$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa File: 09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa (raw, json) Hash identifier: 0z4g432HDgziVthd+nqMJQmkv3i2THQPB+iOxLshR4k= Subject key identifier: B8:ED:C4:E9:93:3B:F5:D7:AA:18:31:5C:4E:AC:B0:81:03:EC:A1:53 Certificate issuer: /CN=564c92f5-eb04-448d-8939-379434b228b3 Certificate serial: 010D0C9F4328584869605A6FFAAC370760256D00 Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 803 IP address blocks: 142.165.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:5a:6f:fa:ac:37:07:60:25:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3 Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=c8a8fa6b-eb0b-4d38-9dc8-84a9f3fde03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:63:b0:05:27:8b:38:5f:84:d0:c0:63:61:bc: 12:a8:26:87:27:03:ed:45:7c:73:06:8f:77:9f:e1: b6:10:28:45:5f:15:64:85:bd:fc:c9:6b:54:37:54: b2:af:6d:d4:67:5d:a8:ed:28:68:7a:34:d8:d9:00: 35:d0:73:e3:54:9b:55:c8:c5:76:6c:47:2c:de:b1: 54:7f:a9:94:2c:a6:a4:af:ac:7a:70:d1:a6:0c:7c: fe:24:e9:f1:21:94:df:e9:b3:42:f7:20:4b:4d:60: 35:66:30:98:37:66:40:8b:0d:84:ab:cb:f1:89:ba: c0:21:13:bd:46:97:0f:4e:f8:21:be:61:ba:77:9f: 3b:a5:bf:0a:f5:e2:b6:72:1a:09:d7:71:08:1f:c5: 43:40:37:68:c6:31:22:80:bb:14:e7:bb:e1:b9:e4: a9:14:28:c7:39:bb:07:1a:33:1f:ed:7e:11:bb:13: 4f:d2:ad:cf:e1:99:f6:68:a1:b0:25:ed:e7:1a:36: 1f:17:14:8f:3d:af:ac:07:1e:49:a0:29:48:77:5f: eb:45:11:7e:17:7e:60:4a:7f:ed:ef:05:54:36:1f: a5:b1:eb:dd:d7:c2:1e:b4:73:ea:72:c8:8c:26:61: 54:3e:4b:f0:47:f8:ed:89:e3:3e:b2:78:84:0c:76: 66:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:ED:C4:E9:93:3B:F5:D7:AA:18:31:5C:4E:AC:B0:81:03:EC:A1:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl X509v3 Authority Key Identifier: keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer sbgp-ipAddrBlock: critical IPv4: 142.165.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f1:4b:19:20:13:25:82:50:d4:62:23:df:d4:86:e8:17:66: 37:c0:a0:8a:73:45:8e:4d:9e:2f:52:fe:bc:7d:ce:3f:d4:0a: 63:4a:e4:3f:0a:6a:57:83:b2:78:98:b6:23:ef:54:3b:37:26: 2f:59:82:3e:f4:1c:50:b6:73:0f:cd:c3:87:d6:e9:e8:18:59: f0:ce:88:32:98:1a:1f:63:fe:f1:ee:cb:29:f7:05:db:5a:fd: 8a:bf:14:e7:dc:cb:d9:11:32:f7:f9:08:fa:91:c0:dc:04:50: f7:07:d0:7c:cf:6c:e8:5c:60:e1:63:76:a5:e3:60:32:cd:f1: 76:22:45:13:a6:56:92:94:26:a0:69:0b:92:0c:e2:2a:2c:63: 00:73:fa:3a:5b:f3:ca:12:35:16:bb:81:48:07:2a:d1:79:3d: d3:bd:34:dc:0c:a4:34:95:0c:41:73:f1:4f:39:39:53:ff:32: a4:fd:32:6a:d1:14:da:26:39:c8:d5:93:79:4c:93:70:8b:fa: 50:8b:e9:5b:c0:7a:62:68:eb:f8:dc:9e:cb:b3:61:64:93:23: fa:3a:cf:cb:84:61:f1:17:fb:5f:2b:f4:1c:43:29:9b:a2:b2: ff:d7:ee:63:00:a9:44:c3:8f:4a:27:d3:a5:17:fb:a1:c8:4e: 67:34:5b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYFpv+qw3B2AlbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTY0YzkyZjUtZWIwNC00NDhkLTg5MzktMzc5NDM0YjIy OGIzMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk YzhhOGZhNmItZWIwYi00ZDM4LTlkYzgtODRhOWYzZmRlMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mOwBSeLOF+E0MBjYbwSqCaHJwPtRXxzBo93 n+G2EChFXxVkhb38yWtUN1Syr23UZ12o7ShoejTY2QA10HPjVJtVyMV2bEcs3rFU f6mULKakr6x6cNGmDHz+JOnxIZTf6bNC9yBLTWA1ZjCYN2ZAiw2Eq8vxibrAIRO9 RpcPTvghvmG6d587pb8K9eK2choJ13EIH8VDQDdoxjEigLsU57vhueSpFCjHObsH GjMf7X4RuxNP0q3P4Zn2aKGwJe3nGjYfFxSPPa+sBx5JoClId1/rRRF+F35gSn/t 7wVUNh+lsevd18IetHPqcsiMJmFUPkvwR/jtieM+sniEDHZmiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjtxOmTO/XXqhgxXE6ssIED7KFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NjRj OTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0MzRiMjI4YjMvMDlmNGIwODQtZmQzNC0z YzkyLTlkZmMtZWNiYzg2NDExNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTY0YzkyZjUtZWIwNC00NDhkLTg5 MzktMzc5NDM0YjIyOGIzLzU2NGM5MmY1LWViMDQtNDQ4ZC04OTM5LTM3OTQzNGIy MjhiMy5jcmwwHwYDVR0jBBgwFoAU3XZv4maXpZNiEaRYPOTVyeFZ1IAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NjRjOTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0 MzRiMjI4YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjqXbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHxSxkgEyWCUNRiI9/UhugXZjfAoIpzRY5Nni9S/rx9zj/UCmNK5D8K aleDsniYtiPvVDs3Ji9Zgj70HFC2cw/Nw4fW6egYWfDOiDKYGh9j/vHuyyn3Bdta /Yq/FOfcy9kRMvf5CPqRwNwEUPcH0HzPbOhcYOFjdqXjYDLN8XYiRROmVpKUJqBp C5IM4iosYwBz+jpb88oSNRa7gUgHKtF5PdO9NNwMpDSVDEFz8U85OVP/MqT9MmrR FNomOcjVk3lMk3CL+lCL6VvAemJo6/jcnsuzYWSTI/o6z8uEYfEX+18r9BxDKZui sv/X7mMAqUTDj0on06UX+6HITmc0W5Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:49 2025 by rpki-client