$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa File: c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa (raw, json) Hash identifier: vWJ3r2ZfX3H2cYODr2+lKMSGZJQ8cQyB0ueZ1MA8HdU= Subject key identifier: E7:2A:CB:4C:35:BA:E9:B7:23:35:6C:65:F1:97:CA:F6:01:BC:6E:17 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F432858481F65335CFC4D44812A4CC880 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa Signing time: Sat 07 Dec 2024 02:00:39 +0000 ROA not before: Sat 07 Dec 2024 02:00:39 +0000 ROA not after: Fri 07 Mar 2025 02:00:39 +0000 asID: 399629 IP address blocks: 72.5.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1f:65:33:5c:fc:4d:44:81:2a:4c:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Dec 7 02:00:39 2024 GMT Not After : Mar 7 02:00:39 2025 GMT Subject: CN=b918f639-ca73-4d89-a823-a3dae3da3f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:45:fc:ec:05:45:62:9b:c2:34:8b:79:08: c9:25:20:c0:c4:65:f4:ed:63:96:cc:05:6e:1f:eb: b7:3a:66:eb:30:e9:31:59:f1:5c:4e:01:45:e9:96: 24:54:de:18:91:d5:bc:31:e1:e3:4f:c0:0d:5c:76: 15:f0:8a:49:35:3f:eb:b8:1b:89:c0:a8:f6:94:68: ee:e0:a1:56:24:c6:7f:09:a9:f0:ef:12:69:4c:bf: 71:c0:0e:ca:0c:3b:7f:7e:3d:8e:8d:e4:fe:54:75: 48:a9:96:14:4d:92:4d:0f:35:c3:49:cd:e4:2f:03: ac:66:95:97:42:cc:79:72:6a:9a:5a:fc:00:0c:04: b9:8f:60:01:a0:69:d2:27:06:bf:5f:ca:ee:7b:ef: e8:1c:47:23:ab:8b:2c:d8:c0:07:0a:03:05:3d:30: 61:d1:c9:d9:78:ce:b8:bb:c6:4e:8c:bf:32:fa:0e: ed:5b:15:f1:dc:13:5c:4f:b7:61:bd:48:d9:36:a8: 19:64:84:e1:f0:69:c3:ee:da:d6:cc:f3:3d:a7:f3: c6:02:fa:7d:0f:92:45:85:3f:9b:2b:0b:15:84:e8: aa:ce:99:d8:63:76:33:b5:1b:15:bc:41:dc:c6:09: 1a:2d:a8:25:2f:26:c1:4b:e6:d5:b4:b0:92:37:80: 55:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2A:CB:4C:35:BA:E9:B7:23:35:6C:65:F1:97:CA:F6:01:BC:6E:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 72.5.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:97:5b:0c:ed:cd:ed:bc:1d:36:ae:4f:42:33:37:36:85:dc: 2c:ad:bd:45:c1:d2:5f:15:b0:1c:2f:fa:5c:80:bd:74:b2:66: 9a:5e:a6:27:73:71:42:fe:16:b2:cf:88:06:27:79:0e:57:50: 50:69:ef:f0:c6:34:f7:47:1e:a5:69:77:27:f7:c8:63:82:f8: 77:58:12:79:57:cc:06:2e:17:fa:d9:d1:66:55:2f:76:c8:f0: 7f:84:b9:bf:4c:88:22:6d:7b:7c:b8:47:7f:86:66:83:de:bd: 7f:1d:50:4c:a6:0e:1b:b5:2c:02:83:79:40:fa:f3:a8:d9:db: 51:57:aa:b7:81:c0:01:9e:7b:d9:0b:07:6e:2d:0b:08:1d:80: 72:a9:d5:62:34:57:a9:04:03:16:9a:43:7b:0a:a0:67:dc:89: 13:74:ed:05:a0:a6:25:b5:01:79:89:f8:be:77:84:c1:43:0b: c4:de:0d:17:c3:43:78:e5:e3:5f:78:e1:fb:ca:94:d5:ec:48: 64:d7:ed:6a:74:f5:8c:55:b1:3f:c4:71:3d:c2:77:b2:cb:1f: b0:16:a6:60:9f:91:82:9b:8d:c1:b4:2d:50:45:6a:f2:8d:46: 06:19:26:88:41:e6:40:98:a7:85:3e:81:c0:0c:a9:44:7f:81: 41:d7:92:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTNc/E1EgSpMyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk YjkxOGY2MzktY2E3My00ZDg5LWE4MjMtYTNkYWUzZGEzZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJJF/OwFRWKbwjSLeQjJJSDAxGX07WOWzAVu H+u3OmbrMOkxWfFcTgFF6ZYkVN4YkdW8MeHjT8ANXHYV8IpJNT/ruBuJwKj2lGju 4KFWJMZ/Canw7xJpTL9xwA7KDDt/fj2OjeT+VHVIqZYUTZJNDzXDSc3kLwOsZpWX Qsx5cmqaWvwADAS5j2ABoGnSJwa/X8rue+/oHEcjq4ss2MAHCgMFPTBh0cnZeM64 u8ZOjL8y+g7tWxXx3BNcT7dhvUjZNqgZZITh8GnD7trWzPM9p/PGAvp9D5JFhT+b KwsVhOiqzpnYY3YztRsVvEHcxgkaLaglLybBS+bVtLCSN4BV9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcqy0w1uum3IzVsZfGXyvYBvG4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYzFjYWI3YjQtNTcyYy0z NWIwLWI2YjYtZmIyYTg2ZmVlY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSAUqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeXWwztze28HTauT0IzNzaF3CytvUXB0l8VsBwv+lyAvXSyZppepidz cUL+FrLPiAYneQ5XUFBp7/DGNPdHHqVpdyf3yGOC+HdYEnlXzAYuF/rZ0WZVL3bI 8H+Eub9MiCJte3y4R3+GZoPevX8dUEymDhu1LAKDeUD686jZ21FXqreBwAGee9kL B24tCwgdgHKp1WI0V6kEAxaaQ3sKoGfciRN07QWgpiW1AXmJ+L53hMFDC8TeDRfD Q3jl41944fvKlNXsSGTX7Wp09YxVsT/EcT3Cd7LLH7AWpmCfkYKbjcG0LVBFavKN RgYZJohB5kCYp4U+gcAMqUR/gUHXklo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:55 2025 by rpki-client