$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/c2426f57-b823-345d-b891-0c00a98d5d07.roa File: c2426f57-b823-345d-b891-0c00a98d5d07.roa (raw, json) Hash identifier: AEbjiKqgQfVPpsVio2ASWFkTPRK8PntA86Dy9XPuQSM= Subject key identifier: 59:89:EB:C6:22:BE:8D:2A:BF:25:3B:A2:1B:ED:69:7C:10:B5:BB:48 Certificate issuer: /CN=a686eafb-60a6-46e8-b535-fcb7eb7f5c45 Certificate serial: 010D0C9F43285848494577676DE9A8B1E4BB1840 Authority key identifier: 42:42:7A:72:DD:4E:35:2F:31:08:25:14:35:43:07:FF:CC:AD:A2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/c2426f57-b823-345d-b891-0c00a98d5d07.roa Signing time: Sun 22 Dec 2024 02:00:39 +0000 ROA not before: Sun 22 Dec 2024 02:00:39 +0000 ROA not after: Sat 22 Mar 2025 01:00:39 +0000 asID: 36446 IP address blocks: 208.65.112.0/22 maxlen: 24 2604:7180::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:49:45:77:67:6d:e9:a8:b1:e4:bb:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a686eafb-60a6-46e8-b535-fcb7eb7f5c45 Validity Not Before: Dec 22 02:00:39 2024 GMT Not After : Mar 22 01:00:39 2025 GMT Subject: CN=7166b039-d2a6-4381-b56d-f5bdc812529a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5a:57:61:87:9b:ef:d2:9e:cd:e2:0d:37:f3: 51:26:3e:52:54:b0:e1:c2:69:93:05:ef:a0:2c:29: 2d:69:fc:0d:1e:f8:57:a9:e8:b4:6e:57:33:e1:70: 64:ab:ef:95:b3:b3:77:2a:3c:18:8f:43:bf:bc:da: bd:da:90:c9:6c:f5:5c:db:7d:25:64:7d:62:7b:95: ca:73:8f:14:19:23:04:0c:f7:54:07:e2:2b:bc:95: 42:42:01:03:61:3b:d3:c3:97:c0:c5:71:1b:c5:53: e4:da:8c:f7:7f:a7:a9:fa:78:04:78:7a:f5:9e:41: 9c:eb:ac:e5:9b:b1:1a:39:64:32:69:97:59:87:ee: 88:91:7b:0e:fa:62:f2:79:01:cd:c3:98:5e:2d:f5: e0:a8:cc:96:1f:b5:25:54:d3:b2:23:32:35:d0:93: c3:9c:ea:c1:ef:1e:fe:64:a1:b3:73:44:12:a0:83: 09:f2:c1:e7:ff:61:96:9e:f0:54:db:4a:3b:bf:2e: 7f:d0:5e:1b:4b:b3:0a:b2:67:1c:5c:71:d6:a3:8c: fb:8a:ad:a1:81:45:e2:cd:10:45:66:95:a7:c1:28: 9f:ee:38:7a:59:2a:2c:ad:e6:06:cb:d1:c6:de:25: 30:b3:15:6b:97:e8:38:86:f7:c2:a2:b1:c1:48:be: c5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:89:EB:C6:22:BE:8D:2A:BF:25:3B:A2:1B:ED:69:7C:10:B5:BB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/c2426f57-b823-345d-b891-0c00a98d5d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.crl X509v3 Authority Key Identifier: keyid:42:42:7A:72:DD:4E:35:2F:31:08:25:14:35:43:07:FF:CC:AD:A2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.cer sbgp-ipAddrBlock: critical IPv4: 208.65.112.0/22 IPv6: 2604:7180::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:36:52:68:3c:4e:c4:c1:3e:5a:90:1f:03:de:a8:23:76:90: 