$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/4e3b3dc9-b0d6-37d6-b7d4-20e3cd11e533.roa File: 4e3b3dc9-b0d6-37d6-b7d4-20e3cd11e533.roa (raw, json) Hash identifier: oem0Cb58yitin2BvQuuvoF39qGGhCbm/+ONB8hak/D4= Subject key identifier: B4:86:55:C8:82:EE:E2:B8:50:B2:B9:F2:DC:D5:C0:E7:77:F8:9F:45 Certificate issuer: /CN=70212b19-99d4-4532-a7e0-a5bdbef20170 Certificate serial: 010D0C9F432858482A8FDF34DFDB3A7E6988B340 Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/4e3b3dc9-b0d6-37d6-b7d4-20e3cd11e533.roa Signing time: Wed 11 Dec 2024 02:00:38 +0000 ROA not before: Wed 11 Dec 2024 02:00:38 +0000 ROA not after: Tue 11 Mar 2025 01:00:38 +0000 asID: 14618 IP address blocks: 168.100.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2a:8f:df:34:df:db:3a:7e:69:88:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170 Validity Not Before: Dec 11 02:00:38 2024 GMT Not After : Mar 11 01:00:38 2025 GMT Subject: CN=3f6b4179-ebc4-43d3-ad0d-4b2d48a67176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:31:ae:97:f9:e8:e5:4e:0b:06:5b:b9:8d:b4: b2:62:ca:88:1d:05:e1:81:8f:a2:0a:13:85:af:4b: 60:b1:f9:29:fa:b0:9c:8b:57:f2:52:dc:a0:51:ac: 58:0a:da:cd:0d:ee:08:e9:5c:5e:29:fd:51:14:d3: c3:cc:24:02:ec:69:5a:c1:95:50:87:82:62:3c:5e: f4:df:7b:4d:06:0c:dc:41:3f:1d:63:29:0e:0a:8a: 90:44:7a:b7:b6:3b:9c:41:a5:56:c9:72:e9:a1:80: 57:53:70:da:5d:d9:ff:15:6d:ed:b4:b1:8d:d9:62: 02:0c:cb:3b:17:2f:79:3c:23:b5:75:1b:76:85:a8: 3b:86:c4:9d:d8:5c:0d:fa:cf:30:8a:af:df:ee:64: 77:f0:3e:f9:9d:02:36:86:7b:86:ef:56:fb:d7:99: e0:62:6d:f1:20:7f:e9:8f:0e:ab:2e:cf:b5:74:b6: 8e:fc:4d:13:21:c5:8d:96:30:9c:d2:ac:23:61:46: 00:4b:5f:f2:1e:d4:59:2c:e1:d9:03:6c:bb:fe:ef: 02:04:82:c4:fd:56:b2:bc:7d:d9:19:f9:7f:d9:ca: ee:c1:4a:32:c9:7e:49:44:6d:b6:d3:1a:95:c6:07: 23:0a:7e:fe:a3:a1:48:fb:fc:9c:88:b6:ad:8b:9f: 62:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:86:55:C8:82:EE:E2:B8:50:B2:B9:F2:DC:D5:C0:E7:77:F8:9F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/4e3b3dc9-b0d6-37d6-b7d4-20e3cd11e533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl X509v3 Authority Key Identifier: keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer sbgp-ipAddrBlock: critical IPv4: 168.100.