$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/29e0a4ce-c2e3-3056-9089-7d49ad2af294.roa File: 29e0a4ce-c2e3-3056-9089-7d49ad2af294.roa (raw, json) Hash identifier: KqRgQTT6iY84nh2A0WbTWMSA7Fq9rzRynmQH4UvivvY= Subject key identifier: 45:C4:63:F4:B3:16:94:0E:D3:B4:99:0D:16:B0:DA:47:B2:DA:3D:11 Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F43285848424AD72683D2C18C998FC940 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/29e0a4ce-c2e3-3056-9089-7d49ad2af294.roa Signing time: Thu 19 Dec 2024 14:00:52 +0000 ROA not before: Thu 19 Dec 2024 14:00:52 +0000 ROA not after: Wed 19 Mar 2025 13:00:52 +0000 asID: 13741 IP address blocks: 65.181.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:4a:d7:26:83:d2:c1:8c:99:8f:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Dec 19 14:00:52 2024 GMT Not After : Mar 19 13:00:52 2025 GMT Subject: CN=ebd1e41e-3f1b-492f-813c-390f463bf6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:14:07:a1:92:1c:21:fe:1d:d8:1f:9d:79:7c: 79:ee:6e:db:d9:95:ea:ed:47:ad:5a:f9:c6:51:9b: be:2a:73:95:7c:ca:20:68:68:08:fa:4a:34:03:5e: 83:8b:d6:cb:6e:c8:0c:6e:1b:45:cf:66:f7:49:f0: d1:d9:c8:38:1a:5e:0e:0e:ff:27:c0:0a:53:1b:44: 0f:8a:59:bc:29:c5:b3:73:ee:87:d3:9d:ac:03:22: 81:9a:c8:70:d3:30:51:e7:c5:ea:a8:0b:2e:47:9a: 83:ef:11:74:4e:ae:dd:5f:ec:d7:48:ea:c6:1e:c6: 3f:1f:59:31:dd:63:94:52:4a:6a:4a:a9:60:ee:97: ab:3f:a1:34:52:14:89:86:fb:b5:d2:d3:fc:34:fd: 83:f2:e6:72:d1:a6:5b:da:f3:a5:04:72:f6:f8:2b: d5:ce:51:da:82:16:0e:e4:58:c2:22:61:a4:3f:15: b7:8a:8a:ff:05:6d:20:5a:cb:f3:74:35:f6:bb:46: 5c:01:3d:f6:8d:2a:a5:68:f5:f8:2c:2a:c0:72:4c: 27:3e:56:59:fd:ee:19:63:e3:e0:31:bd:4e:cd:4e: cb:7c:9b:2f:54:e4:8b:ce:f8:3a:21:05:8b:bb:e5: b0:1c:18:02:68:8b:ad:63:cd:c4:66:71:bf:c8:49: 2f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C4:63:F4:B3:16:94:0E:D3:B4:99:0D:16:B0:DA:47:B2:DA:3D:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/29e0a4ce-c2e3-3056-9089-7d49ad2af294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 65.181.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:cc:7b:e5:a8:5d:23:68:6f:3c:7f:a0:be:4a:26:c1:3e:ae: f3:76:7b:7e:bf:3b:12:78:e0:46:98:f6:5f:95:92:63:88:4e: 73:54:6d:e0:10:0b:71:a7:21:59:13:3e:49:e7:36:ce:a3:5c: 5d:4f:bc:06:28:38:15:c0:3a:86:a8:62:fe:d5:22:b6:91:4c: a0:1c:d4:52:0f:a8:b8:15:a9:36:3b:91:f8:7b:19:4a:6c:ac: 00:b8:08:18:94:24:78:83:fd:eb:73:29:b9:89:52:4f:51:84: 14:61:57:03:1a:50:5f:5c:7b:54:5c:b5:b3:d8:49:16:e0:cb: 8d:49:6f:76:76:e2:a2:90:51:38:a2:9a:43:71:1c:6e:77:26: 7f:49:40:14:ed:df:ad:0d:71:ce:f1:f6:df:3d:be:09:15:3e: f0:de:36:be:a2:c6:55:a1:00:88:b0:73:62:98:73:e1:98:be: 87:f0:18:53:e3:27:82:b0:0e:a3:4a:6d:83:cc:49:c0:2d:bb: 57:22:d2:40:32:7a:b7:19:72:05:c7:18:c3:38:12:ee:a6:cf: e0:9f:3e:4a:6d:55:b9:a2:14:bd:7e:c6:2a:7a:c6:99:9f:f1: 30:23:5f:0c:8a:1b:c6:7f:92:b5:1e:1a:10:da:0f:69:3a:30: 4c:d2:1c:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCStcmg9LBjJmPyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZWJkMWU0MWUtM2YxYi00OTJmLTgxM2MtMzkwZjQ2M2JmNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBQHoZIcIf4d2B+deXx57m7b2ZXq7UetWvnG UZu+KnOVfMogaGgI+ko0A16Di9bLbsgMbhtFz2b3SfDR2cg4Gl4ODv8nwApTG0QP ilm8KcWzc+6H052sAyKBmshw0zBR58XqqAsuR5qD7xF0Tq7dX+zXSOrGHsY/H1kx 3WOUUkpqSqlg7perP6E0UhSJhvu10tP8NP2D8uZy0aZb2vOlBHL2+CvVzlHaghYO 5FjCImGkPxW3ior/BW0gWsvzdDX2u0ZcAT32jSqlaPX4LCrAckwnPlZZ/e4ZY+Pg Mb1OzU7LfJsvVOSLzvg6IQWLu+WwHBgCaIutY83EZnG/yEkvwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXEY/SzFpQO07SZDRaw2key2j0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvMjllMGE0Y2UtYzJlMy0z MDU2LTkwODktN2Q0OWFkMmFmMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQbWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArMe+WoXSNobzx/oL5KJsE+rvN2e36/OxJ44EaY9l+VkmOITnNUbeAQ C3GnIVkTPknnNs6jXF1PvAYoOBXAOoaoYv7VIraRTKAc1FIPqLgVqTY7kfh7GUps rAC4CBiUJHiD/etzKbmJUk9RhBRhVwMaUF9ce1RctbPYSRbgy41Jb3Z24qKQUTii mkNxHG53Jn9JQBTt360Ncc7x9t89vgkVPvDeNr6ixlWhAIiwc2KYc+GYvofwGFPj J4KwDqNKbYPMScAtu1ci0kAyercZcgXHGMM4Eu6mz+CfPkptVbmiFL1+xip6xpmf 8TAjXwyKG8Z/krUeGhDaD2k6MEzSHNM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:55:25 2025 by rpki-client