$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa File: 429e8e55-3eec-3082-835f-dc4a34d15810.roa (raw, json) Hash identifier: sC6q8LNRQq0/5Uso7m8Q+GTsfH4GglC+9IPoZwR2Ygk= Subject key identifier: 90:35:EA:CB:69:9C:CD:E5:0E:CA:70:CF:79:1B:70:3E:7B:34:F2:5D Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F43285848159FE60FD3B96AA7A0B0EFC0 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa Signing time: Tue 03 Dec 2024 14:00:52 +0000 ROA not before: Tue 03 Dec 2024 14:00:52 +0000 ROA not after: Mon 03 Mar 2025 14:00:52 +0000 asID: 54238 IP address blocks: 216.213.104.0/22 maxlen: 22 216.213.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:15:9f:e6:0f:d3:b9:6a:a7:a0:b0:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Dec 3 14:00:52 2024 GMT Not After : Mar 3 14:00:52 2025 GMT Subject: CN=f0e6c7bf-3ec9-4b01-8186-ae75efaa6ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:8b:ae:25:98:d5:32:4b:e3:af:6c:0f:bb: 4a:fb:39:5f:05:80:0f:ab:85:0f:80:c3:d1:83:ef: 2c:5b:f7:1d:57:ec:ba:83:7a:ef:94:34:25:3a:79: eb:90:24:1a:10:31:6b:14:71:10:c1:57:ea:ef:80: 0f:5d:05:41:2c:25:a9:df:43:e8:f5:8b:30:79:c5: 64:ba:91:67:4f:b7:f8:fb:21:2f:3a:98:5f:9a:c0: fe:3e:5d:0e:45:34:73:59:76:dd:c6:ab:9d:60:64: 89:51:23:a8:8b:26:db:70:cf:9d:e9:72:7f:4d:d5: 4f:55:36:f4:56:00:71:4b:cc:5b:b9:78:15:65:72: aa:14:71:b7:c8:ed:f0:d0:dd:5a:4e:ca:72:9d:13: 33:32:23:37:0e:86:80:79:76:9d:7c:0f:19:d7:43: 6d:28:2b:86:3f:50:b9:2c:08:bb:7e:12:35:3f:57: 4a:3d:f9:cd:12:12:36:64:0c:82:bf:e1:85:c2:b3: 26:9e:7c:ed:b7:52:c3:8b:b4:f9:8c:ed:b7:44:79: 26:57:b6:cf:f0:61:1d:9e:86:0d:ac:67:11:18:d8: 6a:dc:49:ad:67:94:cc:4a:0b:46:8c:5f:6a:34:7f: ed:e0:32:ee:c5:5f:b4:ed:a1:88:cc:92:cf:c8:d3: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:35:EA:CB:69:9C:CD:E5:0E:CA:70:CF:79:1B:70:3E:7B:34:F2:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 216.213.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:43:c2:55:82:13:71:9b:d0:16:d7:a7:63:60:5d:1c:a1:df: c3:9a:73:fd:67:c3:b7:3b:b1:dd:fa:19:ac:3f:f8:a9:97:37: 19:80:5f:b9:50:99:61:b7:f9:e8:e3:35:4f:5e:7e:f8:72:ea: 1a:e9:96:96:27:fc:45:84:bc:8d:41:6d:96:c1:21:19:30:a8: 25:ea:91:80:7f:20:c7:3c:10:0c:34:3c:86:6e:9f:e6:5a:4c: 60:b0:83:a0:59:5e:c1:49:8b:3f:8e:5f:aa:37:c9:65:d0:2d: c0:b5:c0:77:f7:a8:47:f6:fd:b2:b6:ce:b4:30:b1:d0:57:c4: c3:c9:ac:05:27:0a:5e:97:7c:26:cf:79:4d:42:f1:9e:c6:8e: 20:ea:b3:6f:5e:51:ee:b1:ba:77:c0:a6:94:3f:64:63:d9:5d: e6:92:f6:fb:6b:14:a8:9a:c6:35:23:6b:5c:21:01:a5:74:1f: 7f:66:71:12:7d:85:ab:e1:58:1a:a0:09:70:1b:f4:fa:f3:1f: 53:4c:b3:2c:fb:9d:ba:a5:50:49:96:a8:37:bc:3b:88:98:ad: 25:e9:51:27:b6:3f:3e:1b:1f:bf:1d:55:19:57:58:73:a1:7a: 4a:d3:9b:94:98:1f:2d:1d:00:3a:71:85:8a:3c:cd:bf:ae:c7: 13:c5:ca:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn+YP07lqp6Cw78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk ZjBlNmM3YmYtM2VjOS00YjAxLTgxODYtYWU3NWVmYWE2YWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaOLriWY1TJL469sD7tK+zlfBYAPq4UPgMPR g+8sW/cdV+y6g3rvlDQlOnnrkCQaEDFrFHEQwVfq74APXQVBLCWp30Po9YswecVk upFnT7f4+yEvOphfmsD+Pl0ORTRzWXbdxqudYGSJUSOoiybbcM+d6XJ/TdVPVTb0 VgBxS8xbuXgVZXKqFHG3yO3w0N1aTspynRMzMiM3DoaAeXadfA8Z10NtKCuGP1C5 LAi7fhI1P1dKPfnNEhI2ZAyCv+GFwrMmnnztt1LDi7T5jO23RHkmV7bP8GEdnoYN rGcRGNhq3EmtZ5TMSgtGjF9qNH/t4DLuxV+07aGIzJLPyNPbDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJA16stpnM3lDspwz3kbcD57NPJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvNDI5ZThlNTUtM2VlYy0z MDgyLTgzNWYtZGM0YTM0ZDE1ODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2NVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNDwlWCE3Gb0BbXp2NgXRyh38Oac/1nw7c7sd36Gaw/+KmXNxmAX7lQ mWG3+ejjNU9efvhy6hrplpYn/EWEvI1BbZbBIRkwqCXqkYB/IMc8EAw0PIZun+Za TGCwg6BZXsFJiz+OX6o3yWXQLcC1wHf3qEf2/bK2zrQwsdBXxMPJrAUnCl6XfCbP eU1C8Z7GjiDqs29eUe6xunfAppQ/ZGPZXeaS9vtrFKiaxjUja1whAaV0H39mcRJ9 havhWBqgCXAb9PrzH1NMsyz7nbqlUEmWqDe8O4iYrSXpUSe2Pz4bH78dVRlXWHOh ekrTm5SYHy0dADpxhYo8zb+uxxPFyug= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:26 2025 by rpki-client