$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/41001659-7751-37e5-8457-93bce6e4a8d6.roa File: 41001659-7751-37e5-8457-93bce6e4a8d6.roa (raw, json) Hash identifier: nfuN1M6T43Jm07Lm2va1bLw0GHQ58xvbSr3b6qR/DKo= Subject key identifier: 19:10:D5:D6:08:75:D3:8B:D1:22:75:C3:06:C6:D2:D7:11:AE:FC:30 Certificate issuer: /CN=1226980a-2c43-43da-83fd-198696a9b02e Certificate serial: 010D0C9F432858484C102F74625DE01738345A70 Authority key identifier: E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/41001659-7751-37e5-8457-93bce6e4a8d6.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 14618 IP address blocks: 207.110.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:2f:74:62:5d:e0:17:38:34:5a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1226980a-2c43-43da-83fd-198696a9b02e Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=3b3b8fb6-c164-4b00-9631-546b317d176c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ae:27:6a:e5:5e:1e:e8:34:59:f7:8d:af:ea: bb:75:57:80:5f:1f:58:c1:6f:18:a4:06:af:b4:b0: fb:14:ed:d1:66:41:9b:2a:31:0c:e9:b4:61:be:63: f3:44:c5:e5:28:db:f3:bb:80:fc:fe:58:05:6d:33: cf:77:fc:ef:46:ca:3a:d9:a9:bb:9d:e3:65:55:76: c2:bc:ba:21:d8:b6:da:89:40:cd:cc:f8:0c:e5:4c: 7c:04:d8:cd:62:ec:50:08:6c:7b:4e:ea:8f:b1:ae: 91:92:5a:d1:51:c3:4a:85:7d:8b:c6:97:b2:d5:9d: f2:bb:02:55:93:bd:94:28:d2:76:59:58:ad:23:63: a0:22:11:ad:91:a4:29:63:e6:4a:23:2c:5a:27:25: ed:82:c1:6b:bc:be:32:6d:18:ea:06:f8:4d:48:74: fe:43:ca:e0:0f:42:e8:d5:b5:52:b1:94:53:68:7b: ba:84:9f:5a:ca:4e:0c:51:d3:be:bb:5d:37:77:0b: 07:7f:8d:eb:a0:a0:f9:f1:56:1e:42:f1:ea:3e:d1: 45:c9:cd:2f:0c:07:c4:2a:31:6d:48:35:8d:ec:e9: cb:3a:b5:03:ef:42:3c:f7:8a:07:c2:53:33:2f:fc: 5a:5a:9c:4a:96:cc:6f:76:e9:55:12:29:d6:86:8d: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:10:D5:D6:08:75:D3:8B:D1:22:75:C3:06:C6:D2:D7:11:AE:FC:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/41001659-7751-37e5-8457-93bce6e4a8d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl X509v3 Authority Key Identifier: keyid:E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer sbgp-ipAddrBlock: critical IPv4: 207.110.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:6f:ab:e2:ec:5c:63:b3:88:d6:60:95:33:52:2c:df:f6:ba: 54:40:e6:9e:ed:5c:fd:00:36:39:f2:c6:a8:02:57:5c:fd:e1: 73:fe:3e:70:18:84:35:32:0c:a7:9c:2e:d7:e3:ff:9a:d1:d3: 0c:5d:e1:ef:3c:4b:a4:b2:e9:f4:22:23:60:25:f0:22:9f:d6: f7:6b:d8:3c:1d:4b:93:c5:07:ba:48:6e:e7:39:76:8d:85:30: a7:4b:9d:4e:68:83:87:62:d6:03:c3:97:56:66:48:21:bd:87: 26:6e:aa:6e:50:54:fd:0b:1b:c0:72:37:7a:2f:f6:ea:e0:07: ce:a6:63:6c:14:b7:11:2c:e8:b2:8d:fd:9e:e7:b7:78:58:be: 1f:3e:f0:24:19:7a:3a:74:7c:12:1a:74:71:f3:8c:5e:dc:e8: 6e:91:ac:7d:69:d3:81:5c:cc:5e:2c:b4:14:ac:c9:92:69:83: e4:bf:54:89:93:ec:9c:e9:f6:98:a8:93:e1:00:aa:6d:07:2b: c1:9d:2b:60:e8:f1:0c:ad:b6:57:8c:4d:ab:95:7d:8e:d3:16: 30:2f:48:db:2d:5f:41:2c:ff:68:d1:36:9e:d2:33:8d:67:73: b3:cd:e5:3a:f3:76:ed:8e:20:9a:98:85:a4:15:ad:b3:dd:f2: 9b:83:e9:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEC90Yl3gFzg0WnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTIyNjk4MGEtMmM0My00M2RhLTgzZmQtMTk4Njk2YTli MDJlMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk M2IzYjhmYjYtYzE2NC00YjAwLTk2MzEtNTQ2YjMxN2QxNzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna4nauVeHug0WfeNr+q7dVeAXx9YwW8YpAav tLD7FO3RZkGbKjEM6bRhvmPzRMXlKNvzu4D8/lgFbTPPd/zvRso62am7neNlVXbC vLoh2LbaiUDNzPgM5Ux8BNjNYuxQCGx7TuqPsa6RklrRUcNKhX2Lxpey1Z3yuwJV k72UKNJ2WVitI2OgIhGtkaQpY+ZKIyxaJyXtgsFrvL4ybRjqBvhNSHT+Q8rgD0Lo 1bVSsZRTaHu6hJ9ayk4MUdO+u103dwsHf43roKD58VYeQvHqPtFFyc0vDAfEKjFt SDWN7OnLOrUD70I894oHwlMzL/xaWpxKlsxvdulVEinWho2yxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkQ1dYIddOL0SJ1wwbG0tcRrvwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMjI2 OTgwYS0yYzQzLTQzZGEtODNmZC0xOTg2OTZhOWIwMmUvNDEwMDE2NTktNzc1MS0z N2U1LTg0NTctOTNiY2U2ZTRhOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTIyNjk4MGEtMmM0My00M2RhLTgz ZmQtMTk4Njk2YTliMDJlLzEyMjY5ODBhLTJjNDMtNDNkYS04M2ZkLTE5ODY5NmE5 YjAyZS5jcmwwHwYDVR0jBBgwFoAU6HPdb/rXZzrymoMc4BJjmUFXnsUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMjI2OTgwYS0yYzQzLTQzZGEtODNmZC0xOTg2 OTZhOWIwMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz26LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlvq+LsXGOziNZglTNSLN/2ulRA5p7tXP0ANjnyxqgCV1z94XP+PnAY hDUyDKecLtfj/5rR0wxd4e88S6Sy6fQiI2Al8CKf1vdr2DwdS5PFB7pIbuc5do2F MKdLnU5og4di1gPDl1ZmSCG9hyZuqm5QVP0LG8ByN3ov9urgB86mY2wUtxEs6LKN /Z7nt3hYvh8+8CQZejp0fBIadHHzjF7c6G6RrH1p04FczF4stBSsyZJpg+S/VImT 7Jzp9piok+EAqm0HK8GdK2Do8QyttleMTauVfY7TFjAvSNstX0Es/2jRNp7SM41n c7PN5Trzdu2OIJqYhaQVrbPd8puD6es= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:28 2025 by rpki-client