$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/d8e43a67-c092-3851-9b5e-f9bf5430c4f2.roa File: d8e43a67-c092-3851-9b5e-f9bf5430c4f2.roa (raw, json) Hash identifier: Eq+R7jizoW5L9Ku3H+qeNyM5IppbPwnjhp+th7UY4Ro= Subject key identifier: BA:92:11:58:33:D3:FD:02:8E:94:E2:8C:A2:9F:20:03:DA:90:29:21 Certificate issuer: /CN=c95032f5-b07e-44ee-b4e6-573f8fb3e50a Certificate serial: 010D0C9F43285848424AD7C29F92B7A6029D6FC0 Authority key identifier: A0:6B:64:59:9B:63:CF:12:58:E7:E0:E3:56:9A:A6:85:12:91:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/d8e43a67-c092-3851-9b5e-f9bf5430c4f2.roa Signing time: Thu 19 Dec 2024 14:00:52 +0000 ROA not before: Thu 19 Dec 2024 14:00:52 +0000 ROA not after: Wed 19 Mar 2025 13:00:52 +0000 asID: 62642 IP address blocks: 206.220.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:4a:d7:c2:9f:92:b7:a6:02:9d:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c95032f5-b07e-44ee-b4e6-573f8fb3e50a Validity Not Before: Dec 19 14:00:52 2024 GMT Not After : Mar 19 13:00:52 2025 GMT Subject: CN=2a5e21da-ba71-4822-a2e4-9b1b929d32bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:65:f8:2d:77:d5:04:7d:3a:ea:6d:a9:a0:3f: e7:fd:00:1c:37:4f:7d:98:83:03:96:74:41:a2:d7: fc:3b:c6:46:88:3e:ed:60:7d:51:ef:68:40:0d:6e: 50:7f:3d:fb:0e:c9:bc:ec:de:42:01:7b:d6:e8:96: 12:93:b4:64:40:47:9e:bb:e0:a6:cc:81:15:8a:e2: 02:e8:97:c0:49:79:95:9a:92:ae:8d:3f:f7:f2:92: cd:64:7c:ca:98:b0:6b:04:0d:9d:e1:4d:98:26:63: 48:a5:d6:f7:15:0a:4e:85:db:12:67:77:6d:6f:ef: 58:88:9b:0f:0f:4a:c9:42:5a:35:93:02:2a:08:2f: ae:58:06:1b:0b:94:20:8e:88:74:b9:7b:72:29:8b: 6d:c8:9c:4c:76:48:93:e8:e6:95:78:a0:64:89:06: a0:ed:1e:6f:e3:bd:9c:28:98:4b:96:66:63:d0:20: c3:e5:91:a5:ab:5a:4d:98:a1:0c:95:88:0e:5a:17: 34:bc:48:32:75:64:f9:74:7c:29:0b:a6:e4:d4:b5: ca:d1:e2:52:94:c3:f7:be:4c:45:85:0d:96:73:35: 94:2f:52:88:24:13:11:d6:ea:e5:84:22:71:ac:27: 0e:2c:69:be:ce:2a:43:49:d4:ac:1e:36:ca:50:c8: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:92:11:58:33:D3:FD:02:8E:94:E2:8C:A2:9F:20:03:DA:90:29:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/d8e43a67-c092-3851-9b5e-f9bf5430c4f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.crl X509v3 Authority Key Identifier: keyid:A0:6B:64:59:9B:63:CF:12:58:E7:E0:E3:56:9A:A6:85:12:91:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.cer sbgp-ipAddrBlock: critical IPv4: 206.220.