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:be:92:ba:66:f3:f0:09:17:41:32:49:f0:b7:9d:57:55:ac: fe:52:fc:b1:27:3e:02:18:94:53:9f:7e:2d:c9:dc:8a:38:db: af:1d:41:5e:c4:32:2b:82:9a:96:6e:26:e5:3c:dc:d6:3d:b6: 52:91:3f:7c:74:95:ac:06:8f:21:31:56:a8:e7:eb:92:4e:e1: 07:7d:5a:b7:f6:ed:d9:3c:ca:e9:e6:2a:08:00:12:41:13:b1: 07:26:26:69:64:c3:9a:88:5c:fd:f4:06:cd:5c:4e:a4:eb:10: fe:e9:2e:1f:d5:a1:bf:66:49:47:38:cf:d3:6a:4e:d8:ca:48: 20:f3:13:af:e4:f1:27:f8:a9:e1:39:74:ea:d3:83:5f:c9:83: 8d:1a:13:fe:0f:82:79:44:78:bd:a6:ec:fb:37:4c:16:eb:cb: f9:ea:1b:72:94:e8:e1:57:d0:7b:ea:6c:29:92:e2:cb:ed:bb: 9e:11:1b:b9:e1:fd:6f:15:38:ac:73:eb:d5:ad:b2:55:0d:bb: 4b:90:92:68:42:eb:5d:3b:5b:5a:29:06:14:2b:87:2a:91:7d: f9:00:83:ea:15:d3:a7:a2:2e:bb:54:61:c2:ee:a7:de:9f:f0: 33:ec:b6:0f:2d:c6:74:2b:7f:e0:ce:06:df:d1:1b:44:3d:2e: a1:a3:ef:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqj98039s6fmmIs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAyMTJiMTktOTlkNC00NTMyLWE3ZTAtYTViZGJlZjIw MTcwMB4XDTI0MTIxMTAyMDAzOFoXDTI1MDMxMTAxMDAzOFowLzEtMCsGA1UEAxMk M2Y2YjQxNzktZWJjNC00M2QzLWFkMGQtNGIyZDQ4YTY3MTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTGul/no5U4LBlu5jbSyYsqIHQXhgY+iChOF r0tgsfkp+rCci1fyUtygUaxYCtrNDe4I6VxeKf1RFNPDzCQC7GlawZVQh4JiPF70 33tNBgzcQT8dYykOCoqQRHq3tjucQaVWyXLpoYBXU3DaXdn/FW3ttLGN2WICDMs7 Fy95PCO1dRt2hag7hsSd2FwN+s8wiq/f7mR38D75nQI2hnuG71b715ngYm3xIH/p jw6rLs+1dLaO/E0TIcWNljCc0qwjYUYAS1/yHtRZLOHZA2y7/u8CBILE/VayvH3Z Gfl/2cruwUoyyX5JRG220xqVxgcjCn7+o6FI+/yciLati59iHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSGVciC7uK4ULK58tzVwOd3+J9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MDIx MmIxOS05OWQ0LTQ1MzItYTdlMC1hNWJkYmVmMjAxNzAvNGUzYjNkYzktYjBkNi0z N2Q2LWI3ZDQtMjBlM2NkMTFlNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzAyMTJiMTktOTlkNC00NTMyLWE3 ZTAtYTViZGJlZjIwMTcwLzcwMjEyYjE5LTk5ZDQtNDUzMi1hN2UwLWE1YmRiZWYy MDE3MC5jcmwwHwYDVR0jBBgwFoAUEDo3ilx+8pj7dD0sbWIEicpkovUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MDIxMmIxOS05OWQ0LTQ1MzItYTdlMC1hNWJk YmVmMjAxNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqGRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK+krpm8/AJF0EySfC3nVdVrP5S/LEnPgIYlFOffi3J3Io4268dQV7E MiuCmpZuJuU83NY9tlKRP3x0lawGjyExVqjn65JO4Qd9Wrf27dk8yunmKggAEkET sQcmJmlkw5qIXP30Bs1cTqTrEP7pLh/Vob9mSUc4z9NqTtjKSCDzE6/k8Sf4qeE5 dOrTg1/Jg40aE/4PgnlEeL2m7Ps3TBbry/nqG3KU6OFX0HvqbCmS4svtu54RG7nh /W8VOKxz69WtslUNu0uQkmhC6107W1opBhQrhyqRffkAg+oV06eiLrtUYcLup96f 8DPstg8txnQrf+DOBt/RG0Q9LqGj73A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:25 2025 by rpki-client