$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa File: f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa (raw, json) Hash identifier: e3HZVevBXpohW+K4IAqNv4HTc/Rly4bDkdrxthpEomE= Subject key identifier: C1:16:1C:9B:8C:59:3F:2C:BA:E9:9A:F9:03:20:44:67:B9:14:C4:05 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F432858480EA50948125B73EF4AD88A00 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa Signing time: Sun 01 Dec 2024 02:00:39 +0000 ROA not before: Sun 01 Dec 2024 02:00:39 +0000 ROA not after: Sat 01 Mar 2025 02:00:39 +0000 asID: 7782 IP address blocks: 107.152.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0e:a5:09:48:12:5b:73:ef:4a:d8:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Dec 1 02:00:39 2024 GMT Not After : Mar 1 02:00:39 2025 GMT Subject: CN=4eb78445-46a9-438f-9d27-dacde7c43c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bd:9e:07:c7:5a:47:b2:56:8a:06:ea:e9:41: 8b:e1:a2:67:e9:c6:85:dd:74:95:c2:d3:27:5b:f0: 95:cd:26:5e:44:af:a9:04:ca:c1:70:d5:77:97:c7: cb:df:67:3e:b9:58:7b:1d:5f:01:7a:32:17:c4:5c: 04:1a:a1:07:9a:4c:ca:c7:5d:dc:a4:10:c7:a9:0b: 39:00:68:b6:e9:51:2a:14:da:ef:c7:74:f2:09:7d: 1d:1a:fa:04:a1:f0:0b:2c:57:76:a2:98:a6:81:88: 12:98:7e:85:f8:d1:6d:b2:6c:18:3d:ed:e3:b7:01: 00:df:ee:48:6a:a5:66:13:17:cf:07:08:37:c5:4b: 42:f0:4f:19:79:b6:44:0b:d3:0f:fb:81:aa:02:5d: f0:66:bc:ab:ea:45:54:f4:3f:55:4f:3c:16:e5:78: 5c:68:96:09:d4:31:d3:f7:62:11:85:a3:c7:d1:c9: 45:cc:9c:e4:2c:b6:e4:1f:13:97:0e:1d:7e:91:41: 98:27:48:8a:bb:b3:55:a3:c8:6b:88:ba:be:70:96: 42:9d:e2:b5:43:66:ba:73:4d:4c:01:17:24:1b:49: ab:02:0e:96:74:31:c3:62:52:d4:db:2b:3d:96:87: 88:50:a1:22:89:21:2c:e1:5e:8d:fe:3e:04:96:40: 55:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:16:1C:9B:8C:59:3F:2C:BA:E9:9A:F9:03:20:44:67:B9:14:C4:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 107.152.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:5f:53:9a:53:3d:26:58:03:ea:8e:e6:c4:2b:d8:1b:8d:32: ef:47:e3:c1:c4:76:65:7b:e8:dd:d0:5b:8a:03:82:a5:e0:fc: b0:49:d7:68:af:ce:b8:5d:de:96:86:1d:7c:dc:b9:3d:a2:dd: 6d:2d:48:1f:17:78:28:78:7e:0d:60:88:08:66:24:65:22:9a: cc:6c:e9:85:ee:31:c9:0f:5c:0d:48:79:1e:24:c4:9c:e1:57: c1:c7:cc:83:c1:6c:34:b1:b4:85:26:4b:a2:72:33:be:80:96: 6f:bd:99:76:73:81:6c:fb:98:43:4d:a3:a5:0c:90:57:4c:07: c5:60:5b:50:0e:68:32:cc:f8:f6:69:e5:70:ab:91:03:d4:0c: b0:63:d7:2e:ef:bb:0d:96:76:7c:ff:27:0b:7b:72:eb:1a:4d: 8e:89:cd:ed:fc:bc:2d:06:56:3e:1b:e3:da:ed:4e:05:7d:a7: b4:ea:93:31:27:0a:f7:33:6f:59:16:72:fa:de:57:25:0e:8a: cf:88:b3:2b:89:50:2a:f8:8c:91:3e:e4:a2:08:85:e4:b0:2c: 67:45:5d:47:79:f6:6e:04:85:dd:1d:1f:8f:0e:cf:69:df:6c: c9:28:73:5b:62:e4:f7:c2:81:4e:dc:ae:98:d3:56:58:44:45: 4d:62:ee:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpQlIEltz70rYigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk NGViNzg0NDUtNDZhOS00MzhmLTlkMjctZGFjZGU3YzQzYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL2eB8daR7JWigbq6UGL4aJn6caF3XSVwtMn W/CVzSZeRK+pBMrBcNV3l8fL32c+uVh7HV8BejIXxFwEGqEHmkzKx13cpBDHqQs5 AGi26VEqFNrvx3TyCX0dGvoEofALLFd2opimgYgSmH6F+NFtsmwYPe3jtwEA3+5I aqVmExfPBwg3xUtC8E8ZebZEC9MP+4GqAl3wZryr6kVU9D9VTzwW5XhcaJYJ1DHT 92IRhaPH0clFzJzkLLbkHxOXDh1+kUGYJ0iKu7NVo8hriLq+cJZCneK1Q2a6c01M ARckG0mrAg6WdDHDYlLU2ys9loeIUKEiiSEs4V6N/j4ElkBVvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEWHJuMWT8suuma+QMgRGe5FMQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvZjgyMGU3NWYtNGU3Zi0z NTJhLWE2N2EtYTcxZmY4YmE1NTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa5hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdfU5pTPSZYA+qO5sQr2BuNMu9H48HEdmV76N3QW4oDgqXg/LBJ12iv zrhd3paGHXzcuT2i3W0tSB8XeCh4fg1giAhmJGUimsxs6YXuMckPXA1IeR4kxJzh V8HHzIPBbDSxtIUmS6JyM76Alm+9mXZzgWz7mENNo6UMkFdMB8VgW1AOaDLM+PZp 5XCrkQPUDLBj1y7vuw2Wdnz/Jwt7cusaTY6Jze38vC0GVj4b49rtTgV9p7TqkzEn Cvczb1kWcvreVyUOis+IsyuJUCr4jJE+5KIIheSwLGdFXUd59m4Ehd0dH48Oz2nf bMkoc1ti5PfCgU7crpjTVlhERU1i7u8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:48 2025 by rpki-client