$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa File: cfef727c-7d86-3e20-90da-9631286575b4.roa (raw, json) Hash identifier: zgoL02VHgDz4nJcqXJ+Y9Xg3gdpu6QbCkRXMCo4n/8A= Subject key identifier: 03:61:FE:96:D0:FD:97:47:59:C1:8E:F7:68:80:21:CC:E9:79:F6:9D Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F432858480BDA708982502E800CF0BD00 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 40627 IP address blocks: 192.209.24.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:70:89:82:50:2e:80:0c:f0:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=2f989b6a-f31e-4104-bf41-89354eb7fede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:95:28:89:70:53:5a:67:64:bd:68:da:3d:a6: 69:09:7a:6f:13:b8:fd:9e:3c:a1:c1:5e:6a:e0:73: e7:89:65:95:b3:79:f4:d9:96:98:69:93:37:2c:bc: 6d:c5:c1:c7:18:25:02:84:22:0c:3b:1d:a2:26:31: 13:34:ee:45:4f:3a:80:24:dd:b7:d1:40:08:a0:10: 7b:75:5f:94:c2:79:2c:be:8f:b0:cd:d2:85:0c:02: 8a:1c:a6:83:17:27:80:b9:1f:fd:33:59:2d:e9:5b: 0d:d3:be:f5:03:59:fd:b1:f2:36:f9:82:4e:bf:9e: 35:73:a3:0d:b6:f6:c8:8d:8d:c3:2a:b0:21:9d:6b: 25:d7:96:0a:5f:4f:36:5f:60:89:da:fc:96:9b:6b: 69:5d:9b:7b:a4:d5:f3:a3:36:37:12:51:4d:db:e5: 3e:d3:fc:62:e5:14:21:cf:bf:13:5f:97:f1:49:18: 35:d5:0e:0a:a2:dd:1e:2b:dd:f8:4b:47:e4:c8:fb: 91:96:44:72:35:11:18:50:6b:42:cb:66:a5:02:da: 69:5c:67:12:75:c3:39:52:37:47:ff:3b:45:90:1e: d1:f8:ee:ed:5e:a4:1f:c3:12:a0:f7:b1:dc:b5:a6: bd:dc:54:00:87:5b:5d:2b:bf:92:6b:2e:82:d9:91: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:61:FE:96:D0:FD:97:47:59:C1:8E:F7:68:80:21:CC:E9:79:F6:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 192.209.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:62:a5:05:96:29:01:d2:88:ec:83:79:11:a9:fb:91:e4:af: ac:82:ea:ac:7f:1c:dc:a2:a9:d3:7a:7e:fa:a3:ca:47:e8:f6: 8f:79:57:23:01:79:81:09:18:77:a3:d9:fc:1f:44:b2:d9:81: ad:4c:ca:e4:5e:a9:a2:8d:12:1f:ad:0c:e2:a4:a5:fd:25:d9: a5:fa:26:4a:6a:2b:ea:7c:80:be:9a:c8:75:d8:7e:cc:fc:69: 4d:d3:08:be:ac:e6:ae:e3:8e:37:04:34:8b:60:12:cf:8c:11: b7:28:f5:ba:3d:5d:05:41:89:c1:8d:e8:1f:f3:f2:bc:fc:27: d3:15:12:66:9e:fd:67:23:db:2f:24:7e:61:0a:79:9a:2f:04: 2c:a2:0d:e0:0f:07:e6:8a:4c:bb:09:82:ef:97:f5:ff:19:0b: d7:34:29:c5:2f:c6:f5:98:86:3f:7b:97:db:40:8e:bd:d2:f5: 30:de:9f:34:92:80:fd:fd:bb:5e:c6:51:bc:04:5a:af:fa:a7: de:4f:fa:95:49:06:d5:46:71:66:6f:9e:5f:e7:a3:c3:20:65: c8:e8:97:7f:9c:68:de:45:a1:2f:67:98:58:ee:e9:b1:71:30: 8b:85:b5:e1:c5:54:ee:e6:5e:d5:32:09:e0:ac:ad:e0:78:e4: ac:c3:1b:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2nCJglAugAzwvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk MmY5ODliNmEtZjMxZS00MTA0LWJmNDEtODkzNTRlYjdmZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZUoiXBTWmdkvWjaPaZpCXpvE7j9njyhwV5q 4HPniWWVs3n02ZaYaZM3LLxtxcHHGCUChCIMOx2iJjETNO5FTzqAJN230UAIoBB7 dV+Uwnksvo+wzdKFDAKKHKaDFyeAuR/9M1kt6VsN0771A1n9sfI2+YJOv541c6MN tvbIjY3DKrAhnWsl15YKX082X2CJ2vyWm2tpXZt7pNXzozY3ElFN2+U+0/xi5RQh z78TX5fxSRg11Q4Kot0eK934S0fkyPuRlkRyNREYUGtCy2alAtppXGcSdcM5UjdH /ztFkB7R+O7tXqQfwxKg97Hctaa93FQAh1tdK7+Say6C2ZG5sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANh/pbQ/ZdHWcGO92iAIczpefadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvY2ZlZjcyN2MtN2Q4Ni0z ZTIwLTkwZGEtOTYzMTI4NjU3NWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtipQWWKQHSiOyDeRGp+5Hkr6yC6qx/HNyiqdN6fvqjykfo9o95VyMB eYEJGHej2fwfRLLZga1MyuReqaKNEh+tDOKkpf0l2aX6JkpqK+p8gL6ayHXYfsz8 aU3TCL6s5q7jjjcENItgEs+MEbco9bo9XQVBicGN6B/z8rz8J9MVEmae/Wcj2y8k fmEKeZovBCyiDeAPB+aKTLsJgu+X9f8ZC9c0KcUvxvWYhj97l9tAjr3S9TDenzSS gP39u17GUbwEWq/6p95P+pVJBtVGcWZvnl/no8MgZcjol3+caN5FoS9nmFju6bFx MIuFteHFVO7mXtUyCeCsreB45KzDG2k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:25 2025 by rpki-client