$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/9399c7d8-aa78-3811-a49a-d4dc29f99201.roa File: 9399c7d8-aa78-3811-a49a-d4dc29f99201.roa (raw, json) Hash identifier: m2+s+SXbk1TYCY75qNZfGztqNCmFnMtgDLVIU899vT0= Subject key identifier: 2E:3E:A4:A4:A0:ED:63:99:62:27:17:9D:E1:96:DD:5C:5B:38:79:CF Certificate issuer: /CN=1fb001d4-3a2b-436f-a572-51822a315945 Certificate serial: 010D0C9F4328584824FA875633E0B51D5E2E1500 Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/9399c7d8-aa78-3811-a49a-d4dc29f99201.roa Signing time: Mon 09 Dec 2024 02:00:40 +0000 ROA not before: Mon 09 Dec 2024 02:00:40 +0000 ROA not after: Sun 09 Mar 2025 02:00:40 +0000 asID: 16509 IP address blocks: 52.119.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:24:fa:87:56:33:e0:b5:1d:5e:2e:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945 Validity Not Before: Dec 9 02:00:40 2024 GMT Not After : Mar 9 02:00:40 2025 GMT Subject: CN=dd753377-faf1-41e3-ba07-1e2f1b93dcbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:94:ab:a2:10:b8:af:03:b3:51:08:86:f9:48: 03:31:2f:d5:42:58:5b:3b:6e:bf:5d:6e:fa:e7:eb: 7f:a9:ba:ef:19:a7:d9:89:a1:68:e4:f6:ac:9f:f1: eb:cf:6f:5d:96:84:7d:a7:99:b8:e7:c5:62:a9:02: 9c:f1:56:2a:13:dd:69:b3:ba:96:ce:d7:5e:d7:f9: ef:40:11:89:6e:30:fd:be:5e:d2:ed:0b:1e:8b:b3: 68:6e:1b:f9:71:4a:3d:57:f6:71:e7:ba:f3:01:03: b2:1b:a8:b5:5a:8d:5e:74:d3:8c:24:1d:b8:a7:a8: 1a:f8:79:1a:8e:21:38:29:01:6d:58:6b:a4:43:f5: cd:7f:29:23:5b:b6:d9:9a:45:25:e2:71:6a:a7:60: 21:8d:98:43:23:61:c4:46:a4:c6:a7:f1:1c:cd:05: 4b:00:a6:d9:c7:ad:51:bb:94:ad:76:3d:f4:87:52: 69:c9:18:91:13:c9:a5:0e:9c:9c:f0:0d:11:3b:3c: c8:5f:f2:f8:5e:de:ee:91:68:2f:15:d4:0d:92:3b: fe:64:9e:57:46:79:57:f4:c8:88:bb:a3:d8:eb:37: 06:90:53:c7:53:0e:06:15:2d:b8:ac:58:42:ef:b9: 7e:76:ab:af:df:ff:01:a1:28:30:f9:df:f1:48:47: 6a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3E:A4:A4:A0:ED:63:99:62:27:17:9D:E1:96:DD:5C:5B:38:79:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/9399c7d8-aa78-3811-a49a-d4dc29f99201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl X509v3 Authority Key Identifier: keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer sbgp-ipAddrBlock: critical IPv4: 52.119.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:da:48:1b:3b:35:3a:4e:3a:1b:67:a8:0b:85:9a:9d:f3:b0: 4e:2b:9c:15:4f:14:32:74:bb:98:e8:03:90:76:70:ed:99:f0: cb:ab:fc:fe:3e:e5:00:4a:2f:80:4b:9d:94:b2:b9:dc:12:35: 53:c8:9d:6b:b6:5b:e9:51:32:61:3c:8e:41:44:d8:a7:44:a7: 58:77:0a:08:30:f1:55:1c:a9:2b:6f:c2:22:19:ac:07:2e:b5: 54:12:0c:60:71:4a:b2:b0:5a:a9:5e:21:e3:15:bd:e9:ad:7a: c6:3a:bc:a9:66:f0:cb:2f:e9:42:e7:da:5b:49:ca:70:34:4d: 95:75:3a:1e:2a:51:df:7b:26:8f:61:01:1e:56:70:4f:40:c1: 00:af:4e:52:d7:c6:dc:02:9b:e4:c8:d3:4e:8b:bc:de:37:21: a0:a7:4a:7f:68:c1:e0:f1:7d:b9:b4:6d:b9:09:2c:00:bb:80: fa:b2:82:2c:d3:f9:c5:49:9b:f0:cc:92:6c:c4:9b:e9:53:1c: 86:1f:83:bb:d6:d4:be:1e:d9:67:9c:53:0d:e5:96:57:54:88: 8d:5f:d1:d6:f9:61:a6:07:d1:56:d8:13:90:29:64:7f:96:60: 98:9f:37:77:29:e1:30:cb:16:15:bf:14:c1:f5:0b:0e:9d:47: 30:8b:2a:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgk+odWM+C1HV4uFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZiMDAxZDQtM2EyYi00MzZmLWE1NzItNTE4MjJhMzE1 OTQ1MB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk ZGQ3NTMzNzctZmFmMS00MWUzLWJhMDctMWUyZjFiOTNkY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJSrohC4rwOzUQiG+UgDMS/VQlhbO26/XW76 5+t/qbrvGafZiaFo5Pasn/Hrz29dloR9p5m458ViqQKc8VYqE91ps7qWztde1/nv QBGJbjD9vl7S7Qsei7Nobhv5cUo9V/Zx57rzAQOyG6i1Wo1edNOMJB24p6ga+Hka jiE4KQFtWGukQ/XNfykjW7bZmkUl4nFqp2AhjZhDI2HERqTGp/EczQVLAKbZx61R u5Stdj30h1JpyRiRE8mlDpyc8A0ROzzIX/L4Xt7ukWgvFdQNkjv+ZJ5XRnlX9MiI u6PY6zcGkFPHUw4GFS24rFhC77l+dquv3/8BoSgw+d/xSEdqhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4+pKSg7WOZYicXneGW3VxbOHnPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIw MDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgyMmEzMTU5NDUvOTM5OWM3ZDgtYWE3OC0z ODExLWE0OWEtZDRkYzI5Zjk5MjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWZiMDAxZDQtM2EyYi00MzZmLWE1 NzItNTE4MjJhMzE1OTQ1LzFmYjAwMWQ0LTNhMmItNDM2Zi1hNTcyLTUxODIyYTMx NTk0NS5jcmwwHwYDVR0jBBgwFoAUdKd9Tqw3iqgM0MIrTF1vWza8INEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIwMDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgy MmEzMTU5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnaSBs7NTpOOhtnqAuFmp3zsE4rnBVPFDJ0u5joA5B2cO2Z8Mur/P4+ 5QBKL4BLnZSyudwSNVPInWu2W+lRMmE8jkFE2KdEp1h3Cggw8VUcqStvwiIZrAcu tVQSDGBxSrKwWqleIeMVvemtesY6vKlm8Msv6ULn2ltJynA0TZV1Oh4qUd97Jo9h AR5WcE9AwQCvTlLXxtwCm+TI006LvN43IaCnSn9oweDxfbm0bbkJLAC7gPqygizT +cVJm/DMkmzEm+lTHIYfg7vW1L4e2WecUw3llldUiI1f0db5YaYH0VbYE5ApZH+W YJifN3cp4TDLFhW/FMH1Cw6dRzCLKg8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:47 2025 by rpki-client