$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa File: 5c98cdaf-5127-33d6-825c-2ee7692727b6.roa (raw, json) Hash identifier: eLrQTsgD+6GaHvk4k/wB5HBcNoxJN2C5nLS5QFtdQ9Y= Subject key identifier: F5:24:A0:D6:29:4C:3B:33:57:C8:8D:99:8D:70:17:9F:B3:9E:31:83 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584854701E6E0EA0D4000E4A6F40 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 33208 IP address blocks: 68.65.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:1e:6e:0e:a0:d4:00:0e:4a:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=17231d34-5c3a-4334-9033-e6203861ade2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:77:f8:44:5a:ba:ad:78:4f:53:2b:19:c3:57: c4:c8:96:2e:ef:21:f1:a3:a3:61:19:e4:4e:2c:79: ac:4f:0c:2d:e5:49:83:36:80:b7:67:d6:be:79:67: 7d:07:b9:81:b2:46:9f:9e:3a:76:8a:c6:c8:a5:09: e8:e1:6f:5c:2d:58:14:62:6f:68:09:73:17:56:c7: 28:e9:8b:e8:cd:ca:1b:df:ad:f8:12:48:75:e3:5b: 23:43:be:5e:8b:17:7f:d3:b8:e3:8d:a7:8a:01:a9: 6c:33:f7:ef:b0:3f:26:fd:25:8e:26:e9:7d:60:5f: e6:66:96:7a:0c:ee:db:6f:16:dd:69:b1:b5:74:ca: 29:a3:88:57:48:55:fd:6b:aa:ac:29:40:18:42:5c: 39:06:a1:eb:29:08:6c:b8:d0:d8:a9:ff:f1:d4:e8: 20:05:f5:68:4e:eb:cd:70:ba:be:ea:33:8a:e8:2f: 2a:b9:fb:2c:66:82:9b:66:22:33:c7:fe:bc:8a:f3: 81:cd:03:67:15:4c:0a:7a:db:87:f6:2b:2f:23:5a: 3c:95:8b:e0:e6:0e:70:a2:8f:6e:24:84:8d:8f:cd: b6:ed:38:5f:dc:04:f2:5c:55:ce:1b:89:38:30:90: ff:74:d5:ed:7e:d1:d5:8c:f1:34:81:51:36:a9:a4: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:24:A0:D6:29:4C:3B:33:57:C8:8D:99:8D:70:17:9F:B3:9E:31:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 68.65.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:91:19:a1:88:cd:89:e4:42:b3:f8:73:80:03:a8:aa:86:00: 1a:74:25:34:a8:c5:25:02:92:45:2b:10:75:cd:90:5f:36:2e: 99:92:b9:f5:0a:ad:fb:5d:00:d0:83:65:c8:9c:ca:dc:d1:94: b3:9d:c5:02:9d:59:d1:01:08:93:dd:4b:33:5b:ba:c0:9e:d6: 53:f1:73:1a:f9:ef:f0:12:06:d7:2c:42:7e:c4:5d:20:e2:c9: 30:30:07:88:4e:d9:72:7f:f3:ab:21:a0:f3:5f:c6:eb:bf:4a: 5e:b2:6d:48:b6:76:8f:c5:dd:88:85:53:37:1d:ee:8e:11:c8: aa:f9:96:d1:cf:e6:db:9c:34:63:c3:ad:37:f3:5a:ff:3f:fe: fa:bf:e6:fc:5d:56:d3:1f:ae:df:9c:a0:02:6e:7c:5d:20:ba: 37:d3:aa:c7:2c:01:ce:a4:59:bf:44:11:59:d7:ea:9d:1e:56: 7c:f4:d0:df:32:16:83:a5:62:7f:49:34:2c:32:6d:eb:5e:ba: ff:af:3c:bd:70:47:22:a5:24:47:88:90:aa:ff:50:5e:23:f0: f1:fb:0b:af:08:c8:55:fa:fa:a7:6a:b6:b4:b0:9e:a8:54:72: 22:1b:5c:22:77:44:1c:2f:b0:98:fb:1a:19:36:20:b4:d8:26: 80:08:2f:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcB5uDqDUAA5Kb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk MTcyMzFkMzQtNWMzYS00MzM0LTkwMzMtZTYyMDM4NjFhZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHf4RFq6rXhPUysZw1fEyJYu7yHxo6NhGeRO LHmsTwwt5UmDNoC3Z9a+eWd9B7mBskafnjp2isbIpQno4W9cLVgUYm9oCXMXVsco 6Yvozcob3634Ekh141sjQ75eixd/07jjjaeKAalsM/fvsD8m/SWOJul9YF/mZpZ6 DO7bbxbdabG1dMopo4hXSFX9a6qsKUAYQlw5BqHrKQhsuNDYqf/x1OggBfVoTuvN cLq+6jOK6C8qufssZoKbZiIzx/68ivOBzQNnFUwKetuH9isvI1o8lYvg5g5woo9u JISNj8227Thf3ATyXFXOG4k4MJD/dNXtftHVjPE0gVE2qaSFnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUkoNYpTDszV8iNmY1wF5+znjGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNWM5OGNkYWYtNTEyNy0z M2Q2LTgyNWMtMmVlNzY5MjcyN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDREH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGORGaGIzYnkQrP4c4ADqKqGABp0JTSoxSUCkkUrEHXNkF82LpmSufUK rftdANCDZcicytzRlLOdxQKdWdEBCJPdSzNbusCe1lPxcxr57/ASBtcsQn7EXSDi yTAwB4hO2XJ/86shoPNfxuu/Sl6ybUi2do/F3YiFUzcd7o4RyKr5ltHP5tucNGPD rTfzWv8//vq/5vxdVtMfrt+coAJufF0gujfTqscsAc6kWb9EEVnX6p0eVnz00N8y FoOlYn9JNCwybeteuv+vPL1wRyKlJEeIkKr/UF4j8PH7C68IyFX6+qdqtrSwnqhU ciIbXCJ3RBwvsJj7Ghk2ILTYJoAILw8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:22 2025 by rpki-client