$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa File: 43efa9da-f2bc-3983-a912-86d2468191e3.roa (raw, json) Hash identifier: 5TmbrC4mohZodmk0rA6mfOwW1Fr7evZbn958vN9008A= Subject key identifier: 72:DA:87:F2:15:97:2F:32:0A:4E:BD:32:39:39:1E:FC:71:BB:D3:24 Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F4328584834556A3423E4534AFDD6FE00 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 1239 IP address blocks: 65.181.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:6a:34:23:e4:53:4a:fd:d6:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=570361c1-75e2-4eef-9b1b-d72a5edff18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:03:dd:8a:4a:d7:65:79:b1:c8:68:ee:b8:5f: b3:c0:81:00:28:4b:eb:84:02:c0:e6:f1:6e:f7:88: 4a:a2:d2:52:6b:e7:e4:86:43:78:46:fa:04:2b:cd: 40:9b:4e:00:2b:f7:00:10:37:d5:db:fc:32:0d:22: cc:cd:c9:eb:c4:4e:f4:81:26:3a:8c:e8:9c:36:d4: 50:c2:20:c5:9a:70:d3:f4:ef:5f:fc:6e:4a:36:b7: f1:90:89:a9:97:82:07:97:c1:0e:c8:7f:2d:46:e6: 5b:de:cd:3c:74:32:42:8f:85:cc:63:b5:d5:15:01: 6e:4f:cf:64:2e:ff:ef:1c:74:8c:f3:6b:82:73:80: 13:4c:7a:06:86:49:d4:54:65:0c:56:d1:e3:77:f7: 83:a1:dc:6a:65:80:f3:6b:d4:0d:1b:8f:98:b6:29: 7f:69:f4:f3:9d:1b:de:95:be:b2:f4:67:56:bd:63: ac:35:32:48:b9:cf:b3:51:ef:59:2f:7a:aa:f7:a1: 7f:c8:cf:2a:e4:c1:15:87:e2:af:7b:1a:3f:fb:99: 2b:15:69:1a:06:54:6b:62:0e:ab:da:66:cb:5f:8e: 08:e9:36:e1:d0:09:93:c3:54:ab:bd:cf:52:4e:5f: a5:36:33:54:86:b4:7b:9a:07:b9:91:5e:da:78:a8: 42:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DA:87:F2:15:97:2F:32:0A:4E:BD:32:39:39:1E:FC:71:BB:D3:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 65.181.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ab:ee:a0:d7:ec:59:b4:08:5e:51:a1:3f:c4:bc:cf:1d:ee: a6:72:fe:b7:8c:9a:46:fb:22:0e:a4:08:97:4b:ce:d5:de:a7: 0a:e3:23:59:0c:eb:dd:a1:49:e0:c5:91:bd:c4:a5:c5:3b:f7: 85:ed:6f:3f:fc:78:65:8b:47:dd:e1:6c:5c:ff:70:8c:26:06: ff:12:11:c6:33:a5:a9:0f:f3:b5:cc:47:52:5d:15:d4:5f:93: e6:83:d7:00:90:68:67:56:13:78:c9:c0:33:19:99:88:ce:a9: 0a:05:ed:16:ea:53:45:2b:ef:83:2b:9a:f1:6e:7f:7e:bf:3f: dd:64:58:c1:b5:41:23:87:49:01:81:bb:03:ec:ae:75:7d:65: 83:53:ee:4f:f9:7f:01:66:1d:17:ea:81:27:da:67:c8:60:c8: 6f:b0:28:d3:de:12:b3:74:40:db:81:55:66:1c:bf:f4:b7:36: 07:13:59:ab:b1:ad:9e:e4:0c:83:65:7d:ca:06:2e:71:a5:df: 40:7a:7f:37:68:f4:b5:fe:96:7c:26:14:28:ce:d3:06:b5:3e: ac:0b:25:0f:4a:c1:75:2c:ab:92:20:5d:fe:35:27:5f:55:30: 5a:70:82:18:c1:3b:05:74:d6:b8:5a:7d:2b:d0:67:ce:94:ad: ba:d6:4f:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VWo0I+RTSv3W/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk NTcwMzYxYzEtNzVlMi00ZWVmLTliMWItZDcyYTVlZGZmMThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wPdikrXZXmxyGjuuF+zwIEAKEvrhALA5vFu 94hKotJSa+fkhkN4RvoEK81Am04AK/cAEDfV2/wyDSLMzcnrxE70gSY6jOicNtRQ wiDFmnDT9O9f/G5KNrfxkImpl4IHl8EOyH8tRuZb3s08dDJCj4XMY7XVFQFuT89k Lv/vHHSM82uCc4ATTHoGhknUVGUMVtHjd/eDodxqZYDza9QNG4+Ytil/afTznRve lb6y9GdWvWOsNTJIuc+zUe9ZL3qq96F/yM8q5MEVh+Kvexo/+5krFWkaBlRrYg6r 2mbLX44I6Tbh0AmTw1Srvc9STl+lNjNUhrR7mge5kV7aeKhCbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLah/IVly8yCk69Mjk5Hvxxu9MkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvNDNlZmE5ZGEtZjJiYy0z OTgzLWE5MTItODZkMjQ2ODE5MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQbWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6r7qDX7Fm0CF5RoT/EvM8d7qZy/reMmkb7Ig6kCJdLztXepwrjI1kM 692hSeDFkb3EpcU794Xtbz/8eGWLR93hbFz/cIwmBv8SEcYzpakP87XMR1JdFdRf k+aD1wCQaGdWE3jJwDMZmYjOqQoF7RbqU0Ur74MrmvFuf36/P91kWMG1QSOHSQGB uwPsrnV9ZYNT7k/5fwFmHRfqgSfaZ8hgyG+wKNPeErN0QNuBVWYcv/S3NgcTWaux rZ7kDINlfcoGLnGl30B6fzdo9LX+lnwmFCjO0wa1PqwLJQ9KwXUsq5IgXf41J19V MFpwghjBOwV01rhafSvQZ86UrbrWT+c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:06 2025 by rpki-client