$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/79090c4e-ad0d-38e0-b5d6-6cafb539f3c4.roa File: 79090c4e-ad0d-38e0-b5d6-6cafb539f3c4.roa (raw, json) Hash identifier: d2/h08XMmnhaSMPoezKSxDdAzMrTgcfeVqgljFkrnH0= Subject key identifier: C2:4B:17:02:46:C7:49:F8:71:A8:4F:B4:E7:01:B1:D3:E2:39:2F:58 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584854701ECFA5E2647C86E32400 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/79090c4e-ad0d-38e0-b5d6-6cafb539f3c4.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 10747 IP address blocks: 216.99.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:1e:cf:a5:e2:64:7c:86:e3:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=42cc014a-cbed-41d1-9cf0-231b504ed33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:28:a2:7b:4e:52:23:47:3e:f7:fd:1b:53: c2:ec:db:2e:fb:50:6a:e1:37:ab:18:08:2a:8f:9f: e7:4a:9e:d1:da:7c:4e:b0:d2:a9:9e:e9:ae:ef:cb: 25:9b:c2:7a:8b:ae:cd:11:81:3d:4b:51:8d:20:0e: 85:b2:bb:c4:ff:8c:4b:f9:ba:bb:0b:c0:08:98:00: a4:b3:a3:72:e6:fe:25:de:f8:48:08:ff:7a:1e:bc: f5:dc:3d:6c:06:44:7d:be:f6:cc:3c:78:a2:e2:2d: 79:cf:8a:9e:2d:0f:f5:95:22:3e:4c:e0:81:5f:8e: b2:b0:d2:d4:59:ec:d6:17:cd:c1:32:02:1d:fc:37: 20:38:18:4d:f5:1e:77:a1:8b:18:67:05:a0:82:5d: c9:e1:0d:91:1d:ef:3e:03:4c:3e:39:3a:af:7c:b3: 4a:35:cc:47:7e:00:ce:6a:23:90:3c:41:61:e2:f4: 58:61:96:7f:05:1d:49:d8:76:f3:fc:8f:be:1f:1c: 7b:23:90:0e:1e:24:40:b4:dc:a1:50:27:71:9f:c1: 45:41:2d:73:94:84:2a:24:5d:0b:72:eb:0d:3b:d6: da:35:ed:6d:f3:c8:d4:ee:68:7f:c0:39:48:36:e2: 69:5d:c9:ff:ff:db:d4:24:2c:e9:ae:c8:3f:30:c4: 8a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4B:17:02:46:C7:49:F8:71:A8:4F:B4:E7:01:B1:D3:E2:39:2F:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/79090c4e-ad0d-38e0-b5d6-6cafb539f3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 216.99.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:41:e3:3d:d5:7e:95:41:4f:3c:1c:61:fe:54:5f:47:9e:3e: 03:c2:3f:e8:b8:c6:11:63:a7:1a:7c:35:22:67:77:33:c8:44: e5:5e:8f:2b:83:27:bb:8d:e4:5d:79:fe:93:89:b5:36:7d:7e: a0:37:1e:87:17:00:4e:89:44:0f:a0:41:6d:00:56:80:d7:f9: aa:b6:77:c0:95:cd:af:9f:11:10:a9:fa:1b:c4:50:fb:c8:1d: 5e:10:05:45:2d:27:d7:7c:dd:e8:e2:31:a0:e9:2c:e7:1b:ed: f1:c2:1c:38:b3:5f:f9:07:40:01:1b:8b:ec:a5:8f:7c:3c:26: 84:31:06:69:bf:4f:56:c6:42:09:7c:d7:26:37:a9:63:8f:68: 62:85:b7:b3:1d:c2:2f:9d:f0:42:cc:03:ab:7e:ab:c4:fd:23: 4b:3c:4e:ca:8e:fe:fd:86:62:c8:10:8c:14:94:79:f0:69:53: 07:6a:3a:b3:9b:ae:b5:ca:7b:1c:a3:db:a0:73:6c:6c:71:75: cb:e2:d6:f1:99:8a:bd:65:f2:76:61:a8:9b:a7:4d:f9:de:83: 6e:20:32:1f:12:20:8e:75:a4:93:bc:53:dc:bf:d5:6a:7e:9c: 11:4c:80:d9:b8:93:06:09:d3:46:d6:c1:15:5f:0e:8b:24:48: e6:49:eb:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcB7PpeJkfIbjJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk NDJjYzAxNGEtY2JlZC00MWQxLTljZjAtMjMxYjUwNGVkMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+IoontOUiNHPvf9G1PC7Nsu+1Bq4TerGAgq j5/nSp7R2nxOsNKpnumu78slm8J6i67NEYE9S1GNIA6FsrvE/4xL+bq7C8AImACk s6Ny5v4l3vhICP96Hrz13D1sBkR9vvbMPHii4i15z4qeLQ/1lSI+TOCBX46ysNLU WezWF83BMgId/DcgOBhN9R53oYsYZwWggl3J4Q2RHe8+A0w+OTqvfLNKNcxHfgDO aiOQPEFh4vRYYZZ/BR1J2Hbz/I++Hxx7I5AOHiRAtNyhUCdxn8FFQS1zlIQqJF0L cusNO9baNe1t88jU7mh/wDlINuJpXcn//9vUJCzprsg/MMSKKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJLFwJGx0n4cahPtOcBsdPiOS9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNzkwOTBjNGUtYWQwZC0z OGUwLWI1ZDYtNmNhZmI1MzlmM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpB4z3VfpVBTzwcYf5UX0eePgPCP+i4xhFjpxp8NSJndzPIROVejyuD J7uN5F15/pOJtTZ9fqA3HocXAE6JRA+gQW0AVoDX+aq2d8CVza+fERCp+hvEUPvI HV4QBUUtJ9d83ejiMaDpLOcb7fHCHDizX/kHQAEbi+ylj3w8JoQxBmm/T1bGQgl8 1yY3qWOPaGKFt7Mdwi+d8ELMA6t+q8T9I0s8TsqO/v2GYsgQjBSUefBpUwdqOrOb rrXKexyj26BzbGxxdcvi1vGZir1l8nZhqJunTfneg24gMh8SII51pJO8U9y/1Wp+ nBFMgNm4kwYJ00bWwRVfDoskSOZJ63E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:09 2025 by rpki-client