$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e8a0a74-4d95-3255-b6a6-bda9a1b2b99b.roa File: 8e8a0a74-4d95-3255-b6a6-bda9a1b2b99b.roa (raw, json) Hash identifier: ZSEClg96KOzIx7ngLu1VJc+7fwmoncsNzd7ad7eISk8= Subject key identifier: 37:F6:C5:2D:69:F2:60:6F:C3:1D:4F:DE:9D:7A:90:CB:FB:F5:3B:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858480BDA6B5AFC252FF1B8CA2280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e8a0a74-4d95-3255-b6a6-bda9a1b2b99b.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 32787 IP address blocks: 72.52.4.0/24 maxlen: 24 72.52.5.0/24 maxlen: 24 72.52.6.0/24 maxlen: 24 72.52.7.0/24 maxlen: 24 72.52.8.0/24 maxlen: 24 72.52.9.0/24 maxlen: 24 72.52.10.0/24 maxlen: 24 72.52.11.0/24 maxlen: 24 72.52.12.0/24 maxlen: 24 72.52.13.0/24 maxlen: 24 72.52.14.0/24 maxlen: 24 72.52.15.0/24 maxlen: 24 209.200.152.0/24 maxlen: 24 209.200.153.0/24 maxlen: 24 209.200.154.0/24 maxlen: 24 209.200.155.0/24 maxlen: 24 209.200.164.0/24 maxlen: 24 209.200.165.0/24 maxlen: 24 209.200.166.0/24 maxlen: 24 209.200.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:6b:5a:fc:25:2f:f1:b8:ca:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=6d3194df-49ac-4b98-bac4-abcafc6ef232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f3:df:d0:be:fc:db:3d:82:9a:b7:cb:3f:56: c0:a5:92:43:8b:a8:a3:5c:16:0c:a4:32:de:f4:57: 7c:9a:af:71:16:1a:9e:2e:3c:39:e9:cd:a8:26:7a: 9a:4b:3f:36:94:f8:dc:c7:cf:f2:cb:0a:09:c5:a5: cb:a2:20:76:e1:33:d2:d2:ca:5b:d8:5c:43:55:15: 90:82:f8:89:5d:33:51:fb:79:19:96:5f:d2:89:a7: c3:5e:8c:45:e9:51:d8:5f:aa:72:ca:95:a8:16:e0: 85:ea:9f:63:1d:4a:77:5c:55:f7:57:b4:d7:6b:6f: b8:35:8e:5e:9b:0f:51:53:cb:12:68:e5:6e:47:a6: 99:ae:ed:7a:1a:04:8f:e7:bc:4e:54:c6:23:93:76: 2a:73:ae:ca:f0:4a:02:d3:1a:ee:ed:cb:23:cc:e5: 06:df:e2:70:b9:b0:2d:03:13:49:72:12:d7:ab:7c: 8a:b8:8a:c2:92:e6:72:b6:a4:90:0e:8d:b5:0f:39: cb:6c:87:84:ac:bc:d7:09:9c:01:c9:48:2b:ca:0e: bb:70:cf:55:84:72:55:31:07:f5:fc:25:1f:75:c1: ab:41:e4:4a:31:d9:ca:ca:c7:fe:17:39:12:c7:46: ca:25:80:c3:bd:2d:72:fa:ef:ec:69:b4:3e:d3:b6: dc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F6:C5:2D:69:F2:60:6F:C3:1D:4F:DE:9D:7A:90:CB:FB:F5:3B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e8a0a74-4d95-3255-b6a6-bda9a1b2b99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.4.0-72.52.15.255 209.200.152.0/22 209.200.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5b:ba:a9:8c:4f:a7:6d:4e:96:a2:c0:54:85:85:71:8a:ee: 9c:b2:4e:9d:22:d6:3b:e2:b3:00:53:02:97:0e:40:3a:c5:9c: 25:27:7f:f4:ee:0f:8d:0e:5b:a2:aa:26:48:d8:b6:c7:21:aa: a7:19:a6:d0:4c:a4:59:4f:06:89:82:35:7e:c3:01:42:a4:b1: bd:0c:0e:ba:d8:ea:4a:f5:54:0a:e5:84:89:c3:ec:0e:e2:c9: 00:20:4e:f0:fd:21:2a:65:82:b7:e0:dc:ff:d8:40:2d:22:b5: dc:93:3a:8e:7d:16:4b:30:3d:12:b7:9f:88:55:a1:fd:08:9d: 34:d6:48:b4:b4:ec:56:91:2a:6b:ec:5a:25:3b:93:d6:f4:cd: ce:38:56:79:de:b1:8d:25:cc:e3:02:98:09:43:d3:f0:4f:4b: 2d:ba:e3:b7:71:04:a8:37:e8:06:01:67:8e:7b:5d:85:19:7f: f0:b3:7a:b1:c4:40:5c:86:08:8f:3e:27:4c:80:fb:5f:eb:d7: 42:cd:17:1a:19:44:fe:66:7d:18:90:1c:26:dc:a4:20:2c:78: 01:34:77:54:e0:5c:71:24:94:cc:49:7e:5f:7c:ad:2b:af:f1: 02:c3:b1:4d:39:f1:df:62:f9:76:ab:4b:6c:e9:d2:5a:e4:78: ab:9d:5e:1a -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEgL2mta/CUv8bjKIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk NmQzMTk0ZGYtNDlhYy00Yjk4LWJhYzQtYWJjYWZjNmVmMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvPf0L782z2CmrfLP1bApZJDi6ijXBYMpDLe 9Fd8mq9xFhqeLjw56c2oJnqaSz82lPjcx8/yywoJxaXLoiB24TPS0spb2FxDVRWQ gviJXTNR+3kZll/SiafDXoxF6VHYX6pyypWoFuCF6p9jHUp3XFX3V7TXa2+4NY5e mw9RU8sSaOVuR6aZru16GgSP57xOVMYjk3Yqc67K8EoC0xru7csjzOUG3+JwubAt AxNJchLXq3yKuIrCkuZytqSQDo21DznLbIeErLzXCZwByUgryg67cM9VhHJVMQf1 /CUfdcGrQeRKMdnKysf+FzkSx0bKJYDDvS1y+u/sabQ+07bcVwIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFDf2xS1p8mBvwx1P3p16kMv79TvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU4YTBhNzQtNGQ5NS0z MjU1LWI2YTYtYmRhOWExYjJiOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAJINAQD BARINAADBALRyJgDBALRyKQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYFu6qYxPp21OlqLAVIWFcYrunLJO nSLWO+KzAFMClw5AOsWcJSd/9O4PjQ5boqomSNi2xyGqpxmm0EykWU8GiYI1fsMB QqSxvQwOutjqSvVUCuWEicPsDuLJACBO8P0hKmWCt+Dc/9hALSK13JM6jn0WSzA9 ErefiFWh/QidNNZItLTsVpEqa+xaJTuT1vTNzjhWed6xjSXM4wKYCUPT8E9LLbrj t3EEqDfoBgFnjntdhRl/8LN6scRAXIYIjz4nTID7X+vXQs0XGhlE/mZ9GJAcJtyk ICx4ATR3VOBccSSUzEl+X3ytK6/xAsOxTTnx32L5dqtLbOnSWuR4q51eGg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:52 2025 by rpki-client