$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/804ef55f-16ef-36d7-851a-f40ec93a302c.roa File: 804ef55f-16ef-36d7-851a-f40ec93a302c.roa (raw, json) Hash identifier: kVhMJBMs9PyheOWJ7CV28V8WVpP6ybNP4gUbh2JzDXU= Subject key identifier: 12:72:A1:FE:28:62:60:FD:95:89:D8:61:42:31:DD:5C:98:B5:1A:FF Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F43285848854B444DC5D78355E0A02B00 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/804ef55f-16ef-36d7-851a-f40ec93a302c.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 61317 IP address blocks: 216.24.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:44:4d:c5:d7:83:55:e0:a0:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=89f2b170-7d20-4f6a-baf3-3903b4992ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:61:9b:cf:30:24:e8:fe:4c:42:b5:e9:a3:c3: ff:c3:03:fe:38:11:c5:5a:77:9f:e4:55:db:b0:c0: a9:30:11:f1:f3:50:05:40:42:89:e3:39:84:e9:5c: d8:13:da:ae:01:0f:37:b0:a6:c1:a3:6e:9b:ed:93: 86:4e:a6:2f:2a:37:4d:9f:2a:ac:aa:76:8b:02:43: d1:5c:fe:2b:09:e5:f5:bc:11:fd:ee:67:0f:bc:95: 37:78:0f:8c:5e:fa:6b:9d:8d:4d:c5:37:fb:4e:4e: d8:8a:3c:a3:54:90:6a:69:ce:cc:39:24:8c:af:29: 93:a2:fc:b5:6c:8c:41:82:d0:68:11:2b:2f:54:cb: 3e:aa:05:44:6c:f4:8e:e1:50:63:41:45:51:5c:01: 17:8a:ca:56:13:48:ff:91:45:d9:56:20:f0:ee:a2: 3b:fe:a6:f1:15:91:46:c7:e8:8a:86:f0:e7:e1:97: 57:3b:92:16:f9:4d:04:9c:d5:88:64:01:97:4e:f8: 89:5c:61:b6:95:05:30:8e:0b:7a:6a:04:d8:53:b7: 73:d6:c1:ef:a5:5e:50:91:e4:e0:d0:20:f6:fc:aa: 6c:91:a5:99:50:7c:24:09:51:14:b3:d2:71:f9:f3: 56:15:84:88:a5:57:6a:88:90:39:e9:6c:5f:c0:8f: b3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:72:A1:FE:28:62:60:FD:95:89:D8:61:42:31:DD:5C:98:B5:1A:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/804ef55f-16ef-36d7-851a-f40ec93a302c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:47:d2:73:68:7a:40:a1:b3:b6:2f:7f:a3:60:30:93:8f:31: 3c:43:83:62:00:fe:85:6a:08:e8:74:fc:c8:cb:22:97:06:12: 7d:a0:3a:9c:da:0a:70:3f:f0:38:fa:18:25:df:11:23:98:ea: 45:55:e9:db:40:9e:a8:c3:21:52:01:e6:97:96:4f:7c:43:f2: 87:71:37:96:b2:85:1d:8c:96:b1:c0:17:48:20:42:e9:37:04: 4f:b5:0f:97:0f:be:aa:0c:80:02:ea:fa:42:90:aa:46:f2:b5: 26:68:49:a8:2b:e0:a9:5e:b3:92:3c:30:8e:88:64:14:83:88: 61:1a:d2:f0:1f:e2:bb:d4:cb:40:2d:f3:16:1f:5a:35:bf:44: f5:f6:21:dc:a6:04:1f:cc:c8:02:9d:79:ff:64:b4:16:1f:33: 25:b2:c4:83:42:d4:d5:21:7f:e7:d8:55:16:71:93:4c:67:a1: cd:72:eb:23:ba:58:70:99:43:58:e4:76:dc:c8:20:e0:97:c2: bf:d5:34:ee:55:35:df:7e:72:75:56:5c:06:03:94:e3:d5:b7: d2:1b:23:cc:4b:83:ad:cf:c0:ec:56:31:fd:d5:fd:6a:58:54: d1:02:b0:c0:b5:15:02:06:4a:eb:cc:9e:3e:5b:e6:bf:02:b5: c6:1f:a8:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0RNxdeDVeCgKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk ODlmMmIxNzAtN2QyMC00ZjZhLWJhZjMtMzkwM2I0OTkyZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmGbzzAk6P5MQrXpo8P/wwP+OBHFWnef5FXb sMCpMBHx81AFQEKJ4zmE6VzYE9quAQ83sKbBo26b7ZOGTqYvKjdNnyqsqnaLAkPR XP4rCeX1vBH97mcPvJU3eA+MXvprnY1NxTf7Tk7YijyjVJBqac7MOSSMrymTovy1 bIxBgtBoESsvVMs+qgVEbPSO4VBjQUVRXAEXispWE0j/kUXZViDw7qI7/qbxFZFG x+iKhvDn4ZdXO5IW+U0EnNWIZAGXTviJXGG2lQUwjgt6agTYU7dz1sHvpV5QkeTg 0CD2/KpskaWZUHwkCVEUs9Jx+fNWFYSIpVdqiJA56WxfwI+z0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJyof4oYmD9lYnYYUIx3VyYtRr/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvODA0ZWY1NWYtMTZlZi0z NmQ3LTg1MWEtZjQwZWM5M2EzMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERH0nNoekChs7Yvf6NgMJOPMTxDg2IA/oVqCOh0/MjLIpcGEn2gOpza CnA/8Dj6GCXfESOY6kVV6dtAnqjDIVIB5peWT3xD8odxN5ayhR2MlrHAF0ggQuk3 BE+1D5cPvqoMgALq+kKQqkbytSZoSagr4Kles5I8MI6IZBSDiGEa0vAf4rvUy0At 8xYfWjW/RPX2IdymBB/MyAKdef9ktBYfMyWyxINC1NUhf+fYVRZxk0xnoc1y6yO6 WHCZQ1jkdtzIIOCXwr/VNO5VNd9+cnVWXAYDlOPVt9IbI8xLg63PwOxWMf3V/WpY VNECsMC1FQIGSuvMnj5b5r8CtcYfqDw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:33 2025 by rpki-client