$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa File: 8bc8986a-ac26-339e-8cf9-423e085dee63.roa (raw, json) Hash identifier: 0cZ5A9uPZQHx+UJKv2+HXYkJbpMhMO3V/ngyEbTfPi4= Subject key identifier: F0:A2:08:80:76:3F:F0:11:CE:48:15:62:1B:00:D9:74:21:3C:CD:0F Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F432858482A8FD8694BACD7F7AB315D80 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa Signing time: Wed 11 Dec 2024 02:00:38 +0000 ROA not before: Wed 11 Dec 2024 02:00:38 +0000 ROA not after: Tue 11 Mar 2025 01:00:38 +0000 asID: 4913 IP address blocks: 64.49.128.0/18 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2a:8f:d8:69:4b:ac:d7:f7:ab:31:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Dec 11 02:00:38 2024 GMT Not After : Mar 11 01:00:38 2025 GMT Subject: CN=522d53e6-7cc3-4149-b91f-8d40d4a8216a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:df:8a:c9:aa:06:9e:d5:88:4f:10:4c:34: ee:03:0e:8f:a8:a8:8e:fb:ad:8b:d0:5d:3e:6d:ab: da:6c:0a:f1:47:94:94:8e:99:d8:49:7f:52:22:00: 52:11:e1:7d:a6:91:47:ca:ac:df:20:4d:b5:ad:e1: f6:6a:f8:31:db:f1:37:bf:ae:cd:ad:c1:04:bb:09: c7:92:0c:8a:47:4b:55:51:fb:40:50:30:e9:01:49: 73:08:7a:3a:6c:e8:62:81:b7:d6:a9:1d:ad:bf:e0: bb:48:17:dd:7b:29:87:54:59:cf:53:61:a0:6e:65: 93:37:03:98:ab:9e:6e:63:70:6b:b7:39:ab:05:ad: 76:78:87:1b:51:9d:aa:46:ad:4b:3f:cd:1c:0a:af: 50:29:cd:9c:18:f9:d6:73:c1:e8:71:93:82:b7:db: 1f:40:b3:0b:14:ad:df:bf:aa:e9:6a:99:ad:81:45: 07:49:8d:14:22:04:cc:55:eb:e2:2e:6f:5b:e1:6c: a0:29:0e:c4:47:fe:fa:ed:06:cc:6e:3d:04:0e:76: 3d:85:c4:7c:f4:97:d2:89:64:4a:f2:79:b4:b0:ec: d3:3a:3e:6e:a1:7e:2d:7f:0a:f6:83:11:de:0d:c5: f6:60:34:d1:62:e6:a9:a0:41:4c:02:ed:e8:13:6f: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A2:08:80:76:3F:F0:11:CE:48:15:62:1B:00:D9:74:21:3C:CD:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:34:9c:32:29:34:73:46:78:c5:a8:74:09:6f:de:5b:70:20: 37:61:b9:56:07:8f:07:69:24:dd:03:b3:ae:c6:a8:dc:4e:8b: f4:1d:ed:33:56:1f:53:d0:ce:45:ef:38:af:b4:c0:f7:d9:6e: f8:d5:3b:b0:51:8b:0c:0e:f5:1e:ff:79:c4:45:75:e0:ab:aa: 31:bb:8c:1b:fc:69:58:cf:0a:b0:1e:8a:a2:52:4b:74:e7:06: 64:1e:aa:cc:6d:fb:47:cd:38:30:a6:d4:a3:a6:8f:72:ad:12: 29:f7:46:bf:97:c3:f1:22:4f:40:6d:a0:0f:f6:7d:10:fd:e9: 72:39:67:10:75:ca:b0:68:b8:65:98:12:5b:d3:22:12:ec:a6: 2a:33:6b:3f:fa:08:f3:95:00:14:81:62:23:8d:d7:91:62:0a: d4:47:c4:aa:b4:9b:e2:dc:f4:42:64:c8:bb:ec:4a:47:cd:4b: 34:ce:6b:56:3e:d8:92:dd:c3:e6:17:13:19:11:80:b0:40:d1: 8b:83:dd:5e:16:b8:f7:75:0a:43:f3:05:29:20:10:b0:7b:54: 4b:da:2b:f5:a5:b2:d0:07:74:26:07:a1:2d:fb:d2:ed:1d:0c: ff:e8:d1:15:82:0b:43:ee:5b:f3:1c:00:3d:4c:af:c8:44:1b: 0c:34:5d:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqj9hpS6zX96sxXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI0MTIxMTAyMDAzOFoXDTI1MDMxMTAxMDAzOFowLzEtMCsGA1UEAxMk NTIyZDUzZTYtN2NjMy00MTQ5LWI5MWYtOGQ0MGQ0YTgyMTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQzfismqBp7ViE8QTDTuAw6PqKiO+62L0F0+ bavabArxR5SUjpnYSX9SIgBSEeF9ppFHyqzfIE21reH2avgx2/E3v67NrcEEuwnH kgyKR0tVUftAUDDpAUlzCHo6bOhigbfWqR2tv+C7SBfdeymHVFnPU2GgbmWTNwOY q55uY3BrtzmrBa12eIcbUZ2qRq1LP80cCq9QKc2cGPnWc8HocZOCt9sfQLMLFK3f v6rpapmtgUUHSY0UIgTMVeviLm9b4WygKQ7ER/767QbMbj0EDnY9hcR89JfSiWRK 8nm0sOzTOj5uoX4tfwr2gxHeDcX2YDTRYuapoEFMAu3oE29/JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCiCIB2P/ARzkgVYhsA2XQhPM0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvOGJjODk4NmEtYWMyNi0z MzllLThjZjktNDIzZTA4NWRlZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQDGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc0nDIpNHNGeMWodAlv3ltwIDdhuVYHjwdpJN0Ds67GqNxOi/Qd7TNW H1PQzkXvOK+0wPfZbvjVO7BRiwwO9R7/ecRFdeCrqjG7jBv8aVjPCrAeiqJSS3Tn BmQeqsxt+0fNODCm1KOmj3KtEin3Rr+Xw/EiT0BtoA/2fRD96XI5ZxB1yrBouGWY ElvTIhLspiozaz/6CPOVABSBYiON15FiCtRHxKq0m+Lc9EJkyLvsSkfNSzTOa1Y+ 2JLdw+YXExkRgLBA0YuD3V4WuPd1CkPzBSkgELB7VEvaK/WlstAHdCYHoS370u0d DP/o0RWCC0PuW/McAD1Mr8hEGww0Xfw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:55 2025 by rpki-client