$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/90db42c4-6921-388d-8bed-643eefa83bde.roa File: 90db42c4-6921-388d-8bed-643eefa83bde.roa (raw, json) Hash identifier: dnFESrD7UaUIWJsgdX9CIrPM8foyVuC4Ayt5+xWLXls= Subject key identifier: DD:3E:EC:25:DB:55:07:94:49:7A:AA:E9:9A:AA:B0:1F:C5:DE:A9:42 Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F4328584827C53779E4E24D0595931B00 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/90db42c4-6921-388d-8bed-643eefa83bde.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 11572 IP address blocks: 64.38.249.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:37:79:e4:e2:4d:05:95:93:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=e8a7a3de-a94b-48d5-aa81-cae3e777b157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:cf:4d:da:0a:93:9d:0c:e7:5a:46:fa:a3: 60:8d:d4:53:19:8b:57:27:7d:e5:9e:50:c1:0f:02: fe:d8:be:24:2e:66:7a:5f:4a:bf:3f:8d:ff:af:8e: 75:3c:4a:b0:83:b9:e4:cb:d6:d3:ac:8d:93:e7:74: ed:15:d3:50:58:4d:59:a8:e3:aa:53:17:0a:11:9e: 50:13:45:5c:78:89:5e:df:e5:33:ae:b7:c0:ac:25: 99:7c:94:9d:17:f6:d1:9c:4c:d9:7e:4c:ca:2d:ec: 2c:c2:2d:6c:22:86:f0:9a:a3:df:08:ce:b1:f9:bd: 75:ce:51:2c:e5:f3:4e:6c:88:ba:53:98:87:74:28: bd:23:00:89:b4:4c:ed:7d:ee:50:98:53:56:a1:b5: 42:92:5e:c9:64:1d:d5:76:d5:4c:31:e2:05:50:9d: 49:cd:da:07:79:06:4e:d0:75:4c:95:f4:1d:32:5d: b7:0c:b5:dd:e9:bf:8e:4e:96:48:b1:69:5d:1a:d4: 3e:4d:16:0a:ae:c6:27:d6:28:af:b0:df:f2:0f:0e: b7:19:7d:12:80:1a:22:eb:fb:a4:1f:70:87:62:e5: 7a:9f:d5:1c:f0:1d:13:cb:93:d4:cd:de:55:a9:0c: fd:ef:9f:85:c9:e7:f5:22:2e:91:a0:6c:32:98:f8: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3E:EC:25:DB:55:07:94:49:7A:AA:E9:9A:AA:B0:1F:C5:DE:A9:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/90db42c4-6921-388d-8bed-643eefa83bde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b1:e2:99:6e:f5:e8:31:62:5f:bc:d2:9a:bb:83:9c:55:17: 67:eb:69:01:12:87:da:a1:6f:09:c2:73:61:4d:60:04:3c:34: bc:f1:bd:c7:7a:16:40:ba:db:13:11:6e:55:48:22:7a:63:e4: 16:33:3f:37:a6:39:b2:3d:93:6e:98:65:9a:fc:d1:63:1b:0a: 5d:86:e1:6f:3d:da:13:65:2e:95:ef:ec:da:c8:80:70:d9:dd: f9:4a:ac:a1:10:8d:c3:3f:66:b9:76:35:40:b3:8d:8c:f9:2c: 42:9a:2a:73:04:e4:d7:fd:4f:93:a6:f5:42:0a:0b:e9:e0:c0: 14:08:ab:50:10:b9:1d:3c:2e:ca:ef:85:b3:79:9f:f3:30:14: 36:45:9d:eb:cf:b1:73:65:7a:78:a6:6a:6e:c7:67:32:7c:c4: 3b:ca:6d:b3:f9:58:6f:b6:19:7f:d4:16:09:c4:25:c6:72:5b: bb:9e:72:a5:2a:71:e6:0f:9c:0b:a3:34:67:22:20:4e:5b:80: 0e:6e:c6:f5:72:9e:ed:9e:a6:0b:16:41:59:35:9b:17:6f:b8: dc:ed:58:99:db:a3:d0:64:01:db:85:d6:ab:5c:b6:5f:7c:ba: ec:42:c4:f7:9a:45:a2:c2:0a:fb:16:c7:cb:f2:b6:b6:39:89: ff:c9:5f:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxTd55OJNBZWTGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk ZThhN2EzZGUtYTk0Yi00OGQ1LWFhODEtY2FlM2U3NzdiMTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycDPTdoKk50M51pG+qNgjdRTGYtXJ33lnlDB DwL+2L4kLmZ6X0q/P43/r451PEqwg7nky9bTrI2T53TtFdNQWE1ZqOOqUxcKEZ5Q E0VceIle3+UzrrfArCWZfJSdF/bRnEzZfkzKLewswi1sIobwmqPfCM6x+b11zlEs 5fNObIi6U5iHdCi9IwCJtEztfe5QmFNWobVCkl7JZB3VdtVMMeIFUJ1JzdoHeQZO 0HVMlfQdMl23DLXd6b+OTpZIsWldGtQ+TRYKrsYn1iivsN/yDw63GX0SgBoi6/uk H3CHYuV6n9Uc8B0Ty5PUzd5VqQz975+Fyef1Ii6RoGwymPieYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0+7CXbVQeUSXqq6ZqqsB/F3qlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvOTBkYjQyYzQtNjkyMS0z ODhkLThiZWQtNjQzZWVmYTgzYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCb5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACix4plu9egxYl+80pq7g5xVF2fraQESh9qhbwnCc2FNYAQ8NLzxvcd6 FkC62xMRblVIInpj5BYzPzemObI9k26YZZr80WMbCl2G4W892hNlLpXv7NrIgHDZ 3flKrKEQjcM/Zrl2NUCzjYz5LEKaKnME5Nf9T5Om9UIKC+ngwBQIq1AQuR08Lsrv hbN5n/MwFDZFnevPsXNlenimam7HZzJ8xDvKbbP5WG+2GX/UFgnEJcZyW7uecqUq ceYPnAujNGciIE5bgA5uxvVynu2epgsWQVk1mxdvuNztWJnbo9BkAduF1qtctl98 uuxCxPeaRaLCCvsWx8vytrY5if/JX9A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:49 2025 by rpki-client