$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/70ae0c2d-c8f0-3600-abbd-d9559675009a.roa File: 70ae0c2d-c8f0-3600-abbd-d9559675009a.roa (raw, json) Hash identifier: Rjew0ZKfyLrXlKOZetq0tkQ/0gKKnOkIFNDZtJoKe4k= Subject key identifier: 86:96:07:BE:F0:4F:8A:6F:A2:8F:6A:79:0D:F7:F4:98:DD:73:DE:FF Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B31C5EFAF7624BB41B700 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/70ae0c2d-c8f0-3600-abbd-d9559675009a.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 21817 IP address blocks: 198.161.144.0/22 maxlen: 24 198.180.225.0/24 maxlen: 24 199.7.192.0/21 maxlen: 24 199.48.56.0/22 maxlen: 24 199.200.112.0/22 maxlen: 24 2606:8100::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:31:c5:ef:af:76:24:bb:41:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=dd1eeeec-481d-46ec-9863-038e22a74651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:97:f7:22:d1:e2:79:76:ae:18:0c:03:17:8b: 5e:ae:8e:5e:06:d2:46:2b:bd:27:95:3b:6f:18:27: d6:3f:84:0d:67:b5:4c:2f:11:cc:3b:72:f0:20:86: fd:35:5a:fd:77:2f:44:ca:98:53:de:61:95:5a:25: 2f:30:08:1b:43:69:a5:e3:b4:15:0c:00:5c:e1:a6: 34:87:69:5e:e8:78:64:b9:7d:29:e3:6e:6b:54:f8: df:e3:4a:21:bb:78:43:e8:dd:7a:51:58:37:0c:01: 1f:21:57:0a:11:1c:ce:79:b8:75:ad:df:4c:14:41: 1d:51:85:74:30:6c:42:a8:98:08:bc:03:4f:c9:2e: 97:a7:0c:88:e2:1a:a3:0a:63:1e:bb:07:e5:99:24: 20:59:07:72:ac:2e:e0:bd:b0:1f:f6:86:79:d1:48: 17:94:3d:07:89:06:f9:03:20:84:16:e6:a4:55:44: 0c:ec:51:ee:6e:08:6d:c2:8f:43:57:3f:14:46:77: 12:55:49:27:5b:99:e7:62:cd:9a:08:eb:aa:28:1b: d7:c9:7f:22:bd:24:c8:48:a6:fb:2d:b6:f5:06:ec: ca:cb:79:06:2d:38:b9:3c:73:29:db:36:38:73:ca: 31:8e:94:77:49:03:5c:0c:18:8b:2f:e3:a1:bb:62: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:96:07:BE:F0:4F:8A:6F:A2:8F:6A:79:0D:F7:F4:98:DD:73:DE:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/70ae0c2d-c8f0-3600-abbd-d9559675009a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 198.161.144.0/22 198.180.225.0/24 199.7.192.0/21 199.48.56.0/22 199.200.112.0/22 IPv6: 2606:8100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e3:d0:73:57:c3:35:4a:2f:c4:17:cf:8f:c0:37:c6:c5:49: 05:5b:4c:78:85:f4:00:ee:f0:81:02:96:79:4d:91:64:eb:69: a5:09:19:8a:9f:8e:d4:b8:ce:95:e1:89:2c:a3:18:00:6e:b7: b1:a2:de:7d:85:78:8f:8d:94:34:05:40:aa:17:79:6d:6f:3e: 93:45:8d:f4:a8:97:0a:4a:fd:ce:35:bc:82:61:fb:b2:9c:83: 7a:fe:8a:07:7e:06:90:94:9c:9a:1e:c1:2a:6f:4b:6c:85:3c: d7:9a:3c:77:cb:41:01:61:52:16:d8:c3:bb:e1:7e:35:77:b9: a7:51:dc:34:14:9f:a9:73:61:3a:ba:84:01:a1:8e:a3:ab:b1: 60:78:65:18:76:8b:63:b5:3d:e1:f5:26:c2:90:32:f3:f0:47: 10:bc:bf:78:d3:80:30:40:96:0e:fa:24:57:1f:99:5d:95:1b: b3:56:ec:2b:76:24:aa:e2:0d:a2:01:25:d7:99:ab:6d:d1:99: 39:c6:7a:96:2e:34:13:a8:da:f5:1e:ce:5c:11:c4:9d:3a:8d: 01:1e:85:1e:93:27:a9:6f:b8:a6:03:5b:23:f6:ab:e6:ba:3d: 0f:c7:e5:53:37:6d:0d:e8:dc:cf:55:8c:be:a6:29:f4:fe:9a: 77:61:bd:d0 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEhsKzHF7692JLtBtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZGQxZWVlZWMtNDgxZC00NmVjLTk4NjMtMDM4ZTIyYTc0NjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5f3ItHieXauGAwDF4tero5eBtJGK70nlTtv GCfWP4QNZ7VMLxHMO3LwIIb9NVr9dy9EyphT3mGVWiUvMAgbQ2ml47QVDABc4aY0 h2le6HhkuX0p425rVPjf40ohu3hD6N16UVg3DAEfIVcKERzOebh1rd9MFEEdUYV0 MGxCqJgIvANPyS6XpwyI4hqjCmMeuwflmSQgWQdyrC7gvbAf9oZ50UgXlD0HiQb5 AyCEFuakVUQM7FHubghtwo9DVz8URncSVUknW5nnYs2aCOuqKBvXyX8ivSTISKb7 Lbb1BuzKy3kGLTi5PHMp2zY4c8oxjpR3SQNcDBiLL+Ohu2IBZQIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFIaWB77wT4pvoo9qeQ339Jjdc97/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzBhZTBjMmQtYzhmMC0z NjAwLWFiYmQtZDk1NTk2NzUwMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCxqGQAwQA xrThAwQDxwfAAwQCxzA4AwQCx8hwMA0EAgACMAcDBQAmBoEAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAArj 0HNXwzVKL8QXz4/AN8bFSQVbTHiF9ADu8IEClnlNkWTraaUJGYqfjtS4zpXhiSyj GABut7Gi3n2FeI+NlDQFQKoXeW1vPpNFjfSolwpK/c41vIJh+7Kcg3r+igd+BpCU nJoewSpvS2yFPNeaPHfLQQFhUhbYw7vhfjV3uadR3DQUn6lzYTq6hAGhjqOrsWB4 ZRh2i2O1PeH1JsKQMvPwRxC8v3jTgDBAlg76JFcfmV2VG7NW7Ct2JKriDaIBJdeZ q23RmTnGepYuNBOo2vUezlwRxJ06jQEehR6TJ6lvuKYDWyP2q+a6PQ/H5VM3bQ3o 3M9VjL6mKfT+mndhvdA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:26 2025 by rpki-client