$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/16caa9ad-9e7c-3222-998f-9196456a0581.roa File: 16caa9ad-9e7c-3222-998f-9196456a0581.roa (raw, json) Hash identifier: MfnkyYlyQmzoHI5XPAIXRGyA9RYHPhH74yaJoBThB94= Subject key identifier: 69:5A:57:DC:C9:D5:8C:95:D2:9F:39:69:95:7D:43:D1:9F:87:52:09 Certificate issuer: /CN=ff081ee5-1af1-4a04-9fee-2540bcef95c3 Certificate serial: 010D0C9F432858480EA508DEDA5586C4F26E33F6 Authority key identifier: 5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/16caa9ad-9e7c-3222-998f-9196456a0581.roa Signing time: Sun 01 Dec 2024 02:00:39 +0000 ROA not before: Sun 01 Dec 2024 02:00:39 +0000 ROA not after: Sat 01 Mar 2025 02:00:39 +0000 asID: 21846 IP address blocks: 64.209.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0e:a5:08:de:da:55:86:c4:f2:6e:33:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff081ee5-1af1-4a04-9fee-2540bcef95c3 Validity Not Before: Dec 1 02:00:39 2024 GMT Not After : Mar 1 02:00:39 2025 GMT Subject: CN=3b7d1039-37a5-4b6a-b396-dda3062f40d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e1:ea:c9:33:69:82:20:fa:4e:62:6a:74:8a: 8a:8d:70:a3:26:ee:9f:10:af:fe:e3:52:13:14:dd: cc:72:a9:e2:f8:ee:62:e2:46:e3:6e:55:ee:4d:57: ad:42:40:3b:9a:8b:a0:3a:3e:6f:33:f2:f4:11:e2: 2c:77:ee:6f:b5:11:16:03:72:67:92:0b:d9:9f:77: 1f:51:12:72:1d:6d:d0:e8:ec:94:0a:47:3c:8b:ae: 32:ae:11:eb:fc:12:91:9a:4c:91:ea:64:43:06:40: 26:ae:40:e7:ce:db:8e:b9:7f:b0:aa:eb:87:90:18: 76:76:87:ae:bf:85:7f:d3:44:3b:dc:be:c8:c5:e5: 8b:9f:6f:a5:a7:b6:69:e5:80:f1:55:95:ef:cc:94: df:4f:84:d8:66:b5:70:94:85:f3:64:5e:a3:dd:8a: 90:09:05:30:17:c7:ea:08:10:14:e8:32:b4:98:ff: 4c:cc:2f:61:97:9f:8f:00:1c:2b:39:19:e7:a6:97: e3:c5:36:5e:c3:d1:08:7c:e8:60:23:1d:d5:83:79: b5:c3:28:05:70:e6:8f:1e:60:b1:0f:f3:0f:3f:a9: d9:33:67:2a:51:33:34:dc:f0:ec:84:c8:17:cd:cb: 2a:f4:4b:a0:e9:18:cc:3b:69:e0:6b:6b:e8:8b:dd: 38:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5A:57:DC:C9:D5:8C:95:D2:9F:39:69:95:7D:43:D1:9F:87:52:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/16caa9ad-9e7c-3222-998f-9196456a0581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.crl X509v3 Authority Key Identifier: keyid:5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer sbgp-ipAddrBlock: critical IPv4: 64.209.