE6/YVSp7UmqTnsvOFrB/04jeON/G/i0IOVFWcCbxkVF9rSD A4Mw71QnJPLyOTHKaNl1LqOToIuJTb+q6ZuXIKoNNzt0F2r/RmyCp4N5Mx5TpLX/ ee8T6mFtBI+0cljY074JW1IommkWtEs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:03:56 2025 by rpki-client