$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/22be48d5-f877-34f2-a9e9-e415ed6320a6.roa File: 22be48d5-f877-34f2-a9e9-e415ed6320a6.roa (raw, json) Hash identifier: pKx00vBEAEojGUEsTDmiaj0U8E4Ga895FnabYpxJocA= Subject key identifier: 1C:62:9C:E7:12:A8:45:A0:72:96:F7:03:B8:03:8E:24:62:AD:BE:FA Certificate issuer: /CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8 Certificate serial: 010D0C9F432858485E35B46A45EE436DC918FCC0 Authority key identifier: 0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/22be48d5-f877-34f2-a9e9-e415ed6320a6.roa Signing time: Sun 29 Dec 2024 14:00:53 +0000 ROA not before: Sun 29 Dec 2024 14:00:53 +0000 ROA not after: Sat 29 Mar 2025 13:00:53 +0000 asID: 400764 IP address blocks: 204.11.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5e:35:b4:6a:45:ee:43:6d:c9:18:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8 Validity Not Before: Dec 29 14:00:53 2024 GMT Not After : Mar 29 13:00:53 2025 GMT Subject: CN=9520d8ed-9dd3-40d9-bc66-f44f43b44af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:48:3a:99:4e:bb:f5:12:53:a7:18:d2:18:a0: 13:37:9c:25:c4:00:53:57:35:ca:10:53:0d:4f:cd: 73:02:84:73:67:2e:3d:a4:e1:67:30:20:a6:4f:f4: c6:bf:a7:49:c3:2b:00:9a:f2:4e:9c:1e:92:3d:48: 7f:64:49:cc:d0:7b:12:51:25:17:17:7b:69:42:1b: 13:79:34:2e:f2:c8:ec:ca:e8:5f:0e:77:6d:c1:ba: 73:e6:8d:69:1f:ef:cb:24:6b:05:f1:92:c6:71:e1: 53:5c:c8:d9:4d:72:26:8e:82:0e:d2:a0:5a:07:b0: db:d0:97:85:a2:0f:67:af:ce:91:98:cb:de:aa:a1: 11:6b:20:82:49:5c:8d:a3:b9:d0:d8:00:1c:71:ee: a8:0b:49:e0:d5:79:b9:f1:6d:f9:0c:f6:97:58:09: 90:3b:e3:04:e8:ea:68:f1:8e:bd:92:d9:7f:30:cf: fe:60:57:25:20:7c:b9:81:59:b5:99:b1:c8:7f:20: d6:4e:b7:bc:cc:ca:29:8f:40:5a:17:1e:c6:a8:6f: e3:4d:ca:b2:de:85:6e:fb:50:a6:60:32:bb:0d:81: 97:49:82:ac:65:eb:47:b7:89:1f:0d:f9:d4:b3:45: 87:0d:30:51:8b:ee:a4:bb:4e:c1:91:20:f4:60:c8: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:62:9C:E7:12:A8:45:A0:72:96:F7:03:B8:03:8E:24:62:AD:BE:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/22be48d5-f877-34f2-a9e9-e415ed6320a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl X509v3 Authority Key Identifier: keyid:0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer sbgp-ipAddrBlock: critical IPv4: 204.11.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:4d:0d:78:a0:11:ea:13:7f:f8:5a:20:26:b2:52:10:a9:cf: c7:c3:dc:f2:c3:ed:e3:ab:46:c1:78:fd:34:ee:65:67:b2:c8: 41:e3:ec:3f:31:3a:5f:c5:06:98:60:55:45:59:0d:46:34:e6: a0:c3:9a:b6:88:43:76:84:b6:99:63:c8:08:74:ad:c3:d6:9f: 9b:e0:f4:46:5f:2c:53:47:cb:f5:41:b5:29:9a:3d:1f:37:84: 47:36:0b:19:13:88:d1:48:5f:f1:85:c5:1e:a3:ae:6c:d2:c0: c6:89:6d:85:b5:53:3d:e3:00:0c:f8:e2:ec:14:f7:14:77:31: 9a:f8:ba:83:cd:92:f4:6b:9f:27:68:03:ef:f9:bc:d0:f0:30: 53:e6:b3:a5:d0:45:e5:a8:84:18:6d:ca:a1:97:84:8a:48:b2: bb:46:3b:4b:7f:5a:0a:09:f7:e0:d7:d2:b4:c4:11:53:95:c3: f1:81:0f:14:4a:f5:fd:43:dc:f4:df:98:15:08:b7:18:53:8e: 36:f9:9b:73:4d:3a:c8:e8:b0:34:9c:5a:f5:b7:e3:a8:b1:4e: a8:d8:ed:cd:d2:3c:07:38:f1:d7:48:56:c5:6f:66:40:6b:8a: 0f:25:5c:63:1c:10:10:30:2a:a5:2f:6b:e0:eb:d8:b4:cf:02: 91:36:e9:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNbRqRe5DbckY/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhkOTlmOGItYTg1YS00MWU5LTg5YjQtNjEyYzZiOWMx MGE4MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk OTUyMGQ4ZWQtOWRkMy00MGQ5LWJjNjYtZjQ0ZjQzYjQ0YWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUg6mU679RJTpxjSGKATN5wlxABTVzXKEFMN T81zAoRzZy49pOFnMCCmT/TGv6dJwysAmvJOnB6SPUh/ZEnM0HsSUSUXF3tpQhsT eTQu8sjsyuhfDndtwbpz5o1pH+/LJGsF8ZLGceFTXMjZTXImjoIO0qBaB7Db0JeF og9nr86RmMveqqERayCCSVyNo7nQ2AAcce6oC0ng1Xm58W35DPaXWAmQO+ME6Opo 8Y69ktl/MM/+YFclIHy5gVm1mbHIfyDWTre8zMopj0BaFx7GqG/jTcqy3oVu+1Cm YDK7DYGXSYKsZetHt4kfDfnUs0WHDTBRi+6ku07BkSD0YMgJYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxinOcSqEWgcpb3A7gDjiRirb76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOGQ5 OWY4Yi1hODVhLTQxZTktODliNC02MTJjNmI5YzEwYTgvMjJiZTQ4ZDUtZjg3Ny0z NGYyLWE5ZTktZTQxNWVkNjMyMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDhkOTlmOGItYTg1YS00MWU5LTg5 YjQtNjEyYzZiOWMxMGE4L2Q4ZDk5ZjhiLWE4NWEtNDFlOS04OWI0LTYxMmM2Yjlj MTBhOC5jcmwwHwYDVR0jBBgwFoAUC3KTapyDteNst3bjWSGKYYdWzuYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kOGQ5OWY4Yi1hODVhLTQxZTktODliNC02MTJj NmI5YzEwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5NDXigEeoTf/haICayUhCpz8fD3PLD7eOrRsF4/TTuZWeyyEHj7D8x Ol/FBphgVUVZDUY05qDDmraIQ3aEtpljyAh0rcPWn5vg9EZfLFNHy/VBtSmaPR83 hEc2CxkTiNFIX/GFxR6jrmzSwMaJbYW1Uz3jAAz44uwU9xR3MZr4uoPNkvRrnydo A+/5vNDwMFPms6XQReWohBhtyqGXhIpIsrtGO0t/WgoJ9+DX0rTEEVOVw/GBDxRK 9f1D3PTfmBUItxhTjjb5m3NNOsjosDScWvW346ixTqjY7c3SPAc48ddIVsVvZkBr ig8lXGMcEBAwKqUva+Dr2LTPApE26eg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:58 2025 by rpki-client