$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa File: cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa (raw, json) Hash identifier: dmElbFRAiuf86xQsWOyf5iZ6QtfxhC4Ly7Yf14BmDDg= Subject key identifier: 62:82:4A:1F:CA:8D:BF:16:A1:E3:B9:D4:78:04:8F:0E:6C:33:61:3B Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F4328584863CB0B30AD3B487B31DF8300 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 7922 IP address blocks: 72.22.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:0b:30:ad:3b:48:7b:31:df:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=12546c2b-23c6-42a4-a0a2-16b9b0a9d317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c0:60:29:b7:cc:f9:9b:5a:f5:6a:87:a8:57: 8f:64:64:1b:e7:ee:14:c6:f2:34:a3:e8:f7:3a:6c: 1b:1e:9c:97:77:8f:44:5f:ab:d6:ee:e8:a6:9c:76: 5e:f3:6e:f9:34:6f:d3:53:3a:30:1c:c8:a3:a6:33: e7:29:43:1d:54:c1:f4:7a:99:05:cb:61:fe:b5:d0: 5d:96:36:14:14:c1:c7:d1:66:0c:2e:d6:fb:50:bd: 39:cb:52:87:06:d8:5e:91:a8:50:5c:04:01:67:ce: f0:0d:07:4e:53:a9:5a:bb:bb:60:47:5f:30:3e:20: be:52:0b:b0:f6:45:77:8e:56:39:6b:99:30:37:c8: e8:c1:d3:68:d1:b8:70:1a:6f:07:1f:16:d1:4f:cf: a1:67:3b:39:12:86:68:d3:f5:f1:63:ec:52:f9:74: 81:37:dc:86:80:42:cb:96:44:d9:3f:cf:2c:aa:21: 68:3d:35:af:05:fa:e4:69:63:96:64:6b:f6:9a:1d: 9c:be:70:e4:57:01:d1:78:87:8a:df:04:e7:77:f8: e1:32:5a:30:12:25:78:2a:9a:65:01:21:83:71:2e: 0d:ac:e8:36:d3:af:57:19:cf:f4:9b:df:1d:76:41: 8c:3d:48:2c:5a:40:39:fb:9f:c8:5c:5d:d4:78:0c: d4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:82:4A:1F:CA:8D:BF:16:A1:E3:B9:D4:78:04:8F:0E:6C:33:61:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 72.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c4:8f:e1:ea:32:b8:17:2c:c9:d9:97:5a:e4:f6:a2:55:9e: 96:6c:6c:77:ed:cf:c2:b3:c7:cf:c2:3b:c5:3d:09:72:3d:c4: 19:03:da:55:ee:e7:80:ae:88:77:76:7f:3d:9f:1b:55:bb:25: da:a3:e8:d8:9a:b9:b3:49:ee:55:c0:22:bf:27:60:6e:74:b2: 98:9c:99:96:15:eb:f3:ea:77:d2:91:db:51:bb:1a:1b:ee:65: a4:f6:9e:ca:0f:f6:1f:91:82:a9:8e:0d:c1:b3:7f:54:48:21: 42:1a:9f:df:f3:57:ce:5c:88:bb:d6:49:8a:66:d2:91:47:25: 95:2b:98:dd:54:90:07:f7:21:a0:ce:82:db:fa:12:c0:2c:9f: 30:00:2c:be:2c:db:bc:c7:cf:c7:20:20:e6:38:cd:cf:20:91: ee:8d:5c:e6:ab:65:0c:01:a9:86:07:34:15:26:33:33:a9:98: b3:02:65:6d:cc:42:fd:7b:69:49:37:6e:53:04:dd:c4:f9:fe: c1:c4:71:91:d3:9f:14:2f:f2:70:62:37:cb:b5:bc:f9:6e:7c: 1b:ed:ca:c0:3e:19:71:f1:6a:3a:aa:24:94:f4:ad:c4:4f:88: 65:cd:13:1b:ad:a3:e0:f0:e8:b2:e1:d5:e7:bb:1e:20:9b:e2: fc:c8:31:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjywswrTtIezHfgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk MTI1NDZjMmItMjNjNi00MmE0LWEwYTItMTZiOWIwYTlkMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8BgKbfM+Zta9WqHqFePZGQb5+4UxvI0o+j3 OmwbHpyXd49EX6vW7uimnHZe8275NG/TUzowHMijpjPnKUMdVMH0epkFy2H+tdBd ljYUFMHH0WYMLtb7UL05y1KHBthekahQXAQBZ87wDQdOU6lau7tgR18wPiC+Uguw 9kV3jlY5a5kwN8jowdNo0bhwGm8HHxbRT8+hZzs5EoZo0/XxY+xS+XSBN9yGgELL lkTZP88sqiFoPTWvBfrkaWOWZGv2mh2cvnDkVwHReIeK3wTnd/jhMlowEiV4Kppl ASGDcS4NrOg2069XGc/0m98ddkGMPUgsWkA5+5/IXF3UeAzUhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKCSh/Kjb8WoeO51HgEjw5sM2E7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvY2ZiZDE5ODQtYjM0Zi0z MzI4LTgwNzItODVlMmUxZWNmZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3Ej+HqMrgXLMnZl1rk9qJVnpZsbHftz8Kzx8/CO8U9CXI9xBkD2lXu 54CuiHd2fz2fG1W7Jdqj6NiaubNJ7lXAIr8nYG50spicmZYV6/Pqd9KR21G7Ghvu ZaT2nsoP9h+RgqmODcGzf1RIIUIan9/zV85ciLvWSYpm0pFHJZUrmN1UkAf3IaDO gtv6EsAsnzAALL4s27zHz8cgIOY4zc8gke6NXOarZQwBqYYHNBUmMzOpmLMCZW3M Qv17aUk3blME3cT5/sHEcZHTnxQv8nBiN8u1vPlufBvtysA+GXHxajqqJJT0rcRP iGXNExuto+Dw6LLh1ee7HiCb4vzIMeM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:12 2025 by rpki-client