$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa File: 3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa (raw, json) Hash identifier: 7kni37mlQRp2B3QbgShf93d6sVVUn8Le3p+ufdmaMl0= Subject key identifier: DB:A4:A2:7D:E2:3B:82:00:8C:BB:98:68:7F:02:E6:CC:01:45:19:24 Certificate issuer: /CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07 Certificate serial: 010D0C9F432858480EA516B247DF7ABE133E0D00 Authority key identifier: 7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa Signing time: Sun 01 Dec 2024 02:00:39 +0000 ROA not before: Sun 01 Dec 2024 02:00:39 +0000 ROA not after: Sat 01 Mar 2025 02:00:39 +0000 asID: 22773 IP address blocks: 207.90.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0e:a5:16:b2:47:df:7a:be:13:3e:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07 Validity Not Before: Dec 1 02:00:39 2024 GMT Not After : Mar 1 02:00:39 2025 GMT Subject: CN=b38cdaa4-892f-4e19-8dd2-60ff4d0fd80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:37:90:ee:46:e8:39:c9:ef:c4:60:05:69:9b: dd:1a:af:f8:ed:b1:d0:cd:5c:41:7c:6c:55:4e:31: 66:69:c5:6e:b3:15:22:fa:f7:f7:2e:10:22:33:7a: 5c:2c:eb:29:bd:63:18:e6:6f:6a:6b:f7:22:cd:10: fc:f7:6f:a1:8c:08:2c:ae:6e:82:96:59:33:e1:79: b3:b1:1c:b0:96:a8:59:29:3b:ec:4f:4a:c6:4a:31: a3:0c:71:13:71:b2:ab:86:27:a6:d5:53:21:a5:0b: 27:fa:dd:d3:be:1e:28:b0:a0:51:8b:01:49:3a:41: e3:30:5d:82:4b:d0:59:d2:a2:ca:ee:7c:27:38:29: 17:9c:5e:03:47:82:d6:2c:f8:af:5a:cb:24:3b:d1: 7e:71:00:d1:48:de:31:82:4f:b5:3b:dd:59:7e:2a: f4:1e:ed:20:7b:57:26:57:2f:7e:03:af:bb:0f:5f: b6:bc:22:1b:c9:54:7a:82:59:ba:9c:42:4d:83:7e: 7a:f1:38:42:2a:22:92:0c:9b:89:f2:3d:d3:05:d0: 6c:b0:21:e9:18:7e:62:6f:9a:1d:2f:ed:b6:ec:54: 30:42:b8:d7:9d:66:e3:6a:c2:91:be:7e:08:80:34: 06:1e:53:a3:36:ee:5a:5d:cd:ec:e7:5f:52:9f:61: c3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A4:A2:7D:E2:3B:82:00:8C:BB:98:68:7F:02:E6:CC:01:45:19:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl X509v3 Authority Key Identifier: keyid:7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer sbgp-ipAddrBlock: critical IPv4: 207.90.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d6:f0:b6:c9:54:c9:f9:98:1b:9a:9d:15:4c:7a:32:73:94: 57:4d:cd:1c:ff:f3:1b:75:bd:c0:6b:1a:3c:39:b1:ee:18:f5: 84:e0:14:51:19:37:53:46:31:51:65:bf:37:bb:69:b1:d7:31: 60:4e:6b:cd:52:87:56:37:df:17:59:ad:99:a2:17:31:f7:7e: bc:04:22:37:11:77:29:8a:d6:13:0f:85:6b:59:f8:8c:df:93: 45:7e:2b:51:36:b7:bc:82:ac:36:a1:b1:e3:0f:77:ca:9f:eb: ed:0f:19:0b:ea:fb:83:0e:84:2a:6b:e9:83:87:3d:7e:87:3a: 77:f5:05:5b:91:a4:4c:0a:18:7c:cf:d9:e0:d9:6a:37:24:59: 00:2d:67:98:2f:12:44:52:c9:c5:ff:5d:72:91:68:d2:a6:17: d9:59:8d:bf:85:47:3d:c7:67:9e:10:db:fa:c1:81:bc:e0:98: 13:74:12:a6:44:be:c7:5d:de:63:44:61:58:04:11:93:23:b8: 7d:1d:49:bd:d8:60:a3:9f:8a:32:e0:4f:34:48:45:ea:45:f6: 85:84:67:63:b4:d7:2c:91:ae:2d:ee:bf:fa:6c:0d:69:42:25: 42:9d:0a:c7:6c:2f:f5:14:03:cf:3d:07:1f:98:b6:64:8a:5e: 85:0d:9f:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpRayR996vhM+DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyYzEzNzctNGYyNi00YWU0LWJiNmMtM2NhN2ZlMjVi ZTA3MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk YjM4Y2RhYTQtODkyZi00ZTE5LThkZDItNjBmZjRkMGZkODBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTeQ7kboOcnvxGAFaZvdGq/47bHQzVxBfGxV TjFmacVusxUi+vf3LhAiM3pcLOspvWMY5m9qa/cizRD892+hjAgsrm6Cllkz4Xmz sRywlqhZKTvsT0rGSjGjDHETcbKrhiem1VMhpQsn+t3Tvh4osKBRiwFJOkHjMF2C S9BZ0qLK7nwnOCkXnF4DR4LWLPivWsskO9F+cQDRSN4xgk+1O91Zfir0Hu0ge1cm Vy9+A6+7D1+2vCIbyVR6glm6nEJNg3568ThCKiKSDJuJ8j3TBdBssCHpGH5ib5od L+227FQwQrjXnWbjasKRvn4IgDQGHlOjNu5aXc3s519Sn2HDqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNukon3iO4IAjLuYaH8C5swBRRkkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDJj MTM3Ny00ZjI2LTRhZTQtYmI2Yy0zY2E3ZmUyNWJlMDcvM2EwZDUyNDktMjUxMi0z Y2YxLWE5NmMtZmU3YTU4ZWU5YjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQyYzEzNzctNGYyNi00YWU0LWJi NmMtM2NhN2ZlMjViZTA3LzFkMmMxMzc3LTRmMjYtNGFlNC1iYjZjLTNjYTdmZTI1 YmUwNy5jcmwwHwYDVR0jBBgwFoAUfY6kggzcmm9PyTHHI3WQFOSuOv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZDJjMTM3Ny00ZjI2LTRhZTQtYmI2Yy0zY2E3 ZmUyNWJlMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz1rUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3W8LbJVMn5mBuanRVMejJzlFdNzRz/8xt1vcBrGjw5se4Y9YTgFFEZ N1NGMVFlvze7abHXMWBOa81Sh1Y33xdZrZmiFzH3frwEIjcRdymK1hMPhWtZ+Izf k0V+K1E2t7yCrDahseMPd8qf6+0PGQvq+4MOhCpr6YOHPX6HOnf1BVuRpEwKGHzP 2eDZajckWQAtZ5gvEkRSycX/XXKRaNKmF9lZjb+FRz3HZ54Q2/rBgbzgmBN0EqZE vsdd3mNEYVgEEZMjuH0dSb3YYKOfijLgTzRIRepF9oWEZ2O01yyRri3uv/psDWlC JUKdCsdsL/UUA889Bx+YtmSKXoUNn2U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:10 2025 by rpki-client