$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa File: 8473396c-8a36-3619-80aa-c025ed526998.roa (raw, json) Hash identifier: gmblfrjR9fUV7JmoisYA1EFGUxQnkF/QWJuZ35EDW+M= Subject key identifier: F0:0E:BF:6D:22:FC:23:18:61:E4:E1:69:E7:63:FF:60:3D:05:93:B9 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584807AA6DAAE2EC107CA5D6DA80 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa Signing time: Thu 28 Nov 2024 14:00:52 +0000 ROA not before: Thu 28 Nov 2024 14:00:52 +0000 ROA not after: Wed 26 Feb 2025 14:00:52 +0000 asID: 13984 IP address blocks: 164.153.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:07:aa:6d:aa:e2:ec:10:7c:a5:d6:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Nov 28 14:00:52 2024 GMT Not After : Feb 26 14:00:52 2025 GMT Subject: CN=a59e0b55-a6dd-44a0-a7d2-6e109032cba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:05:78:11:b2:05:ca:3b:cd:05:cc:d4:be:1a: d9:bb:8e:2f:24:2a:a4:4a:14:4d:aa:d2:1a:38:d7: 50:a8:66:d3:66:a5:4f:af:fe:72:65:23:83:08:20: 87:3a:a3:6d:fe:42:8a:dd:bd:80:1a:03:aa:e2:ff: 33:1f:dc:6f:a7:6c:26:84:68:2a:c6:a9:4a:a5:6c: 35:b5:04:cf:7e:3d:0d:ac:09:b6:2e:ce:94:31:73: bb:fb:b3:46:a1:ba:43:c5:84:b2:ec:32:ab:52:04: ed:01:0e:96:5c:84:7b:ac:d0:3c:87:a0:6a:03:28: 69:79:ce:75:0d:d7:2e:f6:61:a4:a5:78:c8:7e:ed: b3:47:88:a0:96:84:6c:c4:70:7b:6e:ed:75:3b:59: f9:e3:dd:9d:7c:93:de:89:87:a2:10:d2:80:ba:5b: e4:3c:84:e9:4a:d1:6a:a9:8e:66:46:08:6f:e3:01: 2e:1d:38:ef:e5:8a:e4:5d:c5:d6:df:f0:90:55:fa: 6f:d3:cd:ab:98:5e:a2:8d:a4:04:7e:bb:af:fc:da: bb:3a:c5:36:40:dc:9c:15:8c:32:ea:7d:b9:5b:55: f4:66:54:68:51:0b:9c:48:16:2b:cf:86:ee:40:e9: 5a:9d:38:06:3e:23:75:db:de:a7:a6:27:64:6c:44: 94:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0E:BF:6D:22:FC:23:18:61:E4:E1:69:E7:63:FF:60:3D:05:93:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 164.153.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:39:f7:90:0f:7e:54:77:a6:94:10:23:05:93:6c:df:32:8a: 7a:87:ab:5c:2e:19:b8:ed:fb:e5:36:52:7d:05:bd:bf:31:cd: 11:96:e9:a1:38:41:8e:39:12:f8:b2:d0:c5:73:bf:7c:5d:43: 1e:10:ef:76:3e:66:ce:81:c7:85:46:d0:8a:3f:99:1b:ff:ab: 00:f5:cc:04:d1:80:01:86:9e:87:45:90:d5:04:14:59:ba:3a: e4:96:4f:bc:26:e6:2f:30:90:77:d8:70:05:de:92:18:8f:58: 6c:d1:27:22:2a:27:c2:87:48:27:7c:f8:be:ba:b6:32:19:30: 2d:93:1b:df:82:a3:f1:cd:1c:0e:d1:2f:c3:d7:1e:61:15:e2: 1e:b9:54:fa:87:de:24:a9:bc:c3:0b:8f:b1:88:47:12:55:39: ea:8b:88:2d:f5:15:05:d0:1b:40:2f:72:e9:38:92:89:45:bb: f3:58:df:f0:7e:5b:61:65:0e:64:2f:fc:2a:36:09:59:02:91: 3a:ee:11:a7:71:ad:b9:33:d2:80:dc:16:4c:db:6f:0e:e0:98: 50:5f:e2:94:8f:63:32:1c:08:82:69:5d:ae:eb:00:56:fc:2f: 96:35:27:12:36:f9:dd:c6:ef:25:6a:ae:88:cd:28:b1:a3:95: 30:9d:2d:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgHqm2q4uwQfKXW2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI0MTEyODE0MDA1MloXDTI1MDIyNjE0MDA1MlowLzEtMCsGA1UEAxMk YTU5ZTBiNTUtYTZkZC00NGEwLWE3ZDItNmUxMDkwMzJjYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwV4EbIFyjvNBczUvhrZu44vJCqkShRNqtIa ONdQqGbTZqVPr/5yZSODCCCHOqNt/kKK3b2AGgOq4v8zH9xvp2wmhGgqxqlKpWw1 tQTPfj0NrAm2Ls6UMXO7+7NGobpDxYSy7DKrUgTtAQ6WXIR7rNA8h6BqAyhpec51 Ddcu9mGkpXjIfu2zR4igloRsxHB7bu11O1n5492dfJPeiYeiENKAulvkPITpStFq qY5mRghv4wEuHTjv5YrkXcXW3/CQVfpv082rmF6ijaQEfruv/Nq7OsU2QNycFYwy 6n25W1X0ZlRoUQucSBYrz4buQOlanTgGPiN1296npidkbESU+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAOv20i/CMYYeThaedj/2A9BZO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvODQ3MzM5NmMtOGEzNi0z NjE5LTgwYWEtYzAyNWVkNTI2OTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU595APflR3ppQQIwWTbN8yinqHq1wuGbjt++U2Un0Fvb8xzRGW6aE4 QY45Eviy0MVzv3xdQx4Q73Y+Zs6Bx4VG0Io/mRv/qwD1zATRgAGGnodFkNUEFFm6 OuSWT7wm5i8wkHfYcAXekhiPWGzRJyIqJ8KHSCd8+L66tjIZMC2TG9+Co/HNHA7R L8PXHmEV4h65VPqH3iSpvMMLj7GIRxJVOeqLiC31FQXQG0Avcuk4kolFu/NY3/B+ W2FlDmQv/Co2CVkCkTruEadxrbkz0oDcFkzbbw7gmFBf4pSPYzIcCIJpXa7rAFb8 L5Y1JxI2+d3G7yVqrojNKLGjlTCdLZY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:33 2025 by rpki-client