$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a0ccb06b-ada8-3418-ba03-0bd03e7843b4.roa File: a0ccb06b-ada8-3418-ba03-0bd03e7843b4.roa (raw, json) Hash identifier: vg8sTn8KAFxbpW6WQz6eIB399WNdSIgXwtUd4GmuANs= Subject key identifier: 28:01:2F:FB:5A:BB:28:D4:E8:46:E4:E3:7D:2B:8D:32:02:13:42:9F Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B26ADDFE1C1EEAC351C80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a0ccb06b-ada8-3418-ba03-0bd03e7843b4.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 65.50.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:26:ad:df:e1:c1:ee:ac:35:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=86bb182e-7488-46ff-9292-443065d35c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:9b:7d:35:70:8d:2f:d4:a8:59:12:d6:95: 86:d2:d5:f7:1f:b5:87:91:b1:9c:77:8b:cd:d9:cb: 84:bb:4b:4e:06:3d:6b:31:d8:20:8b:85:c0:c4:14: 76:3c:54:cf:51:d6:e1:88:64:3f:56:b1:fd:ed:e7: da:58:b6:1b:55:c5:84:11:a7:5f:6d:51:f4:79:43: ca:54:25:2f:f1:ac:6e:34:ea:fa:66:fa:a4:7c:66: 20:b0:3f:6c:3a:12:e9:3f:2c:e9:82:02:c1:97:62: 87:4b:4d:94:43:d0:b4:ec:b9:bd:e5:86:dc:c3:30: bf:29:14:bd:31:79:44:f5:c6:4d:e3:89:ae:32:7e: d5:d6:0c:91:0b:8a:35:6a:15:c7:f1:9a:ea:26:a7: c5:5a:1b:17:20:93:1d:9c:e9:7c:37:20:57:53:1d: 1a:19:35:fd:3b:2e:6b:f3:86:e2:5a:74:90:6e:8b: ee:77:1c:2f:79:01:63:53:ad:2f:c0:f3:01:65:e7: 18:6f:44:84:4e:09:f6:dd:72:aa:e7:cd:d7:5f:60: 3d:22:d9:52:ff:31:04:48:1b:22:ae:e2:b8:15:cb: 4d:1c:c3:ef:4c:78:e0:64:90:43:de:79:bc:1b:5d: 95:1d:34:f2:0b:26:fa:55:37:fd:d9:54:b1:70:b3: d3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:01:2F:FB:5A:BB:28:D4:E8:46:E4:E3:7D:2B:8D:32:02:13:42:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a0ccb06b-ada8-3418-ba03-0bd03e7843b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 65.50.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:92:03:37:39:44:06:d3:38:66:85:b3:30:c0:99:16:40:9f: 29:8d:82:60:9c:b2:92:85:48:0d:08:03:2a:1f:cd:81:8a:96: 4d:28:20:48:aa:37:f6:3d:28:4c:ba:e8:12:ec:fc:13:21:c2: d3:24:4f:95:09:20:21:56:16:c5:cf:7d:37:d8:ad:a9:e5:5f: c2:69:29:06:e3:c9:a9:a8:aa:56:8c:6e:21:f4:13:89:8d:55: c5:b6:66:a9:9d:69:a6:63:c4:82:57:3c:60:86:52:ef:22:d9: 97:99:fe:2f:83:0a:50:9c:ec:c3:f5:4d:64:52:ab:16:ca:e1: 60:e0:a7:a9:dc:66:73:4e:57:10:71:43:dc:43:69:2a:00:bb: 92:62:73:88:6d:0c:a8:dd:57:d1:3c:93:19:cf:6d:19:0f:3f: cf:82:9b:a3:46:ca:ec:5a:4e:c3:fe:75:05:28:20:01:8f:4e: b5:1e:76:43:02:12:ac:fb:3a:45:c5:46:24:08:b7:80:01:8e: 69:ef:0d:bd:a9:a9:2e:db:26:73:28:7c:19:ef:56:4d:97:5a: 9e:a6:93:8a:60:4c:6d:b0:05:d6:29:24:49:4c:7d:0a:78:66: d0:57:62:72:47:23:9e:42:e2:23:03:e8:34:90:d5:67:e5:bd: 63:3a:9c:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKyat3+HB7qw1HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk ODZiYjE4MmUtNzQ4OC00NmZmLTkyOTItNDQzMDY1ZDM1YzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEGbfTVwjS/UqFkS1pWG0tX3H7WHkbGcd4vN 2cuEu0tOBj1rMdggi4XAxBR2PFTPUdbhiGQ/VrH97efaWLYbVcWEEadfbVH0eUPK VCUv8axuNOr6ZvqkfGYgsD9sOhLpPyzpggLBl2KHS02UQ9C07Lm95YbcwzC/KRS9 MXlE9cZN44muMn7V1gyRC4o1ahXH8ZrqJqfFWhsXIJMdnOl8NyBXUx0aGTX9Oy5r 84biWnSQbovudxwveQFjU60vwPMBZecYb0SETgn23XKq583XX2A9ItlS/zEESBsi ruK4FctNHMPvTHjgZJBD3nm8G12VHTTyCyb6VTf92VSxcLPTHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgBL/tauyjU6Ebk430rjTICE0KfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYTBjY2IwNmItYWRhOC0z NDE4LWJhMDMtMGJkMDNlNzg0M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQTLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGSAzc5RAbTOGaFszDAmRZAnymNgmCcspKFSA0IAyofzYGKlk0oIEiq N/Y9KEy66BLs/BMhwtMkT5UJICFWFsXPfTfYranlX8JpKQbjyamoqlaMbiH0E4mN VcW2ZqmdaaZjxIJXPGCGUu8i2ZeZ/i+DClCc7MP1TWRSqxbK4WDgp6ncZnNOVxBx Q9xDaSoAu5Jic4htDKjdV9E8kxnPbRkPP8+Cm6NGyuxaTsP+dQUoIAGPTrUedkMC Eqz7OkXFRiQIt4ABjmnvDb2pqS7bJnMofBnvVk2XWp6mk4pgTG2wBdYpJElMfQp4 ZtBXYnJHI55C4iMD6DSQ1WflvWM6nBA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:37 2025 by rpki-client