$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/1aab2dbe-d208-3e83-ad04-b139cc44c834.roa File: 1aab2dbe-d208-3e83-ad04-b139cc44c834.roa (raw, json) Hash identifier: TAel4Yt3xKCj1tXXW4/rR3ggkj0LDzrQagwdi6+H3oE= Subject key identifier: F9:DB:3C:F0:50:2D:0C:F3:58:53:BA:67:6D:9D:77:56:C4:36:0C:6F Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858489E08EBB886AF190B7BC37A80 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/1aab2dbe-d208-3e83-ad04-b139cc44c834.roa Signing time: Tue 21 Jan 2025 10:42:35 +0000 ROA not before: Tue 21 Jan 2025 10:42:35 +0000 ROA not after: Mon 21 Apr 2025 09:42:35 +0000 asID: 40509 IP address blocks: 66.241.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:08:eb:b8:86:af:19:0b:7b:c3:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jan 21 10:42:35 2025 GMT Not After : Apr 21 09:42:35 2025 GMT Subject: CN=2a110bc4-527a-46f6-b764-396cd2ffa3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:b9:5a:7e:5e:cc:cb:49:fb:ef:44:39:39: e6:f0:46:98:ba:af:61:ef:b9:ba:d9:a5:15:9a:19: 6e:e4:9e:90:fe:50:54:2d:0c:c0:e4:66:ec:70:f7: c2:e8:e5:fb:a2:d5:aa:26:d8:7f:f9:1a:4e:b6:56: 6e:ac:e0:1a:3a:0f:80:c3:38:cd:41:26:66:42:bf: 1c:bf:cc:db:de:e4:93:f3:0b:59:4b:1c:46:39:a9: 8e:07:72:e8:db:d6:e0:d5:47:67:75:78:b6:2b:6f: 7c:19:c6:30:92:e9:f7:f6:59:37:cd:31:bc:14:a2: 21:04:16:7d:30:b7:c6:8f:97:af:67:f2:85:80:89: 76:dc:43:da:b3:cf:a4:05:54:1d:ab:a0:b6:db:16: 9c:ab:1d:b9:52:e1:38:80:f7:46:09:58:36:71:d0: c0:40:fd:2b:d2:ee:2f:2b:63:94:a3:c1:2d:0c:58: 6b:ef:b8:83:c7:96:b2:1a:b7:5f:fa:ad:42:64:48: 6b:77:55:d2:17:39:e6:3c:55:73:dd:60:45:42:80: 5c:f0:c0:4b:8b:24:9f:76:41:d0:e3:19:1b:b4:7f: 4e:b0:c2:5c:71:a7:e0:5c:81:d1:33:17:07:31:29: ec:4a:01:a1:a1:06:c9:d7:e5:d8:1a:7e:58:b1:d5: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DB:3C:F0:50:2D:0C:F3:58:53:BA:67:6D:9D:77:56:C4:36:0C:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/1aab2dbe-d208-3e83-ad04-b139cc44c834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 66.241.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:0e:cc:c1:9e:83:a3:80:1d:ec:f8:36:e1:34:91:d3:f8:57: 27:31:2f:32:f0:ec:5f:0f:97:d0:08:ff:8d:c5:13:15:0c:67: 76:b2:d2:70:f8:fe:90:df:82:00:b5:df:9f:a9:70:6b:bc:5e: 32:59:f2:27:d6:ef:9d:62:d5:e0:f4:89:d4:2b:77:60:6d:d1: 74:a1:c2:97:38:ad:6e:d1:66:46:d8:b1:b3:11:68:49:81:68: 5e:16:55:c3:a1:5b:50:43:5c:b7:cd:87:8c:ae:7b:66:ae:25: a2:b0:ee:71:a6:6c:1c:48:03:04:eb:91:be:a5:3b:fd:33:64: 81:7f:72:4f:2c:6f:29:48:5b:13:f4:7c:4c:b1:c4:aa:38:8e: 20:a0:8e:88:fd:ba:58:67:7d:60:e0:c5:a2:c6:1a:ea:6b:26: dd:d5:2d:db:ca:40:cd:76:ef:5a:85:56:52:02:85:47:4c:7b: e7:a5:1c:19:0e:2c:97:39:14:b3:45:c9:03:b5:ac:e8:3b:7f: ee:34:99:97:84:03:18:0c:a4:b8:ad:c8:e8:f6:71:ac:48:08: 97:7e:1e:f0:e5:36:0a:ce:2b:be:6a:92:db:27:2d:08:8d:fd: 51:07:c5:59:69:2c:85:32:3d:06:9a:6a:3c:72:06:10:7b:73: 54:59:6f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEieCOu4hq8ZC3vDeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDEyMTEwNDIzNVoXDTI1MDQyMTA5NDIzNVowLzEtMCsGA1UEAxMk MmExMTBiYzQtNTI3YS00NmY2LWI3NjQtMzk2Y2QyZmZhM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6G5Wn5ezMtJ++9EOTnm8EaYuq9h77m62aUV mhlu5J6Q/lBULQzA5GbscPfC6OX7otWqJth/+RpOtlZurOAaOg+AwzjNQSZmQr8c v8zb3uST8wtZSxxGOamOB3Lo29bg1UdndXi2K298GcYwkun39lk3zTG8FKIhBBZ9 MLfGj5evZ/KFgIl23EPas8+kBVQdq6C22xacqx25UuE4gPdGCVg2cdDAQP0r0u4v K2OUo8EtDFhr77iDx5ayGrdf+q1CZEhrd1XSFznmPFVz3WBFQoBc8MBLiySfdkHQ 4xkbtH9OsMJccafgXIHRMxcHMSnsSgGhoQbJ1+XYGn5YsdVjOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnbPPBQLQzzWFO6Z22dd1bENgxvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMWFhYjJkYmUtZDIwOC0z ZTgzLWFkMDQtYjEzOWNjNDRjODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQvFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoOzMGeg6OAHez4NuE0kdP4VycxLzLw7F8Pl9AI/43FExUMZ3ay0nD4 /pDfggC135+pcGu8XjJZ8ifW751i1eD0idQrd2Bt0XShwpc4rW7RZkbYsbMRaEmB aF4WVcOhW1BDXLfNh4yue2auJaKw7nGmbBxIAwTrkb6lO/0zZIF/ck8sbylIWxP0 fEyxxKo4jiCgjoj9ulhnfWDgxaLGGuprJt3VLdvKQM1271qFVlIChUdMe+elHBkO LJc5FLNFyQO1rOg7f+40mZeEAxgMpLityOj2caxICJd+HvDlNgrOK75qktsnLQiN /VEHxVlpLIUyPQaaajxyBhB7c1RZb+g= -----END CERTIFICATE-----Generated at Sun Feb 2 15:46:01 2025 by rpki-client