$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/241f1b53-63a6-328e-a841-25d97fa28860.roa File: 241f1b53-63a6-328e-a841-25d97fa28860.roa (raw, json) Hash identifier: BCrkk6e/yU/Lw128sFTHrilCPaVn/oYUxNIMlSrZ+aM= Subject key identifier: 64:E3:D2:22:11:85:16:B0:A6:5E:1C:D2:BB:54:1D:CE:A3:BC:17:35 Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F432858480BDA6C2984D6D371FF0EF380 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/241f1b53-63a6-328e-a841-25d97fa28860.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 3807 IP address blocks: 207.196.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:6c:29:84:d6:d3:71:ff:0e:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=5a8087da-c98e-45c9-a227-44503312ab6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d7:d3:a2:2e:a9:d0:36:dd:e2:fe:41:24:50: f5:0f:b9:ba:69:96:af:ad:07:40:9a:56:c4:c7:a4: 05:f5:3e:02:8c:1a:96:a6:f9:2d:b5:fe:c3:7f:38: f0:93:a5:09:5a:2b:80:24:77:d8:9d:4c:88:71:f5: c9:0f:e4:3b:1a:2d:fa:33:95:bd:b1:e3:36:52:30: 5f:e4:45:32:97:39:3e:5c:ca:34:d3:18:04:41:91: 1d:ad:ab:cc:46:73:ed:95:85:47:06:af:ce:c4:a3: 31:c4:48:02:cd:65:de:d1:1e:c8:15:91:5e:43:2e: 03:88:55:d7:c7:d5:9a:5a:f1:e8:b7:68:a3:45:ec: d2:3b:8f:6a:09:26:63:5d:3b:9a:27:fc:d6:fc:c9: ed:07:2c:78:6e:64:34:92:14:ab:5d:3e:bd:54:23: 9b:38:85:ea:42:5a:28:e4:58:ac:a9:0b:99:46:4e: 58:6f:aa:ba:53:36:4b:18:af:c5:bb:80:4b:17:eb: a6:6e:f8:30:bb:7f:bc:22:91:ea:4f:3f:64:82:7a: cf:37:c4:c7:e8:81:a7:4e:3c:94:fa:99:53:b9:5a: d2:18:73:65:03:9e:15:5a:39:81:75:d6:3e:0a:6f: f8:92:be:8b:0f:c6:c8:77:09:e4:d1:4e:76:73:13: 20:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E3:D2:22:11:85:16:B0:A6:5E:1C:D2:BB:54:1D:CE:A3:BC:17:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/241f1b53-63a6-328e-a841-25d97fa28860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:fd:e8:44:fd:f9:4e:0f:a0:bf:71:cf:aa:5b:46:ab:e7:51: ed:c4:02:74:a3:e3:23:06:53:fa:56:dd:5d:00:ac:2c:b2:de: e6:60:97:02:eb:75:8e:d3:bb:53:95:1a:58:2d:32:f3:a0:a5: 60:c7:ca:52:ab:08:da:9d:6d:bf:db:dd:78:bd:d3:84:e2:59: 58:31:2f:a0:da:9b:5d:66:b2:08:97:dc:b2:43:33:5c:9d:25: 6a:d4:22:11:04:1c:99:28:8e:6c:b0:7f:1d:ef:c9:09:82:53: 74:1c:e4:27:4e:e7:73:61:0f:27:e1:73:dc:1c:17:eb:1d:b0: b2:7e:19:7f:07:d9:71:57:00:e1:e6:02:34:e4:5a:fc:5c:b9: 34:06:f1:33:b7:8f:51:17:5b:b1:9e:57:bd:d4:df:82:47:ca: 63:d8:f0:6c:cf:c0:1a:e7:42:04:6e:6d:be:8a:8a:6d:17:79: f1:70:17:ec:16:37:e0:04:ed:bc:95:7d:a3:51:63:5b:b2:34: dc:34:11:1c:92:5e:de:1d:39:1f:3e:86:1b:2f:22:e5:b2:72: f7:5a:0e:90:bf:f3:98:27:8a:cd:ae:41:7f:e5:76:2e:04:11: 60:1f:42:86:45:c6:ad:83:99:f7:f5:87:3f:e3:6a:b6:6c:93: 22:48:02:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2mwphNbTcf8O84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk NWE4MDg3ZGEtYzk4ZS00NWM5LWEyMjctNDQ1MDMzMTJhYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdfToi6p0Dbd4v5BJFD1D7m6aZavrQdAmlbE x6QF9T4CjBqWpvkttf7Dfzjwk6UJWiuAJHfYnUyIcfXJD+Q7Gi36M5W9seM2UjBf 5EUylzk+XMo00xgEQZEdravMRnPtlYVHBq/OxKMxxEgCzWXe0R7IFZFeQy4DiFXX x9WaWvHot2ijRezSO49qCSZjXTuaJ/zW/MntByx4bmQ0khSrXT69VCObOIXqQloo 5FisqQuZRk5Yb6q6UzZLGK/Fu4BLF+umbvgwu3+8IpHqTz9kgnrPN8TH6IGnTjyU +plTuVrSGHNlA54VWjmBddY+Cm/4kr6LD8bIdwnk0U52cxMg2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTj0iIRhRawpl4c0rtUHc6jvBc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvMjQxZjFiNTMtNjNhNi0z MjhlLWE4NDEtMjVkOTdmYTI4ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8SIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv96ET9+U4PoL9xz6pbRqvnUe3EAnSj4yMGU/pW3V0ArCyy3uZglwLr dY7Tu1OVGlgtMvOgpWDHylKrCNqdbb/b3Xi904TiWVgxL6Dam11msgiX3LJDM1yd JWrUIhEEHJkojmywfx3vyQmCU3Qc5CdO53NhDyfhc9wcF+sdsLJ+GX8H2XFXAOHm AjTkWvxcuTQG8TO3j1EXW7GeV73U34JHymPY8GzPwBrnQgRubb6Kim0XefFwF+wW N+AE7byVfaNRY1uyNNw0ERySXt4dOR8+hhsvIuWycvdaDpC/85gnis2uQX/ldi4E EWAfQoZFxq2Dmff1hz/jarZskyJIAmc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:15 2025 by rpki-client