$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f24ecd30-b881-30cd-bcfb-c8d0542aee52.roa File: f24ecd30-b881-30cd-bcfb-c8d0542aee52.roa (raw, json) Hash identifier: 78o6O4kYotTAGiS18KwRFr4N1zRG4tPQbJHfLVD/9CE= Subject key identifier: 99:D5:8D:5C:3C:A9:72:55:90:20:1E:39:2A:10:04:13:30:A4:16:98 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B249BADD7C5DC7765F3C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f24ecd30-b881-30cd-bcfb-c8d0542aee52.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 11404 IP address blocks: 67.218.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:24:9b:ad:d7:c5:dc:77:65:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=28629016-6d5a-4678-a728-f3a8b11ab617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4b:39:ca:93:e9:c4:e7:c8:49:aa:15:a4:27: 5b:ca:43:ef:09:93:a7:b8:f9:88:b9:20:6d:2b:50: b0:32:2f:63:ab:2b:5b:ca:81:3a:61:9a:85:2e:0b: b5:33:cd:9b:bc:13:29:13:4e:32:10:a5:e9:88:b0: 4c:8f:03:84:ec:32:9b:8f:55:49:9d:53:48:94:a2: e7:30:42:7a:ab:85:c0:45:5e:99:d8:6d:3b:78:e1: c5:18:b0:d0:50:8f:6e:58:b4:dc:73:4a:b4:ff:02: cf:6d:f8:db:a0:14:e6:f6:cf:46:d0:5f:88:a9:6d: ad:94:8e:57:cc:ff:65:57:21:36:89:9d:ba:6f:98: d2:95:2d:5a:a2:d9:2b:a5:51:12:eb:ab:28:d5:08: c4:8d:80:75:ed:9f:74:53:f6:ff:03:35:58:78:7c: 8d:87:0a:c4:8f:55:83:20:54:53:68:b2:07:6b:28: 92:08:aa:ac:13:b0:d6:ad:82:17:50:8b:72:42:a3: ad:a9:e8:ff:18:67:28:0d:cb:ad:f6:b4:82:aa:ae: af:5a:9e:e0:dd:28:ab:46:62:17:d7:b8:fa:5c:d1: 9c:96:08:38:c9:42:13:f6:0b:70:b2:88:4d:64:75: 7d:d6:9b:b3:e7:fa:45:f0:ab:71:89:c0:ee:f6:6a: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D5:8D:5C:3C:A9:72:55:90:20:1E:39:2A:10:04:13:30:A4:16:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f24ecd30-b881-30cd-bcfb-c8d0542aee52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 67.218.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:15:d7:fa:f1:1c:06:8d:a2:d9:5a:22:93:2d:48:83:8c:18: e3:24:5f:85:fe:91:2f:4e:04:6d:dc:a4:a3:80:47:4c:86:29: 6c:c5:dd:df:90:0c:7d:4e:3b:bd:02:e0:be:85:ce:46:53:e1: 78:c9:08:aa:8f:4e:d0:85:0c:48:66:7e:d3:d2:59:64:e0:a7: e1:b6:c5:bf:e5:33:c3:28:7e:82:92:3e:76:f1:f2:bf:61:a1: 22:5d:14:f2:46:17:59:b3:43:30:15:54:1c:3c:8b:f7:2f:d7: e7:30:fc:43:7a:db:c8:07:68:96:60:54:10:63:e2:78:a8:d2: 09:34:6c:ee:e8:7f:26:89:3b:f5:e8:62:1a:33:45:e1:cf:09: 76:66:dc:a5:cf:2e:39:4f:36:af:b1:ad:c9:8a:85:ce:6f:56: 2f:1c:c8:0c:55:e0:00:92:6a:f4:2b:cd:9b:03:2f:b8:6f:fd: 81:40:6f:13:1b:7a:45:8a:c7:23:11:8e:b1:dc:79:a3:06:e3: e9:35:78:34:a1:f9:13:dd:8e:ab:0f:c7:a8:b7:04:c1:b8:f7: d9:16:0d:55:00:c0:c2:fe:0d:e1:fe:2a:dd:5d:9a:00:9a:3a: 85:b4:f7:46:05:0c:f0:e2:e8:28:50:07:91:54:98:8f:9e:fe: 77:6b:f4:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKySbrdfF3Hdl88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk Mjg2MjkwMTYtNmQ1YS00Njc4LWE3MjgtZjNhOGIxMWFiNjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0s5ypPpxOfISaoVpCdbykPvCZOnuPmIuSBt K1CwMi9jqytbyoE6YZqFLgu1M82bvBMpE04yEKXpiLBMjwOE7DKbj1VJnVNIlKLn MEJ6q4XARV6Z2G07eOHFGLDQUI9uWLTcc0q0/wLPbfjboBTm9s9G0F+IqW2tlI5X zP9lVyE2iZ26b5jSlS1aotkrpVES66so1QjEjYB17Z90U/b/AzVYeHyNhwrEj1WD IFRTaLIHayiSCKqsE7DWrYIXUItyQqOtqej/GGcoDcut9rSCqq6vWp7g3SirRmIX 17j6XNGclgg4yUIT9gtwsohNZHV91puz5/pF8KtxicDu9moqTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnVjVw8qXJVkCAeOSoQBBMwpBaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjI0ZWNkMzAtYjg4MS0z MGNkLWJjZmItYzhkMDU0MmFlZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ9pgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoV1/rxHAaNotlaIpMtSIOMGOMkX4X+kS9OBG3cpKOAR0yGKWzF3d+Q DH1OO70C4L6FzkZT4XjJCKqPTtCFDEhmftPSWWTgp+G2xb/lM8MofoKSPnbx8r9h oSJdFPJGF1mzQzAVVBw8i/cv1+cw/EN628gHaJZgVBBj4nio0gk0bO7ofyaJO/Xo YhozReHPCXZm3KXPLjlPNq+xrcmKhc5vVi8cyAxV4ACSavQrzZsDL7hv/YFAbxMb ekWKxyMRjrHceaMG4+k1eDSh+RPdjqsPx6i3BMG499kWDVUAwML+DeH+Kt1dmgCa OoW090YFDPDi6ChQB5FUmI+e/ndr9Lg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:25 2025 by rpki-client