$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/303c779b-4e01-3064-9d83-5e9b4fcee5bf.roa File: 303c779b-4e01-3064-9d83-5e9b4fcee5bf.roa (raw, json) Hash identifier: sEBtkTfblK01dd8fs7S2avbwqUoNc8crqX4vvBRGJSY= Subject key identifier: E7:B6:18:23:0A:4C:57:AA:E4:A1:A6:77:AA:13:71:30:E1:9F:84:E5 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584867FAE55403635188E2D95D00 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/303c779b-4e01-3064-9d83-5e9b4fcee5bf.roa Signing time: Thu 02 Jan 2025 02:00:39 +0000 ROA not before: Thu 02 Jan 2025 02:00:39 +0000 ROA not after: Wed 02 Apr 2025 01:00:39 +0000 asID: 393878 IP address blocks: 216.99.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:fa:e5:54:03:63:51:88:e2:d9:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Jan 2 02:00:39 2025 GMT Not After : Apr 2 01:00:39 2025 GMT Subject: CN=0324d56f-249c-454e-b605-f94920240f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:13:13:4a:0d:62:42:54:94:96:c0:94:9b:ec: ae:f1:70:94:d4:52:0c:8c:c6:12:83:ff:55:ab:70: f5:1f:f5:9d:83:e3:ba:2c:0e:8c:ca:0e:54:2f:8a: e9:cc:ce:43:ce:c5:42:e1:16:1e:70:77:c0:cd:6e: 00:76:39:6d:af:61:36:7e:41:a2:8c:77:be:7d:91: 21:db:b8:9a:b3:c2:81:a4:f8:f2:3c:5e:5d:66:e4: a9:dd:a6:12:1f:2b:94:28:fc:d3:27:6a:b6:3f:dc: 1a:89:38:e5:66:c4:b0:b0:11:51:62:99:6a:1e:f0: 33:7b:e7:c3:29:2e:b5:6d:5d:08:4e:35:a2:a6:49: 7e:b9:b8:c1:9f:39:4a:42:01:e9:a4:e1:68:2e:c0: 40:d3:b1:18:92:54:a0:72:f2:be:b8:80:fe:b0:a2: fc:ea:38:94:0a:b6:80:10:1d:15:fa:20:ac:65:f2: fa:79:79:50:4b:90:33:93:f0:55:82:c4:16:32:f5: d4:5f:46:d7:83:94:5c:84:a9:96:29:9d:ad:8f:4f: 8e:a0:b0:88:b8:10:60:9b:1e:20:bc:46:07:54:1c: 72:ae:90:f8:c7:9e:c8:1f:c4:0c:bf:e0:f8:25:ba: 7e:45:3a:94:d0:e0:53:61:2a:27:72:f5:34:a8:ad: ad:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B6:18:23:0A:4C:57:AA:E4:A1:A6:77:AA:13:71:30:E1:9F:84:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/303c779b-4e01-3064-9d83-5e9b4fcee5bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 216.99.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:45:00:79:db:fb:2f:fa:2b:c3:20:a9:91:76:eb:29:fe:35: bd:9e:2b:69:c4:73:75:4b:95:25:80:b7:f6:18:c5:c8:3f:52: e8:cd:5e:c5:49:ef:1f:3e:03:c5:ba:88:45:ca:22:55:be:f5: d8:5e:c6:7f:e2:08:fe:fa:17:51:2a:bc:59:1c:52:52:34:bd: bf:57:b6:f0:c1:8a:36:6c:6e:dc:ab:df:68:32:59:46:28:b5: 74:79:ab:93:f8:1c:7a:d2:20:fc:17:41:93:f2:ec:bc:76:9f: a5:59:fb:f0:ef:a2:d7:10:32:17:54:79:ce:1e:6b:e7:63:93: 74:4b:90:0b:fe:1f:28:28:9e:51:32:77:7a:3d:78:11:dd:ac: 34:e1:15:ea:33:70:c7:68:2b:68:4c:23:af:a0:ef:91:34:d5: a5:89:46:0e:7e:7f:79:c0:5e:39:e7:61:3e:fc:a5:57:b9:87: ae:10:eb:ef:70:ae:dd:0d:62:80:4f:62:8e:8b:1d:90:f8:70: 2c:83:f2:cd:29:62:ef:ef:1b:92:57:59:68:49:ea:e8:9d:e2: 42:82:39:6b:35:fa:ef:11:46:5c:a9:e9:eb:a0:42:da:18:af: 9e:75:86:12:ca:c3:52:67:aa:03:74:92:e3:a4:90:b7:ff:a2: e1:06:a1:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhn+uVUA2NRiOLZXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDEwMjAyMDAzOVoXDTI1MDQwMjAxMDAzOVowLzEtMCsGA1UEAxMk MDMyNGQ1NmYtMjQ5Yy00NTRlLWI2MDUtZjk0OTIwMjQwZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRMTSg1iQlSUlsCUm+yu8XCU1FIMjMYSg/9V q3D1H/Wdg+O6LA6Myg5UL4rpzM5DzsVC4RYecHfAzW4Adjltr2E2fkGijHe+fZEh 27ias8KBpPjyPF5dZuSp3aYSHyuUKPzTJ2q2P9waiTjlZsSwsBFRYplqHvAze+fD KS61bV0ITjWipkl+ubjBnzlKQgHppOFoLsBA07EYklSgcvK+uID+sKL86jiUCraA EB0V+iCsZfL6eXlQS5Azk/BVgsQWMvXUX0bXg5RchKmWKZ2tj0+OoLCIuBBgmx4g vEYHVBxyrpD4x57IH8QMv+D4Jbp+RTqU0OBTYSoncvU0qK2txwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe2GCMKTFeq5KGmd6oTcTDhn4TlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvMzAzYzc3OWItNGUwMS0z MDY0LTlkODMtNWU5YjRmY2VlNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBFAHnb+y/6K8MgqZF26yn+Nb2eK2nEc3VLlSWAt/YYxcg/UujNXsVJ 7x8+A8W6iEXKIlW+9dhexn/iCP76F1EqvFkcUlI0vb9XtvDBijZsbtyr32gyWUYo tXR5q5P4HHrSIPwXQZPy7Lx2n6VZ+/DvotcQMhdUec4ea+djk3RLkAv+HygonlEy d3o9eBHdrDThFeozcMdoK2hMI6+g75E01aWJRg5+f3nAXjnnYT78pVe5h64Q6+9w rt0NYoBPYo6LHZD4cCyD8s0pYu/vG5JXWWhJ6uid4kKCOWs1+u8RRlyp6eugQtoY r551hhLKw1JnqgN0kuOkkLf/ouEGofc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:39 2025 by rpki-client