$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/20508438-3f62-3e58-a0ad-1794d09922eb.roa File: 20508438-3f62-3e58-a0ad-1794d09922eb.roa (raw, json) Hash identifier: LbFAW35pt77GTEDQ1rIx7wK0MY9ZbhA3kmyDenVMrgo= Subject key identifier: 66:3A:27:A4:B4:35:47:96:E2:61:76:43:0D:CC:6B:D2:CC:26:15:65 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285848467ABE3DDCE65C2936BC2E80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/20508438-3f62-3e58-a0ad-1794d09922eb.roa Signing time: Sat 21 Dec 2024 02:00:39 +0000 ROA not before: Sat 21 Dec 2024 02:00:39 +0000 ROA not after: Fri 21 Mar 2025 01:00:39 +0000 asID: 13576 IP address blocks: 208.53.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:46:7a:be:3d:dc:e6:5c:29:36:bc:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 21 02:00:39 2024 GMT Not After : Mar 21 01:00:39 2025 GMT Subject: CN=29f594f4-c3fb-4ea7-b35b-2fce1bdc453d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b0:b1:ed:7b:5b:35:a2:f6:4d:7c:80:9a:fc: 1e:20:3a:f2:fe:c6:13:d4:17:2a:2f:e4:c2:0c:ae: 02:1b:ef:c2:2b:62:5b:21:6a:05:a6:e4:d6:87:b0: b5:74:c4:ce:7d:3f:55:0b:5b:c2:c0:cc:21:73:7d: 63:03:30:a6:5f:f0:d9:c2:cc:c3:25:e3:a8:35:13: ff:fc:4b:96:ff:19:ed:5e:80:c3:dc:bd:eb:97:f2: 1e:3c:11:ef:cb:de:66:c2:88:92:bc:88:c5:64:60: aa:91:64:47:ef:09:6c:10:21:d0:fc:f8:ac:1f:df: 30:9e:b1:50:ae:11:0c:ac:97:22:4a:61:ed:94:5f: 51:c5:ab:e3:35:cd:77:d8:54:f2:e2:96:30:7e:97: 63:fc:c5:f3:73:9b:8d:c7:a2:b6:bc:00:84:75:74: e2:20:54:28:17:fe:1b:02:13:c6:85:67:ea:eb:4e: ca:17:9b:27:93:6b:a9:fe:e0:80:6e:3c:84:aa:e7: 06:1e:44:fb:44:c2:c6:a7:cd:4d:60:0b:1c:02:38: dc:1f:eb:e3:e7:03:db:f8:8e:0e:73:61:47:0a:01: ba:e4:c7:6c:3d:99:f1:73:84:bb:0f:d0:9b:7d:53: c5:99:bf:6d:a8:76:00:3b:b9:b5:a3:17:26:e5:6a: f8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3A:27:A4:B4:35:47:96:E2:61:76:43:0D:CC:6B:D2:CC:26:15:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/20508438-3f62-3e58-a0ad-1794d09922eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e0:c9:d8:b7:07:7b:4f:17:19:ad:e6:49:0b:5b:97:29:12: 25:d5:95:e8:63:d2:d2:e7:3c:bf:93:85:b4:41:ca:53:18:4f: 71:fc:9a:59:bf:55:a5:6d:98:4b:ba:ae:4b:6d:a9:76:9a:13: a8:7a:06:eb:c9:7a:81:fb:4c:06:b1:01:32:cd:a2:8e:87:ba: 0d:35:b2:80:80:5e:45:ad:fe:ca:b4:e6:98:68:9b:6d:8d:c6: 7d:e3:2e:cf:f5:27:d5:60:33:60:7f:f1:47:1a:b0:8b:d6:12: 1d:34:85:e3:92:4d:c9:14:96:75:09:6e:cb:a9:d1:e1:ac:08: 52:de:76:27:a7:31:13:8e:dd:cb:a9:6a:e5:42:2b:51:0a:77: c0:e5:ad:b7:39:8b:8b:24:33:72:95:fc:76:4e:aa:3e:ef:c9: 44:70:56:c1:78:32:05:02:06:fd:a4:c2:e7:55:71:c0:79:e1: b9:0f:88:e8:e1:a1:88:2f:5a:14:26:49:f8:a1:d2:26:28:4f: 1e:6f:88:88:29:22:f5:33:dc:6c:56:9e:b5:21:b8:1f:72:e2: 19:2a:e1:b9:78:9e:0a:25:42:6b:3a:1e:89:b8:bb:b2:c8:fd: c2:c8:51:bc:ee:55:64:58:11:92:05:aa:2d:7e:94:ba:c2:7c: 2d:4a:a9:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGer493OZcKTa8LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk MjlmNTk0ZjQtYzNmYi00ZWE3LWIzNWItMmZjZTFiZGM0NTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrCx7XtbNaL2TXyAmvweIDry/sYT1BcqL+TC DK4CG+/CK2JbIWoFpuTWh7C1dMTOfT9VC1vCwMwhc31jAzCmX/DZwszDJeOoNRP/ /EuW/xntXoDD3L3rl/IePBHvy95mwoiSvIjFZGCqkWRH7wlsECHQ/PisH98wnrFQ rhEMrJciSmHtlF9RxavjNc132FTy4pYwfpdj/MXzc5uNx6K2vACEdXTiIFQoF/4b AhPGhWfq607KF5snk2up/uCAbjyEqucGHkT7RMLGp81NYAscAjjcH+vj5wPb+I4O c2FHCgG65MdsPZnxc4S7D9CbfVPFmb9tqHYAO7m1oxcm5Wr4dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGY6J6S0NUeW4mF2Qw3Ma9LMJhVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMjA1MDg0MzgtM2Y2Mi0z ZTU4LWEwYWQtMTc5NGQwOTkyMmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0DXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrgydi3B3tPFxmt5kkLW5cpEiXVlehj0tLnPL+ThbRBylMYT3H8mlm/ VaVtmEu6rkttqXaaE6h6BuvJeoH7TAaxATLNoo6Hug01soCAXkWt/sq05phom22N xn3jLs/1J9VgM2B/8UcasIvWEh00heOSTckUlnUJbsup0eGsCFLedienMROO3cup auVCK1EKd8Dlrbc5i4skM3KV/HZOqj7vyURwVsF4MgUCBv2kwudVccB54bkPiOjh oYgvWhQmSfih0iYoTx5viIgpIvUz3GxWnrUhuB9y4hkq4bl4ngolQms6Hom4u7LI /cLIUbzuVWRYEZIFqi1+lLrCfC1Kqfg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:47 2025 by rpki-client