$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa File: eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa (raw, json) Hash identifier: iC26TxC47DzQAReeggpseDowj2fLEZLjUFEABZ4T61E= Subject key identifier: 06:57:E9:A2:D7:A9:0C:96:D1:76:79:FF:44:74:2E:FC:CF:F7:32:3F Certificate issuer: /CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Certificate serial: 010D0C9F43285848345569A6AA9DC4689A6BC200 Authority key identifier: EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 53507 IP address blocks: 162.0.156.0/22 maxlen: 24 173.243.16.0/20 maxlen: 24 199.96.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:69:a6:aa:9d:c4:68:9a:6b:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=49bab129-114b-4c5c-a008-233f39c430d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9e:71:b8:90:e7:72:5f:45:7a:c2:a5:c5:af: fa:10:8f:d9:c7:f1:75:77:71:4c:33:e9:c7:3d:d1: a4:f9:64:df:9d:26:d8:1f:df:ab:26:5c:4c:b2:e8: 59:55:72:31:45:6f:51:9d:27:cb:4f:be:a9:27:3f: c9:03:6b:d3:d6:a3:de:24:b1:12:2d:43:f2:55:e7: ca:a3:61:99:09:f7:0b:5b:6c:6d:76:c5:6f:a5:09: 97:8c:49:15:d0:6e:9d:6f:8d:ef:51:b2:5a:b4:ac: 5c:64:6b:ab:ee:d9:aa:a7:d2:54:89:c8:4f:b1:99: 2b:b0:90:15:76:9a:95:72:69:51:bc:aa:42:60:9b: 92:26:2a:8f:74:5e:fb:8f:ed:9d:50:11:3c:42:d4: 7b:ec:b3:72:8f:43:b8:b7:26:df:cd:c2:4b:05:67: 48:1b:bb:f5:94:d7:c8:ad:f7:99:28:8d:3b:a5:da: 1b:fe:15:ad:6e:5f:47:d2:9e:fb:43:f6:30:29:6c: fb:a1:8f:4e:ef:01:a4:4f:ca:b0:23:21:e1:1b:17: 24:1a:97:94:7f:27:f8:98:38:b1:11:fe:18:ca:15: 97:e3:3b:44:4a:82:8e:69:2c:2f:d0:f9:37:75:2f: 94:a5:18:6b:7b:e6:90:57:87:84:d8:5e:9c:d3:8a: 84:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:57:E9:A2:D7:A9:0C:96:D1:76:79:FF:44:74:2E:FC:CF:F7:32:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl X509v3 Authority Key Identifier: keyid:EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer sbgp-ipAddrBlock: critical IPv4: 162.0.156.0/22 173.243.16.0/20 199.96.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1b:8c:4f:8e:fd:0d:31:1e:c9:1d:9d:7f:a8:c0:8e:7f:d9: 84:d9:7e:42:2e:26:de:8f:24:fc:c1:a7:cd:c4:08:57:77:07: e2:21:79:60:bb:56:8d:f7:f2:c4:74:27:8d:56:24:74:07:01: b8:12:5f:d8:7b:f8:96:ab:f3:43:2a:a0:cc:e2:d6:25:fa:80: bc:65:44:6f:6a:5a:25:79:30:c3:17:b8:a9:06:c2:90:2c:26: e3:e4:6d:8d:ad:34:c8:76:e2:d2:68:3a:98:0c:50:e2:6d:d1: 2f:7f:0d:ad:43:8e:95:a0:fe:fb:b2:14:bc:54:f6:5b:89:ea: c8:3a:66:da:00:e1:56:87:49:2d:55:53:0f:71:18:59:af:25: 69:b7:e8:1e:7b:41:46:53:ac:bd:ab:b7:b8:16:30:cb:52:0f: dc:c6:22:88:b5:75:93:a1:f3:14:96:1b:04:23:f0:09:a3:91: 95:0c:ed:b8:6b:02:ce:f8:07:f3:38:89:b1:0e:02:a4:fa:71: c2:ee:c5:a3:88:17:35:65:c7:33:40:b1:88:d3:70:8c:ce:6f: 01:b3:1f:c5:65:c5:e2:4a:ad:c8:ef:73:bc:83:7e:f1:81:82: 00:59:06:ff:64:29:7a:cf:4d:b1:bb:a0:ec:17:dd:f5:01:6c: 47:3e:57:a7 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEg0VWmmqp3EaJprwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlZjM2MzQtN2I0OS00Yjk3LTg3ODctNjgwZDYxOTZl NmU0MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk NDliYWIxMjktMTE0Yi00YzVjLWEwMDgtMjMzZjM5YzQzMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg55xuJDncl9FesKlxa/6EI/Zx/F1d3FMM+nH PdGk+WTfnSbYH9+rJlxMsuhZVXIxRW9RnSfLT76pJz/JA2vT1qPeJLESLUPyVefK o2GZCfcLW2xtdsVvpQmXjEkV0G6db43vUbJatKxcZGur7tmqp9JUichPsZkrsJAV dpqVcmlRvKpCYJuSJiqPdF77j+2dUBE8QtR77LNyj0O4tybfzcJLBWdIG7v1lNfI rfeZKI07pdob/hWtbl9H0p77Q/YwKWz7oY9O7wGkT8qwIyHhGxckGpeUfyf4mDix Ef4YyhWX4ztESoKOaSwv0Pk3dS+UpRhre+aQV4eE2F6c04qEFwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFAZX6aLXqQyW0XZ5/0R0LvzP9zI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVm MzYzNC03YjQ5LTRiOTctODc4Ny02ODBkNjE5NmU2ZTQvZWI0NDUwNTgtMmM0My0z ZDUwLTlkNTUtN2M1YTY5ODVlMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFlZjM2MzQtN2I0OS00Yjk3LTg3 ODctNjgwZDYxOTZlNmU0L2ExZWYzNjM0LTdiNDktNGI5Ny04Nzg3LTY4MGQ2MTk2 ZTZlNC5jcmwwHwYDVR0jBBgwFoAU64YxEagOCq33QaX8gmjaFICXvrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVmMzYzNC03YjQ5LTRiOTctODc4Ny02ODBk NjE5NmU2ZTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCogCcAwQE rfMQAwQCx2A0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGkbjE+O/Q0xHskdnX+owI5/2YTZfkIuJt6PJPzB p83ECFd3B+IheWC7Vo338sR0J41WJHQHAbgSX9h7+Jar80MqoMzi1iX6gLxlRG9q WiV5MMMXuKkGwpAsJuPkbY2tNMh24tJoOpgMUOJt0S9/Da1DjpWg/vuyFLxU9luJ 6sg6ZtoA4VaHSS1VUw9xGFmvJWm36B57QUZTrL2rt7gWMMtSD9zGIoi1dZOh8xSW GwQj8AmjkZUM7bhrAs74B/M4ibEOAqT6ccLuxaOIFzVlxzNAsYjTcIzObwGzH8Vl xeJKrcjvc7yDfvGBggBZBv9kKXrPTbG7oOwX3fUBbEc+V6c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:00 2025 by rpki-client