$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/c8644689-8483-3661-835b-4a4203dfe29a.roa File: c8644689-8483-3661-835b-4a4203dfe29a.roa (raw, json) Hash identifier: 6qF4Pwsl9MKcF8REDPK76IiywhgJwF1ClGnnzHVLKq4= Subject key identifier: 00:09:95:49:66:EB:C5:E6:DB:DE:EE:39:A6:87:EA:82:F8:CE:A8:0B Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584845158860506BF4F358D1ED80 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/c8644689-8483-3661-835b-4a4203dfe29a.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 16504 IP address blocks: 156.70.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:88:60:50:6b:f4:f3:58:d1:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=a66efd5f-2161-4e31-884b-fd6fa1b28f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:31:d9:ef:9c:38:97:14:02:53:8c:49:18:1c: c4:f0:09:42:91:6c:d9:34:18:66:35:23:8d:98:b8: 2e:f4:92:3c:18:5b:c5:9a:53:01:0a:d8:2c:79:2c: 09:5b:d7:67:44:71:f6:26:69:ba:f9:4d:69:18:2e: f4:0a:6c:42:e7:12:9c:2f:02:73:e6:53:51:2f:c0: 19:6f:4e:d9:48:14:39:63:0a:2f:86:65:ed:9d:71: 34:3c:1d:5c:e9:f0:c3:0a:ec:81:bf:ef:fb:f4:ba: 60:be:da:1d:bf:5f:12:ff:e7:8b:23:73:42:5b:2e: 6f:d5:c5:d6:a1:59:de:1e:59:9a:3a:16:f5:f6:18: d8:b5:16:ac:2a:eb:4c:56:fe:dd:51:c6:b9:e3:95: bc:8d:dd:99:d2:04:65:f2:b7:e6:0b:ca:3d:6f:ed: e5:31:a5:a1:8b:7a:b3:80:96:3a:b7:f8:58:d8:51: 7a:46:34:37:a4:b4:5e:61:4d:19:55:67:ab:9c:e1: ce:df:44:7f:a3:e8:49:9f:dc:33:70:ae:32:5b:dd: 35:9a:a1:0e:42:4f:17:2e:cf:9c:bd:9a:f6:35:21: a2:61:5d:74:cd:b4:2e:3c:e7:66:26:1c:e4:14:d1: 00:c5:10:8f:08:da:cb:a4:e5:11:50:a2:96:eb:60: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:09:95:49:66:EB:C5:E6:DB:DE:EE:39:A6:87:EA:82:F8:CE:A8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/c8644689-8483-3661-835b-4a4203dfe29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 156.70.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:31:b5:7d:d8:c1:85:2f:f4:45:53:70:c5:12:c7:b5:a8:9c: e5:e3:54:7a:00:4e:1d:3a:a1:c4:74:a6:33:a1:a0:52:94:db: 15:86:f3:7b:7e:ef:a0:6b:8a:94:4b:b7:47:67:0e:df:2c:22: 8b:6a:07:86:e0:2a:da:6c:6f:8b:72:dd:01:57:30:6a:3a:fd: c0:23:23:a4:44:7c:68:0c:c1:6c:0e:fb:af:fc:19:c4:2d:b5: eb:c6:7d:c3:63:24:b3:22:87:25:9a:dc:62:5f:d8:e3:d8:76: 26:ca:23:f9:14:dd:80:2a:93:cc:79:0e:84:a2:8e:36:22:0c: de:9f:32:89:34:6a:5c:b5:31:43:5f:68:f4:1a:07:0d:87:86: 8d:ea:40:18:47:b1:67:e8:34:0b:4d:07:84:fd:9d:68:e3:19: bd:61:03:0c:2a:f9:d8:b2:95:a6:f3:7a:bd:ef:dd:53:0a:cc: 2b:19:1e:ca:e8:2b:be:1f:e8:6e:98:01:52:e9:00:05:a8:69: 2c:43:c7:54:f0:65:d1:63:28:b7:3e:01:25:8a:46:2f:9e:da: 11:17:ba:32:50:73:ac:07:ec:fc:f5:58:86:aa:41:ce:38:1e: 2b:c9:cc:7e:eb:a4:8b:9b:4c:e0:81:55:ae:3a:a1:e6:f4:29: 40:95:4d:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFYhgUGv081jR7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk YTY2ZWZkNWYtMjE2MS00ZTMxLTg4NGItZmQ2ZmExYjI4ZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DHZ75w4lxQCU4xJGBzE8AlCkWzZNBhmNSON mLgu9JI8GFvFmlMBCtgseSwJW9dnRHH2Jmm6+U1pGC70CmxC5xKcLwJz5lNRL8AZ b07ZSBQ5YwovhmXtnXE0PB1c6fDDCuyBv+/79Lpgvtodv18S/+eLI3NCWy5v1cXW oVneHlmaOhb19hjYtRasKutMVv7dUca545W8jd2Z0gRl8rfmC8o9b+3lMaWhi3qz gJY6t/hY2FF6RjQ3pLReYU0ZVWernOHO30R/o+hJn9wzcK4yW901mqEOQk8XLs+c vZr2NSGiYV10zbQuPOdmJhzkFNEAxRCPCNrLpOURUKKW62BHGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAJlUlm68Xm297uOaaH6oL4zqgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvYzg2NDQ2ODktODQ4My0z NjYxLTgzNWItNGE0MjAzZGZlMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnEZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMxtX3YwYUv9EVTcMUSx7WonOXjVHoATh06ocR0pjOhoFKU2xWG83t+ 76BripRLt0dnDt8sIotqB4bgKtpsb4ty3QFXMGo6/cAjI6REfGgMwWwO+6/8GcQt tevGfcNjJLMihyWa3GJf2OPYdibKI/kU3YAqk8x5DoSijjYiDN6fMok0aly1MUNf aPQaBw2Hho3qQBhHsWfoNAtNB4T9nWjjGb1hAwwq+diylabzer3v3VMKzCsZHsro K74f6G6YAVLpAAWoaSxDx1TwZdFjKLc+ASWKRi+e2hEXujJQc6wH7Pz1WIaqQc44 HivJzH7rpIubTOCBVa46oeb0KUCVTWk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:02 2025 by rpki-client