$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/d7dbe350-33a5-3258-aa70-7a64de946ef8.roa File: d7dbe350-33a5-3258-aa70-7a64de946ef8.roa (raw, json) Hash identifier: UHnVAkAhAptwYxf/OrXy5M9NcbHOB2vtzEZogtuQUuo= Subject key identifier: 44:8D:A1:77:1D:C0:38:29:DF:3C:45:49:E8:3E:07:ED:DB:94:17:2D Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858489E48BD9970A5030180B21E80 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/d7dbe350-33a5-3258-aa70-7a64de946ef8.roa Signing time: Tue 21 Jan 2025 12:51:10 +0000 ROA not before: Tue 21 Jan 2025 12:51:10 +0000 ROA not after: Mon 21 Apr 2025 11:51:10 +0000 asID: 40509 IP address blocks: 168.220.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:48:bd:99:70:a5:03:01:80:b2:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jan 21 12:51:10 2025 GMT Not After : Apr 21 11:51:10 2025 GMT Subject: CN=09276506-7a08-4378-9f69-9a2a24bb00e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fa:77:99:df:59:e8:ec:40:72:46:3a:88:d7: f8:05:87:20:1f:25:e9:fb:8f:91:c7:16:91:2c:ad: be:4e:79:e0:10:d7:58:97:96:da:60:11:f3:a0:cc: 08:12:7f:98:39:22:a8:01:9c:03:a8:8f:e0:43:2b: e4:0c:f1:d5:c4:1f:f8:86:a7:5f:b5:6f:3d:63:fa: 0e:2d:09:e7:ce:e3:38:39:ae:3d:46:12:b3:41:c6: 7a:86:76:7f:5e:6f:d9:7e:ef:1b:c2:97:06:be:78: 54:69:c0:64:91:e1:4a:aa:bf:ef:a0:a4:10:ec:dc: eb:14:8c:6d:d6:33:79:22:a5:a1:cc:4c:79:64:70: 76:06:91:4e:4c:9a:fc:a9:cd:9d:aa:e2:58:25:8f: 30:e7:a1:8f:33:52:47:0c:9b:5a:97:3c:ae:07:b5: 9d:7c:40:4d:7f:22:4d:63:04:19:0d:d4:bb:a3:50: 3c:a9:f8:b5:35:ed:b4:58:d2:89:ac:d8:0d:da:f4: bc:af:4e:5f:b6:b2:ed:3d:ba:ec:24:f1:17:94:57: 24:f0:c3:b4:4f:f4:71:af:72:7b:35:e2:28:96:ff: cf:dc:cc:cc:cf:b3:d9:57:64:2d:82:74:0e:a5:aa: 50:8f:db:8c:ef:4d:84:17:a4:df:3c:89:ad:de:35: 2c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8D:A1:77:1D:C0:38:29:DF:3C:45:49:E8:3E:07:ED:DB:94:17:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/d7dbe350-33a5-3258-aa70-7a64de946ef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 168.220.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ea:81:34:c3:52:20:03:27:5e:d1:9a:4f:50:db:11:58:a0: a7:5a:af:30:d8:57:42:42:b5:5f:a2:e2:ad:3a:f8:0d:cc:cb: 1b:f8:59:e5:91:75:81:8e:f1:c7:8d:e7:97:25:f5:d1:33:c0: 96:c3:df:96:64:ad:71:52:39:fe:65:09:6b:b8:bb:3f:00:53: e5:d4:6a:f8:8c:f0:a2:54:b7:e7:d5:54:e5:3c:86:3e:fe:0b: 3e:b4:a7:77:f9:1d:a3:12:ad:a6:17:20:cf:e2:a2:f3:1d:63: bc:99:de:ba:dd:01:0f:17:d0:a1:be:77:6f:f7:19:c4:55:33: e8:82:ff:80:c9:0f:bc:12:6e:4d:58:72:e1:a7:0f:8a:2d:2b: f1:38:14:19:d3:45:78:4a:89:69:2c:fe:67:31:fa:e6:cb:46: 9c:63:6e:51:88:2f:8e:4a:ee:f6:dd:15:e5:da:5e:61:28:52: bc:35:25:e3:30:d3:ae:b5:b3:7e:70:fc:ca:0a:fa:e2:4f:01: 48:6a:ba:63:91:d1:e6:33:bf:05:03:61:be:6e:17:d2:36:4a: 16:2d:f1:08:e6:5f:41:62:a8:74:1e:8a:ca:47:98:96:a6:58: c1:74:21:8c:83:87:59:9d:5b:27:0b:c7:d1:87:2b:32:9c:ff: 6e:55:d4:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEieSL2ZcKUDAYCyHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDEyMTEyNTExMFoXDTI1MDQyMTExNTExMFowLzEtMCsGA1UEAxMk MDkyNzY1MDYtN2EwOC00Mzc4LTlmNjktOWEyYTI0YmIwMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvp3md9Z6OxAckY6iNf4BYcgHyXp+4+RxxaR LK2+TnngENdYl5baYBHzoMwIEn+YOSKoAZwDqI/gQyvkDPHVxB/4hqdftW89Y/oO LQnnzuM4Oa49RhKzQcZ6hnZ/Xm/Zfu8bwpcGvnhUacBkkeFKqr/voKQQ7NzrFIxt 1jN5IqWhzEx5ZHB2BpFOTJr8qc2dquJYJY8w56GPM1JHDJtalzyuB7WdfEBNfyJN YwQZDdS7o1A8qfi1Ne20WNKJrNgN2vS8r05ftrLtPbrsJPEXlFck8MO0T/Rxr3J7 NeIolv/P3MzMz7PZV2QtgnQOpapQj9uM702EF6TfPImt3jUs7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESNoXcdwDgp3zxFSeg+B+3blBctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvZDdkYmUzNTAtMzNhNS0z MjU4LWFhNzAtN2E2NGRlOTQ2ZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqNxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHqgTTDUiADJ17Rmk9Q2xFYoKdarzDYV0JCtV+i4q06+A3Myxv4WeWR dYGO8ceN55cl9dEzwJbD35ZkrXFSOf5lCWu4uz8AU+XUaviM8KJUt+fVVOU8hj7+ Cz60p3f5HaMSraYXIM/iovMdY7yZ3rrdAQ8X0KG+d2/3GcRVM+iC/4DJD7wSbk1Y cuGnD4otK/E4FBnTRXhKiWks/mcx+ubLRpxjblGIL45K7vbdFeXaXmEoUrw1JeMw 0661s35w/MoK+uJPAUhqumOR0eYzvwUDYb5uF9I2ShYt8QjmX0FiqHQeispHmJam WMF0IYyDh1mdWycLx9GHKzKc/25V1Ho= -----END CERTIFICATE-----Generated at Sun Feb 2 15:58:08 2025 by rpki-client