$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/6da1affb-4d05-3dd1-8dd0-5b6952d3c2b0.roa File: 6da1affb-4d05-3dd1-8dd0-5b6952d3c2b0.roa (raw, json) Hash identifier: zdYZohuKx+ktWtg1On6J7HjG2rc3j6tsfWj+pNy5h6Q= Subject key identifier: 19:92:74:C4:16:44:73:E5:3D:42:FA:D7:7A:52:FE:FD:CD:0C:D2:6E Certificate issuer: /CN=3878fd50-eae1-4b38-a142-8eff8910579b Certificate serial: 010D0C9F432858484C10126E60C712DDE79B9F00 Authority key identifier: 40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/6da1affb-4d05-3dd1-8dd0-5b6952d3c2b0.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 14807 IP address blocks: 204.11.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:12:6e:60:c7:12:dd:e7:9b:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3878fd50-eae1-4b38-a142-8eff8910579b Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=6ab3acf2-f8c1-4db6-95d4-d645d383aa23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:dd:d5:87:c0:da:98:85:27:5a:c8:b5:4c:39: d9:08:92:e3:85:85:f1:b2:b7:8f:63:03:e8:4b:78: 9c:22:f9:ad:27:90:87:b6:24:36:4d:4c:df:1f:d8: 82:35:b5:eb:f8:97:9e:ce:b3:ab:90:41:ab:87:3d: 2c:6e:a6:82:37:10:7d:a5:ec:18:ca:be:56:28:ad: 45:5b:64:6c:66:3a:ff:ff:f3:88:7f:92:66:07:9f: 8f:de:6c:b2:14:d2:72:d6:53:03:a8:23:58:2c:c6: 5c:89:51:06:f5:67:88:97:88:9f:2a:11:4c:f6:17: 29:b8:8f:bc:7c:ff:67:0f:d6:22:88:5d:d9:f5:8a: 2f:83:bf:2d:04:b3:29:ea:fc:8d:56:26:ae:db:5f: 0d:f1:88:b9:1e:9d:54:ef:7a:77:7e:67:64:0b:1e: 61:df:58:39:17:e5:4e:d6:15:c1:14:1e:b5:e4:33: a0:2b:b8:89:61:05:8b:13:7d:c8:50:95:3b:e8:87: 57:87:e5:22:a3:a8:7e:85:c5:38:18:bd:0f:17:d6: 73:79:20:cf:43:40:ce:de:b2:ba:26:c1:e9:48:fc: d7:9d:72:78:0b:da:51:34:f3:6a:64:5f:a6:51:5a: 96:c5:0d:d8:e1:ff:19:08:5a:10:27:d1:ff:3e:ab: 4b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:92:74:C4:16:44:73:E5:3D:42:FA:D7:7A:52:FE:FD:CD:0C:D2:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/6da1affb-4d05-3dd1-8dd0-5b6952d3c2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl X509v3 Authority Key Identifier: keyid:40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer sbgp-ipAddrBlock: critical IPv4: 204.11.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:89:a3:1f:f5:3b:7c:f8:f8:1d:22:18:63:b9:43:c1:70:09: 11:d6:9f:c5:1b:96:5c:fd:f1:59:97:44:b6:e4:c8:de:d1:db: fa:8b:bb:e9:86:30:f6:0f:19:7d:c7:47:1a:8f:20:ac:2a:20: 92:f1:0c:7a:48:2e:be:d1:0d:d9:0d:f0:23:b5:1e:8f:e5:7c: ab:8e:4a:90:06:b3:bd:97:99:ac:10:76:42:4e:f2:51:f9:ca: 09:aa:97:15:ec:b8:3a:7c:07:ab:b8:2f:2f:9e:ab:83:a5:a1: 7c:18:38:32:d0:b1:65:b9:bb:45:9b:76:d4:cc:e6:df:83:18: 83:e5:a1:4c:0c:20:79:45:c5:b4:85:21:4f:86:10:89:c2:b4: 9e:4d:59:d2:2a:4a:92:09:b5:4a:b2:0e:d0:90:8c:0b:0a:75: e2:cd:92:fd:00:51:0b:84:43:5e:9c:ab:d7:97:17:80:56:29: f3:72:8b:71:05:0d:15:a0:50:4c:52:69:7b:50:67:56:18:9a: 7f:59:a6:56:51:27:4d:ce:c9:e8:88:bf:c8:a7:84:9c:60:72: 45:ff:59:3a:e4:42:a7:c9:18:46:93:42:17:24:a1:d1:9a:ca: 31:8a:02:18:80:b3:4e:36:47:2d:ac:39:b1:6f:a6:95:75:27: 93:21:11:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEBJuYMcS3eebnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg3OGZkNTAtZWFlMS00YjM4LWExNDItOGVmZjg5MTA1 NzliMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk NmFiM2FjZjItZjhjMS00ZGI2LTk1ZDQtZDY0NWQzODNhYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd3Vh8DamIUnWsi1TDnZCJLjhYXxsrePYwPo S3icIvmtJ5CHtiQ2TUzfH9iCNbXr+JeezrOrkEGrhz0sbqaCNxB9pewYyr5WKK1F W2RsZjr///OIf5JmB5+P3myyFNJy1lMDqCNYLMZciVEG9WeIl4ifKhFM9hcpuI+8 fP9nD9YiiF3Z9Yovg78tBLMp6vyNViau218N8Yi5Hp1U73p3fmdkCx5h31g5F+VO 1hXBFB615DOgK7iJYQWLE33IUJU76IdXh+Uio6h+hcU4GL0PF9ZzeSDPQ0DO3rK6 JsHpSPzXnXJ4C9pRNPNqZF+mUVqWxQ3Y4f8ZCFoQJ9H/PqtLmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmSdMQWRHPlPUL613pS/v3NDNJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zODc4 ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZmODkxMDU3OWIvNmRhMWFmZmItNGQwNS0z ZGQxLThkZDAtNWI2OTUyZDNjMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzg3OGZkNTAtZWFlMS00YjM4LWEx NDItOGVmZjg5MTA1NzliLzM4NzhmZDUwLWVhZTEtNGIzOC1hMTQyLThlZmY4OTEw NTc5Yi5jcmwwHwYDVR0jBBgwFoAUQMXDZ1KqbdY9NOCuMynjdcOGqMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zODc4ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZm ODkxMDU3OWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6Jox/1O3z4+B0iGGO5Q8FwCRHWn8Ubllz98VmXRLbkyN7R2/qLu+mG MPYPGX3HRxqPIKwqIJLxDHpILr7RDdkN8CO1Ho/lfKuOSpAGs72XmawQdkJO8lH5 ygmqlxXsuDp8B6u4Ly+eq4OloXwYODLQsWW5u0WbdtTM5t+DGIPloUwMIHlFxbSF IU+GEInCtJ5NWdIqSpIJtUqyDtCQjAsKdeLNkv0AUQuEQ16cq9eXF4BWKfNyi3EF DRWgUExSaXtQZ1YYmn9ZplZRJ03OyeiIv8inhJxgckX/WTrkQqfJGEaTQhckodGa yjGKAhiAs042Ry2sObFvppV1J5MhEcM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:19:02 2025 by rpki-client