$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa File: 36766eed-ee8a-3083-8823-23777bfe75b3.roa (raw, json) Hash identifier: zks/GT3keNsD1xbnb5pWhi/Lq5lmTWiKJhuSQT+xNC8= Subject key identifier: 83:65:20:FB:5E:41:56:45:29:5E:89:01:69:4A:C9:80:8C:77:2D:99 Certificate issuer: /CN=7f1c958a-c540-4699-8a42-ad625fc751f3 Certificate serial: 010D0C9F43285848222FD490B507EB6D2F504080 Authority key identifier: C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa Signing time: Sun 08 Dec 2024 02:00:39 +0000 ROA not before: Sun 08 Dec 2024 02:00:39 +0000 ROA not after: Sat 08 Mar 2025 02:00:39 +0000 asID: 16509 IP address blocks: 209.160.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:22:2f:d4:90:b5:07:eb:6d:2f:50:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f1c958a-c540-4699-8a42-ad625fc751f3 Validity Not Before: Dec 8 02:00:39 2024 GMT Not After : Mar 8 02:00:39 2025 GMT Subject: CN=01be611f-ca85-407c-85f7-a7dbbfa2fbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:5f:0b:af:57:69:b4:1e:6f:74:24:d3:e1: 19:be:a3:1e:92:1d:fe:dd:5c:5b:e8:49:c7:95:28: 35:9b:08:fc:fe:a1:f2:1f:7c:4d:e0:6f:02:77:fd: 57:f3:42:18:96:00:0d:2a:71:e1:68:8c:3a:dd:79: 60:63:59:b2:0b:f0:ec:9f:70:43:80:0a:df:a4:38: 73:30:d2:0a:8b:98:0d:73:bf:5f:36:1d:0b:1e:f0: 7f:b6:85:53:a0:c9:33:e0:05:af:d8:28:21:84:8b: df:5e:5f:8a:00:ca:66:e5:aa:16:a9:e1:a6:24:22: 6d:1a:b8:6b:9b:17:5a:6e:87:09:15:33:94:28:dd: c7:83:be:8e:67:9d:13:d4:89:40:4c:e2:b5:43:13: 20:90:fe:05:e5:8d:be:71:f8:5c:39:83:3c:82:e4: 07:c7:97:53:4c:be:ec:8d:fb:83:46:30:70:9e:84: 52:22:24:d9:e2:43:3e:a1:40:48:87:af:20:22:b9: e9:cd:01:1b:cc:23:5a:77:3c:0f:7c:d7:41:f2:4f: 7e:01:67:76:db:90:9a:b1:f5:d2:1b:4b:d3:62:3c: ce:03:ab:77:39:bc:b5:d6:7f:0e:84:af:41:e5:67: df:76:a0:16:44:16:a3:c7:de:d7:0c:5b:0c:85:80: 5f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:65:20:FB:5E:41:56:45:29:5E:89:01:69:4A:C9:80:8C:77:2D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl X509v3 Authority Key Identifier: keyid:C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer sbgp-ipAddrBlock: critical IPv4: 209.160.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:1a:8d:de:30:66:c7:0a:72:2f:7f:21:1c:91:55:52:57:c0: 60:92:1d:1e:e0:32:2d:e0:c0:2d:6f:68:b9:f7:4e:7d:2c:a0: 28:98:35:fb:36:e3:4e:7b:c7:4c:26:56:1b:24:f5:69:25:09: bc:e2:28:b5:91:a9:09:88:c2:6a:ba:36:64:91:38:ea:15:7c: 6f:fa:95:9f:64:6e:d1:d6:eb:39:8f:26:c4:30:f3:a4:59:6f: cc:4d:53:18:87:34:94:15:7e:05:f0:e5:cc:52:f0:cf:0d:99: f7:07:ee:c0:da:71:30:26:5a:35:69:2c:2c:c8:80:9b:63:2e: 34:d9:65:55:e9:85:07:de:69:2d:2c:21:60:ee:11:05:a3:b6: 40:5f:98:04:a1:a7:12:e6:f4:a3:76:c3:5c:ff:cc:56:c9:6b: 6b:98:36:db:5d:d3:5b:8c:ea:70:93:bf:24:4e:99:f4:04:5a: 4c:0b:ec:cb:08:1c:a9:8a:59:01:75:1c:a5:65:91:a2:0f:c7: 70:aa:a6:1a:70:01:c9:9f:6f:27:1b:32:cd:75:8d:9a:a1:5e: d3:1a:5d:ed:22:fd:d8:e3:81:fd:31:4f:e3:d6:d7:67:5f:d5: 17:d5:e4:87:3f:39:42:b0:ad:9a:0a:f0:74:0b:e6:35:6f:13: d2:9e:2f:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL9SQtQfrbS9QQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2YxYzk1OGEtYzU0MC00Njk5LThhNDItYWQ2MjVmYzc1 MWYzMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk MDFiZTYxMWYtY2E4NS00MDdjLTg1ZjctYTdkYmJmYTJmYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthFfC69XabQeb3Qk0+EZvqMekh3+3Vxb6EnH lSg1mwj8/qHyH3xN4G8Cd/1X80IYlgANKnHhaIw63XlgY1myC/Dsn3BDgArfpDhz MNIKi5gNc79fNh0LHvB/toVToMkz4AWv2CghhIvfXl+KAMpm5aoWqeGmJCJtGrhr mxdabocJFTOUKN3Hg76OZ50T1IlATOK1QxMgkP4F5Y2+cfhcOYM8guQHx5dTTL7s jfuDRjBwnoRSIiTZ4kM+oUBIh68gIrnpzQEbzCNadzwPfNdB8k9+AWd225CasfXS G0vTYjzOA6t3Oby11n8OhK9B5WffdqAWRBajx97XDFsMhYBfawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINlIPteQVZFKV6JAWlKyYCMdy2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjFj OTU4YS1jNTQwLTQ2OTktOGE0Mi1hZDYyNWZjNzUxZjMvMzY3NjZlZWQtZWU4YS0z MDgzLTg4MjMtMjM3NzdiZmU3NWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2YxYzk1OGEtYzU0MC00Njk5LThh NDItYWQ2MjVmYzc1MWYzLzdmMWM5NThhLWM1NDAtNDY5OS04YTQyLWFkNjI1ZmM3 NTFmMy5jcmwwHwYDVR0jBBgwFoAUxBwyXd04D1fYSwT0AbicYdpSWSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZjFjOTU4YS1jNTQwLTQ2OTktOGE0Mi1hZDYy NWZjNzUxZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0aBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoajd4wZscKci9/IRyRVVJXwGCSHR7gMi3gwC1vaLn3Tn0soCiYNfs2 4057x0wmVhsk9WklCbziKLWRqQmIwmq6NmSROOoVfG/6lZ9kbtHW6zmPJsQw86RZ b8xNUxiHNJQVfgXw5cxS8M8NmfcH7sDacTAmWjVpLCzIgJtjLjTZZVXphQfeaS0s IWDuEQWjtkBfmAShpxLm9KN2w1z/zFbJa2uYNttd01uM6nCTvyROmfQEWkwL7MsI HKmKWQF1HKVlkaIPx3CqphpwAcmfbycbMs11jZqhXtMaXe0i/djjgf0xT+PW12df 1RfV5Ic/OUKwrZoK8HQL5jVvE9KeL+U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:55 2025 by rpki-client