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:cd:7b:48:af:e5:1f:da:d7:a4:ef:5a:86:4e:08:3b:d8:2a: 1c:b4:0e:ea:b6:58:92:1d:6b:c8:30:d7:3f:8d:d2:cb:ed:02: c7:03:c6:9f:ed:f6:1b:c5:24:37:b3:3c:a7:21:b9:2d:59:f6: b5:05:7a:a8:e1:d6:cd:72:11:c0:15:32:b8:84:51:08:a2:b9: 21:71:42:66:a1:b0:76:83:92:1e:14:ef:ca:04:98:2b:bb:5f: 66:71:00:6b:0a:9d:d3:34:13:a3:92:f7:19:95:a6:d7:a9:3e: 18:f5:d0:6b:2c:1c:1b:8f:5f:b9:f7:58:5c:3f:18:ca:30:26: 95:e7:a7:98:48:c9:1b:9d:fb:8b:0f:d1:9e:6f:b7:68:be:30: 0a:6c:0d:d0:4a:1c:77:38:b4:64:0e:0f:12:0a:8e:07:d2:ee: d4:9e:3f:38:72:09:db:64:1d:07:5b:0b:fc:2b:94:44:d9:5f: 27:22:32:16:7d:98:a8:ec:fa:d8:7c:17:8e:37:7d:7d:62:0b: a7:cb:54:e0:e9:67:fe:77:f6:7b:af:8a:0c:da:90:19:88:96: 31:5c:a7:b3:06:50:c8:56:39:e6:f5:bd:32:aa:c8:b5:95:af: d0:69:f9:47:e5:94:d0:e5:d9:90:42:64:c8:d6:54:92:11:da: 79:7b:dd:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCStfCn5K3pgKdb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk1MDMyZjUtYjA3ZS00NGVlLWI0ZTYtNTczZjhmYjNl NTBhMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk MmE1ZTIxZGEtYmE3MS00ODIyLWEyZTQtOWIxYjkyOWQzMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2X4LXfVBH066m2poD/n/QAcN099mIMDlnRB otf8O8ZGiD7tYH1R72hADW5Qfz37Dsm87N5CAXvW6JYSk7RkQEeeu+CmzIEViuIC 6JfASXmVmpKujT/38pLNZHzKmLBrBA2d4U2YJmNIpdb3FQpOhdsSZ3dtb+9YiJsP D0rJQlo1kwIqCC+uWAYbC5Qgjoh0uXtyKYttyJxMdkiT6OaVeKBkiQag7R5v472c KJhLlmZj0CDD5ZGlq1pNmKEMlYgOWhc0vEgydWT5dHwpC6bk1LXK0eJSlMP3vkxF hQ2WczWUL1KIJBMR1urlhCJxrCcOLGm+zipDSdSsHjbKUMjhmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqSEVgz0/0CjpTijKKfIAPakCkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jOTUw MzJmNS1iMDdlLTQ0ZWUtYjRlNi01NzNmOGZiM2U1MGEvZDhlNDNhNjctYzA5Mi0z ODUxLTliNWUtZjliZjU0MzBjNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzk1MDMyZjUtYjA3ZS00NGVlLWI0 ZTYtNTczZjhmYjNlNTBhL2M5NTAzMmY1LWIwN2UtNDRlZS1iNGU2LTU3M2Y4ZmIz ZTUwYS5jcmwwHwYDVR0jBBgwFoAUoGtkWZtjzxJY5+DjVpqmhRKRrYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jOTUwMzJmNS1iMDdlLTQ0ZWUtYjRlNi01NzNm OGZiM2U1MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBztxaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDNe0iv5R/a16TvWoZOCDvYKhy0Duq2WJIda8gw1z+N0svtAscDxp/t 9hvFJDezPKchuS1Z9rUFeqjh1s1yEcAVMriEUQiiuSFxQmahsHaDkh4U78oEmCu7 X2ZxAGsKndM0E6OS9xmVptepPhj10GssHBuPX7n3WFw/GMowJpXnp5hIyRud+4sP 0Z5vt2i+MApsDdBKHHc4tGQODxIKjgfS7tSePzhyCdtkHQdbC/wrlETZXyciMhZ9 mKjs+th8F443fX1iC6fLVODpZ/539nuvigzakBmIljFcp7MGUMhWOeb1vTKqyLWV r9Bp+UfllNDl2ZBCZMjWVJIR2nl73Wo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:25 2025 by rpki-client