54:a4:7d:85:ee:c4:84:bb:78:1f:c4:0f:41:98:a3:55:1a:b4: 75:b5:85:3a:4c:ec:7e:fc:5c:5a:2c:21:d2:4c:a7:f8:df:a1: 8a:e9:d7:23:fb:5f:41:d3:b8:f8:43:e8:23:ae:07:b4:be:36: 58:57:23:67:18:7d:ab:68:44:2e:61:93:da:a5:41:84:8f:41: 77:ce:81:d5:91:2c:a9:29:b0:e3:63:04:32:53:24:3a:2c:a1: 94:22:de:bf:cd:18:aa:a7:3c:13:53:55:1e:f1:35:d4:bf:4c: f0:2e:e7:a7:27:cb:f0:e3:b2:0e:7e:3a:78:c4:51:9f:37:c4: f0:27:b6:53:15:a8:c4:0e:a1:1c:84:8a:02:b1:4a:be:ea:76: ad:e6:eb:b1:69:12:2e:3c:e0:21:6e:a7:06:c8:01:be:6b:33: 00:24:8b:a1:cb:3f:da:b7:14:23:38:c7:cd:31:47:8c:9b:7a: 48:ed:42:ec:90:ad:86:88:6a:d1:d2:77:fc:f9:02:24:17:b6: a3:58:c0:66:d0:5a:38:d2:b6:9c:67:59:71:5a:2e:04:55:ee: 56:c2:55:3f:00:b5:62:11:8e:b7:4b:c8:48:66:6f:08:89:73: 05:52:d8:55 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEhJRXdnbemoseS7GEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4NmVhZmItNjBhNi00NmU4LWI1MzUtZmNiN2ViN2Y1 YzQ1MB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk NzE2NmIwMzktZDJhNi00MzgxLWI1NmQtZjViZGM4MTI1MjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlpXYYeb79KezeINN/NRJj5SVLDhwmmTBe+g LCktafwNHvhXqei0blcz4XBkq++Vs7N3KjwYj0O/vNq92pDJbPVc230lZH1ie5XK c48UGSMEDPdUB+IrvJVCQgEDYTvTw5fAxXEbxVPk2oz3f6ep+ngEeHr1nkGc66zl m7EaOWQyaZdZh+6IkXsO+mLyeQHNw5heLfXgqMyWH7UlVNOyIzI10JPDnOrB7x7+ ZKGzc0QSoIMJ8sHn/2GWnvBU20o7vy5/0F4bS7MKsmccXHHWo4z7iq2hgUXizRBF ZpWnwSif7jh6WSosreYGy9HG3iUwsxVrl+g4hvfCorHBSL7FuQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFmJ68Yivo0qvyU7ohvtaXwQtbtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hNjg2 ZWFmYi02MGE2LTQ2ZTgtYjUzNS1mY2I3ZWI3ZjVjNDUvYzI0MjZmNTctYjgyMy0z NDVkLWI4OTEtMGMwMGE5OGQ1ZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTY4NmVhZmItNjBhNi00NmU4LWI1 MzUtZmNiN2ViN2Y1YzQ1L2E2ODZlYWZiLTYwYTYtNDZlOC1iNTM1LWZjYjdlYjdm NWM0NS5jcmwwHwYDVR0jBBgwFoAUQkJ6ct1ONS8xCCUUNUMH/8ytorUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hNjg2ZWFmYi02MGE2LTQ2ZTgtYjUzNS1mY2I3 ZWI3ZjVjNDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC0EFwMA4E AgACMAgDBgQmBHGAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC3NlJoPE7EwT5akB8D3qgjdpBUpH2F7sSE u3gfxA9BmKNVGrR1tYU6TOx+/FxaLCHSTKf436GK6dcj+19B07j4Q+gjrge0vjZY VyNnGH2raEQuYZPapUGEj0F3zoHVkSypKbDjYwQyUyQ6LKGUIt6/zRiqpzwTU1Ue 8TXUv0zwLuenJ8vw47IOfjp4xFGfN8TwJ7ZTFajEDqEchIoCsUq+6nat5uuxaRIu POAhbqcGyAG+azMAJIuhyz/atxQjOMfNMUeMm3pI7ULskK2GiGrR0nf8+QIkF7aj WMBm0Fo40racZ1lxWi4EVe5WwlU/ALViEY63S8hIZm8IiXMFUthV -----END CERTIFICATE-----Generated at Sun Feb 16 20:42:07 2025 by rpki-client