$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa File: d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa (raw, json) Hash identifier: Pfn0fKUSnh7KUmVZZ9WNfEJCELZXqZ9sca2RK6Sp3Ro= Subject key identifier: D2:79:56:06:33:7C:80:7D:ED:45:0D:74:33:0B:8C:9F:A5:47:E9:E6 Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F432858480BDA6C474F2A3E4CBE808340 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 3807 IP address blocks: 207.196.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:6c:47:4f:2a:3e:4c:be:80:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=bd85aed6-6e1f-46e9-afa0-a7041ffea3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:ee:cc:5a:df:88:24:9f:54:ad:4d:9c:71: 0a:9b:c8:75:38:06:76:9c:2f:35:1f:c2:bb:c7:77: c3:31:9a:c8:9f:f3:22:37:7d:79:26:6c:fa:4c:d5: 4c:0f:e7:5a:b6:f2:f6:4a:ba:a8:05:a9:d2:38:28: 11:97:16:ba:ee:9f:4a:3e:aa:b9:36:b4:9c:e7:40: 94:7c:86:95:84:f8:02:1f:85:80:02:25:2b:e4:82: 92:86:31:16:dd:53:61:70:43:57:59:65:a4:18:27: e7:d9:ca:00:5b:7e:71:c6:48:4c:f8:8d:dc:92:d8: e6:0e:31:b4:ca:ad:12:1b:ad:b0:c7:de:be:86:3c: 45:30:20:03:d9:e8:d1:42:c0:b7:08:1f:79:9f:26: 76:56:3f:88:1a:27:73:81:cd:6b:b9:58:89:07:01: e0:c3:ae:7a:74:61:c9:1a:5d:f2:59:ff:aa:ab:27: e3:5a:af:70:bc:8c:98:83:f4:7d:06:f4:04:c6:2a: a7:75:47:03:50:5e:36:9f:b1:f1:99:0b:9b:58:93: 0e:d8:d5:db:1f:83:c7:6f:26:2b:99:00:c3:17:f9: d1:b1:01:86:61:3d:ea:e4:24:51:1a:74:3d:93:9f: cf:d5:04:84:54:90:45:83:14:00:ac:7a:e5:cf:41: d4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:79:56:06:33:7C:80:7D:ED:45:0D:74:33:0B:8C:9F:A5:47:E9:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:2b:02:10:82:82:0a:42:2a:a0:99:94:6b:36:d7:16:63:39: dc:82:fe:b5:af:5e:3e:57:73:38:3c:3d:57:00:e1:20:1e:e6: 63:bc:39:2f:a2:d6:d0:df:8f:17:15:02:63:94:c2:42:3b:63: 06:7b:fb:02:12:1f:0d:ab:98:e4:c4:a1:cd:a8:aa:9f:7e:28: 3d:a2:27:23:b7:6f:ef:79:a2:de:ab:33:e0:af:6b:3d:5f:2e: 2b:c7:9d:74:b1:b2:d3:7f:c2:19:b5:90:8b:62:2e:cb:c7:07: ba:2d:5c:d5:30:90:73:72:e1:71:cb:84:3e:98:0a:5c:e7:16: f4:fe:d9:6b:ee:ca:db:2e:36:ae:cf:ed:15:26:d6:53:9a:2c: 92:99:b9:f2:2d:74:65:f6:dc:90:ae:29:91:22:5c:e7:0f:6b: 3b:1e:7d:20:65:85:8c:b5:a5:84:cb:ff:5d:34:45:91:53:bd: 8b:a8:ed:9b:2f:ef:57:4b:fa:f9:cb:2b:0a:77:19:b8:bb:65: 5e:16:fd:a5:86:b1:9d:ea:67:87:d3:6b:b6:c7:c8:65:ff:5e: 14:6a:43:af:6c:a7:54:fa:00:56:dd:ca:29:1f:04:bd:f0:79: 09:ca:23:91:24:d5:41:a4:30:be:29:0d:98:49:52:21:0c:02: 2c:f1:8d:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2mxHTyo+TL6Ag0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk YmQ4NWFlZDYtNmUxZi00NmU5LWFmYTAtYTcwNDFmZmVhM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP7uzFrfiCSfVK1NnHEKm8h1OAZ2nC81H8K7 x3fDMZrIn/MiN315Jmz6TNVMD+datvL2SrqoBanSOCgRlxa67p9KPqq5NrSc50CU fIaVhPgCH4WAAiUr5IKShjEW3VNhcENXWWWkGCfn2coAW35xxkhM+I3cktjmDjG0 yq0SG62wx96+hjxFMCAD2ejRQsC3CB95nyZ2Vj+IGidzgc1ruViJBwHgw656dGHJ Gl3yWf+qqyfjWq9wvIyYg/R9BvQExiqndUcDUF42n7HxmQubWJMO2NXbH4PHbyYr mQDDF/nRsQGGYT3q5CRRGnQ9k5/P1QSEVJBFgxQArHrlz0HUZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJ5VgYzfIB97UUNdDMLjJ+lR+nmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvZDhiMDg1NjgtY2FiYS0z ZTNmLTgxNDItMGUzY2MzZThiYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUrAhCCggpCKqCZlGs21xZjOdyC/rWvXj5Xczg8PVcA4SAe5mO8OS+i 1tDfjxcVAmOUwkI7YwZ7+wISHw2rmOTEoc2oqp9+KD2iJyO3b+95ot6rM+Cvaz1f LivHnXSxstN/whm1kItiLsvHB7otXNUwkHNy4XHLhD6YClznFvT+2WvuytsuNq7P 7RUm1lOaLJKZufItdGX23JCuKZEiXOcPazsefSBlhYy1pYTL/100RZFTvYuo7Zsv 71dL+vnLKwp3Gbi7ZV4W/aWGsZ3qZ4fTa7bHyGX/XhRqQ69sp1T6AFbdyikfBL3w eQnKI5Ek1UGkML4pDZhJUiEMAizxjYc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:32 2025 by rpki-client