$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa File: 239c7b2a-d138-33cf-be7d-13d8071140a8.roa (raw, json) Hash identifier: FD+tIddXEgBUUrG4KjniKwsogopegVsw8nO7t6WgEJY= Subject key identifier: F5:D1:E2:19:29:56:0D:B7:9C:FA:85:1B:66:FD:15:D0:8D:D3:4E:F4 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584812D5308D5E26B298AEF44100 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa Signing time: Mon 02 Dec 2024 14:00:51 +0000 ROA not before: Mon 02 Dec 2024 14:00:51 +0000 ROA not after: Sun 02 Mar 2025 14:00:51 +0000 asID: 18563 IP address blocks: 64.86.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:12:d5:30:8d:5e:26:b2:98:ae:f4:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Dec 2 14:00:51 2024 GMT Not After : Mar 2 14:00:51 2025 GMT Subject: CN=e19a28af-e912-41b3-b00f-9eaad3543807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:e8:fa:a0:12:8e:cc:a1:b5:35:eb:4e:a3: db:bd:17:ec:cc:ce:c8:a3:36:3b:86:4f:f0:02:22: c9:bf:13:f4:b3:fb:bc:40:2c:8e:98:15:f9:4d:58: 82:b3:dd:3b:1e:4f:9a:00:f6:4d:4e:f3:6a:28:bf: ac:a4:b7:9b:47:f8:36:06:37:f5:da:1f:e1:bc:4f: b2:7d:fb:c1:e3:da:72:02:28:50:f8:8e:c8:a7:bf: 3c:5d:d9:40:e5:0e:10:bc:f4:e0:04:fd:cd:23:05: 91:be:da:bd:ed:19:3e:bc:41:75:10:83:93:ef:20: e2:73:a5:2f:a2:72:0a:6c:87:17:07:fc:c4:ba:2c: 19:5a:07:38:85:07:6d:24:54:dc:21:b1:b1:c0:dc: 99:69:ee:02:30:a5:d0:15:bd:65:4d:00:15:ff:3c: 59:75:93:81:8f:2d:56:1e:02:40:27:6e:35:a0:0a: 5e:5c:ef:df:f2:bc:91:0e:51:82:b5:74:f2:9c:9d: a5:d0:60:52:d4:bb:e5:28:70:f4:2b:70:57:68:2b: fb:4c:55:a9:11:9b:5d:f0:87:1f:0e:b6:34:67:da: 33:11:f8:9a:5c:52:b3:0c:07:d8:a5:95:b0:8c:99: 1e:98:b4:7b:44:b0:3f:3e:7f:6a:0e:99:35:53:73: 8e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D1:E2:19:29:56:0D:B7:9C:FA:85:1B:66:FD:15:D0:8D:D3:4E:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:fe:4b:cf:e7:9d:35:c4:f7:a7:9e:b9:7f:c3:5c:03:f8:11: 39:17:7a:6b:50:3a:bf:3f:fd:73:38:ff:82:36:b5:af:19:9f: 58:97:4c:d6:58:30:82:9b:4f:07:ba:a7:6a:75:93:3c:7f:bd: 5c:10:3f:63:be:1a:71:11:10:23:f8:96:d7:9f:bf:03:c5:29: 6f:df:e0:99:f5:7a:e7:ef:a8:89:33:79:4b:3c:c3:6a:90:9b: 82:b1:34:da:6f:2f:f7:ed:0d:34:ef:f7:86:75:13:56:46:45: 8d:1c:ef:c1:1e:55:3b:30:32:9b:05:59:d0:49:f2:5b:00:bf: 72:90:6f:87:27:d5:21:96:ee:f3:99:eb:27:59:ca:50:c6:c3: de:38:05:f1:ec:83:f8:d1:89:84:08:a3:95:42:14:8b:d7:df: 49:5e:af:f2:dd:2f:64:90:07:c1:97:77:cf:f3:9f:47:b0:fc: e9:fd:bd:60:72:1a:a6:08:ee:73:9d:36:92:ad:9a:70:e6:89: b6:31:84:27:a1:ac:7b:97:46:1c:af:74:1d:40:c3:ba:f5:52: fc:38:e4:cd:92:ec:5c:70:a8:eb:73:01:fa:f7:93:67:45:12: 5f:a8:fa:54:ba:cb:77:4a:1d:8d:fc:a6:10:c6:82:95:30:3e: 44:5d:e6:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1TCNXiaymK70QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk ZTE5YTI4YWYtZTkxMi00MWIzLWIwMGYtOWVhYWQzNTQzODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8bo+qASjsyhtTXrTqPbvRfszM7IozY7hk/w AiLJvxP0s/u8QCyOmBX5TViCs907Hk+aAPZNTvNqKL+spLebR/g2Bjf12h/hvE+y ffvB49pyAihQ+I7Ip788XdlA5Q4QvPTgBP3NIwWRvtq97Rk+vEF1EIOT7yDic6Uv onIKbIcXB/zEuiwZWgc4hQdtJFTcIbGxwNyZae4CMKXQFb1lTQAV/zxZdZOBjy1W HgJAJ241oApeXO/f8ryRDlGCtXTynJ2l0GBS1LvlKHD0K3BXaCv7TFWpEZtd8Icf DrY0Z9ozEfiaXFKzDAfYpZWwjJkemLR7RLA/Pn9qDpk1U3OOAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXR4hkpVg23nPqFG2b9FdCN0070MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMjM5YzdiMmEtZDEzOC0z M2NmLWJlN2QtMTNkODA3MTE0MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQFaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv+S8/nnTXE96eeuX/DXAP4ETkXemtQOr8//XM4/4I2ta8Zn1iXTNZY MIKbTwe6p2p1kzx/vVwQP2O+GnERECP4ltefvwPFKW/f4Jn1eufvqIkzeUs8w2qQ m4KxNNpvL/ftDTTv94Z1E1ZGRY0c78EeVTswMpsFWdBJ8lsAv3KQb4cn1SGW7vOZ 6ydZylDGw944BfHsg/jRiYQIo5VCFIvX30ler/LdL2SQB8GXd8/zn0ew/On9vWBy GqYI7nOdNpKtmnDmibYxhCehrHuXRhyvdB1Aw7r1Uvw45M2S7FxwqOtzAfr3k2dF El+o+lS6y3dKHY38phDGgpUwPkRd5g0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:17 2025 by rpki-client