$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa File: a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa (raw, json) Hash identifier: elbSP7AGlRlT5KljhLyl+mpZUxEHhXJuMqytWLNpYms= Subject key identifier: 81:20:EB:C2:91:71:44:B9:E2:DB:90:89:1C:2A:1C:C0:F6:38:04:E0 Certificate issuer: /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a Certificate serial: 010D0C9F43285848A99624D25808FA321A3CDF80 Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 36850 IP address blocks: 152.19.0.0/16 maxlen: 16 152.23.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:24:d2:58:08:fa:32:1a:3c:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=e265a7cc-fedb-413f-9f0b-b7bfe6cf0c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3c:4a:b0:62:35:68:f2:cc:ba:e0:47:7d:05: fb:07:a5:57:f1:26:1c:0a:21:b4:b2:a4:4d:a9:1b: eb:ee:c0:87:8a:9e:ba:94:20:ea:84:46:20:58:bd: d1:ab:5a:8c:9d:89:02:b0:a9:d7:8d:a3:6c:d6:1a: ba:7d:46:65:c4:09:c9:12:cb:e0:7d:94:5d:d3:33: 9e:a2:50:e6:eb:f6:cd:f8:69:c4:51:84:2d:47:ef: 98:1c:cb:26:5f:49:5f:45:46:45:d0:a8:1a:1c:fd: b4:34:77:47:dc:aa:9a:7d:23:9b:b5:c2:b5:04:1e: 34:ae:ab:b7:37:5d:d0:71:2c:03:cb:a4:ca:bc:fa: 53:13:c0:5b:0c:dd:b2:16:36:40:eb:dc:f8:59:62: 68:cd:47:c7:85:d2:60:8e:9d:55:57:cc:c0:da:a1: 69:79:78:c7:e8:1f:ed:5d:44:ac:af:9d:d7:7b:39: a2:d6:dd:75:8b:64:24:ca:d9:0f:e4:4f:d8:93:49: 21:47:be:3a:6d:a2:3a:17:ed:28:80:6b:03:be:48: d5:2a:4a:35:eb:9e:e2:10:d7:2b:42:6e:f2:c2:11: e0:87:76:10:d7:09:de:f1:a4:e5:fd:ac:3a:48:ae: 1b:13:1b:25:08:42:af:f9:34:15:2d:b4:02:51:4a: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:20:EB:C2:91:71:44:B9:E2:DB:90:89:1C:2A:1C:C0:F6:38:04:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl X509v3 Authority Key Identifier: keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer sbgp-ipAddrBlock: critical IPv4: 152.19.0.0/16 152.23.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:59:d7:1b:b2:f7:c5:90:71:58:9f:28:91:88:8c:8f:fa:45: 61:e9:92:b4:15:59:3e:d0:3f:1e:2e:42:34:79:64:d1:6c:63: ce:e0:e8:92:71:78:ec:b2:76:40:27:a4:0c:3e:8c:54:6d:69: 07:54:2b:0c:8f:53:75:ab:58:fa:5c:b2:ab:b2:54:fd:27:7f: ba:1c:c1:6f:42:f3:1a:9d:34:d8:70:27:0e:01:6d:f7:18:81: e3:5f:56:0f:a6:9f:c9:fc:4f:c2:ea:69:a2:d0:f5:12:9b:a3: 8a:6b:25:98:c9:ea:d1:46:5a:a0:57:e1:bb:b9:8b:0a:4a:e2: 39:82:0b:71:e8:0a:57:32:12:d5:75:ca:e4:f4:01:fe:62:ff: 34:54:03:15:56:7d:27:84:76:0c:63:ff:10:31:5b:37:6b:a3: 4d:6d:a4:91:fc:62:80:0a:d7:0d:07:c9:a8:6e:da:3a:cb:d9: 32:c9:88:31:cf:49:1e:9e:3e:48:2c:75:8e:a1:a5:8b:fa:f5: 2b:cf:cc:fd:e6:6a:00:0a:5d:b9:3e:c3:cd:43:93:d0:20:af: 9f:46:f5:6f:36:7c:10:ba:95:7f:e7:33:d2:31:22:bc:01:8c: 55:ad:4d:aa:6d:7c:4f:73:9f:c3:98:eb:bd:e0:f2:13:40:71: 78:1d:92:ab -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEipliTSWAj6Mho834AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkOWZjN2EtZjM2Ni00ODVmLWEyYzgtNThjNGI0NzAz NjFhMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTI2NWE3Y2MtZmVkYi00MTNmLTlmMGItYjdiZmU2Y2YwYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDxKsGI1aPLMuuBHfQX7B6VX8SYcCiG0sqRN qRvr7sCHip66lCDqhEYgWL3Rq1qMnYkCsKnXjaNs1hq6fUZlxAnJEsvgfZRd0zOe olDm6/bN+GnEUYQtR++YHMsmX0lfRUZF0KgaHP20NHdH3KqafSObtcK1BB40rqu3 N13QcSwDy6TKvPpTE8BbDN2yFjZA69z4WWJozUfHhdJgjp1VV8zA2qFpeXjH6B/t XUSsr53Xezmi1t11i2QkytkP5E/Yk0khR746baI6F+0ogGsDvkjVKko1657iENcr Qm7ywhHgh3YQ1wne8aTl/aw6SK4bExslCEKv+TQVLbQCUUoaAQIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFIEg68KRcUS54tuQiRwqHMD2OATgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5 ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0YjQ3MDM2MWEvYTU4ZTE0ZDUtNTQ3Zi0z ZDcxLWFlYjgtZmQ0YjA2ZTg3NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkOWZjN2EtZjM2Ni00ODVmLWEy YzgtNThjNGI0NzAzNjFhLzQ1ZDlmYzdhLWYzNjYtNDg1Zi1hMmM4LTU4YzRiNDcw MzYxYS5jcmwwHwYDVR0jBBgwFoAUlhKw563ZcfLlH1BW53pwJQ2Yt7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0 YjQ3MDM2MWEuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAmBMDAwCY FzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAoWdcbsvfFkHFYnyiRiIyP+kVh6ZK0FVk+0D8eLkI0eWTRbGPO 4OiScXjssnZAJ6QMPoxUbWkHVCsMj1N1q1j6XLKrslT9J3+6HMFvQvManTTYcCcO AW33GIHjX1YPpp/J/E/C6mmi0PUSm6OKayWYyerRRlqgV+G7uYsKSuI5ggtx6ApX MhLVdcrk9AH+Yv80VAMVVn0nhHYMY/8QMVs3a6NNbaSR/GKACtcNB8mobto6y9ky yYgxz0kenj5ILHWOoaWL+vUrz8z95moACl25PsPNQ5PQIK+fRvVvNnwQupV/5zPS MSK8AYxVrU2qbXxPc5/DmOu94PITQHF4HZKr -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:41 2025 by rpki-client