$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa File: a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa (raw, json) Hash identifier: zsSZt6v96NsgI/0d5VgqMe7uAh0YdxYRohpR0S/g0T4= Subject key identifier: D8:4F:50:0D:9A:5E:CE:9A:11:9D:14:56:C8:BB:53:B4:9E:3B:0D:85 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F43285848222FD7EB636C1C61DA5B9D00 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa Signing time: Sun 08 Dec 2024 02:00:39 +0000 ROA not before: Sun 08 Dec 2024 02:00:39 +0000 ROA not after: Sat 08 Mar 2025 02:00:39 +0000 asID: 399629 IP address blocks: 168.100.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:22:2f:d7:eb:63:6c:1c:61:da:5b:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Dec 8 02:00:39 2024 GMT Not After : Mar 8 02:00:39 2025 GMT Subject: CN=a460489e-fb2d-4802-8cdd-a7b3eee95841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:fb:9a:82:59:f0:31:38:94:e5:80:46:3e: 2e:dd:d4:a0:08:96:84:ee:e1:c8:e7:eb:d5:55:b1: 3b:06:b8:d6:aa:9b:c8:55:17:fc:96:d1:01:1a:18: ca:33:d9:47:c5:3d:c9:d7:17:8d:39:73:48:52:26: a1:33:b8:e4:15:b9:d3:50:21:59:9f:61:e7:5f:55: 99:4c:43:22:c0:78:c7:da:1d:57:60:70:2a:ed:6a: 8e:b7:9d:c3:bc:39:e8:c5:e2:58:9c:fe:ae:ea:2a: 97:dc:20:54:b6:12:cb:57:a9:89:60:c1:7a:0e:47: 2e:18:6a:cc:95:16:a3:88:1e:eb:ba:92:80:61:3e: b9:12:0f:9d:6d:82:99:8b:cd:6f:49:7f:1c:30:90: 4f:ec:bc:7d:3a:a5:1c:45:40:20:d0:05:77:e7:9c: 08:c5:39:8e:7d:49:39:8b:2c:72:8c:97:28:b3:c1: 4f:7e:b2:5a:af:29:52:2e:fc:d0:eb:82:c7:91:b7: 81:66:3b:90:66:f8:37:a6:94:be:5d:3d:d7:ec:a3: 54:9f:2e:95:06:da:7b:8d:3f:65:f1:5a:dd:83:9f: dd:84:63:38:1c:b9:db:e2:52:5c:48:8d:f2:70:01: 07:58:38:77:a2:95:36:0e:6d:41:7b:08:b3:ea:0f: ec:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4F:50:0D:9A:5E:CE:9A:11:9D:14:56:C8:BB:53:B4:9E:3B:0D:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 168.100.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:50:fd:b3:51:5a:69:9c:95:61:5d:2b:db:b6:78:46:c0:9b: 20:eb:2a:4b:4b:57:fb:f0:55:45:f3:27:9c:03:fa:2f:e4:e3: 57:90:29:58:a8:64:81:02:d7:64:82:c7:eb:cc:6c:e9:8a:0e: c4:c6:26:ab:2f:85:a2:fa:9b:a9:14:b6:2b:3e:22:f1:ff:b4: ea:e9:56:84:29:9d:5b:ee:e3:7b:af:4a:dc:a2:1f:a9:32:6d: ab:43:59:6c:95:ec:06:7b:2b:81:56:dd:54:30:fa:dd:2b:10: 19:a4:97:75:3e:02:1a:b4:8e:dd:1d:1f:3e:b4:b3:f8:99:63: 07:80:ee:a9:90:b2:6e:d7:9b:94:b2:12:02:13:ff:bc:dc:73: a5:79:10:ba:f4:80:69:85:05:c6:11:2e:3f:19:ac:8e:52:ac: 23:c1:77:b9:cf:67:26:36:57:e6:d2:ed:2c:80:eb:d2:ce:e8: 75:60:f9:8a:91:51:f6:32:79:e3:57:ef:90:e9:1e:1d:09:19: d5:74:bd:13:b9:b1:4a:5b:7c:7b:7d:d5:59:e5:f3:f1:c2:33: 38:88:ce:7a:5d:05:9f:9d:24:74:19:52:ae:e7:c6:8b:47:07: 14:f4:eb:80:62:38:ec:a1:d1:f1:12:9c:d1:11:8d:12:e5:88: 2a:07:bb:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL9frY2wcYdpbnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk YTQ2MDQ4OWUtZmIyZC00ODAyLThjZGQtYTdiM2VlZTk1ODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB/7moJZ8DE4lOWARj4u3dSgCJaE7uHI5+vV VbE7BrjWqpvIVRf8ltEBGhjKM9lHxT3J1xeNOXNIUiahM7jkFbnTUCFZn2HnX1WZ TEMiwHjH2h1XYHAq7WqOt53DvDnoxeJYnP6u6iqX3CBUthLLV6mJYMF6DkcuGGrM lRajiB7rupKAYT65Eg+dbYKZi81vSX8cMJBP7Lx9OqUcRUAg0AV355wIxTmOfUk5 iyxyjJcos8FPfrJarylSLvzQ64LHkbeBZjuQZvg3ppS+XT3X7KNUny6VBtp7jT9l 8Vrdg5/dhGM4HLnb4lJcSI3ycAEHWDh3opU2Dm1Bewiz6g/snwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhPUA2aXs6aEZ0UVsi7U7SeOw2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYTNmODM3MzYtYTJmNC0z ZThiLWE2OTQtZTRlYjcyZDVjNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNQ/bNRWmmclWFdK9u2eEbAmyDrKktLV/vwVUXzJ5wD+i/k41eQKVio ZIEC12SCx+vMbOmKDsTGJqsvhaL6m6kUtis+IvH/tOrpVoQpnVvu43uvStyiH6ky batDWWyV7AZ7K4FW3VQw+t0rEBmkl3U+Ahq0jt0dHz60s/iZYweA7qmQsm7Xm5Sy EgIT/7zcc6V5ELr0gGmFBcYRLj8ZrI5SrCPBd7nPZyY2V+bS7SyA69LO6HVg+YqR UfYyeeNX75DpHh0JGdV0vRO5sUpbfHt91Vnl8/HCMziIznpdBZ+dJHQZUq7nxotH BxT064BiOOyh0fESnNERjRLliCoHu6A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:56 2025 by rpki-client