$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/df4ae81b-3b81-359e-8c36-1c826165e898.roa File: df4ae81b-3b81-359e-8c36-1c826165e898.roa (raw, json) Hash identifier: Dfk7HKPp28m2l803cNIUFCG1sya86jvCHbIpJ7cbdtw= Subject key identifier: C1:32:03:A7:12:9C:BF:47:84:4C:B1:BC:DC:57:6C:2B:F5:2D:D7:11 Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F432858489075F5554A98058EDA942B80 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/df4ae81b-3b81-359e-8c36-1c826165e898.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 20454 IP address blocks: 64.38.216.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:f5:55:4a:98:05:8e:da:94:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=92bff23b-fe20-47a0-a74e-618ea68332ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:3b:ec:af:4a:47:8e:52:14:5f:48:81:f8: e3:59:5b:8e:3f:69:f5:1a:de:27:6b:f3:59:43:d4: 44:59:76:30:f9:79:e5:c6:3c:93:2a:7c:34:1a:dd: de:ca:6e:ef:d8:d0:d8:16:13:fa:77:ca:3d:9a:40: fe:04:66:79:2c:f4:98:fa:f8:bc:96:1d:f1:3a:1d: b7:43:c3:ee:de:0c:54:4c:47:24:77:0f:74:02:09: 39:79:68:72:1d:7b:1d:dd:a7:4d:00:88:2a:65:32: a0:d9:b4:7f:17:20:af:d6:9e:db:5f:c7:f1:f9:35: 31:5e:a2:df:9b:9a:af:4a:af:4a:43:3a:f2:e2:c9: 21:a4:e9:a3:9e:ec:8f:f1:66:75:11:0f:5a:47:6b: 48:b8:80:2c:e3:ec:d6:73:ea:af:90:24:c0:05:f4: 07:39:a5:f1:8e:66:0b:cb:d6:1c:e8:65:0e:24:96: 81:65:57:1f:d8:42:21:93:41:72:0b:c9:9e:25:d2: df:f3:b4:97:90:89:04:38:c4:35:4e:86:de:b8:05: 5d:45:54:22:a4:66:2d:3f:b2:fc:27:2c:d2:2b:44: 44:d4:55:e7:4e:40:e9:cd:2f:a2:b7:a1:1c:2e:3b: dc:53:c8:27:29:ec:2e:cc:cf:b5:84:33:54:79:4e: 65:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:32:03:A7:12:9C:BF:47:84:4C:B1:BC:DC:57:6C:2B:F5:2D:D7:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/df4ae81b-3b81-359e-8c36-1c826165e898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:2b:0a:95:e5:8e:a5:20:ce:a4:04:08:85:e3:d5:40:de:1a: 89:1d:18:53:b3:09:99:d0:01:21:36:e7:1e:1b:d9:d5:f4:d6: 8e:55:a4:f4:cf:e1:32:1f:9d:66:7b:af:6a:44:25:c2:c7:a4: af:99:f2:59:73:cb:dc:24:99:8e:b6:a8:7b:75:cc:bf:d1:31: 4c:79:22:74:43:7a:66:ce:76:48:40:b3:8e:b0:74:3d:ae:1e: 3c:5f:7d:f9:0a:dc:7b:2e:41:44:f4:b5:00:c2:5e:b8:c6:54: 82:3c:71:88:35:71:35:6d:9f:b1:bd:ad:76:22:27:7b:39:95: 7c:f3:a8:13:ec:43:c8:c4:24:6e:5e:e3:77:e2:0e:88:08:6a: 54:03:a5:86:fc:9a:96:01:a1:6d:00:16:81:28:e2:b7:58:51: b6:89:db:55:92:f5:21:78:d1:7c:49:95:1f:43:22:c6:37:1c: 9e:44:73:c5:ef:31:ef:2a:fd:79:a1:d4:22:75:0b:3a:9d:c6: b0:a3:bc:4b:e8:07:81:26:56:41:95:3b:8e:33:d2:4a:73:23: 8c:45:c3:f4:b6:e1:a1:5d:19:6a:88:20:b6:4d:9b:4d:75:d1: 65:f9:00:a2:bf:1e:b7:68:19:bf:61:f7:d9:91:e8:3a:30:8b: f0:f6:d5:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfVVSpgFjtqUK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk OTJiZmYyM2ItZmUyMC00N2EwLWE3NGUtNjE4ZWE2ODMzMmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss877K9KR45SFF9IgfjjWVuOP2n1Gt4na/NZ Q9REWXYw+XnlxjyTKnw0Gt3eym7v2NDYFhP6d8o9mkD+BGZ5LPSY+vi8lh3xOh23 Q8Pu3gxUTEckdw90Agk5eWhyHXsd3adNAIgqZTKg2bR/FyCv1p7bX8fx+TUxXqLf m5qvSq9KQzry4skhpOmjnuyP8WZ1EQ9aR2tIuIAs4+zWc+qvkCTABfQHOaXxjmYL y9Yc6GUOJJaBZVcf2EIhk0FyC8meJdLf87SXkIkEOMQ1TobeuAVdRVQipGYtP7L8 JyzSK0RE1FXnTkDpzS+it6EcLjvcU8gnKewuzM+1hDNUeU5lEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEyA6cSnL9HhEyxvNxXbCv1LdcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvZGY0YWU4MWItM2I4MS0z NTllLThjMzYtMWM4MjYxNjVlODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0rCpXljqUgzqQECIXj1UDeGokdGFOzCZnQASE25x4b2dX01o5VpPTP 4TIfnWZ7r2pEJcLHpK+Z8llzy9wkmY62qHt1zL/RMUx5InRDembOdkhAs46wdD2u HjxfffkK3HsuQUT0tQDCXrjGVII8cYg1cTVtn7G9rXYiJ3s5lXzzqBPsQ8jEJG5e 43fiDogIalQDpYb8mpYBoW0AFoEo4rdYUbaJ21WS9SF40XxJlR9DIsY3HJ5Ec8Xv Me8q/Xmh1CJ1CzqdxrCjvEvoB4EmVkGVO44z0kpzI4xFw/S24aFdGWqIILZNm011 0WX5AKK/HrdoGb9h99mR6Dowi/D21cY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:36 2025 by rpki-client