$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f182be9d-b8f9-3157-a816-20982907b3f7.roa File: f182be9d-b8f9-3157-a816-20982907b3f7.roa (raw, json) Hash identifier: aErE5XwKFFsVJGV04q+XEyDdzMTfRTlo76AFNSPT3tA= Subject key identifier: FC:2C:A9:60:53:D5:44:37:FD:BE:BE:74:E9:C9:12:DD:BA:15:30:29 Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F43285848530AEF0818A54E01EBC8DE00 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f182be9d-b8f9-3157-a816-20982907b3f7.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 13213 IP address blocks: 67.212.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:ef:08:18:a5:4e:01:eb:c8:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=14b6312f-a2c3-46ca-a4bd-ef57e7e83334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:b8:9c:6a:a0:b7:10:cd:54:7b:89:6e:54: 6e:e2:c3:0a:ff:0b:7b:d2:fa:88:87:b0:b8:26:af: e8:4c:6d:fb:54:3c:dd:bf:8f:41:51:83:37:41:5a: d4:cd:82:82:66:3e:d8:8e:85:87:7e:56:bf:83:34: 2d:77:2c:6d:cc:be:5e:c0:01:e8:47:7f:c9:d3:47: 9e:f0:75:8c:93:d7:66:ed:e5:c6:ec:3f:a1:31:5d: b2:03:d8:80:37:e1:e5:48:d2:f9:9a:c3:f8:1f:4f: b6:d6:1e:e5:a2:70:2f:73:34:1f:ed:a1:2a:60:37: d5:05:03:7f:30:fd:4d:25:d1:7d:98:cb:55:20:22: 86:58:5d:3c:ae:5f:40:51:c2:77:09:50:44:75:1c: 14:e2:49:64:b7:d1:0c:ee:27:1c:5a:85:98:df:12: eb:6c:06:b3:05:98:e0:68:cc:c5:3f:f7:67:40:94: a6:1e:13:c6:0a:8c:4b:b6:e0:16:e0:64:56:e9:74: 88:0c:57:33:9f:97:76:1e:c6:cf:5a:6c:32:56:dd: e3:33:e4:2b:99:1c:a7:c8:ce:af:b9:57:4d:46:78: fe:ba:24:8b:24:32:51:42:ef:70:45:ec:68:cb:d1: 3a:37:c8:71:09:f6:42:1f:b8:e3:68:d4:3c:ae:35: 07:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2C:A9:60:53:D5:44:37:FD:BE:BE:74:E9:C9:12:DD:BA:15:30:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f182be9d-b8f9-3157-a816-20982907b3f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 67.212.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e8:46:73:52:9f:a4:82:21:69:1c:67:7c:b4:8f:b2:cd:9d: 85:7d:97:49:03:82:95:45:e6:e1:7b:44:37:02:24:4c:ff:3a: ca:b8:73:0f:d0:a2:f6:9e:c9:93:45:d8:50:87:7d:85:f8:a1: 12:b6:8b:3b:7d:87:bc:60:db:57:e4:e0:5f:bf:3f:59:0d:05: f8:ed:af:82:3d:29:9f:b3:27:e0:d8:aa:72:62:ed:89:57:29: c7:53:63:c6:e1:36:a1:ad:0d:a1:fb:00:a3:94:22:f1:b5:9e: a7:24:d8:45:21:5a:09:96:ba:f8:df:7f:66:85:cb:96:b3:b7: d4:ba:2b:d7:98:29:9f:d6:07:6e:d2:8e:cf:9a:d0:40:93:d9: 07:3d:27:5b:d0:a6:35:f5:7d:98:9b:ff:99:0a:b7:35:50:72: df:21:4b:54:a7:13:bb:94:98:9d:07:86:a9:07:58:19:dd:87: ce:1e:1e:38:90:ce:ed:aa:bb:8e:5c:ab:a8:56:ce:00:7d:29: 98:38:b3:e1:25:a3:14:4c:57:b4:fa:50:70:cc:ee:b6:3a:a9: e1:c5:da:a9:48:a2:20:07:22:3b:17:64:5d:29:02:aa:f6:1d: bb:2b:0e:8f:a6:29:18:27:3e:2d:db:50:c2:87:aa:11:da:5b: 57:f4:02:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCu8IGKVOAevI3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk MTRiNjMxMmYtYTJjMy00NmNhLWE0YmQtZWY1N2U3ZTgzMzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPK4nGqgtxDNVHuJblRu4sMK/wt70vqIh7C4 Jq/oTG37VDzdv49BUYM3QVrUzYKCZj7YjoWHfla/gzQtdyxtzL5ewAHoR3/J00ee 8HWMk9dm7eXG7D+hMV2yA9iAN+HlSNL5msP4H0+21h7lonAvczQf7aEqYDfVBQN/ MP1NJdF9mMtVICKGWF08rl9AUcJ3CVBEdRwU4klkt9EM7iccWoWY3xLrbAazBZjg aMzFP/dnQJSmHhPGCoxLtuAW4GRW6XSIDFczn5d2HsbPWmwyVt3jM+QrmRynyM6v uVdNRnj+uiSLJDJRQu9wRexoy9E6N8hxCfZCH7jjaNQ8rjUHUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwsqWBT1UQ3/b6+dOnJEt26FTApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZjE4MmJlOWQtYjhmOS0z MTU3LWE4MTYtMjA5ODI5MDdiM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9TgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLoRnNSn6SCIWkcZ3y0j7LNnYV9l0kDgpVF5uF7RDcCJEz/Osq4cw/Q ovaeyZNF2FCHfYX4oRK2izt9h7xg21fk4F+/P1kNBfjtr4I9KZ+zJ+DYqnJi7YlX KcdTY8bhNqGtDaH7AKOUIvG1nqck2EUhWgmWuvjff2aFy5azt9S6K9eYKZ/WB27S js+a0ECT2Qc9J1vQpjX1fZib/5kKtzVQct8hS1SnE7uUmJ0HhqkHWBndh84eHjiQ zu2qu45cq6hWzgB9KZg4s+EloxRMV7T6UHDM7rY6qeHF2qlIoiAHIjsXZF0pAqr2 HbsrDo+mKRgnPi3bUMKHqhHaW1f0ArU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:08 2025 by rpki-client