$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/ce3f69ae-40c8-33ef-99a2-765e017a8bad.roa File: ce3f69ae-40c8-33ef-99a2-765e017a8bad.roa (raw, json) Hash identifier: t70+38xrvQu5pWKNZE8r16Sripaoti4FWKTdRcgPBuI= Subject key identifier: 58:E8:CD:F4:0A:62:9B:91:F0:20:C3:BD:01:29:33:97:D2:B1:5B:8A Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F432858485CD02C89293B9876ECAB5200 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/ce3f69ae-40c8-33ef-99a2-765e017a8bad.roa Signing time: Sun 29 Dec 2024 02:00:39 +0000 ROA not before: Sun 29 Dec 2024 02:00:39 +0000 ROA not after: Sat 29 Mar 2025 01:00:39 +0000 asID: 16823 IP address blocks: 216.59.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5c:d0:2c:89:29:3b:98:76:ec:ab:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Dec 29 02:00:39 2024 GMT Not After : Mar 29 01:00:39 2025 GMT Subject: CN=ed86a81c-f4c9-4dd1-9b98-f7052e7c42cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2f:96:b9:e5:90:c3:b1:b1:aa:c0:15:d5:84: 27:29:89:b2:10:ec:2a:62:cf:dc:03:1f:d4:f4:9c: da:0c:c7:01:3c:aa:f3:65:a3:16:99:8f:b6:d7:fc: 6b:1f:f7:cd:e3:d1:90:16:9d:19:2c:d3:e5:18:24: 7a:1d:eb:47:20:9c:83:06:e9:45:6e:69:1d:e3:82: 65:49:0e:3d:97:6d:21:7d:bc:6d:09:f3:b7:a3:9e: a2:c9:a5:7a:90:c8:61:77:25:79:b1:d1:7f:ab:cd: 8b:97:85:fc:f6:10:e2:b5:fe:bd:34:2b:a4:d3:a0: 91:39:59:d6:92:95:da:b4:b9:49:e6:69:3e:03:a2: a9:29:02:29:82:a2:31:72:59:b0:85:dd:b0:63:8b: 89:ea:21:ea:c1:58:eb:12:52:12:7c:6a:77:7b:80: 71:06:83:0e:e5:a5:f2:66:e9:0c:9d:df:27:26:76: 8d:82:19:20:37:51:41:86:f3:3d:1b:81:73:99:e7: f2:d6:d2:01:fe:f7:0a:1b:c8:95:86:6b:ad:4f:5c: 81:05:be:ab:c5:73:7f:b9:2f:87:84:05:bf:a8:90: 72:5b:ae:28:b0:28:b3:0d:44:97:2d:0c:b0:cd:9b: c9:e2:da:51:96:aa:d6:93:c4:74:18:20:57:d3:1c: 8d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E8:CD:F4:0A:62:9B:91:F0:20:C3:BD:01:29:33:97:D2:B1:5B:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/ce3f69ae-40c8-33ef-99a2-765e017a8bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 216.59.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:42:cd:75:b3:72:f5:bb:fe:e1:8f:61:1e:fa:c9:7d:01:1a: 0f:65:ce:1b:18:88:52:a3:ed:8c:f6:c4:46:56:ee:7e:b3:2a: 68:e1:49:5b:0e:89:55:4e:d8:68:79:0e:7d:65:e7:c4:62:01: 00:63:4a:84:7e:0a:59:91:b9:1f:5c:1e:49:8c:90:fb:09:4c: eb:07:86:d4:df:01:64:e4:2b:df:bd:39:8e:8f:3b:8e:33:05: 77:aa:49:43:f9:c3:3a:72:ac:3b:b4:b9:24:2d:54:cc:17:c9: 0e:bd:cd:73:c3:eb:18:65:d6:35:fb:14:b3:cb:b8:da:b7:49: c6:99:52:c6:c5:0e:a4:81:02:46:b2:a8:13:f8:47:98:b8:41: 86:26:44:0d:69:23:4b:ca:07:74:a1:3f:b5:3d:33:f7:48:53: 93:c7:67:af:16:27:78:dd:d2:b1:f5:93:77:7e:5c:f8:1f:66: 35:af:57:39:91:16:14:63:07:51:a3:e3:ec:95:d0:91:ae:74: 0c:ca:62:73:a3:74:9e:d7:bc:66:98:f3:38:3a:fa:a1:6d:37: 2c:91:5a:c5:c7:63:22:16:d7:42:49:f8:10:14:3c:cd:a7:09: 7f:d6:2e:d2:b5:70:b2:38:8e:f1:ea:33:db:a5:fd:30:dc:1d: 02:93:d5:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0CyJKTuYduyrUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZWQ4NmE4MWMtZjRjOS00ZGQxLTliOTgtZjcwNTJlN2M0MmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly+WueWQw7GxqsAV1YQnKYmyEOwqYs/cAx/U 9JzaDMcBPKrzZaMWmY+21/xrH/fN49GQFp0ZLNPlGCR6HetHIJyDBulFbmkd44Jl SQ49l20hfbxtCfO3o56iyaV6kMhhdyV5sdF/q82Ll4X89hDitf69NCuk06CROVnW kpXatLlJ5mk+A6KpKQIpgqIxclmwhd2wY4uJ6iHqwVjrElISfGp3e4BxBoMO5aXy ZukMnd8nJnaNghkgN1FBhvM9G4Fzmefy1tIB/vcKG8iVhmutT1yBBb6rxXN/uS+H hAW/qJByW64osCizDUSXLQywzZvJ4tpRlqrWk8R0GCBX0xyN8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjozfQKYpuR8CDDvQEpM5fSsVuKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvY2UzZjY5YWUtNDBjOC0z M2VmLTk5YTItNzY1ZTAxN2E4YmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2DuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJCzXWzcvW7/uGPYR76yX0BGg9lzhsYiFKj7Yz2xEZW7n6zKmjhSVsO iVVO2Gh5Dn1l58RiAQBjSoR+ClmRuR9cHkmMkPsJTOsHhtTfAWTkK9+9OY6PO44z BXeqSUP5wzpyrDu0uSQtVMwXyQ69zXPD6xhl1jX7FLPLuNq3ScaZUsbFDqSBAkay qBP4R5i4QYYmRA1pI0vKB3ShP7U9M/dIU5PHZ68WJ3jd0rH1k3d+XPgfZjWvVzmR FhRjB1Gj4+yV0JGudAzKYnOjdJ7XvGaY8zg6+qFtNyyRWsXHYyIW10JJ+BAUPM2n CX/WLtK1cLI4jvHqM9ul/TDcHQKT1aA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:49 2025 by rpki-client