$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa File: a5813508-28da-316e-9e85-47818567b716.roa (raw, json) Hash identifier: ucB31reJyAoELRXp6komF1PBlqSirmSVUxt9pIjEwro= Subject key identifier: 47:CC:D9:08:E4:A0:43:A4:AC:D3:AB:27:79:B2:45:0B:0C:21:CE:FB Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285848143A7A7E09E2250CA0E21110 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 25649 IP address blocks: 198.207.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:7a:7e:09:e2:25:0c:a0:e2:11:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=47c3429a-58fe-4ed2-b2e6-5c8de57f9606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:59:25:d6:66:b6:fa:b5:13:c3:58:eb:a6:8c: 14:c2:6d:08:b9:ee:5e:02:50:95:6a:ad:ff:76:1f: d7:9a:2d:69:04:ea:f3:0a:33:58:da:2b:a6:89:f1: 9e:65:a8:2e:36:9e:79:3e:30:6e:66:29:f2:50:09: d3:ee:b8:31:2f:e1:73:79:d9:42:b3:75:30:f9:99: e4:49:77:be:24:b2:2d:6c:77:60:df:c0:9c:e5:cf: ac:9f:64:6f:4d:53:4d:03:93:e2:17:2f:5e:5e:7d: c2:27:6b:43:e0:00:0b:6a:76:82:23:7b:59:c6:02: 9e:b1:bb:6d:e5:fa:c1:76:8f:87:8f:56:e8:89:7a: c7:61:a3:f4:8a:40:43:1c:4e:41:a3:30:83:21:51: 3e:4e:12:89:a6:c6:25:2c:9d:8b:d4:78:47:66:a6: ff:bc:39:d1:56:30:42:e9:4a:4c:2f:2d:b7:74:3e: 7f:14:dc:bc:11:47:06:a8:05:33:a3:8e:e4:13:37: f6:45:d3:78:11:03:c1:2e:c6:19:47:84:a9:ad:ec: 0d:e0:08:c0:4a:37:4c:bf:61:93:f1:03:82:3d:e7: 27:6f:65:a7:50:c9:d6:f9:e2:25:10:95:6a:f1:71: 2b:ef:f5:cd:80:84:b4:10:e6:b8:22:ae:5d:09:cb: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CC:D9:08:E4:A0:43:A4:AC:D3:AB:27:79:B2:45:0B:0C:21:CE:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 198.207.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:65:37:85:7a:6b:85:1b:28:62:2b:77:b6:4e:85:4a:2c:3c: 79:5d:1c:c3:dc:ce:8c:5e:13:a8:e3:ac:bb:73:67:6c:cd:99: 50:03:7b:cb:8a:c3:9a:fc:e9:13:61:e4:61:ec:ac:c8:17:82: 7b:d6:68:d1:42:39:a7:f9:17:d3:c8:bd:a5:9a:c6:9a:25:1b: 30:ce:c1:c7:f6:b6:71:b5:d8:05:67:bc:d4:ec:d8:0d:5d:9f: 54:47:3e:b7:35:48:72:65:65:40:1e:37:11:0b:fa:16:79:be: 46:ff:55:15:af:a7:9a:5d:fe:8a:3a:68:74:46:f7:08:6b:79: 5b:b6:71:4e:0d:5a:da:97:b9:35:30:d4:74:d1:19:3b:1d:1b: 5b:83:3e:48:08:78:c7:78:fb:59:69:5d:97:81:c3:91:33:cd: 19:4c:be:a1:65:62:e1:f5:4f:a3:7d:99:97:47:17:fd:cd:81: f8:3c:de:a5:8a:ca:5f:6b:ba:a0:e7:da:c2:af:e3:12:a5:5e: 58:48:9d:f6:65:a5:75:9b:ad:75:36:e9:72:60:80:c6:d2:ed: bb:db:f6:f4:4f:f2:85:f8:bc:7a:0c:83:1a:ed:94:63:f9:3c: ad:f0:e6:ff:63:8b:11:d6:63:39:fe:aa:35:46:8e:c3:15:bf: f3:7b:26:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOnp+CeIlDKDiERAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk NDdjMzQyOWEtNThmZS00ZWQyLWIyZTYtNWM4ZGU1N2Y5NjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlkl1ma2+rUTw1jrpowUwm0Iue5eAlCVaq3/ dh/Xmi1pBOrzCjNY2iumifGeZaguNp55PjBuZinyUAnT7rgxL+FzedlCs3Uw+Znk SXe+JLItbHdg38Cc5c+sn2RvTVNNA5PiFy9eXn3CJ2tD4AALanaCI3tZxgKesbtt 5frBdo+Hj1boiXrHYaP0ikBDHE5BozCDIVE+ThKJpsYlLJ2L1HhHZqb/vDnRVjBC 6UpMLy23dD5/FNy8EUcGqAUzo47kEzf2RdN4EQPBLsYZR4SprewN4AjASjdMv2GT 8QOCPecnb2WnUMnW+eIlEJVq8XEr7/XNgIS0EOa4Iq5dCcvDIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfM2QjkoEOkrNOrJ3myRQsMIc77MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvYTU4MTM1MDgtMjhkYS0z MTZlLTllODUtNDc4MTg1NjdiNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxs+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVlN4V6a4UbKGIrd7ZOhUosPHldHMPczoxeE6jjrLtzZ2zNmVADe8uK w5r86RNh5GHsrMgXgnvWaNFCOaf5F9PIvaWaxpolGzDOwcf2tnG12AVnvNTs2A1d n1RHPrc1SHJlZUAeNxEL+hZ5vkb/VRWvp5pd/oo6aHRG9whreVu2cU4NWtqXuTUw 1HTRGTsdG1uDPkgIeMd4+1lpXZeBw5EzzRlMvqFlYuH1T6N9mZdHF/3Ngfg83qWK yl9ruqDn2sKv4xKlXlhInfZlpXWbrXU26XJggMbS7bvb9vRP8oX4vHoMgxrtlGP5 PK3w5v9jixHWYzn+qjVGjsMVv/N7JuI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:06 2025 by rpki-client