$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac7561ad-ab2b-3e60-9250-004ec84eb55e.roa File: ac7561ad-ab2b-3e60-9250-004ec84eb55e.roa (raw, json) Hash identifier: 9WiD6qBvIFYPenWwkv/Sx9E780JdX4nrF+ju7YEt8Ng= Subject key identifier: 50:E4:8A:EF:A2:FE:1B:12:0E:89:64:B4:F6:A7:AD:9D:19:4D:89:74 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584835BA9E91E0B5847B59EC2D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac7561ad-ab2b-3e60-9250-004ec84eb55e.roa Signing time: Sun 15 Dec 2024 02:00:39 +0000 ROA not before: Sun 15 Dec 2024 02:00:39 +0000 ROA not after: Sat 15 Mar 2025 01:00:39 +0000 asID: 16625 IP address blocks: 184.84.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:35:ba:9e:91:e0:b5:84:7b:59:ec:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 15 02:00:39 2024 GMT Not After : Mar 15 01:00:39 2025 GMT Subject: CN=9795f9f8-a741-4496-8b77-2cdb6857ad4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a2:77:8f:34:26:cb:40:a1:92:bb:37:24:0d: da:20:78:85:4c:33:d1:46:62:29:48:88:cc:c1:b9: 77:68:0f:4c:d9:0e:f7:e9:4c:91:bb:02:77:2c:92: 6d:67:b8:c6:1f:a5:e6:86:80:29:3e:83:70:1e:da: 3f:36:fe:8a:54:91:11:1f:9e:f6:74:a0:82:cc:49: b4:38:ff:01:43:6b:bd:cb:0c:e8:43:c8:32:d7:26: 05:65:15:e6:d6:bb:22:f7:67:2d:0f:4e:33:96:b7: 7a:0b:c3:02:6c:17:a1:bd:56:85:ad:97:f3:25:e1: 84:87:9d:a3:53:26:7d:00:b0:95:44:f8:b1:21:64: 78:7b:e0:58:9f:2b:15:f4:96:4e:19:de:96:41:fd: 80:58:c2:6b:69:1c:06:86:00:d3:96:7a:ce:bd:98: a6:fe:e5:7b:c9:df:c3:98:ce:d2:09:0d:cb:3d:f2: b7:8c:76:ea:48:35:19:0c:eb:48:06:06:68:77:39: c2:14:93:b4:11:17:00:a4:73:3e:b1:a5:1c:c0:4a: 61:aa:64:05:87:29:e6:8e:33:a6:2f:95:9e:7a:76: 90:8d:72:05:55:59:7a:15:53:b6:9f:04:00:97:6b: f3:88:ca:c4:7d:3f:36:12:3f:d0:b7:50:41:c5:9e: 49:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E4:8A:EF:A2:FE:1B:12:0E:89:64:B4:F6:A7:AD:9D:19:4D:89:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac7561ad-ab2b-3e60-9250-004ec84eb55e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.84.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e8:50:73:54:3e:c8:4d:e0:6c:cd:8f:f0:7d:bd:64:c1:a6: 65:10:0a:22:87:4f:bd:ba:a5:27:68:1a:a2:45:62:12:67:f6: cc:0a:56:86:1c:54:f3:85:cf:a0:f8:54:e6:cf:8c:47:75:94: db:93:0b:2b:c2:05:fd:f8:78:21:91:b9:e5:4d:64:c3:69:b5: c8:c2:92:1e:fb:38:78:53:d8:75:68:b1:5e:94:ad:a1:4c:99: 09:d5:b0:86:6e:1b:aa:97:b0:5f:3c:ea:be:16:74:72:fa:6f: a0:a4:9a:2b:d0:d1:35:26:ef:e6:28:a1:f3:b0:e9:6d:2f:d4: 44:02:ae:e4:ea:8d:98:9a:43:4d:49:15:2a:08:2b:b8:f0:fc: 30:fc:19:45:83:14:4d:aa:8d:de:ad:70:69:0e:a1:de:1f:ea: bf:10:04:9e:ce:16:c2:84:a9:f0:a2:f5:18:74:80:7d:29:e5: bd:26:63:c3:e3:90:62:1a:9f:94:9b:d1:96:37:80:15:17:c7: 54:2c:76:28:b3:26:5c:d4:77:cd:ec:99:4f:56:5a:1b:0a:2f: c7:ad:e5:46:0d:f2:73:4e:3f:40:cd:4b:ee:9d:6b:a7:64:cf: 30:34:47:1a:e3:20:fb:10:81:34:12:fe:1c:5d:56:10:f9:da: f7:2d:d6:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg1up6R4LWEe1nsLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIxNTAyMDAzOVoXDTI1MDMxNTAxMDAzOVowLzEtMCsGA1UEAxMk OTc5NWY5ZjgtYTc0MS00NDk2LThiNzctMmNkYjY4NTdhZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaJ3jzQmy0Chkrs3JA3aIHiFTDPRRmIpSIjM wbl3aA9M2Q736UyRuwJ3LJJtZ7jGH6XmhoApPoNwHto/Nv6KVJERH572dKCCzEm0 OP8BQ2u9ywzoQ8gy1yYFZRXm1rsi92ctD04zlrd6C8MCbBehvVaFrZfzJeGEh52j UyZ9ALCVRPixIWR4e+BYnysV9JZOGd6WQf2AWMJraRwGhgDTlnrOvZim/uV7yd/D mM7SCQ3LPfK3jHbqSDUZDOtIBgZodznCFJO0ERcApHM+saUcwEphqmQFhynmjjOm L5WeenaQjXIFVVl6FVO2nwQAl2vziMrEfT82Ej/Qt1BBxZ5JCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDkiu+i/hsSDolktPanrZ0ZTYl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWM3NTYxYWQtYWIyYi0z ZTYwLTkyNTAtMDA0ZWM4NGViNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuFRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3oUHNUPshN4GzNj/B9vWTBpmUQCiKHT726pSdoGqJFYhJn9swKVoYc VPOFz6D4VObPjEd1lNuTCyvCBf34eCGRueVNZMNptcjCkh77OHhT2HVosV6UraFM mQnVsIZuG6qXsF886r4WdHL6b6CkmivQ0TUm7+YoofOw6W0v1EQCruTqjZiaQ01J FSoIK7jw/DD8GUWDFE2qjd6tcGkOod4f6r8QBJ7OFsKEqfCi9Rh0gH0p5b0mY8Pj kGIan5Sb0ZY3gBUXx1QsdiizJlzUd83smU9WWhsKL8et5UYN8nNOP0DNS+6da6dk zzA0RxrjIPsQgTQS/hxdVhD52vct1hg= -----END CERTIFICATE-----Generated at Sun Feb 16 21:04:25 2025 by rpki-client