$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/afc3a8a9-0b9c-3dfd-8b01-4e21f9382c1f.roa File: afc3a8a9-0b9c-3dfd-8b01-4e21f9382c1f.roa (raw, json) Hash identifier: oFAqaLIAOA+MqPF7F0n2WGYREnRK3LycLYjW2BKcdRw= Subject key identifier: 9D:CD:A3:3F:E4:E1:D6:C6:AC:FE:C9:71:8B:CC:1D:C3:9A:E0:D0:BF Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Certificate serial: 010D0C9F4328584824FA8F4F395C29F7E1E9EB80 Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/afc3a8a9-0b9c-3dfd-8b01-4e21f9382c1f.roa Signing time: Mon 09 Dec 2024 02:00:40 +0000 ROA not before: Mon 09 Dec 2024 02:00:40 +0000 ROA not after: Sun 09 Mar 2025 02:00:40 +0000 asID: 21743 IP address blocks: 172.111.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:24:fa:8f:4f:39:5c:29:f7:e1:e9:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Validity Not Before: Dec 9 02:00:40 2024 GMT Not After : Mar 9 02:00:40 2025 GMT Subject: CN=d67ebbdb-5a49-452b-9aad-6187dc2b8754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:1f:c3:81:85:52:f7:8b:71:04:b1:85:ef: ca:fe:4b:2e:c9:87:0c:5e:cf:09:ee:fa:60:ee:8c: 46:cf:c2:dc:95:66:17:03:a9:43:02:09:8c:cd:bf: 6a:ec:c1:a7:08:63:38:c2:49:0b:67:a8:38:d9:4a: ea:fc:aa:cb:c2:40:5a:88:6e:e2:9a:7e:4c:10:1d: 8c:f3:29:88:a7:1e:38:85:3c:89:59:a9:4c:0b:a4: d0:6d:ae:76:05:82:39:43:4c:8b:ae:1d:f9:14:44: a7:75:35:38:31:86:a8:09:c3:29:24:2c:85:37:48: 9e:36:68:d7:d0:59:7c:6c:ea:55:71:b8:cf:8f:de: 30:d1:3c:7b:f2:80:30:5f:73:77:95:ca:c7:12:fb: 46:29:37:1c:97:6d:d0:46:54:00:5a:1a:a4:86:d7: de:65:19:fa:a7:94:e2:7b:fd:1a:b0:dd:8a:e6:74: c6:03:92:35:9c:25:98:44:b0:74:36:3f:c4:a6:fe: 77:de:2e:7d:dc:06:3f:39:bc:08:d9:6d:72:44:4c: d1:18:10:f8:6e:da:84:02:d3:95:ea:88:a9:c2:9b: 19:6f:45:11:a0:4e:2b:d5:e2:34:49:56:f9:4f:fb: c2:9e:6d:71:ec:98:81:1d:c4:45:7a:17:49:1b:e3: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CD:A3:3F:E4:E1:D6:C6:AC:FE:C9:71:8B:CC:1D:C3:9A:E0:D0:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/afc3a8a9-0b9c-3dfd-8b01-4e21f9382c1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl X509v3 Authority Key Identifier: keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d6:38:a7:cc:44:09:47:d0:86:91:dc:55:03:75:8e:a4:b6: 56:68:4d:3e:bf:27:24:61:9c:50:a4:f8:1f:b7:3b:c7:04:1d: 5b:8f:d8:1b:50:86:3b:5c:52:57:a3:45:f9:a9:a9:6a:f0:2d: cf:dc:d5:d6:60:12:fe:fd:c4:ac:7e:7d:f9:df:cb:94:99:95: 4b:c5:52:84:57:12:62:d5:e2:06:05:56:0c:94:d7:1b:2a:00: 28:9c:e7:fc:e3:28:f5:4d:2b:8f:f9:23:52:26:ef:cd:1b:c1: d6:8f:e5:22:5d:16:1c:53:ed:51:71:54:2e:0b:47:5e:6f:df: 2b:9d:0d:f9:a5:9f:2a:2d:44:57:03:94:5b:2e:91:d3:49:e0: b1:10:06:a4:96:b5:43:43:81:c7:18:0a:f0:68:6d:3f:f0:5c: 9f:b7:86:6e:73:a6:eb:c3:33:f1:1c:02:de:eb:e8:fd:11:a7: d5:42:0f:25:5a:a9:16:81:ca:57:d7:4b:ae:89:b1:0d:9f:38: 1e:db:0d:53:9b:ad:69:d6:b4:6f:dc:fe:af:67:6b:de:f3:a3: f0:5d:f2:e1:1a:d6:c2:30:78:59:37:47:97:e7:85:84:70:b6: 62:c0:9c:14:06:45:cd:56:05:e4:a7:c4:3e:35:ea:46:a6:a1: af:60:32:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgk+o9POVwp9+Hp64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4 MGMzMB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk ZDY3ZWJiZGItNWE0OS00NTJiLTlhYWQtNjE4N2RjMmI4NzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhIfw4GFUveLcQSxhe/K/ksuyYcMXs8J7vpg 7oxGz8LclWYXA6lDAgmMzb9q7MGnCGM4wkkLZ6g42Urq/KrLwkBaiG7imn5MEB2M 8ymIpx44hTyJWalMC6TQba52BYI5Q0yLrh35FESndTU4MYaoCcMpJCyFN0ieNmjX 0Fl8bOpVcbjPj94w0Tx78oAwX3N3lcrHEvtGKTccl23QRlQAWhqkhtfeZRn6p5Ti e/0asN2K5nTGA5I1nCWYRLB0Nj/Epv533i593AY/ObwI2W1yREzRGBD4btqEAtOV 6oipwpsZb0URoE4r1eI0SVb5T/vCnm1x7JiBHcRFehdJG+PsRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3Noz/k4dbGrP7JcYvMHcOa4NC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvYWZjM2E4YTktMGI5Yy0z ZGZkLThiMDEtNGUyMWY5MzgyYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3 ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG87MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzWOKfMRAlH0IaR3FUDdY6ktlZoTT6/JyRhnFCk+B+3O8cEHVuP2BtQ hjtcUlejRfmpqWrwLc/c1dZgEv79xKx+ffnfy5SZlUvFUoRXEmLV4gYFVgyU1xsq ACic5/zjKPVNK4/5I1Im780bwdaP5SJdFhxT7VFxVC4LR15v3yudDfmlnyotRFcD lFsukdNJ4LEQBqSWtUNDgccYCvBobT/wXJ+3hm5zpuvDM/EcAt7r6P0Rp9VCDyVa qRaBylfXS66JsQ2fOB7bDVObrWnWtG/c/q9na97zo/Bd8uEa1sIweFk3R5fnhYRw tmLAnBQGRc1WBeSnxD416kamoa9gMvY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:57 2025 by rpki-client