$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7be8111d-0e20-386d-8dfb-2135cf16f86d.roa File: 7be8111d-0e20-386d-8dfb-2135cf16f86d.roa (raw, json) Hash identifier: ebPw02fIppk+Jx42QP85PRiziu+qH/D/Wurcmv6vZKg= Subject key identifier: 31:22:7D:E7:57:63:10:64:91:3D:0C:75:70:B9:96:24:74:EC:B3:8E Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858485CD02E6DC52F2C2055179820 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7be8111d-0e20-386d-8dfb-2135cf16f86d.roa Signing time: Sun 29 Dec 2024 02:00:39 +0000 ROA not before: Sun 29 Dec 2024 02:00:39 +0000 ROA not after: Sat 29 Mar 2025 01:00:39 +0000 asID: 15204 IP address blocks: 216.106.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5c:d0:2e:6d:c5:2f:2c:20:55:17:98:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 29 02:00:39 2024 GMT Not After : Mar 29 01:00:39 2025 GMT Subject: CN=72857a4f-ea96-4aca-bbf1-82b00e5200b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:64:a5:33:d9:be:58:b8:25:4c:e4:66:f1:a5: ab:04:37:e0:cb:e6:2f:d2:7c:cc:9c:fb:d0:77:db: 23:27:2c:df:45:60:1f:dc:f1:47:1a:e5:e7:07:df: 70:e2:79:8a:ed:39:06:8d:8b:54:df:67:cf:dd:e4: ac:b3:97:14:4a:ce:66:a9:5f:cd:ab:c2:04:49:87: 3d:56:b6:de:67:12:99:e4:6b:1e:5f:2c:b3:8d:25: 00:bd:b5:78:b2:db:56:53:d6:49:9c:d8:35:37:de: 73:f6:58:f5:e9:3f:98:f2:3f:d3:7b:6f:3c:b7:85: 77:33:ad:69:99:54:c5:82:33:44:1c:b4:99:b3:d7: 1c:0b:15:70:f1:12:84:69:24:f3:b5:38:42:12:5e: 49:48:01:50:89:24:9b:d5:38:99:ff:3f:9f:59:23: 06:ef:db:c2:0c:2d:6c:2a:f6:d6:3f:76:0c:68:2f: b8:63:1d:91:23:59:0f:8d:a4:12:af:78:89:ed:82: d4:a8:fb:e9:c9:2c:da:55:c5:c9:f3:35:96:b7:c5: bd:c6:31:06:4a:38:07:07:c8:6e:6d:ec:e8:6f:fc: 85:0c:ab:64:37:23:42:76:9f:bf:18:58:a6:7d:c4: 48:cb:1a:ea:19:83:f0:f0:3d:9c:02:c8:b0:7a:39: 42:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:22:7D:E7:57:63:10:64:91:3D:0C:75:70:B9:96:24:74:EC:B3:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7be8111d-0e20-386d-8dfb-2135cf16f86d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b7:28:92:0a:c5:03:d8:71:56:0c:32:95:9c:1c:5e:c3:ec: 71:23:fd:5e:89:f1:f8:b7:95:c9:69:b0:bc:2a:81:28:32:20: a7:58:62:dc:1e:5e:af:7d:b7:98:ac:0c:9e:b8:b4:1f:61:2b: bd:31:9b:eb:d2:10:5c:46:8b:f8:77:d6:c9:23:31:5e:cc:fc: 73:27:c3:d6:23:52:63:90:7d:0b:c9:b6:43:50:42:74:4c:04: 3a:d5:10:40:93:cf:73:ad:36:c7:a0:d2:f4:c1:5e:17:2b:a6: 92:b5:85:57:2b:84:14:ea:85:03:8f:7e:7f:9e:e7:19:f4:1b: cf:70:c1:78:ce:ad:bc:80:a5:3c:73:47:b0:f8:78:5e:71:fa: fe:d9:a2:35:d5:59:83:02:8c:c9:7d:84:21:e7:fc:a5:c1:84: 15:78:da:36:d5:39:61:85:07:a3:67:0b:3e:39:6e:e1:52:95: 8d:3e:e0:0c:88:d7:a7:ea:96:1e:e4:e9:9c:67:5f:af:40:d0: 51:02:3a:bc:6d:29:1d:d5:b1:a2:17:24:80:be:bf:b4:84:e9: 53:3d:d2:59:a1:09:95:9f:16:45:3a:7d:39:4b:f3:ac:75:b7: cf:07:f6:a7:80:26:d1:62:1c:b0:e4:2f:7e:c7:2d:90:28:82: 92:19:03:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0C5txS8sIFUXmCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk NzI4NTdhNGYtZWE5Ni00YWNhLWJiZjEtODJiMDBlNTIwMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mSlM9m+WLglTORm8aWrBDfgy+Yv0nzMnPvQ d9sjJyzfRWAf3PFHGuXnB99w4nmK7TkGjYtU32fP3eSss5cUSs5mqV/Nq8IESYc9 VrbeZxKZ5GseXyyzjSUAvbV4sttWU9ZJnNg1N95z9lj16T+Y8j/Te288t4V3M61p mVTFgjNEHLSZs9ccCxVw8RKEaSTztThCEl5JSAFQiSSb1TiZ/z+fWSMG79vCDC1s KvbWP3YMaC+4Yx2RI1kPjaQSr3iJ7YLUqPvpySzaVcXJ8zWWt8W9xjEGSjgHB8hu bezob/yFDKtkNyNCdp+/GFimfcRIyxrqGYPw8D2cAsiwejlCbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEifedXYxBkkT0MdXC5liR07LOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvN2JlODExMWQtMGUyMC0z ODZkLThkZmItMjEzNWNmMTZmODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2GrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW3KJIKxQPYcVYMMpWcHF7D7HEj/V6J8fi3lclpsLwqgSgyIKdYYtwe Xq99t5isDJ64tB9hK70xm+vSEFxGi/h31skjMV7M/HMnw9YjUmOQfQvJtkNQQnRM BDrVEECTz3OtNseg0vTBXhcrppK1hVcrhBTqhQOPfn+e5xn0G89wwXjOrbyApTxz R7D4eF5x+v7ZojXVWYMCjMl9hCHn/KXBhBV42jbVOWGFB6NnCz45buFSlY0+4AyI 16fqlh7k6ZxnX69A0FECOrxtKR3VsaIXJIC+v7SE6VM90lmhCZWfFkU6fTlL86x1 t88H9qeAJtFiHLDkL37HLZAogpIZA/I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:26 2025 by rpki-client