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:11:0a:5a:cf:56:d3:6c:9a:68:0d:9c:93:ab:9a:6c:62:ea: 90:3d:f3:e2:b8:fc:08:aa:81:99:93:b5:56:09:07:29:dc:66: d5:b5:e8:2b:76:0b:12:83:db:78:26:24:b6:66:17:4a:c4:49: 48:6d:72:6a:24:37:e5:52:f7:d7:b7:6e:99:77:d9:33:89:11: 58:43:b2:79:7d:d1:b1:b4:d1:7b:c3:bf:50:61:a1:8f:3c:9b: d1:18:d9:66:a2:b6:6f:2e:38:97:21:c2:eb:55:36:ac:39:71: db:4d:ef:c7:cc:67:57:14:b3:c3:f4:25:c1:63:df:50:38:68: be:fe:f4:36:2e:b7:27:20:79:2f:5a:f7:5f:8c:ce:a3:cc:2c: 8c:bd:1d:dd:d7:42:0a:9c:77:86:57:4e:42:a4:4f:23:5a:b2: c2:df:4b:56:3b:6b:b9:3f:6b:5f:01:c0:5c:b9:4b:d6:88:21: f6:e5:13:d7:65:1a:4c:be:4f:3c:60:93:10:ca:9a:c7:3d:69: ab:82:59:1e:31:ff:0a:a6:93:78:3a:a8:1b:68:20:30:22:e3: 30:c2:73:28:f7:68:48:dd:80:d2:89:71:78:90:0e:67:ee:f1: 20:5c:15:91:60:53:e0:2c:4b:17:e2:09:5e:ee:d8:64:4d:56: a9:1b:e3:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpQje2lWGxPJuM/YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYwODFlZTUtMWFmMS00YTA0LTlmZWUtMjU0MGJjZWY5 NWMzMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk M2I3ZDEwMzktMzdhNS00YjZhLWIzOTYtZGRhMzA2MmY0MGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOHqyTNpgiD6TmJqdIqKjXCjJu6fEK/+41IT FN3Mcqni+O5i4kbjblXuTVetQkA7mougOj5vM/L0EeIsd+5vtREWA3JnkgvZn3cf URJyHW3Q6OyUCkc8i64yrhHr/BKRmkyR6mRDBkAmrkDnztuOuX+wquuHkBh2doeu v4V/00Q73L7IxeWLn2+lp7Zp5YDxVZXvzJTfT4TYZrVwlIXzZF6j3YqQCQUwF8fq CBAU6DK0mP9MzC9hl5+PABwrORnnppfjxTZew9EIfOhgIx3Vg3m1wygFcOaPHmCx D/MPP6nZM2cqUTM03PDshMgXzcsq9Eug6RjMO2nga2voi904CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlaV9zJ1YyV0p85aZV9Q9Gfh1IJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZjA4 MWVlNS0xYWYxLTRhMDQtOWZlZS0yNTQwYmNlZjk1YzMvMTZjYWE5YWQtOWU3Yy0z MjIyLTk5OGYtOTE5NjQ1NmEwNTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmYwODFlZTUtMWFmMS00YTA0LTlm ZWUtMjU0MGJjZWY5NWMzL2ZmMDgxZWU1LTFhZjEtNGEwNC05ZmVlLTI1NDBiY2Vm OTVjMy5jcmwwHwYDVR0jBBgwFoAUXHpd+mU6MtrmNfmS2mlcrfZ+gsUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZjA4MWVlNS0xYWYxLTRhMDQtOWZlZS0yNTQw YmNlZjk1YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQNGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoRClrPVtNsmmgNnJOrmmxi6pA98+K4/AiqgZmTtVYJByncZtW16Ct2 CxKD23gmJLZmF0rESUhtcmokN+VS99e3bpl32TOJEVhDsnl90bG00XvDv1BhoY88 m9EY2Waitm8uOJchwutVNqw5cdtN78fMZ1cUs8P0JcFj31A4aL7+9DYutycgeS9a 91+MzqPMLIy9Hd3XQgqcd4ZXTkKkTyNassLfS1Y7a7k/a18BwFy5S9aIIfblE9dl Gky+TzxgkxDKmsc9aauCWR4x/wqmk3g6qBtoIDAi4zDCcyj3aEjdgNKJcXiQDmfu 8SBcFZFgU+AsSxfiCV7u2GRNVqkb47M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:45 2025 by rpki-client