$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/dce5c758-03d9-3603-a303-530c88930fa0.roa File: dce5c758-03d9-3603-a303-530c88930fa0.roa (raw, json) Hash identifier: vigbIP7merpObAUdjW19vUXfr3/XIK2q1ocYUlvnBf8= Subject key identifier: 68:FF:D2:74:61:BD:26:B1:D1:CA:72:3C:C2:55:BF:5E:77:DD:27:47 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F432858482BF54BBC3F9490FF5D69ED80 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/dce5c758-03d9-3603-a303-530c88930fa0.roa Signing time: Wed 11 Dec 2024 14:00:52 +0000 ROA not before: Wed 11 Dec 2024 14:00:52 +0000 ROA not after: Tue 11 Mar 2025 13:00:52 +0000 asID: 11300 IP address blocks: 64.49.152.0/24 maxlen: 25 207.241.180.0/24 maxlen: 25 207.241.181.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2b:f5:4b:bc:3f:94:90:ff:5d:69:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Dec 11 14:00:52 2024 GMT Not After : Mar 11 13:00:52 2025 GMT Subject: CN=b63ffbee-3b7f-4dd1-8c70-4bcd5b3bcf47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:69:f5:14:27:8e:56:8a:84:79:ba:1b:e1: da:dd:13:32:1b:cd:ba:d3:cd:43:1e:d0:ea:23:51: bf:af:6a:46:ae:91:bc:5b:64:6c:98:5c:36:3c:75: bb:26:02:bc:38:79:91:ea:45:2a:1f:43:06:49:0b: 45:79:88:6b:b3:50:e0:b8:ee:e1:c7:99:e9:80:e2: fe:58:cf:48:72:57:f7:22:db:ac:58:9b:f8:08:06: c6:30:96:11:60:5b:08:fc:a4:da:7f:f4:1f:d0:e1: 4d:ac:e0:c8:fa:b2:c8:b6:82:5d:f8:4d:32:98:5f: 50:a8:2a:e6:a3:59:54:62:a2:e5:d0:1a:8e:f5:32: ca:e5:d6:65:e1:35:4d:d9:c5:37:e5:ea:73:90:ea: 28:e4:d4:29:8d:57:a6:8e:2e:6a:9a:f1:3b:89:97: 2c:a3:e0:02:95:62:76:b6:f6:e6:48:aa:a3:5a:6c: 6f:28:bb:54:76:87:33:72:cd:16:59:16:6a:1a:6e: 00:51:e9:5d:e6:61:36:d9:f1:f4:48:ef:5c:72:cf: 5a:a2:f3:25:83:e9:d0:bb:62:91:75:d8:a0:46:81: 12:e6:08:cc:2a:53:42:78:6e:46:89:75:63:ff:43: ee:05:f4:43:0d:c5:ea:81:e4:93:d7:47:78:6f:23: 3d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FF:D2:74:61:BD:26:B1:D1:CA:72:3C:C2:55:BF:5E:77:DD:27:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/dce5c758-03d9-3603-a303-530c88930fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.152.0/24 207.241.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:44:28:fa:fa:21:cb:7a:ab:cb:f0:fb:f8:58:77:e9:0f:25: 96:70:a6:97:e0:5c:3e:ff:6f:36:e5:96:0f:87:a3:b1:d1:42: 3d:d9:06:96:99:93:37:3d:0b:78:2f:d7:56:6e:10:a1:93:d4: 3e:2c:ad:0e:56:71:46:15:25:6e:cc:ad:c6:a3:59:d0:14:0f: 3a:08:fa:e3:0b:11:89:62:db:75:2a:2d:0d:08:b2:f7:f3:0b: 3d:1a:73:ea:dd:0a:9a:67:3c:1d:1d:cb:7e:98:dc:16:3e:d6: b7:73:d5:f2:71:14:06:51:f0:bc:a9:a0:b7:5f:b0:12:78:bc: 4b:4c:91:21:84:15:0b:56:1b:56:d8:8b:ec:55:ac:53:9b:9e: 88:57:0f:ce:04:23:cd:00:ae:59:93:13:1a:a2:87:bc:b6:69: 44:57:98:2f:c7:95:c0:53:3f:5e:bb:f1:47:5d:2a:3e:bb:6f: f5:71:0c:9b:fd:54:e8:ed:55:76:4e:ef:96:aa:5b:1b:9a:2f: b0:06:3a:d5:a5:49:5b:48:95:a1:a3:cb:4a:73:9d:0e:ae:23: 5d:24:0d:88:e2:ec:2e:fb:b3:3c:04:07:56:25:2a:24:9a:d9: bb:a8:88:b2:69:b8:47:8a:43:fc:b1:87:1e:31:ac:2b:c3:0c: d2:0f:78:2c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgr9Uu8P5SQ/11p7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjYzZmZiZWUtM2I3Zi00ZGQxLThjNzAtNGJjZDViM2JjZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLJp9RQnjlaKhHm6G+Ha3RMyG826081DHtDq I1G/r2pGrpG8W2RsmFw2PHW7JgK8OHmR6kUqH0MGSQtFeYhrs1DguO7hx5npgOL+ WM9Iclf3ItusWJv4CAbGMJYRYFsI/KTaf/Qf0OFNrODI+rLItoJd+E0ymF9QqCrm o1lUYqLl0BqO9TLK5dZl4TVN2cU35epzkOoo5NQpjVemji5qmvE7iZcso+AClWJ2 tvbmSKqjWmxvKLtUdoczcs0WWRZqGm4AUeld5mE22fH0SO9ccs9aovMlg+nQu2KR ddigRoES5gjMKlNCeG5GiXVj/0PuBfRDDcXqgeST10d4byM9EwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGj/0nRhvSax0cpyPMJVv1533SdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvZGNlNWM3NTgtMDNkOS0z NjAzLWEzMDMtNTMwYzg4OTMwZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQDGYAwQB z/G0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABpEKPr6Ict6q8vw+/hYd+kPJZZwppfgXD7/bzbllg+Ho7HR Qj3ZBpaZkzc9C3gv11ZuEKGT1D4srQ5WcUYVJW7MrcajWdAUDzoI+uMLEYli23Uq LQ0IsvfzCz0ac+rdCppnPB0dy36Y3BY+1rdz1fJxFAZR8LypoLdfsBJ4vEtMkSGE FQtWG1bYi+xVrFObnohXD84EI80ArlmTExqih7y2aURXmC/HlcBTP1678UddKj67 b/VxDJv9VOjtVXZO75aqWxuaL7AGOtWlSVtIlaGjy0pznQ6uI10kDYji7C77szwE B1YlKiSa2buoiLJpuEeKQ/yxhx4xrCvDDNIPeCw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:33 2025 by rpki-client