$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/32807d3a-6bd0-3465-be56-131e352b9ea8.roa File: 32807d3a-6bd0-3465-be56-131e352b9ea8.roa (raw, json) Hash identifier: 6YOwOH9vZ27yAza7o1qaUB3U9gUAt9YGCM7UzF11QeQ= Subject key identifier: DB:E6:CB:E8:A3:69:ED:67:C3:FD:66:27:1F:89:38:72:6A:35:BE:A6 Certificate issuer: /CN=5f6f7623-0788-410a-b9dd-8040879aa924 Certificate serial: 010D0C9F43285848100A7DBD072EFD0DD4408C40 Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/32807d3a-6bd0-3465-be56-131e352b9ea8.roa Signing time: Sun 01 Dec 2024 14:00:51 +0000 ROA not before: Sun 01 Dec 2024 14:00:51 +0000 ROA not after: Sat 01 Mar 2025 14:00:51 +0000 asID: 19197 IP address blocks: 69.41.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:0a:7d:bd:07:2e:fd:0d:d4:40:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924 Validity Not Before: Dec 1 14:00:51 2024 GMT Not After : Mar 1 14:00:51 2025 GMT Subject: CN=509fec4a-8fd7-4b99-b300-500871ec3f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:c9:e5:01:64:ae:b3:0b:1e:73:9e:44:e4: 23:33:a9:e2:46:d0:85:e2:99:74:8d:15:31:d5:eb: 70:60:84:14:c4:ae:14:ca:83:22:0d:52:30:18:7b: 53:4b:e5:e1:92:83:9d:22:8f:0e:1b:51:5d:72:ad: 88:76:67:90:97:ce:59:a1:cd:81:d3:c1:4d:fc:2c: db:bc:a3:a7:94:e2:fe:5e:df:97:4e:f1:57:bc:ba: 61:e3:0d:13:f1:18:c3:1c:a0:0a:36:fe:8a:db:34: 0d:c6:db:c9:f6:cd:44:86:72:86:b0:a2:46:ec:5e: 5b:e0:98:86:cc:2d:5a:0e:2a:ca:e3:32:22:2e:03: 37:b9:e3:66:4c:b8:19:ed:5a:df:da:37:d7:4f:b9: 89:49:82:43:96:44:0d:bd:ff:05:23:25:fc:f6:96: e2:0f:eb:cb:cf:0e:c0:35:bd:93:6f:4b:ed:d6:6b: 89:9c:f5:16:78:9d:c9:98:c6:f7:53:dd:0b:d1:17: 11:51:49:89:c1:39:88:fa:50:c9:07:33:04:7a:76: 5b:2b:dc:27:e0:9c:a3:c6:23:ab:52:c2:8c:22:4d: 26:93:08:7a:06:af:ba:7e:19:43:5e:d8:01:f6:83: 30:a9:f8:e3:f0:f7:25:8a:fe:bd:db:99:25:34:86: 1e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E6:CB:E8:A3:69:ED:67:C3:FD:66:27:1F:89:38:72:6A:35:BE:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/32807d3a-6bd0-3465-be56-131e352b9ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl X509v3 Authority Key Identifier: keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer sbgp-ipAddrBlock: critical IPv4: 69.41.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:42:03:e6:59:7e:36:b0:1e:e5:0a:68:cb:b3:9d:11:87:ea: 62:f9:ab:00:5a:29:14:86:e5:14:81:a5:c8:48:37:2c:43:cc: 88:1e:76:68:c4:1a:22:cf:11:bb:9a:8c:f5:3f:7d:8e:6b:a4: 6d:c8:ac:fe:b4:99:ba:de:c9:d2:45:c2:39:eb:e5:25:ac:fe: d8:be:8d:14:54:09:46:40:85:38:fd:94:e0:47:37:d6:bd:0c: fa:da:03:ad:ce:a3:4a:43:69:34:49:e6:84:b5:fb:ef:07:bc: 6d:20:ff:9a:ec:7e:5c:7a:9c:72:03:43:d2:fe:32:08:4f:7d: 97:08:a7:27:9e:3e:cb:f8:75:5f:27:df:fb:4c:8a:af:e7:a9: 6e:64:17:db:3b:d8:65:8c:23:e2:74:50:69:76:55:59:43:fa: 7c:3f:be:f8:c0:f2:ae:8a:37:bc:7c:47:d0:98:69:21:0a:1b: ac:28:f0:07:63:14:6b:1b:83:34:d9:88:39:04:c6:02:5e:bc: a9:bb:9d:a6:f0:4d:2d:96:03:5d:9f:1b:b2:3b:4d:c0:d6:76: af:af:d8:39:1b:85:be:ae:1b:4e:ca:27:8a:81:4d:38:00:8b: 48:db:93:08:0a:7d:9d:03:fc:c5:30:a1:31:92:c3:6a:4d:df: cf:68:b3:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCn29By79DdRAjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWY2Zjc2MjMtMDc4OC00MTBhLWI5ZGQtODA0MDg3OWFh OTI0MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk NTA5ZmVjNGEtOGZkNy00Yjk5LWIzMDAtNTAwODcxZWMzZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/XJ5QFkrrMLHnOeROQjM6niRtCF4pl0jRUx 1etwYIQUxK4UyoMiDVIwGHtTS+XhkoOdIo8OG1Fdcq2IdmeQl85Zoc2B08FN/Czb vKOnlOL+Xt+XTvFXvLph4w0T8RjDHKAKNv6K2zQNxtvJ9s1EhnKGsKJG7F5b4JiG zC1aDirK4zIiLgM3ueNmTLgZ7Vrf2jfXT7mJSYJDlkQNvf8FIyX89pbiD+vLzw7A Nb2Tb0vt1muJnPUWeJ3JmMb3U90L0RcRUUmJwTmI+lDJBzMEenZbK9wn4JyjxiOr UsKMIk0mkwh6Bq+6fhlDXtgB9oMwqfjj8Pcliv6925klNIYeNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvmy+ijae1nw/1mJx+JOHJqNb6mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZm NzYyMy0wNzg4LTQxMGEtYjlkZC04MDQwODc5YWE5MjQvMzI4MDdkM2EtNmJkMC0z NDY1LWJlNTYtMTMxZTM1MmI5ZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWY2Zjc2MjMtMDc4OC00MTBhLWI5 ZGQtODA0MDg3OWFhOTI0LzVmNmY3NjIzLTA3ODgtNDEwYS1iOWRkLTgwNDA4Nzlh YTkyNC5jcmwwHwYDVR0jBBgwFoAUbPE4qdyRiteX1uAs/Tbql2Czz34wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZmNzYyMy0wNzg4LTQxMGEtYjlkZC04MDQw ODc5YWE5MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRCA+ZZfjawHuUKaMuznRGH6mL5qwBaKRSG5RSBpchINyxDzIgedmjE GiLPEbuajPU/fY5rpG3IrP60mbreydJFwjnr5SWs/ti+jRRUCUZAhTj9lOBHN9a9 DPraA63Oo0pDaTRJ5oS1++8HvG0g/5rsflx6nHIDQ9L+MghPfZcIpyeePsv4dV8n 3/tMiq/nqW5kF9s72GWMI+J0UGl2VVlD+nw/vvjA8q6KN7x8R9CYaSEKG6wo8Adj FGsbgzTZiDkExgJevKm7nabwTS2WA12fG7I7TcDWdq+v2Dkbhb6uG07KJ4qBTTgA i0jbkwgKfZ0D/MUwoTGSw2pN389osxE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:35 2025 by rpki-client