$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8d55b4b6-f526-3509-a882-1b4697078d59.roa File: 8d55b4b6-f526-3509-a882-1b4697078d59.roa (raw, json) Hash identifier: 3dzjyOgNQ1pjmv3ZImfM/Mk2xSJe15UozKPI4tLVQjk= Subject key identifier: 9A:8E:26:01:71:0C:87:E9:11:91:D8:BC:22:FF:3D:B5:F3:15:5C:E8 Certificate issuer: /CN=55640631-1b52-4455-ab16-7633a452f342 Certificate serial: 010D0C9F432858489A3B4E0AB0FF44E3DFF3FEB0 Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8d55b4b6-f526-3509-a882-1b4697078d59.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 32592 IP address blocks: 204.14.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:4e:0a:b0:ff:44:e3:df:f3:fe:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55640631-1b52-4455-ab16-7633a452f342 Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=6e2a6f8e-5456-488d-869f-3e905d85353e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:a5:22:1b:f6:fc:0a:c2:ca:0e:13:68:dc: a8:1e:6c:17:69:8b:4a:9a:15:82:12:13:ea:26:6b: 99:86:5b:65:d2:21:35:61:03:82:ac:18:07:a0:80: 84:89:89:42:5f:bb:99:bd:f7:63:69:4d:76:b5:d5: 33:ac:80:32:bf:6c:8e:02:69:fc:d1:2a:c6:38:51: 51:eb:95:19:00:04:f7:64:2e:d1:49:f3:6a:5c:5b: 28:12:29:70:bd:e0:5c:83:31:8e:e2:60:5e:d7:36: 23:9e:39:c9:a4:a1:58:06:ff:ce:f3:81:7a:85:b6: 81:90:5b:41:21:99:6c:ea:7a:71:c5:3a:66:d0:7c: 4d:3c:e3:10:5b:8b:2a:49:85:e7:72:a0:dd:c8:70: bf:2d:fb:dc:78:0f:ae:5e:ce:b6:2c:76:b8:ee:17: 75:d4:b1:a6:b5:d5:01:69:92:66:5a:a3:75:c8:76: 44:41:f4:bc:59:0f:17:71:c0:8d:16:67:c7:23:3d: d4:3e:ac:a3:0f:2f:6d:a9:e7:c2:bb:3e:8e:82:a3: 13:22:cd:13:4d:a9:bb:ad:31:8e:d8:16:f7:2c:15: fd:69:6b:0e:8a:b7:69:e3:69:d3:a3:22:cc:b2:1f: ae:d8:c8:40:b6:a3:35:ad:42:ab:31:7e:81:cd:6e: 06:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8E:26:01:71:0C:87:E9:11:91:D8:BC:22:FF:3D:B5:F3:15:5C:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8d55b4b6-f526-3509-a882-1b4697078d59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl X509v3 Authority Key Identifier: keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer sbgp-ipAddrBlock: critical IPv4: 204.14.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f4:8e:44:ee:57:ec:20:03:62:35:86:d7:e2:fd:57:cc:a9: 7b:45:ec:06:e5:35:ea:5f:9a:e9:82:6e:eb:7e:17:aa:c9:44: ac:b2:33:da:75:8a:3d:f7:11:82:30:0a:b2:b8:a7:43:a2:51: 8e:ed:9c:33:d3:27:41:e2:21:d3:d4:0c:99:db:ed:21:e6:24: 8c:ca:18:07:da:da:9d:b0:3b:e1:6d:15:88:5c:38:cd:4e:bc: bb:af:02:d3:a8:59:e4:92:4f:c9:0d:3d:13:7c:0a:b6:e9:5c: c0:13:70:ed:85:1d:f7:e1:f3:fd:96:27:54:53:8c:f6:51:76: 81:6f:cb:ac:84:8c:bb:8d:fe:3b:a5:3b:99:11:75:4c:6d:19: e8:5e:ca:27:3d:e4:50:9d:f4:27:0e:a3:19:89:23:4b:cd:44: d6:33:55:5e:01:1e:fb:e4:54:17:bd:d9:d0:49:7e:e0:03:95: db:1a:48:79:e2:fc:33:3b:9e:a1:7a:ff:b8:4a:f8:c4:07:b0: c7:39:9f:60:22:6f:46:1f:af:72:95:1a:98:57:f0:06:65:d0: 84:40:6f:54:2c:ed:26:dd:6d:07:0a:dc:ee:56:51:97:23:c5: 83:5a:fd:2f:56:e1:dc:40:01:00:ed:1f:81:c2:c2:41:d1:48: c6:cf:4e:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO04KsP9E49/z/rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm MzQyMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk NmUyYTZmOGUtNTQ1Ni00ODhkLTg2OWYtM2U5MDVkODUzNTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYClIhv2/ArCyg4TaNyoHmwXaYtKmhWCEhPq JmuZhltl0iE1YQOCrBgHoICEiYlCX7uZvfdjaU12tdUzrIAyv2yOAmn80SrGOFFR 65UZAAT3ZC7RSfNqXFsoEilwveBcgzGO4mBe1zYjnjnJpKFYBv/O84F6hbaBkFtB IZls6npxxTpm0HxNPOMQW4sqSYXncqDdyHC/LfvceA+uXs62LHa47hd11LGmtdUB aZJmWqN1yHZEQfS8WQ8XccCNFmfHIz3UPqyjDy9tqefCuz6OgqMTIs0TTam7rTGO 2Bb3LBX9aWsOirdp42nToyLMsh+u2MhAtqM1rUKrMX6BzW4G3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqOJgFxDIfpEZHYvCL/PbXzFVzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0 MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvOGQ1NWI0YjYtZjUyNi0z NTA5LWE4ODItMWI0Njk3MDc4ZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz0jkTuV+wgA2I1htfi/VfMqXtF7AblNepfmumCbut+F6rJRKyyM9p1 ij33EYIwCrK4p0OiUY7tnDPTJ0HiIdPUDJnb7SHmJIzKGAfa2p2wO+FtFYhcOM1O vLuvAtOoWeSST8kNPRN8CrbpXMATcO2FHffh8/2WJ1RTjPZRdoFvy6yEjLuN/jul O5kRdUxtGeheyic95FCd9CcOoxmJI0vNRNYzVV4BHvvkVBe92dBJfuADldsaSHni /DM7nqF6/7hK+MQHsMc5n2Aib0Yfr3KVGphX8AZl0IRAb1Qs7SbdbQcK3O5WUZcj xYNa/S9W4dxAAQDtH4HCwkHRSMbPTiI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:33 2025 by rpki-client