$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/2ca44476-ee4f-3c61-87f2-ba0563f78bff.roa File: 2ca44476-ee4f-3c61-87f2-ba0563f78bff.roa (raw, json) Hash identifier: 1OxwQD2gD8bn+J/PMvsdBe+jVAT2onIFjp82ke/KmIo= Subject key identifier: CD:0B:AE:89:C0:4E:05:A4:99:53:27:AD:A2:E3:47:42:9F:88:C7:BE Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584854703B704D66DCDF8D55F6C0 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/2ca44476-ee4f-3c61-87f2-ba0563f78bff.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 399575 IP address blocks: 216.205.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:3b:70:4d:66:dc:df:8d:55:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=996e7403-2c59-4a21-beea-8ed213110da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:b7:3f:ca:f3:25:07:ec:6e:29:d4:44:2a: 88:ce:d6:a5:5d:36:aa:19:88:53:4a:46:95:73:c2: d3:13:b1:6a:4c:94:d6:89:2f:b4:fc:8e:f7:cd:bf: c6:d6:3b:0c:48:b3:b1:1f:90:c1:03:11:18:af:07: d1:0b:52:27:16:66:09:61:72:ec:33:5b:ab:9e:69: 68:e6:5e:67:96:04:5b:39:51:24:82:29:0d:46:e1: 86:81:d7:70:26:7d:1c:7b:70:99:4d:7d:39:a5:3d: c9:0e:e2:73:0e:d0:01:05:09:2b:b6:70:77:6b:09: f8:2a:22:10:7b:20:35:b1:65:58:34:86:85:65:d8: e4:eb:aa:95:9d:66:85:5e:5a:dd:de:44:06:7d:be: 4f:e1:ec:f0:34:e6:59:9a:97:b3:58:e9:66:12:95: 11:cb:64:78:3a:f3:bc:80:1c:b3:8b:38:82:bf:37: fb:60:34:66:3f:4e:a4:b5:e6:ba:e1:af:01:a1:cd: 42:62:95:65:a7:24:52:40:69:e9:bb:c7:d8:56:c3: 4c:e4:a8:a2:9b:1a:c0:1b:32:3c:c1:50:65:05:81: f4:45:48:7e:e9:d9:d6:6a:30:2f:7d:19:83:40:1e: 6e:7e:80:d6:16:9a:ba:e1:f5:4d:0a:10:ad:eb:d5: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0B:AE:89:C0:4E:05:A4:99:53:27:AD:A2:E3:47:42:9F:88:C7:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/2ca44476-ee4f-3c61-87f2-ba0563f78bff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 216.205.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:bc:1c:17:c8:f6:79:98:b2:c5:2d:0a:5a:29:e8:66:96:d8: ce:6b:3d:b5:bb:63:5a:e8:d5:81:05:de:1f:3c:4d:e0:c6:d3: b4:0e:bc:a5:6a:7d:f0:f6:d9:25:90:ce:4e:f2:b6:1c:b2:e9: 64:6d:23:1c:e9:15:32:e7:12:46:d2:8c:db:ba:e2:a5:d7:23: 43:4d:8f:04:2e:fc:a2:a1:ea:46:e9:31:72:f3:d9:4f:cf:fa: b6:3a:2d:b5:e5:25:5d:e4:23:20:41:5d:bd:ba:2b:1d:09:20: 1a:eb:e4:6f:c2:7a:9b:7b:0f:c9:22:b7:62:97:83:72:05:43: 87:97:ad:72:95:22:b4:8e:bd:56:b7:e1:0f:da:8c:c3:b4:5c: da:34:44:66:df:be:b9:18:5f:75:ea:19:18:d0:a4:a4:98:36: e6:76:35:96:72:72:da:c3:ef:39:99:9a:49:20:88:2f:fc:f4: fb:df:95:ca:93:25:5b:42:82:e0:f0:df:49:aa:c7:8a:73:b1: d2:6b:37:a5:0f:12:4a:d2:1e:01:c2:9a:6d:d8:b4:12:5e:22: 66:6b:6e:38:b3:7f:6d:be:ba:bd:00:94:cd:b3:ea:fe:84:cd: fd:9a:9a:52:82:98:62:34:f2:cd:f4:9e:a2:85:53:32:59:78: 31:65:03:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcDtwTWbc341V9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk OTk2ZTc0MDMtMmM1OS00YTIxLWJlZWEtOGVkMjEzMTEwZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN+3P8rzJQfsbinURCqIztalXTaqGYhTSkaV c8LTE7FqTJTWiS+0/I73zb/G1jsMSLOxH5DBAxEYrwfRC1InFmYJYXLsM1urnmlo 5l5nlgRbOVEkgikNRuGGgddwJn0ce3CZTX05pT3JDuJzDtABBQkrtnB3awn4KiIQ eyA1sWVYNIaFZdjk66qVnWaFXlrd3kQGfb5P4ezwNOZZmpezWOlmEpURy2R4OvO8 gByziziCvzf7YDRmP06ktea64a8Boc1CYpVlpyRSQGnpu8fYVsNM5KiimxrAGzI8 wVBlBYH0RUh+6dnWajAvfRmDQB5ufoDWFpq64fVNChCt69X+yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0LronATgWkmVMnraLjR0KfiMe+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvMmNhNDQ0NzYtZWU0Zi0z YzYxLTg3ZjItYmEwNTYzZjc4YmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2M1iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm8HBfI9nmYssUtClop6GaW2M5rPbW7Y1ro1YEF3h88TeDG07QOvKVq ffD22SWQzk7ythyy6WRtIxzpFTLnEkbSjNu64qXXI0NNjwQu/KKh6kbpMXLz2U/P +rY6LbXlJV3kIyBBXb26Kx0JIBrr5G/Cept7D8kit2KXg3IFQ4eXrXKVIrSOvVa3 4Q/ajMO0XNo0RGbfvrkYX3XqGRjQpKSYNuZ2NZZyctrD7zmZmkkgiC/89PvflcqT JVtCguDw30mqx4pzsdJrN6UPEkrSHgHCmm3YtBJeImZrbjizf22+ur0AlM2z6v6E zf2amlKCmGI08s30nqKFUzJZeDFlA+k= -----END CERTIFICATE-----Generated at Sun Feb 16 20:10:02 2025 by rpki-client