$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d4560c96-ab1c-3af7-87ad-4027d8751f66.roa File: d4560c96-ab1c-3af7-87ad-4027d8751f66.roa (raw, json) Hash identifier: f9WkqN18CFKcPkcK2C8pxDpoxuoPCo+RCXXL7uMk4CI= Subject key identifier: 08:2B:00:56:49:FA:FB:42:AD:EE:84:2C:B6:A2:18:F8:AF:5F:37:74 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584855D59E4D868F1BDCC533EF00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d4560c96-ab1c-3af7-87ad-4027d8751f66.roa Signing time: Thu 26 Dec 2024 14:00:52 +0000 ROA not before: Thu 26 Dec 2024 14:00:52 +0000 ROA not after: Wed 26 Mar 2025 13:00:52 +0000 asID: 13576 IP address blocks: 216.249.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:55:d5:9e:4d:86:8f:1b:dc:c5:33:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 26 14:00:52 2024 GMT Not After : Mar 26 13:00:52 2025 GMT Subject: CN=e3d6e1ba-eb2d-4ae9-b786-0eafa680374c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a5:1d:af:14:4f:5c:b5:52:8c:5e:10:80:d8: 87:e1:7c:44:06:95:3c:a5:7e:09:5a:4b:98:c4:79: 3e:92:1f:ef:a1:43:85:c2:0a:84:4d:5c:31:fd:54: e0:55:8f:b5:53:7d:05:21:98:92:50:98:61:5a:61: 0c:0b:14:da:6b:00:fd:94:99:aa:2d:fa:08:22:eb: da:bd:5d:47:b1:57:de:d2:21:25:af:a8:e6:cc:5e: bf:fa:26:27:f3:c4:95:b8:a5:0d:c6:c0:98:49:0a: 0d:63:d9:2d:38:43:c7:f3:1d:22:6d:42:41:09:d3: 90:05:22:09:4d:80:ea:27:d5:8c:f6:ad:f7:63:16: 72:3f:e2:89:d7:a9:b4:14:46:ef:76:23:db:8b:2c: bc:43:24:cf:5e:4e:27:23:1c:dd:d5:c0:22:8c:0c: e3:24:37:6d:b5:1e:2c:99:98:eb:e1:9d:3a:84:5a: f3:bf:0d:8c:cd:96:ae:61:d9:30:15:b5:2e:db:b0: c3:d6:79:db:fb:19:c6:78:20:5b:bf:b0:89:6e:b7: 43:3f:1b:bd:57:fc:e6:20:0f:97:e7:b8:1b:cd:6a: 39:a4:40:07:bb:1a:c4:d1:03:54:6d:c9:cf:86:38: d6:04:b9:5e:30:ea:22:8b:0c:d6:40:a8:ef:c2:f5: a1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2B:00:56:49:FA:FB:42:AD:EE:84:2C:B6:A2:18:F8:AF:5F:37:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d4560c96-ab1c-3af7-87ad-4027d8751f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9a:13:53:d7:54:1e:66:d1:77:93:23:3f:6a:21:78:b9:cd: 01:ff:28:68:ae:88:bb:7c:6b:7c:53:1e:6a:bb:f0:4a:1f:35: ca:ab:a3:f4:9a:65:66:59:fd:46:1b:90:c7:b2:72:d2:c2:88: 7c:90:09:09:a5:13:23:14:bd:67:13:45:61:e5:f6:9c:39:4d: 86:82:85:4c:fc:4c:51:22:79:5f:a1:24:e8:26:28:f3:f8:a7: 12:82:0a:74:2e:34:3e:ff:48:a8:06:ce:74:bd:7e:30:5a:4b: af:ed:cc:4c:3f:a9:c6:a9:ea:09:31:36:d9:d2:50:58:10:f0: 37:9a:7e:41:c0:82:31:3c:fd:1f:3f:73:9a:f4:06:34:a1:ea: f3:eb:5f:bb:ee:f5:94:e6:b9:b7:ce:a0:77:5d:ba:72:e3:13: 3e:b9:ca:a7:98:a0:e6:f4:e0:0a:ef:64:d6:63:2f:33:8b:06: dd:da:4e:9f:d4:56:80:cd:42:a8:41:7f:0b:f5:a8:1a:9c:18: f9:80:af:ec:e9:42:cd:29:cb:72:82:96:7d:29:49:84:73:16: 2f:8c:74:42:47:7f:e2:2f:02:03:7e:e8:59:f7:14:29:8b:6d: 25:7f:d7:83:6f:85:05:85:40:d7:e0:bc:f9:f0:34:68:04:fd: 3a:60:3a:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1Z5Nho8b3MUz7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZTNkNmUxYmEtZWIyZC00YWU5LWI3ODYtMGVhZmE2ODAzNzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaUdrxRPXLVSjF4QgNiH4XxEBpU8pX4JWkuY xHk+kh/voUOFwgqETVwx/VTgVY+1U30FIZiSUJhhWmEMCxTaawD9lJmqLfoIIuva vV1HsVfe0iElr6jmzF6/+iYn88SVuKUNxsCYSQoNY9ktOEPH8x0ibUJBCdOQBSIJ TYDqJ9WM9q33YxZyP+KJ16m0FEbvdiPbiyy8QyTPXk4nIxzd1cAijAzjJDdttR4s mZjr4Z06hFrzvw2MzZauYdkwFbUu27DD1nnb+xnGeCBbv7CJbrdDPxu9V/zmIA+X 57gbzWo5pEAHuxrE0QNUbcnPhjjWBLleMOoiiwzWQKjvwvWhLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgrAFZJ+vtCre6ELLaiGPivXzd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZDQ1NjBjOTYtYWIxYy0z YWY3LTg3YWQtNDAyN2Q4NzUxZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2PnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmaE1PXVB5m0XeTIz9qIXi5zQH/KGiuiLt8a3xTHmq78EofNcqro/Sa ZWZZ/UYbkMeyctLCiHyQCQmlEyMUvWcTRWHl9pw5TYaChUz8TFEieV+hJOgmKPP4 pxKCCnQuND7/SKgGznS9fjBaS6/tzEw/qcap6gkxNtnSUFgQ8DeafkHAgjE8/R8/ c5r0BjSh6vPrX7vu9ZTmubfOoHddunLjEz65yqeYoOb04ArvZNZjLzOLBt3aTp/U VoDNQqhBfwv1qBqcGPmAr+zpQs0py3KCln0pSYRzFi+MdEJHf+IvAgN+6Fn3FCmL bSV/14NvhQWFQNfgvPnwNGgE/TpgOh4= -----END CERTIFICATE-----Generated at Fri Mar 14 10:17:41 2025 by rpki-client