$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa File: 4c09f404-0682-3e12-a569-27fb667f5de3.roa (raw, json) Hash identifier: ZXzG86nI6I0Icep96lvC40dEBHNUFvgB97eRnGN+H6g= Subject key identifier: 17:59:AD:E9:5C:1E:46:5F:DF:D2:63:37:43:51:7E:D9:2B:FB:E2:79 Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Certificate serial: 010D0C9F43285848345560FA3125E0E808C2C480 Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 16509 IP address blocks: 52.144.58.0/24 maxlen: 24 168.245.151.0/24 maxlen: 24 192.139.134.0/24 maxlen: 24 199.19.89.0/24 maxlen: 24 199.19.90.0/24 maxlen: 24 199.19.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:60:fa:31:25:e0:e8:08:c2:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=0babb8bc-95e3-47c6-8954-f92d8a8d5f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:44:53:a8:8b:3f:81:13:12:fc:b6:e7:75:93: 67:9e:d8:52:ff:71:41:a0:7f:68:5c:96:72:2d:fe: 1f:15:14:7d:76:87:9c:d6:08:cd:40:22:1d:a2:e4: ce:e5:5e:95:fb:53:a9:36:56:fc:44:60:cc:79:9e: 1e:d1:50:c4:3f:30:7c:24:bf:6d:9b:8a:73:7b:70: 5f:5d:13:c3:d6:8f:60:3e:9f:16:c4:77:2f:b1:1f: 74:4a:d4:be:96:aa:83:49:c8:8a:d2:22:7a:ea:44: 29:bd:a7:52:66:91:69:a8:30:4b:f0:7f:67:7b:15: a9:0a:3d:89:91:7b:83:a8:14:2f:6d:55:76:30:25: c9:24:a4:45:88:ad:96:eb:82:1c:76:d2:ee:86:7b: c7:eb:35:76:25:63:d2:47:49:82:1b:d8:f9:6e:b6: 91:f7:fa:c9:35:da:a4:ef:70:90:6d:fe:ef:6d:cb: d9:64:33:3a:14:81:61:ce:82:8e:d3:71:da:8e:92: ad:22:7e:ec:2d:b2:3d:07:71:24:76:3f:26:6b:d0: 90:af:6c:0e:16:3b:f5:ea:8c:f6:f5:a1:54:0f:65: 11:58:cf:7a:c3:2d:09:d8:a6:6a:6a:19:67:4a:24: ef:03:fc:f9:78:35:3a:2e:50:95:3e:71:5d:fe:06: b9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:59:AD:E9:5C:1E:46:5F:DF:D2:63:37:43:51:7E:D9:2B:FB:E2:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl X509v3 Authority Key Identifier: keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer sbgp-ipAddrBlock: critical IPv4: 52.144.58.0/24 168.245.151.0/24 192.139.134.0/24 199.19.89.0-199.19.91.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:86:33:26:2f:9d:dd:d8:b0:22:42:f5:50:74:1a:ab:18:01: a5:7e:4b:ef:1f:11:17:60:26:23:33:5a:ea:4f:d5:34:5a:99: 94:a0:82:f8:e3:67:0a:77:d4:f4:40:75:a9:c9:78:d4:58:b3: 1d:ac:99:e7:af:a8:d6:66:b3:3a:cd:4c:3e:fb:db:4b:7a:f0: 98:81:5f:ab:32:f6:0b:1b:01:4c:d6:e2:5f:78:cc:3e:45:a6: a3:15:bf:ac:f6:33:42:4c:4e:4d:65:39:a1:bf:fe:a8:5f:73: 46:83:96:83:80:09:7b:d0:39:fb:36:e5:0b:05:0e:03:6a:5a: 8a:04:b9:e6:da:9d:c3:7b:23:cc:2f:5d:5f:1e:22:56:88:a7: 97:09:62:cb:dd:12:82:78:d0:4e:9c:ec:9e:3c:0e:7e:87:fa: 17:fa:a0:23:78:e3:41:6c:94:ed:99:15:99:0c:0e:39:43:d7: c9:56:bd:e3:5a:c8:cc:e2:80:c0:f9:f6:3d:3f:ad:15:e0:9e: 3e:8a:34:6d:02:77:78:55:43:a3:58:0f:ef:90:98:03:af:dd: cf:18:28:0a:92:27:e0:cf:2d:15:f6:2e:b6:84:d8:9e:4e:d3: fe:fb:5d:3b:83:ae:fc:52:8c:40:ce:15:1d:1e:77:fb:94:f7: f4:e6:67:53 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEg0VWD6MSXg6AjCxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj YTk4MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk MGJhYmI4YmMtOTVlMy00N2M2LTg5NTQtZjkyZDhhOGQ1Zjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhURTqIs/gRMS/LbndZNnnthS/3FBoH9oXJZy Lf4fFRR9doec1gjNQCIdouTO5V6V+1OpNlb8RGDMeZ4e0VDEPzB8JL9tm4pze3Bf XRPD1o9gPp8WxHcvsR90StS+lqqDSciK0iJ66kQpvadSZpFpqDBL8H9nexWpCj2J kXuDqBQvbVV2MCXJJKRFiK2W64IcdtLuhnvH6zV2JWPSR0mCG9j5braR9/rJNdqk 73CQbf7vbcvZZDM6FIFhzoKO03HajpKtIn7sLbI9B3Ekdj8ma9CQr2wOFjv16oz2 9aFUD2URWM96wy0J2KZqahlnSiTvA/z5eDU6LlCVPnFd/ga5YwIDAQABo4IDbzCC A2swHQYDVR0OBBYEFBdZrelcHkZf39JjN0NRftkr++J5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvNGMwOWY0MDQtMDY4Mi0z ZTEyLWE1NjktMjdmYjY2N2Y1ZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2 Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0 MjlhNmNhOTguY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQANJA6AwQA qPWXAwQAwIuGMAwDBADHE1kDBALHE1gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAT4YzJi+d3diwIkL1UHQa qxgBpX5L7x8RF2AmIzNa6k/VNFqZlKCC+ONnCnfU9EB1qcl41FizHayZ56+o1maz Os1MPvvbS3rwmIFfqzL2CxsBTNbiX3jMPkWmoxW/rPYzQkxOTWU5ob/+qF9zRoOW g4AJe9A5+zblCwUOA2paigS55tqdw3sjzC9dXx4iVoinlwliy90SgnjQTpzsnjwO fof6F/qgI3jjQWyU7ZkVmQwOOUPXyVa941rIzOKAwPn2PT+tFeCePoo0bQJ3eFVD o1gP75CYA6/dzxgoCpIn4M8tFfYutoTYnk7T/vtdO4Ou/FKMQM4VHR53+5T39OZn Uw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:37 2025 by rpki-client