$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42571f48-520e-34f1-89aa-31b2c4700737.roa File: 42571f48-520e-34f1-89aa-31b2c4700737.roa (raw, json) Hash identifier: wTs5TghB/XX+A/3QIpWdGKGaVlYjQBE1CLJNZwC5s1I= Subject key identifier: CF:65:61:34:3B:18:E9:C6:45:7D:30:6A:A5:63:BE:11:91:8B:FD:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584835BAA0A4138CF47F7AC4BA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42571f48-520e-34f1-89aa-31b2c4700737.roa Signing time: Sun 15 Dec 2024 02:00:39 +0000 ROA not before: Sun 15 Dec 2024 02:00:39 +0000 ROA not after: Sat 15 Mar 2025 01:00:39 +0000 asID: 16625 IP address blocks: 184.87.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:35:ba:a0:a4:13:8c:f4:7f:7a:c4:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 15 02:00:39 2024 GMT Not After : Mar 15 01:00:39 2025 GMT Subject: CN=dca2e80f-aef8-4fb7-9b5a-970076fd4090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2a:ed:68:5f:72:4a:b5:ee:c4:07:06:0a:2c: 5f:4c:f9:7a:44:5f:dd:d8:24:6a:31:e0:75:24:bc: b8:39:60:1f:cd:9e:c1:93:3d:ec:12:d8:7e:ab:c1: 61:47:1e:6a:a1:2f:03:78:02:ed:98:19:a9:56:23: a2:a9:fa:b2:e9:0c:75:de:57:19:43:17:1d:a6:94: c2:ba:ed:ba:49:e0:b3:da:b3:d9:36:b4:52:58:18: be:fc:e8:25:b5:e1:23:c7:39:99:1c:ba:fc:eb:25: 3f:8a:fe:0f:06:31:55:15:15:2f:1a:8b:ae:d6:38: 01:7d:33:43:90:27:70:d7:0e:17:68:cd:06:67:f5: 9f:f4:b9:90:21:be:67:fd:13:6c:99:15:f0:9c:be: 7f:85:d9:68:61:31:77:6a:01:d3:44:63:57:76:7d: 69:8a:95:32:84:7b:c3:56:d8:fa:c6:df:72:98:5e: 0a:3d:f1:26:0c:fe:0e:6a:dc:fe:63:e8:ee:40:08: 5f:4d:e7:5e:b1:e1:e0:22:65:aa:f0:2a:90:46:7c: 03:0a:25:fe:cd:96:af:f8:88:ee:26:cb:13:3f:19: ac:f5:cb:c8:0f:d0:23:26:bc:58:c7:7d:65:0f:05: 30:11:31:2d:2f:14:15:28:1d:1b:3d:b7:63:69:67: 3f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:65:61:34:3B:18:E9:C6:45:7D:30:6A:A5:63:BE:11:91:8B:FD:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42571f48-520e-34f1-89aa-31b2c4700737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.87.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:a6:74:3e:a0:51:02:40:83:c6:b6:49:b0:98:44:89:11:61: 63:c1:65:41:68:e6:7c:f5:6a:13:f0:ac:56:63:9e:82:a2:a0: 49:50:0e:7b:e4:18:39:d6:0d:90:dd:d0:44:2f:04:60:62:04: 47:bd:59:3f:20:3e:40:9f:7e:91:71:ca:52:da:27:2b:c4:59: 1b:ab:ed:21:28:52:e0:9a:fc:c4:7e:5f:21:16:bc:91:1c:ef: ed:79:84:aa:30:29:2f:91:1d:5f:d2:86:70:8e:76:da:2c:71: 04:60:56:f9:5b:00:68:a3:22:c7:46:a8:34:06:67:7c:99:e2: 2e:15:b4:35:f3:1c:d1:46:c6:47:d5:6f:65:01:c5:61:df:02: 8b:04:f4:bc:ea:e0:4e:a8:b9:51:dc:96:09:71:14:69:03:3f: 17:9f:f5:69:a6:66:08:fa:88:28:99:12:b5:1c:84:3b:12:bf: 8d:d4:8d:b6:bb:12:6f:78:5b:7e:07:df:6c:4c:21:2e:1b:b7: e4:ad:0f:d0:f2:94:65:b3:ce:69:55:a0:4c:f0:e5:dc:2d:ca: 0c:3d:32:ee:0b:1c:19:be:14:15:8c:20:4b:0f:ed:5b:72:3f: bf:da:e2:c7:d1:30:9a:4c:8c:ea:f4:40:a9:fe:d3:2d:ed:30: 90:f5:62:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg1uqCkE4z0f3rEugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIxNTAyMDAzOVoXDTI1MDMxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZGNhMmU4MGYtYWVmOC00ZmI3LTliNWEtOTcwMDc2ZmQ0MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCrtaF9ySrXuxAcGCixfTPl6RF/d2CRqMeB1 JLy4OWAfzZ7Bkz3sEth+q8FhRx5qoS8DeALtmBmpViOiqfqy6Qx13lcZQxcdppTC uu26SeCz2rPZNrRSWBi+/OglteEjxzmZHLr86yU/iv4PBjFVFRUvGouu1jgBfTND kCdw1w4XaM0GZ/Wf9LmQIb5n/RNsmRXwnL5/hdloYTF3agHTRGNXdn1pipUyhHvD Vtj6xt9ymF4KPfEmDP4Oatz+Y+juQAhfTedeseHgImWq8CqQRnwDCiX+zZav+Iju JssTPxms9cvID9AjJrxYx31lDwUwETEtLxQVKB0bPbdjaWc/rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9lYTQ7GOnGRX0waqVjvhGRi/2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDI1NzFmNDgtNTIwZS0z NGYxLTg5YWEtMzFiMmM0NzAwNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuFegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCmdD6gUQJAg8a2SbCYRIkRYWPBZUFo5nz1ahPwrFZjnoKioElQDnvk GDnWDZDd0EQvBGBiBEe9WT8gPkCffpFxylLaJyvEWRur7SEoUuCa/MR+XyEWvJEc 7+15hKowKS+RHV/ShnCOdtoscQRgVvlbAGijIsdGqDQGZ3yZ4i4VtDXzHNFGxkfV b2UBxWHfAosE9Lzq4E6ouVHclglxFGkDPxef9WmmZgj6iCiZErUchDsSv43Ujba7 Em94W34H32xMIS4bt+StD9DylGWzzmlVoEzw5dwtygw9Mu4LHBm+FBWMIEsP7Vty P7/a4sfRMJpMjOr0QKn+0y3tMJD1Yg4= -----END CERTIFICATE-----Generated at Sun Feb 16 21:01:55 2025 by rpki-client