$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e4dc898-a5b1-33dd-83ef-2a1d76b0d2af.roa File: 3e4dc898-a5b1-33dd-83ef-2a1d76b0d2af.roa (raw, json) Hash identifier: 8ufgdTDDLFb0afFfKq6ZMGJ1VhvqS0FEIdmMWBYMIbc= Subject key identifier: D7:12:46:46:69:DF:CA:1E:01:C8:FA:8B:22:BB:02:C3:CD:50:41:46 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B3292512D588655526A00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e4dc898-a5b1-33dd-83ef-2a1d76b0d2af.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 68.67.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:32:92:51:2d:58:86:55:52:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=2e89c761-689e-4c88-809c-a75cac2301dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ab:3e:6f:f3:39:d8:7e:d4:ca:eb:d0:70:86: 8f:c9:11:f4:da:33:0c:ea:d7:a3:95:3c:c6:5c:00: 93:cd:5d:74:30:f2:c1:e9:95:ac:2d:4a:37:11:28: 0c:f9:59:d2:a2:c9:e4:3b:97:f8:bb:4c:ab:ee:85: 50:2c:2e:d8:0d:66:95:e3:5f:79:56:9e:fa:78:8e: 15:6e:bc:84:53:b0:e0:44:4a:55:99:4f:0a:0e:67: 5d:d5:ce:b2:15:34:85:e6:ca:0f:fa:32:6e:34:ca: 88:4f:17:89:ae:80:fa:cd:66:1a:2e:cd:fa:73:6d: fc:f4:dd:80:7a:c3:79:88:b9:0f:62:42:ee:76:bd: 36:e4:5d:96:27:2e:ef:c9:19:f2:ea:6c:bf:54:8c: ad:ef:06:d1:9e:f3:77:51:33:5d:ad:46:43:c9:ad: 61:67:90:3f:38:6d:a4:74:6d:43:42:21:a9:be:b2: da:05:6a:51:e9:1c:38:d3:da:e2:41:5a:b9:2e:68: d5:e2:ee:bc:62:f8:92:ac:61:44:44:45:fa:b0:96: d8:ba:81:30:d8:0a:59:a5:8b:06:be:28:b7:10:2b: dd:78:23:6a:f8:fc:83:de:45:15:12:ef:5f:df:6e: ab:86:60:71:6f:f9:52:9e:97:bf:3f:b6:36:21:84: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:12:46:46:69:DF:CA:1E:01:C8:FA:8B:22:BB:02:C3:CD:50:41:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e4dc898-a5b1-33dd-83ef-2a1d76b0d2af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 68.67.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ed:b1:c7:f5:2d:5f:e1:ae:a1:b9:0c:f2:c6:cb:11:87:68: 99:ee:4d:25:8d:35:89:99:ee:de:9a:87:57:52:af:03:bd:88: 55:13:82:0b:08:9c:c5:41:f1:fc:6a:9f:a3:ff:c7:f9:a8:a7: 9a:9d:6f:f9:5e:0e:d0:9b:04:14:9a:a2:8d:5f:d6:c5:d6:f1: a6:e1:ee:fa:f0:f6:08:d9:0b:e2:28:8a:3c:42:ce:cd:74:d9: 63:1d:00:e5:55:fd:c2:43:3b:81:25:4f:db:ad:77:cc:a7:f4: 92:7b:cd:69:1a:ab:92:48:a3:d8:0e:da:8f:3a:b5:47:eb:d4: e9:56:e9:7a:16:37:de:96:a2:4c:ba:00:d2:ec:b1:74:e6:c2: a7:51:10:13:79:38:8f:50:42:60:bf:28:e3:07:a8:a3:d3:48: 0d:78:99:e2:78:d0:99:a3:13:5f:b5:50:e5:3c:47:95:2c:c7: 26:d8:bc:25:9a:13:ee:06:8e:ea:f0:72:16:83:c5:40:52:69: 68:6e:63:43:a4:18:db:25:90:5a:71:8c:68:02:cc:da:4c:92: f6:c5:bb:2b:b8:14:1c:dd:7c:47:d4:f0:eb:b3:cc:11:a3:ea: 20:27:e9:8a:ca:55:5a:45:a5:22:6f:f9:a4:96:70:33:4e:f1: be:8f:07:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKzKSUS1YhlVSagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk MmU4OWM3NjEtNjg5ZS00Yzg4LTgwOWMtYTc1Y2FjMjMwMWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6s+b/M52H7UyuvQcIaPyRH02jMM6tejlTzG XACTzV10MPLB6ZWsLUo3ESgM+VnSosnkO5f4u0yr7oVQLC7YDWaV4195Vp76eI4V bryEU7DgREpVmU8KDmdd1c6yFTSF5soP+jJuNMqITxeJroD6zWYaLs36c2389N2A esN5iLkPYkLudr025F2WJy7vyRny6my/VIyt7wbRnvN3UTNdrUZDya1hZ5A/OG2k dG1DQiGpvrLaBWpR6Rw409riQVq5LmjV4u68YviSrGFEREX6sJbYuoEw2ApZpYsG vii3ECvdeCNq+PyD3kUVEu9f326rhmBxb/lSnpe/P7Y2IYRuPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcSRkZp38oeAcj6iyK7AsPNUEFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvM2U0ZGM4OTgtYTViMS0z M2RkLTgzZWYtMmExZDc2YjBkMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERENQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHftscf1LV/hrqG5DPLGyxGHaJnuTSWNNYmZ7t6ah1dSrwO9iFUTggsI nMVB8fxqn6P/x/mop5qdb/leDtCbBBSaoo1f1sXW8abh7vrw9gjZC+IoijxCzs10 2WMdAOVV/cJDO4ElT9utd8yn9JJ7zWkaq5JIo9gO2o86tUfr1OlW6XoWN96Woky6 ANLssXTmwqdREBN5OI9QQmC/KOMHqKPTSA14meJ40JmjE1+1UOU8R5UsxybYvCWa E+4GjurwchaDxUBSaWhuY0OkGNslkFpxjGgCzNpMkvbFuyu4FBzdfEfU8OuzzBGj 6iAn6YrKVVpFpSJv+aSWcDNO8b6PB98= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:34 2025 by rpki-client