$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2229833b-d2da-3516-9e00-9a8df30cedaf.roa File: 2229833b-d2da-3516-9e00-9a8df30cedaf.roa (raw, json) Hash identifier: wAwFz+vZdDVKPfe4j7q3glCJ50YnRWhTPPNtrPwB0gc= Subject key identifier: 41:6B:BC:3B:9C:3A:FF:9D:ED:72:2F:CD:FB:8B:5F:69:FD:4A:7E:DD Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F432858482CB8F9A4932E368DB41509C0 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2229833b-d2da-3516-9e00-9a8df30cedaf.roa Signing time: Wed 11 Dec 2024 20:35:09 +0000 ROA not before: Wed 11 Dec 2024 20:35:09 +0000 ROA not after: Tue 11 Mar 2025 19:35:09 +0000 asID: 16276 IP address blocks: 216.24.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2c:b8:f9:a4:93:2e:36:8d:b4:15:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Dec 11 20:35:09 2024 GMT Not After : Mar 11 19:35:09 2025 GMT Subject: CN=23e46320-3a3e-485d-9966-698e00927b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:76:8b:58:16:95:b6:80:6e:ec:e0:a3:e4: b6:bd:bc:c5:3b:19:0d:a3:04:9f:b2:7a:22:92:eb: 52:95:20:70:b4:ba:26:0b:02:6e:d5:8e:b4:e2:3e: 14:56:fa:cd:c6:3e:0f:78:6d:00:00:87:c1:a9:14: a0:8e:0c:70:a7:d4:ed:2b:7d:fe:5d:09:29:11:7c: ea:56:63:1d:be:02:03:6d:c7:93:19:18:49:bc:3a: b0:4b:78:dc:a2:77:1d:57:9a:5d:15:ab:8d:ed:af: 0a:6f:d2:5c:8a:6b:de:11:98:f1:7c:30:92:d3:2c: 01:ac:b9:38:da:38:a7:35:fa:21:b8:2b:88:4f:fd: 74:a1:24:16:c9:eb:e9:cf:3f:4e:2d:15:33:d4:ba: d8:35:dc:e1:b9:3e:b0:85:1a:47:65:39:40:68:16: b1:a8:2f:cd:24:e3:43:37:2a:b1:9b:af:87:27:e4: 1e:f5:48:a5:e0:d8:a0:35:d3:2d:b9:1d:ee:17:62: d2:1f:00:65:b6:f3:c3:b1:78:5d:d0:4a:4a:2b:4a: d7:73:b3:d9:64:fb:eb:3c:48:c8:e0:ad:86:85:81: 54:62:c1:e4:44:d8:1a:38:14:9f:82:7d:d1:4b:21: 50:0a:70:72:7f:81:ca:32:01:61:1b:ab:18:72:09: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6B:BC:3B:9C:3A:FF:9D:ED:72:2F:CD:FB:8B:5F:69:FD:4A:7E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2229833b-d2da-3516-9e00-9a8df30cedaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1f:2d:f0:0b:4a:f9:f3:65:5a:0e:1e:ef:fa:d4:02:5b:25: f2:b9:47:f3:9d:cc:d7:22:35:eb:4d:5e:23:5b:ee:53:11:b1: 66:f2:4d:40:54:bc:76:3c:ac:e1:fe:8c:b4:77:a7:6a:bb:70: f7:42:f9:a5:e3:86:95:20:82:e6:40:d2:2d:89:a9:0b:4f:5d: 5b:8e:b0:b6:8c:7a:98:62:53:f1:5b:d2:10:61:23:f8:c7:20: a1:bd:3d:ab:0a:f5:5e:bf:43:ca:92:b9:65:09:e2:d6:b9:5c: d0:3c:6f:38:61:89:60:5e:d8:35:ef:83:89:81:6f:20:05:0f: fb:2b:e9:82:b4:7c:d1:79:37:ec:1c:ae:17:11:83:cf:73:23: e4:ad:45:a9:d4:0d:4e:41:8e:e4:16:1b:ef:66:02:77:56:45: 62:76:6e:b3:cf:c7:cd:d9:9a:ba:ba:5f:03:93:82:6d:fb:1d: dd:ee:32:82:bb:bd:78:ff:4d:41:d3:7a:38:45:c6:78:de:9e: 08:a8:15:eb:8c:98:3d:e4:e8:87:a4:92:66:c8:45:1d:e3:12: c2:b0:2c:9e:19:60:dc:3a:54:b3:a1:7c:3e:26:8c:76:c9:83: a0:60:ad:a7:60:5d:12:fa:d3:81:ba:0a:ba:de:5b:61:40:9b: 30:e5:e5:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgsuPmkky42jbQVCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI0MTIxMTIwMzUwOVoXDTI1MDMxMTE5MzUwOVowLzEtMCsGA1UEAxMk MjNlNDYzMjAtM2EzZS00ODVkLTk5NjYtNjk4ZTAwOTI3YjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopt2i1gWlbaAbuzgo+S2vbzFOxkNowSfsnoi kutSlSBwtLomCwJu1Y604j4UVvrNxj4PeG0AAIfBqRSgjgxwp9TtK33+XQkpEXzq VmMdvgIDbceTGRhJvDqwS3jconcdV5pdFauN7a8Kb9JcimveEZjxfDCS0ywBrLk4 2jinNfohuCuIT/10oSQWyevpzz9OLRUz1LrYNdzhuT6whRpHZTlAaBaxqC/NJOND Nyqxm6+HJ+Qe9Uil4NigNdMtuR3uF2LSHwBltvPDsXhd0EpKK0rXc7PZZPvrPEjI 4K2GhYFUYsHkRNgaOBSfgn3RSyFQCnByf4HKMgFhG6sYcgl2QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFrvDucOv+d7XIvzfuLX2n9Sn7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMjIyOTgzM2ItZDJkYS0z NTE2LTllMDAtOWE4ZGYzMGNlZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8fLfALSvnzZVoOHu/61AJbJfK5R/OdzNciNetNXiNb7lMRsWbyTUBU vHY8rOH+jLR3p2q7cPdC+aXjhpUgguZA0i2JqQtPXVuOsLaMephiU/Fb0hBhI/jH IKG9PasK9V6/Q8qSuWUJ4ta5XNA8bzhhiWBe2DXvg4mBbyAFD/sr6YK0fNF5N+wc rhcRg89zI+StRanUDU5BjuQWG+9mAndWRWJ2brPPx83Zmrq6XwOTgm37Hd3uMoK7 vXj/TUHTejhFxnjengioFeuMmD3k6IekkmbIRR3jEsKwLJ4ZYNw6VLOhfD4mjHbJ g6BgradgXRL604G6CrreW2FAmzDl5Ws= -----END CERTIFICATE-----Generated at Wed Feb 19 20:41:32 2025 by rpki-client