$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa File: f5ac55ac-f810-3544-90b5-8f6795c65f87.roa (raw, json) Hash identifier: iVIWXjRecl9E0NJdy7rPh5EN/2QA1OBdPEPzpSn1XaA= Subject key identifier: 47:03:E0:73:7D:26:40:A8:44:04:78:8D:A4:A4:BE:10:35:98:1B:23 Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584838854CB91822FB28AA32B200 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa Signing time: Mon 16 Dec 2024 02:00:39 +0000 ROA not before: Mon 16 Dec 2024 02:00:39 +0000 ROA not after: Sun 16 Mar 2025 01:00:39 +0000 asID: 262287 IP address blocks: 172.111.12.0/22 maxlen: 24 204.9.36.0/23 maxlen: 24 204.9.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:85:4c:b9:18:22:fb:28:aa:32:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Dec 16 02:00:39 2024 GMT Not After : Mar 16 01:00:39 2025 GMT Subject: CN=042da046-60c4-4be1-8ea4-feec644e00f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e7:be:e8:77:f0:b6:60:17:93:69:bc:aa:3d: 6f:15:16:e9:c7:87:65:db:15:11:87:dd:e0:6f:6e: a2:d8:fb:6f:66:3f:d3:65:3b:3c:84:31:d2:24:e6: bb:b6:dc:7b:93:05:d2:ce:2d:92:73:25:0a:16:ef: cc:f8:2c:a4:e5:d1:af:7e:46:24:08:00:b6:20:69: 1f:48:d7:20:65:8e:b7:1b:c2:44:0c:44:c6:81:8a: 54:b5:ce:bf:e6:b9:4f:c6:c8:c1:7f:50:0e:5e:9a: 98:18:c2:02:da:d8:e1:3e:09:68:ea:c4:f5:a9:7e: 0d:71:3e:c3:b6:7b:a5:f3:a8:7e:4e:8b:6f:78:52: c6:93:5b:d6:4a:14:71:6d:fa:8f:da:50:91:8f:60: de:0b:b0:49:05:db:f0:09:9c:6d:40:96:be:ca:d3: e3:79:de:09:39:69:17:36:61:3b:30:f2:ab:aa:f1: 0e:1c:c8:a8:07:00:66:c0:50:ef:86:9e:8d:56:ea: 64:d5:d3:62:d5:9a:2d:6a:20:87:98:f5:4a:3c:64: a2:3d:40:9f:0d:56:57:6e:48:cc:75:65:a1:c3:44: 87:9a:a7:64:32:55:de:db:f1:13:6d:23:1a:fc:97: 12:bf:96:68:7a:ed:8e:94:fa:06:e1:d3:0a:d2:b4: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:03:E0:73:7D:26:40:A8:44:04:78:8D:A4:A4:BE:10:35:98:1B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 172.111.12.0/22 204.9.36.0-204.9.38.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:67:dd:c9:45:c2:a7:e1:65:f9:85:02:1d:e0:21:23:d7:0f: 62:3e:ba:4f:64:6c:b4:b5:38:77:60:b3:ef:63:43:88:0c:82: 7d:41:12:05:c7:54:e1:c1:29:cf:ab:bb:13:a3:c1:4d:b4:c1: e8:71:8d:81:eb:d4:f5:45:6f:73:25:2a:e3:48:6d:02:67:26: 93:70:d1:7f:79:06:4d:2e:88:bf:38:8b:32:11:c7:06:95:79: 16:c4:32:4c:5d:42:33:73:45:17:34:02:0f:6e:b6:32:49:17: 58:51:7c:c6:26:88:79:34:9d:bb:6e:09:9b:86:29:12:9d:ec: d0:84:e7:78:e0:13:a6:3e:84:ec:53:2c:a2:d9:8e:3c:d8:3a: 9c:da:01:d9:40:22:44:0b:ef:90:8e:6a:17:08:53:1e:7d:6e: 7e:19:a6:93:11:6b:d8:3c:b8:f2:04:e5:16:f5:92:19:ec:bf: c6:4b:ab:8b:fb:7e:68:1b:44:12:b7:f4:c7:0b:ba:fd:7d:bb: 13:f2:10:90:09:65:a4:95:42:ef:ea:d2:31:7f:8c:bd:fd:1f: 97:cb:e5:0b:5c:8b:2e:c9:c4:fc:a8:b0:61:17:da:bb:72:59: d3:30:d2:88:52:73:c5:89:9a:ed:b7:2e:26:49:a5:0f:86:cd: 80:cf:ec:44 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEg4hUy5GCL7KKoysgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk MDQyZGEwNDYtNjBjNC00YmUxLThlYTQtZmVlYzY0NGUwMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlue+6HfwtmAXk2m8qj1vFRbpx4dl2xURh93g b26i2PtvZj/TZTs8hDHSJOa7ttx7kwXSzi2ScyUKFu/M+Cyk5dGvfkYkCAC2IGkf SNcgZY63G8JEDETGgYpUtc6/5rlPxsjBf1AOXpqYGMIC2tjhPglo6sT1qX4NcT7D tnul86h+TotveFLGk1vWShRxbfqP2lCRj2DeC7BJBdvwCZxtQJa+ytPjed4JOWkX NmE7MPKrqvEOHMioBwBmwFDvhp6NVupk1dNi1ZotaiCHmPVKPGSiPUCfDVZXbkjM dWWhw0SHmqdkMlXe2/ETbSMa/JcSv5Zoeu2OlPoG4dMK0rTJWwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFEcD4HN9JkCoRAR4jaSkvhA1mBsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvZjVhYzU1YWMtZjgxMC0z NTQ0LTkwYjUtOGY2Nzk1YzY1Zjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCrG8MMAwD BALMCSQDBADMCSYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEASWfdyUXCp+Fl+YUCHeAhI9cPYj66T2RstLU4 d2Cz72NDiAyCfUESBcdU4cEpz6u7E6PBTbTB6HGNgevU9UVvcyUq40htAmcmk3DR f3kGTS6IvziLMhHHBpV5FsQyTF1CM3NFFzQCD262MkkXWFF8xiaIeTSdu24Jm4Yp Ep3s0ITneOATpj6E7FMsotmOPNg6nNoB2UAiRAvvkI5qFwhTHn1ufhmmkxFr2Dy4 8gTlFvWSGey/xkuri/t+aBtEErf0xwu6/X27E/IQkAllpJVC7+rSMX+Mvf0fl8vl C1yLLsnE/KiwYRfau3JZ0zDSiFJzxYma7bcuJkmlD4bNgM/sRA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:07 2025 by rpki-client