$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa File: 9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa (raw, json) Hash identifier: DVukc8KBxiyVxM46fRvmM3u/SUk5UBDW+VUcogb4IY0= Subject key identifier: 08:5F:28:61:1C:1B:8F:90:82:2F:9F:7B:DB:13:27:C8:2B:9E:AC:51 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285848143A77823A550BAFDCF48460 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 25649 IP address blocks: 143.55.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:77:82:3a:55:0b:af:dc:f4:84:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=3ca233b4-23dc-4f12-a5f8-a7814e6ace3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:24:7f:b0:71:40:98:e3:7d:3c:19:d4:43:10: 57:dc:bf:a3:ed:01:4c:14:7f:51:32:d3:f1:a2:3b: 66:f2:25:d1:a0:12:54:4a:98:10:8a:81:6e:4e:18: 90:8f:c3:a2:1a:d1:ce:e1:2e:19:d7:53:b2:83:49: d8:fb:c3:73:52:76:b1:0f:55:ce:2c:10:7c:d6:c0: 05:9b:e1:dd:3a:9e:b1:01:32:2f:79:df:1a:34:6a: 13:e5:8c:1b:a3:be:f5:08:4d:99:53:07:4e:2d:1d: 2a:54:dc:8a:69:d9:20:6a:35:16:bf:c4:bb:ca:17: 59:9c:ed:ef:bb:d4:8c:62:92:8a:2a:f3:cb:6f:2a: 89:55:b7:3c:ed:79:82:af:92:fb:45:46:61:48:04: 46:94:6b:16:e8:67:a0:7f:8c:95:01:69:ed:30:31: 21:d1:0c:e8:39:c9:33:51:96:f8:09:ef:e6:26:c3: 9a:d3:68:93:dc:ff:8a:48:9e:e4:a3:a8:2c:ab:b0: cb:ac:13:09:e7:fa:8e:d5:f1:4f:ca:e1:05:ae:fe: be:3a:75:63:3c:74:16:0e:3a:1e:f5:07:2c:88:e0: 09:11:f0:b5:8f:6e:d2:ff:c6:94:82:dd:ad:32:45: b7:5b:12:30:fc:7c:77:78:ba:f1:f8:bc:fc:3c:99: 1c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5F:28:61:1C:1B:8F:90:82:2F:9F:7B:DB:13:27:C8:2B:9E:AC:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 143.55.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0a:51:0a:65:bc:7c:ab:86:00:c3:a2:02:1e:72:dd:bc:b1: c6:50:9c:1c:72:d8:43:1d:02:39:62:6d:d0:e7:99:71:81:b4: 98:ac:8f:09:f5:db:33:5c:98:3f:06:81:ff:87:04:d5:4d:5b: c4:1e:d8:04:d2:ba:87:9d:c6:b1:04:9c:68:bd:4c:0a:ce:8a: e9:d1:2f:3d:53:60:04:20:ae:24:2f:dc:81:4e:c8:32:93:3b: 25:c0:83:34:30:93:6c:01:6d:8b:a1:f7:1f:ad:bf:16:5f:0e: e6:8f:68:15:3f:41:62:ed:3c:c5:f4:69:03:2f:87:a1:3a:81: ec:1c:3e:e7:b2:51:df:a9:ef:91:ed:ba:2f:27:d5:80:5d:fc: f3:96:d7:85:a2:c1:76:02:e9:f6:60:fa:09:80:d0:93:e7:1a: e4:14:28:a6:e5:df:49:67:d6:8d:2a:01:3f:5c:3f:ec:79:d8: ca:fa:11:44:7a:96:97:3e:b5:7d:59:6b:5f:b7:d5:90:c9:e7: f7:d0:48:c4:4a:69:2d:dd:b9:d9:5a:29:48:94:b5:44:c8:77: 85:3a:af:99:5c:77:d8:ef:6c:97:00:43:56:56:ff:b7:a5:2d: 39:db:66:24:8b:48:34:d0:3a:77:98:68:cc:53:da:72:a4:1e: 4e:4c:f1:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOneCOlULr9z0hGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk M2NhMjMzYjQtMjNkYy00ZjEyLWE1ZjgtYTc4MTRlNmFjZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyR/sHFAmON9PBnUQxBX3L+j7QFMFH9RMtPx ojtm8iXRoBJUSpgQioFuThiQj8OiGtHO4S4Z11Oyg0nY+8NzUnaxD1XOLBB81sAF m+HdOp6xATIved8aNGoT5Ywbo771CE2ZUwdOLR0qVNyKadkgajUWv8S7yhdZnO3v u9SMYpKKKvPLbyqJVbc87XmCr5L7RUZhSARGlGsW6Gegf4yVAWntMDEh0QzoOckz UZb4Ce/mJsOa02iT3P+KSJ7ko6gsq7DLrBMJ5/qO1fFPyuEFrv6+OnVjPHQWDjoe 9QcsiOAJEfC1j27S/8aUgt2tMkW3WxIw/Hx3eLrx+Lz8PJkcDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhfKGEcG4+Qgi+fe9sTJ8grnqxRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvOWYwZmU0ZWMtNTQwOC0z NDAxLTkzYjctMGQxZmQ5NWU0ZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjzdUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwKUQplvHyrhgDDogIect28scZQnBxy2EMdAjlibdDnmXGBtJisjwn1 2zNcmD8Ggf+HBNVNW8Qe2ATSuoedxrEEnGi9TArOiunRLz1TYAQgriQv3IFOyDKT OyXAgzQwk2wBbYuh9x+tvxZfDuaPaBU/QWLtPMX0aQMvh6E6gewcPueyUd+p75Ht ui8n1YBd/POW14WiwXYC6fZg+gmA0JPnGuQUKKbl30ln1o0qAT9cP+x52Mr6EUR6 lpc+tX1Za1+31ZDJ5/fQSMRKaS3dudlaKUiUtUTId4U6r5lcd9jvbJcAQ1ZW/7el LTnbZiSLSDTQOneYaMxT2nKkHk5M8Xs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:58 2025 by rpki-client