$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5e0f9f66-ff2e-34e7-a568-e277748b2558.roa File: 5e0f9f66-ff2e-34e7-a568-e277748b2558.roa (raw, json) Hash identifier: Ep5ET824xJWOMkUvKnsTVQGRNmeXvvdX4KhfH4liMLg= Subject key identifier: 6B:70:67:B9:33:69:37:14:C6:E0:06:BD:F0:EB:18:59:5D:71:0A:A6 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584854701EE66951BFA0B8A59FC0 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5e0f9f66-ff2e-34e7-a568-e277748b2558.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 198949 IP address blocks: 216.99.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:1e:e6:69:51:bf:a0:b8:a5:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=13d132c2-d71e-4e56-a9d9-3d4bd1a7a032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8e:19:12:8a:2a:0c:75:9b:4c:f0:43:db:9c: e4:da:8a:d1:0a:92:91:dc:46:31:da:db:ed:1f:df: 89:c5:30:09:00:0f:ec:db:b9:d4:e8:51:22:66:a6: 8f:05:20:f3:28:56:b6:ba:27:68:65:dc:86:70:34: a4:c3:ec:89:3b:89:e1:30:b7:0b:84:c0:67:9b:17: 3f:2e:73:51:68:75:0f:b2:5a:34:9e:57:1c:01:30: 70:a0:c5:ea:0b:9d:44:a5:bc:0f:96:ac:26:3a:d6: e4:1c:68:45:91:08:59:64:1a:5d:0b:07:63:7a:14: f1:f2:92:ce:94:fc:4f:08:27:a8:46:2a:cd:17:11: 75:ee:70:e3:cc:8f:99:dd:f6:0b:5a:15:8a:41:2c: df:73:9b:18:a0:9c:0f:43:36:f7:ba:98:70:00:d3: 5a:ae:fa:9c:e5:c2:97:e7:46:c2:5a:ee:c4:36:b8: 6b:55:1b:ab:f3:98:3f:ae:71:e5:b9:e8:a8:42:5f: d5:8b:04:d6:17:73:d5:5a:1c:79:d6:76:a5:45:2d: 19:8d:3a:0a:f6:2f:13:26:79:a0:f5:55:1d:72:c7: ed:df:77:f6:47:88:be:a1:fd:69:9b:06:ce:47:f8: f8:5e:aa:1f:da:29:b4:4d:ec:ab:0a:47:fd:4e:20: 42:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:70:67:B9:33:69:37:14:C6:E0:06:BD:F0:EB:18:59:5D:71:0A:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5e0f9f66-ff2e-34e7-a568-e277748b2558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 216.99.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:60:f3:00:9a:cb:4d:1c:06:8a:cb:5f:a4:ea:e3:86:0f:93: e9:63:c2:3d:57:3e:98:c0:f2:b8:11:6e:b4:c3:bb:9c:4d:2c: 0b:56:ad:de:86:db:07:ce:b0:7e:6c:fd:f5:00:68:bb:fc:40: 73:14:3b:26:2b:ec:e2:18:ba:80:fd:42:68:06:1f:bb:6b:f4: 4b:9c:ed:7d:b5:30:a8:d0:ae:36:b7:d5:f9:bd:d9:2d:db:9d: 46:04:dd:e4:5a:db:68:8a:40:e9:10:d0:38:97:a7:a3:d6:fb: fb:76:43:79:df:78:89:a6:ce:d0:7e:0f:1e:8e:3b:ec:ba:80: e3:cf:56:e5:35:5a:0e:3b:f3:f4:d5:96:4f:1f:bc:bb:12:06: 8d:26:8d:3a:50:d6:10:14:b8:c3:53:37:b5:53:62:18:db:a8: 9b:b9:11:b3:d9:65:89:7a:80:2f:bd:63:f8:39:2b:ea:a4:70: ad:ed:0a:df:56:b5:ef:32:26:6c:f3:10:f9:0e:b5:09:8a:45: 04:40:76:7d:c3:29:5b:c1:e6:bb:5f:a9:04:df:a9:55:28:ea: 93:49:84:ee:d5:a9:7e:d7:ce:ac:60:5d:61:e5:95:d2:26:d5: 7e:6b:55:7b:84:da:3a:38:34:6b:37:e4:3c:cd:ae:8a:24:83: 08:53:8f:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcB7maVG/oLiln8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk MTNkMTMyYzItZDcxZS00ZTU2LWE5ZDktM2Q0YmQxYTdhMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI4ZEooqDHWbTPBD25zk2orRCpKR3EYx2tvt H9+JxTAJAA/s27nU6FEiZqaPBSDzKFa2uidoZdyGcDSkw+yJO4nhMLcLhMBnmxc/ LnNRaHUPslo0nlccATBwoMXqC51EpbwPlqwmOtbkHGhFkQhZZBpdCwdjehTx8pLO lPxPCCeoRirNFxF17nDjzI+Z3fYLWhWKQSzfc5sYoJwPQzb3uphwANNarvqc5cKX 50bCWu7ENrhrVRur85g/rnHlueioQl/ViwTWF3PVWhx51nalRS0ZjToK9i8TJnmg 9VUdcsft33f2R4i+of1pmwbOR/j4Xqof2im0TeyrCkf9TiBCbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtwZ7kzaTcUxuAGvfDrGFldcQqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNWUwZjlmNjYtZmYyZS0z NGU3LWE1NjgtZTI3Nzc0OGIyNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdg8wCay00cBorLX6Tq44YPk+ljwj1XPpjA8rgRbrTDu5xNLAtWrd6G 2wfOsH5s/fUAaLv8QHMUOyYr7OIYuoD9QmgGH7tr9Euc7X21MKjQrja31fm92S3b nUYE3eRa22iKQOkQ0DiXp6PW+/t2Q3nfeImmztB+Dx6OO+y6gOPPVuU1Wg478/TV lk8fvLsSBo0mjTpQ1hAUuMNTN7VTYhjbqJu5EbPZZYl6gC+9Y/g5K+qkcK3tCt9W te8yJmzzEPkOtQmKRQRAdn3DKVvB5rtfqQTfqVUo6pNJhO7VqX7XzqxgXWHlldIm 1X5rVXuE2jo4NGs35DzNrookgwhTj4c= -----END CERTIFICATE-----Generated at Fri Mar 14 10:37:40 2025 by rpki-client