$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/924d1aed-b12e-3c24-a9a0-b65a8555a333.roa File: 924d1aed-b12e-3c24-a9a0-b65a8555a333.roa (raw, json) Hash identifier: djhftHj1VTz3VNlWRshcagmshd0iuTIsM2cbCZLQJEk= Subject key identifier: 35:99:D3:84:CB:41:F6:FA:32:72:01:1E:1B:84:63:1E:A0:C3:31:E1 Certificate issuer: /CN=55640631-1b52-4455-ab16-7633a452f342 Certificate serial: 010D0C9F432858489A3B4A5FC632FBD1A477F140 Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/924d1aed-b12e-3c24-a9a0-b65a8555a333.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 32592 IP address blocks: 67.217.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:4a:5f:c6:32:fb:d1:a4:77:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55640631-1b52-4455-ab16-7633a452f342 Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=f9a97505-11f6-48bf-98b9-dcf9bbe0bca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:de:0e:ff:24:ad:10:fb:35:b3:8c:cc:a8:14: 9d:8c:b5:d4:aa:e9:12:c1:b4:21:92:13:97:65:ea: 56:af:7d:de:59:30:67:70:92:6d:3c:83:7f:d3:db: d8:bc:7b:e9:4f:b4:fa:2d:48:5a:23:cd:0d:ce:2e: 98:1f:58:a1:b5:ac:f7:f8:38:c1:5d:45:7a:41:c9: ef:b9:e1:a7:31:f5:2f:8a:ee:92:ab:f0:f6:14:78: f7:cf:84:2d:22:4f:1b:bc:b2:aa:b8:fa:8a:81:e2: 41:3c:3f:c4:89:e3:8a:b1:c8:43:28:e1:67:52:d4: f2:e1:a9:79:6f:8d:74:d7:32:11:37:ae:86:2e:73: 5a:4a:6f:6b:ca:42:7c:58:e0:31:9d:54:99:3c:ac: dd:b4:1d:55:14:32:28:85:74:dc:b0:b5:3f:54:86: a5:de:cb:32:c2:f3:68:49:bd:80:92:c0:73:f4:f1: 87:25:84:ee:1c:1d:11:57:09:21:c7:a2:87:7c:51: 38:97:ad:cd:55:ed:89:c3:95:df:38:4c:dd:83:0a: 34:81:3f:a7:4a:01:0e:42:58:0e:52:c0:df:9d:41: a9:a6:ad:32:d0:20:9c:3b:d7:25:e5:24:92:4f:15: ae:7a:69:7a:3a:ee:c4:a0:0b:53:42:99:cd:0d:4a: 57:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:99:D3:84:CB:41:F6:FA:32:72:01:1E:1B:84:63:1E:A0:C3:31:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/924d1aed-b12e-3c24-a9a0-b65a8555a333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl X509v3 Authority Key Identifier: keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer sbgp-ipAddrBlock: critical IPv4: 67.217.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:c2:c4:d3:72:cb:4a:23:49:2b:fe:d2:ad:6b:f1:d2:ad:24: c7:d1:04:1f:2f:25:04:1b:68:d8:dd:03:18:05:98:8a:e8:49: 25:f3:25:50:77:df:af:11:43:d8:79:0d:27:c5:a4:17:36:a8: ef:6a:20:24:01:44:d4:94:e0:af:15:5b:c9:2d:1f:c2:f9:d9: 9e:e8:ce:06:c1:d6:49:59:48:46:37:b0:e2:56:03:dc:0b:1a: 60:c8:ee:46:e4:4b:64:2b:52:d2:2c:1c:2e:59:f8:d1:3d:0f: c1:e7:81:ac:fd:4a:7e:c4:80:c5:fa:66:56:6a:4b:e6:e0:e2: 03:35:44:7d:1b:08:b3:96:2d:a2:1a:eb:4f:d7:3d:12:a6:3d: 98:bb:94:eb:36:3e:2f:46:c0:1e:86:ce:bc:8d:3a:c4:99:74: 66:49:ee:b2:03:a7:4a:13:48:7d:f6:21:a5:de:18:68:57:4d: 38:fa:6c:f4:c7:1f:5a:7c:70:c0:a0:ec:c0:08:f7:8e:63:31: ca:c8:0d:f2:e0:d1:13:b0:6c:3d:b7:59:50:d8:ae:e3:25:08: cb:77:93:f6:90:2a:9e:29:4c:db:26:50:23:d4:64:d3:76:c7: 23:d8:66:e5:c6:2e:86:c1:17:96:47:16:96:58:10:12:dd:59: b0:d4:fc:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0pfxjL70aR38UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm MzQyMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZjlhOTc1MDUtMTFmNi00OGJmLTk4YjktZGNmOWJiZTBiY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN4O/yStEPs1s4zMqBSdjLXUqukSwbQhkhOX ZepWr33eWTBncJJtPIN/09vYvHvpT7T6LUhaI80Nzi6YH1ihtaz3+DjBXUV6Qcnv ueGnMfUviu6Sq/D2FHj3z4QtIk8bvLKquPqKgeJBPD/EieOKschDKOFnUtTy4al5 b4101zIRN66GLnNaSm9rykJ8WOAxnVSZPKzdtB1VFDIohXTcsLU/VIal3ssywvNo Sb2AksBz9PGHJYTuHB0RVwkhx6KHfFE4l63NVe2Jw5XfOEzdgwo0gT+nSgEOQlgO UsDfnUGppq0y0CCcO9cl5SSSTxWueml6Ou7EoAtTQpnNDUpX0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWZ04TLQfb6MnIBHhuEYx6gwzHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0 MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvOTI0ZDFhZWQtYjEyZS0z YzI0LWE5YTAtYjY1YTg1NTVhMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDCxNNyy0ojSSv+0q1r8dKtJMfRBB8vJQQbaNjdAxgFmIroSSXzJVB3 368RQ9h5DSfFpBc2qO9qICQBRNSU4K8VW8ktH8L52Z7ozgbB1klZSEY3sOJWA9wL GmDI7kbkS2QrUtIsHC5Z+NE9D8Hngaz9Sn7EgMX6ZlZqS+bg4gM1RH0bCLOWLaIa 60/XPRKmPZi7lOs2Pi9GwB6GzryNOsSZdGZJ7rIDp0oTSH32IaXeGGhXTTj6bPTH H1p8cMCg7MAI945jMcrIDfLg0ROwbD23WVDYruMlCMt3k/aQKp4pTNsmUCPUZNN2 xyPYZuXGLobBF5ZHFpZYEBLdWbDU/KI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:12 2025 by rpki-client