$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/de5a1111-524c-34ad-ac5d-56928886b100.roa File: de5a1111-524c-34ad-ac5d-56928886b100.roa (raw, json) Hash identifier: ntZVUyk2dlRZ5BpuBCPaaZV2vfNj80fYaxp9xO7CMT8= Subject key identifier: 90:7C:32:34:C4:72:C0:3C:D1:A6:0F:05:8A:66:F7:D2:25:48:A2:ED Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584854702F0D0A4166749126CE00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/de5a1111-524c-34ad-ac5d-56928886b100.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 13576 IP address blocks: 216.106.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:2f:0d:0a:41:66:74:91:26:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=44bd216e-1a8d-4f34-9c4a-e12591f6669a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:94:63:3b:0f:d6:bd:ad:1b:c0:3c:9a:59:01: 24:e3:bc:4b:51:b6:f1:20:39:fa:fc:b1:b8:21:04: 10:0b:13:1a:49:56:91:ec:52:26:28:9e:a2:33:4a: 78:3f:5e:51:58:1d:fa:7a:1a:d1:5c:e6:de:60:09: c9:07:fe:f2:0c:43:cd:75:06:9d:56:15:a4:13:ed: ed:0e:9b:b2:38:e9:4d:be:35:33:f3:78:6f:a9:f5: ec:00:cc:44:15:71:5f:1a:d5:3a:a7:c1:de:57:84: bd:ed:eb:9c:44:41:b5:04:15:f0:6a:0f:32:9c:27: 79:8c:1a:4b:63:26:7d:dd:a7:7e:1b:90:e2:12:b7: 54:38:ff:5c:0d:a2:28:45:93:e0:fc:c5:c4:b6:5d: 86:76:49:c9:ee:ac:79:9c:59:41:17:7c:87:a1:2c: 04:fa:7b:15:8f:05:c6:99:76:36:22:3d:37:3b:9f: 7d:35:3d:11:2e:55:e3:f4:7f:7c:5d:64:c0:1d:7f: f4:be:b8:30:f2:0a:32:55:ae:9b:a5:26:86:3e:5f: 32:b8:70:53:37:f6:c8:bf:27:6d:e9:04:98:90:4c: d5:d6:82:17:79:30:73:a8:45:5f:67:7b:d0:00:bf: b2:70:93:02:fe:46:bf:c4:27:fe:a8:80:9d:81:66: 69:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7C:32:34:C4:72:C0:3C:D1:A6:0F:05:8A:66:F7:D2:25:48:A2:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/de5a1111-524c-34ad-ac5d-56928886b100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e1:c0:97:b7:16:9b:2c:2a:a9:de:48:6c:02:28:6b:38:ed: d7:7a:2a:0e:d2:a5:b8:88:47:90:57:df:a7:e1:54:30:aa:bf: de:85:8d:13:5d:92:2f:4b:bb:09:a9:8a:05:30:08:15:52:a4: 2a:bc:9c:f7:77:03:fe:6e:1f:70:1b:6e:36:3a:a5:fd:68:54: 12:23:d1:fe:59:b5:ce:f8:14:d8:20:24:1c:b2:44:b9:98:5d: a5:eb:e4:ba:eb:97:97:ac:fa:eb:66:23:24:bd:3c:7a:c7:bb: 8e:7f:89:90:30:57:56:8d:48:d8:b5:4c:f1:90:0b:c6:7f:f4: e1:f4:a7:4b:f4:61:27:ed:3f:88:47:1d:18:1d:69:cb:5e:3f: 41:e2:c6:e5:15:7c:a1:2f:a0:c5:33:77:36:f9:3a:a7:d0:4d: 07:58:e1:ed:97:06:41:bb:b6:62:8c:95:3e:b1:b8:6f:7d:89: c2:68:7b:0b:5a:1d:6a:96:a7:4c:bc:b9:d2:c0:7c:d5:81:90: 87:8f:a7:ff:d5:f1:22:d3:15:f7:5c:cc:b7:5b:7f:a1:53:fa: c0:74:d7:06:d6:ed:b9:48:80:28:4a:e5:d1:79:28:d1:6e:a2: f9:6c:fc:28:49:50:f5:5f:d0:0f:4b:99:00:2a:72:4e:3d:18: 9e:2f:53:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcC8NCkFmdJEmzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk NDRiZDIxNmUtMWE4ZC00ZjM0LTljNGEtZTEyNTkxZjY2NjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJRjOw/Wva0bwDyaWQEk47xLUbbxIDn6/LG4 IQQQCxMaSVaR7FImKJ6iM0p4P15RWB36ehrRXObeYAnJB/7yDEPNdQadVhWkE+3t DpuyOOlNvjUz83hvqfXsAMxEFXFfGtU6p8HeV4S97eucREG1BBXwag8ynCd5jBpL YyZ93ad+G5DiErdUOP9cDaIoRZPg/MXEtl2GdknJ7qx5nFlBF3yHoSwE+nsVjwXG mXY2Ij03O599NT0RLlXj9H98XWTAHX/0vrgw8goyVa6bpSaGPl8yuHBTN/bIvydt 6QSYkEzV1oIXeTBzqEVfZ3vQAL+ycJMC/ka/xCf+qICdgWZpSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJB8MjTEcsA80aYPBYpm99IlSKLtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZGU1YTExMTEtNTI0Yy0z NGFkLWFjNWQtNTY5Mjg4ODZiMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/hwJe3FpssKqneSGwCKGs47dd6Kg7SpbiIR5BX36fhVDCqv96FjRNd ki9LuwmpigUwCBVSpCq8nPd3A/5uH3AbbjY6pf1oVBIj0f5Ztc74FNggJByyRLmY XaXr5Lrrl5es+utmIyS9PHrHu45/iZAwV1aNSNi1TPGQC8Z/9OH0p0v0YSftP4hH HRgdacteP0HixuUVfKEvoMUzdzb5OqfQTQdY4e2XBkG7tmKMlT6xuG99icJoewta HWqWp0y8udLAfNWBkIePp//V8SLTFfdczLdbf6FT+sB01wbW7blIgChK5dF5KNFu ovls/ChJUPVf0A9LmQAqck49GJ4vUxA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:37 2025 by rpki-client