$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/c8d7ee04-54e1-3ea2-af83-c20af5272bfd.roa File: c8d7ee04-54e1-3ea2-af83-c20af5272bfd.roa (raw, json) Hash identifier: DGgV1PPwq5g6g0oj5FHFfN1C36ZQThy1u0+peZLsm0o= Subject key identifier: 06:65:C9:5A:32:95:BB:2A:4E:20:0B:C7:DC:37:92:DB:AD:30:50:1C Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F43285848467ABB220DCCFD8380355900 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/c8d7ee04-54e1-3ea2-af83-c20af5272bfd.roa Signing time: Sat 21 Dec 2024 02:00:39 +0000 ROA not before: Sat 21 Dec 2024 02:00:39 +0000 ROA not after: Fri 21 Mar 2025 01:00:39 +0000 asID: 398156 IP address blocks: 168.220.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:46:7a:bb:22:0d:cc:fd:83:80:35:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Dec 21 02:00:39 2024 GMT Not After : Mar 21 01:00:39 2025 GMT Subject: CN=7c4f3502-bab6-4e28-884f-7d5f852d278a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:8f:62:56:3c:0b:37:fb:d9:33:1c:94:85: a8:6a:83:f4:cc:99:f1:5a:2c:9e:19:fc:f3:f4:1d: 5c:2a:06:ad:96:2e:d8:cb:8a:6e:47:f6:c1:c3:2d: e3:95:5a:bc:4e:90:77:0e:ec:83:9f:ae:3d:21:d5: 90:a4:d3:8d:b7:7a:66:59:ae:d5:36:c8:ae:a2:a3: 75:06:85:7e:91:36:b2:4c:b6:7c:a9:72:bc:a5:81: 29:12:e2:bc:3a:36:67:b3:a7:5d:7a:4c:2d:b9:07: 4a:bb:09:c1:14:b8:b0:9d:32:f6:9f:a7:eb:8c:3c: e6:60:8f:fa:95:ae:bb:ea:be:9c:38:2e:8e:74:ce: 22:56:a1:d6:b2:88:e5:c8:94:4d:df:6e:76:37:55: ba:f1:c2:3c:8b:54:9c:6f:db:2a:d3:f3:b4:eb:1e: 77:b1:b6:92:63:d7:c5:d4:73:68:46:03:47:41:9c: 8e:f7:a6:c5:3e:e0:50:f8:02:dc:f7:32:42:dc:76: 66:a2:6d:60:ce:01:08:3c:40:e1:2a:c2:5d:35:ca: ca:13:2d:dd:be:cf:11:01:6a:b6:b3:4d:53:2e:49: b3:4f:62:5f:67:76:9c:3b:38:3f:f6:c6:07:6b:3b: 8c:e1:d7:7c:84:6c:23:81:e1:f9:48:cc:06:db:a6: 8d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:65:C9:5A:32:95:BB:2A:4E:20:0B:C7:DC:37:92:DB:AD:30:50:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/c8d7ee04-54e1-3ea2-af83-c20af5272bfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e1:e2:d9:75:b6:6d:4f:5f:13:5c:c9:4a:dd:31:4a:90:47: 6a:d5:8a:d4:4a:c4:63:17:d1:65:4a:8a:48:9e:00:e5:97:de: df:c9:62:4b:54:f9:aa:e9:2a:4e:85:31:04:5a:05:06:05:5c: 22:82:12:be:07:15:78:ec:14:f5:c7:cd:49:a2:4a:e4:21:9a: 0d:23:7a:50:87:17:c6:11:0c:ca:51:a5:90:28:00:bd:3a:67: 9a:4d:03:a1:41:4a:38:45:e0:eb:c2:4a:fb:dc:86:64:de:f9: e7:e2:e6:72:1d:5c:9b:8a:de:0f:a7:03:41:34:f1:b0:4f:cb: ee:98:0e:b6:64:53:d8:07:99:36:63:c4:88:58:62:34:1a:d7: 5a:a8:e9:3a:80:79:2f:ae:0d:b7:0c:a2:59:29:65:59:96:4d: 19:47:fd:ba:49:d0:96:17:fb:8d:10:5e:00:fb:ff:f1:e3:ea: 92:d2:7c:0e:82:27:4d:1e:cb:d3:8c:51:f2:e6:b1:0d:41:53: 52:34:b6:39:54:02:1b:d4:fb:50:89:4d:6c:12:bf:85:6c:22: 2f:ec:e1:ba:0f:cf:8e:a4:36:a3:be:27:0c:a0:40:66:c5:78: a4:e8:2f:b9:d0:97:e9:25:53:32:91:80:d8:a5:c7:0c:9b:77: 2d:8d:a5:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGersiDcz9g4A1WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk N2M0ZjM1MDItYmFiNi00ZTI4LTg4NGYtN2Q1Zjg1MmQyNzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2CPYlY8Czf72TMclIWoaoP0zJnxWiyeGfzz 9B1cKgatli7Yy4puR/bBwy3jlVq8TpB3DuyDn649IdWQpNONt3pmWa7VNsiuoqN1 BoV+kTayTLZ8qXK8pYEpEuK8OjZns6ddekwtuQdKuwnBFLiwnTL2n6frjDzmYI/6 la676r6cOC6OdM4iVqHWsojlyJRN3252N1W68cI8i1Scb9sq0/O06x53sbaSY9fF 1HNoRgNHQZyO96bFPuBQ+ALc9zJC3HZmom1gzgEIPEDhKsJdNcrKEy3dvs8RAWq2 s01TLkmzT2JfZ3acOzg/9sYHazuM4dd8hGwjgeH5SMwG26aNIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZlyVoylbsqTiALx9w3ktutMFAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvYzhkN2VlMDQtNTRlMS0z ZWEyLWFmODMtYzIwYWY1MjcyYmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDh4tl1tm1PXxNcyUrdMUqQR2rVitRKxGMX0WVKikieAOWX3t/JYktU +arpKk6FMQRaBQYFXCKCEr4HFXjsFPXHzUmiSuQhmg0jelCHF8YRDMpRpZAoAL06 Z5pNA6FBSjhF4OvCSvvchmTe+efi5nIdXJuK3g+nA0E08bBPy+6YDrZkU9gHmTZj xIhYYjQa11qo6TqAeS+uDbcMolkpZVmWTRlH/bpJ0JYX+40QXgD7//Hj6pLSfA6C J00ey9OMUfLmsQ1BU1I0tjlUAhvU+1CJTWwSv4VsIi/s4boPz46kNqO+JwygQGbF eKToL7nQl+klUzKRgNilxwybdy2Npd4= -----END CERTIFICATE-----Generated at Sun Feb 16 20:21:59 2025 by rpki-client