$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/4ecf45e8-e3cf-3c4a-9a68-749778a99f1b.roa File: 4ecf45e8-e3cf-3c4a-9a68-749778a99f1b.roa (raw, json) Hash identifier: tWhxPy5Dwo1DG2S7/zefsdHMgCqf/c2/arHqBwNrK14= Subject key identifier: B8:69:8C:FA:F2:A3:86:D4:81:D7:02:4A:8C:8D:9D:BD:C3:84:3E:E0 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F432858481C9A79AD79FBF3C8A1151568 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/4ecf45e8-e3cf-3c4a-9a68-749778a99f1b.roa Signing time: Fri 06 Dec 2024 02:00:39 +0000 ROA not before: Fri 06 Dec 2024 02:00:39 +0000 ROA not after: Thu 06 Mar 2025 02:00:39 +0000 asID: 14618 IP address blocks: 142.147.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:9a:79:ad:79:fb:f3:c8:a1:15:15:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Dec 6 02:00:39 2024 GMT Not After : Mar 6 02:00:39 2025 GMT Subject: CN=6e1def7b-3d80-422d-8c7e-edefe0838a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:60:2b:8c:d8:2a:95:54:b2:9c:b0:20:0d: ce:78:4c:b2:80:77:c9:d5:6c:8f:77:07:69:f8:38: 04:14:26:1f:77:d0:cb:24:4c:40:eb:96:1d:3a:74: 63:2a:1f:3e:a9:78:88:5e:dd:b2:16:dc:fc:d4:be: 09:8f:9a:3b:58:ba:c7:96:23:fb:ba:51:48:70:58: 70:a4:8c:06:f2:7b:f9:d9:41:f9:2e:eb:95:f0:83: cc:33:e0:89:b8:5c:62:6e:65:59:d8:70:47:89:32: 99:0d:b7:7c:fb:22:0d:d2:1a:63:d9:42:c2:1e:8d: 92:1e:3c:20:81:b2:2d:20:a6:42:19:df:1e:9a:28: c2:13:0b:23:fc:76:10:be:6f:93:e8:eb:d8:68:d4: 64:46:b8:f2:5b:ea:2c:b7:76:ce:da:94:5c:d6:00: 02:2d:a6:a2:bf:a4:66:f4:9a:05:3c:4d:95:ce:bc: f5:5f:b1:f7:04:85:66:f4:9a:33:89:59:79:c8:7f: b2:4a:28:c9:57:89:57:b0:0b:40:a9:04:d7:49:94: 07:a4:5e:44:db:99:aa:64:7d:ea:e5:06:cc:13:de: b4:c6:b0:62:e9:96:7b:d0:e4:b5:af:0a:f8:f2:e2: 88:10:5d:7b:6d:12:2b:2f:aa:70:8f:d4:52:93:e4: 3b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:69:8C:FA:F2:A3:86:D4:81:D7:02:4A:8C:8D:9D:BD:C3:84:3E:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/4ecf45e8-e3cf-3c4a-9a68-749778a99f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 142.147.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:86:f5:7a:70:5d:32:45:08:25:f6:69:b0:a7:a5:30:60:91: e1:e7:5b:60:6d:4b:de:08:46:e5:c5:d0:fe:34:c6:d0:a2:93: 34:29:e2:7c:b1:33:c2:8e:d4:c3:2a:78:e9:a6:5a:69:bc:75: 6f:6a:c0:c8:57:44:48:3b:61:64:d2:cb:c0:41:d8:b5:40:3c: 98:55:72:a9:53:06:62:8b:3e:91:14:5e:3f:c8:d5:81:90:2f: 31:82:98:ae:e4:13:79:fe:31:d9:a9:d7:56:6a:43:2c:e0:52: a3:db:10:89:0f:92:b1:d9:d1:0a:cf:0f:1b:8d:08:34:2b:55: cb:5d:92:9f:71:3f:48:85:69:63:8c:82:15:86:f7:35:86:37: 5f:02:af:60:97:33:cb:c8:82:32:ae:1c:68:8f:5a:00:44:55: e4:6b:89:93:46:36:c9:ac:67:5f:dc:cd:97:48:5d:5a:89:e6: 1f:a5:22:40:87:af:d1:af:57:33:40:37:66:f9:38:72:19:1a: 53:37:a6:0a:47:ba:d9:b9:f9:36:a7:4a:b7:97:bb:b5:ba:77: 58:0c:3c:2c:06:e6:f5:b2:e3:31:23:49:69:d6:2e:65:ad:4e: 9e:da:9d:49:40:0a:6b:f5:b8:ec:60:ae:af:b3:15:14:66:b0: d8:df:8e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmnmtefvzyKEVFWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk NmUxZGVmN2ItM2Q4MC00MjJkLThjN2UtZWRlZmUwODM4YTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxntgK4zYKpVUspywIA3OeEyygHfJ1WyPdwdp +DgEFCYfd9DLJExA65YdOnRjKh8+qXiIXt2yFtz81L4Jj5o7WLrHliP7ulFIcFhw pIwG8nv52UH5LuuV8IPMM+CJuFxibmVZ2HBHiTKZDbd8+yIN0hpj2ULCHo2SHjwg gbItIKZCGd8emijCEwsj/HYQvm+T6OvYaNRkRrjyW+ost3bO2pRc1gACLaaiv6Rm 9JoFPE2Vzrz1X7H3BIVm9JoziVl5yH+ySijJV4lXsAtAqQTXSZQHpF5E25mqZH3q 5QbME960xrBi6ZZ70OS1rwr48uKIEF17bRIrL6pwj9RSk+Q7XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhpjPryo4bUgdcCSoyNnb3DhD7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvNGVjZjQ1ZTgtZTNjZi0z YzRhLTlhNjgtNzQ5Nzc4YTk5ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKG9XpwXTJFCCX2abCnpTBgkeHnW2BtS94IRuXF0P40xtCikzQp4nyx M8KO1MMqeOmmWmm8dW9qwMhXREg7YWTSy8BB2LVAPJhVcqlTBmKLPpEUXj/I1YGQ LzGCmK7kE3n+Mdmp11ZqQyzgUqPbEIkPkrHZ0QrPDxuNCDQrVctdkp9xP0iFaWOM ghWG9zWGN18Cr2CXM8vIgjKuHGiPWgBEVeRriZNGNsmsZ1/czZdIXVqJ5h+lIkCH r9GvVzNAN2b5OHIZGlM3pgpHutm5+TanSreXu7W6d1gMPCwG5vWy4zEjSWnWLmWt Tp7anUlACmv1uOxgrq+zFRRmsNjfjjk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:53 2025 by rpki-client