$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/bc0e3de6-82d3-318a-ad9b-d14e2f338d16.roa File: bc0e3de6-82d3-318a-ad9b-d14e2f338d16.roa (raw, json) Hash identifier: ihIqWelhKrOSk0BtfTghIQdsbtAjeiq44SVBI3mQXzI= Subject key identifier: 2D:FA:04:98:2E:29:49:89:9A:92:3A:75:4E:7D:9C:58:E0:28:22:86 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F43285848090FAF2CE1D96E27237EF160 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/bc0e3de6-82d3-318a-ad9b-d14e2f338d16.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 22742 IP address blocks: 67.218.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:af:2c:e1:d9:6e:27:23:7e:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=42315ff8-cdaa-4848-bcc2-0a6ae144c879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9d:ea:b1:f6:76:b0:12:a4:25:25:bb:19:6a: dd:0a:18:5b:e5:ff:47:f2:c6:a2:40:e6:e4:24:26: 01:b9:16:15:8d:62:72:87:87:eb:20:81:ff:55:42: f5:85:c7:af:e8:39:92:69:24:4c:29:17:95:4a:30: a9:a0:48:0f:4f:ab:b2:b9:56:46:a8:9a:7d:a8:bd: c2:9b:68:c9:9c:97:36:97:c3:c5:bf:dc:32:69:db: 00:0a:47:a2:f0:5a:48:a3:d9:a6:e3:4d:df:02:aa: 70:18:a2:ef:5b:08:e5:84:7a:80:60:97:b9:5c:a2: ba:ad:52:02:47:57:02:48:be:37:5d:41:df:76:a7: dc:31:42:51:cb:c1:58:d5:31:0c:a6:06:f2:ca:e0: a9:0e:59:28:fa:1a:d3:c3:fd:5f:d6:02:7e:ba:d0: 56:ba:8a:12:38:fc:04:d7:4a:ea:71:11:a5:5f:ae: 19:e1:76:d4:32:ed:8b:60:8a:33:88:0a:e8:41:9a: 04:cc:76:00:99:40:56:c7:bb:00:01:f5:ea:e4:b5: 9a:e8:4e:3e:dd:43:c6:ef:81:43:2c:14:c6:28:e2: 9a:0a:82:63:2d:25:16:cd:92:20:86:7c:5d:86:d2: 23:02:bb:a4:07:a2:0d:6d:b7:76:8f:ce:bb:a7:4e: 65:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FA:04:98:2E:29:49:89:9A:92:3A:75:4E:7D:9C:58:E0:28:22:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/bc0e3de6-82d3-318a-ad9b-d14e2f338d16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 67.218.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:17:2a:db:f6:49:96:af:5d:bb:12:0e:d0:0b:3a:42:13:60: ae:61:0b:6a:9f:8a:91:a3:21:df:b5:08:85:eb:14:c5:cb:07: ec:ba:f3:aa:0b:9f:a1:91:11:43:41:7e:b9:6c:44:56:05:34: 65:40:fb:85:9b:ae:86:b9:ee:7f:55:f7:ba:78:3f:ef:a5:6d: 28:2d:7b:b3:96:10:c5:5a:b3:b2:81:2e:d5:7d:a6:2c:a6:ee: b6:c9:69:58:88:7f:74:ad:ee:a8:b3:5d:7e:88:75:a6:6e:52: a4:c5:f5:fe:d8:75:40:70:2b:ae:8d:4a:fe:39:f4:32:b9:01: 25:10:25:b0:ed:7c:44:0f:d1:83:b5:06:7d:8d:fd:b3:f1:3f: 75:2a:22:c1:fd:cf:3d:c1:1c:e2:e7:db:ed:de:a3:7e:a1:76: e8:dc:4c:97:c6:dd:3d:2a:3a:af:a8:9f:e5:9b:45:a7:e4:e1: df:c3:46:53:7e:4c:23:d8:d7:78:95:56:48:a7:95:45:14:e8: 7c:1d:17:4b:51:ea:51:e0:74:8b:a6:2b:ca:f4:41:39:fb:9a: ee:2a:30:ab:41:e5:cb:44:a3:0e:65:50:79:e6:e1:f8:ec:f9: e2:3c:9a:3e:9f:d2:6c:ff:07:40:21:b2:c9:a1:aa:76:df:49: 17:ad:e5:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD68s4dluJyN+8WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk NDIzMTVmZjgtY2RhYS00ODQ4LWJjYzItMGE2YWUxNDRjODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ3qsfZ2sBKkJSW7GWrdChhb5f9H8saiQObk JCYBuRYVjWJyh4frIIH/VUL1hcev6DmSaSRMKReVSjCpoEgPT6uyuVZGqJp9qL3C m2jJnJc2l8PFv9wyadsACkei8FpIo9mm403fAqpwGKLvWwjlhHqAYJe5XKK6rVIC R1cCSL43XUHfdqfcMUJRy8FY1TEMpgbyyuCpDlko+hrTw/1f1gJ+utBWuooSOPwE 10rqcRGlX64Z4XbUMu2LYIoziAroQZoEzHYAmUBWx7sAAfXq5LWa6E4+3UPG74FD LBTGKOKaCoJjLSUWzZIghnxdhtIjArukB6INbbd2j867p05l4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC36BJguKUmJmpI6dU59nFjgKCKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYmMwZTNkZTYtODJkMy0z MThhLWFkOWItZDE0ZTJmMzM4ZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9pQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4XKtv2SZavXbsSDtALOkITYK5hC2qfipGjId+1CIXrFMXLB+y686oL n6GREUNBfrlsRFYFNGVA+4Wbroa57n9V97p4P++lbSgte7OWEMVas7KBLtV9piym 7rbJaViIf3St7qizXX6IdaZuUqTF9f7YdUBwK66NSv459DK5ASUQJbDtfEQP0YO1 Bn2N/bPxP3UqIsH9zz3BHOLn2+3eo36hdujcTJfG3T0qOq+on+WbRafk4d/DRlN+ TCPY13iVVkinlUUU6HwdF0tR6lHgdIumK8r0QTn7mu4qMKtB5ctEow5lUHnm4fjs +eI8mj6f0mz/B0AhssmhqnbfSRet5RE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:13 2025 by rpki-client