$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/bdd1e53f-ea79-38c5-a815-0d055865f047.roa File: bdd1e53f-ea79-38c5-a815-0d055865f047.roa (raw, json) Hash identifier: AB2cYXH46J1iYSpAqnVxp1CFYjgQsKXQjZ+oY+F8PLM= Subject key identifier: F5:54:5A:DD:EA:B3:9E:F8:49:F2:59:1A:8F:A4:90:73:A7:0B:65:C7 Certificate issuer: /CN=60eb98ca-c6d1-4011-9f72-62c1d16a0ec8 Certificate serial: 010D0C9F432858480BDA63498F0EC02A57ABB1C0 Authority key identifier: BA:C6:BB:4D:F4:5D:FC:70:80:98:71:5C:B0:0A:68:12:51:20:81:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/bdd1e53f-ea79-38c5-a815-0d055865f047.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 4181 IP address blocks: 134.215.0.0/16 maxlen: 24 204.246.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:63:49:8f:0e:c0:2a:57:ab:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60eb98ca-c6d1-4011-9f72-62c1d16a0ec8 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=7a6c1a31-c62d-478f-8a4d-eb5b94708f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:71:e9:fd:b5:d4:48:d1:94:0f:3f:9e:28: c3:ee:1e:d8:7c:03:dd:29:02:5c:6c:0a:50:86:e3: 19:91:2e:b2:7f:36:ef:09:13:fc:75:7f:6d:d9:35: ae:bc:a0:c3:51:33:c1:e3:76:cd:8e:0d:79:39:e2: 8b:0e:9a:33:74:96:3d:ed:0c:66:7f:c3:a8:9b:da: 79:09:c9:25:72:8d:7b:07:b8:79:61:2f:7d:75:49: b5:2e:c2:7d:37:6c:08:7e:8e:5d:28:92:15:b2:05: 6a:d9:d2:27:91:5e:dc:34:07:a9:a5:72:52:e7:ef: e4:df:00:39:04:25:f6:52:84:a4:53:c7:28:66:37: fa:ff:4d:d3:a7:66:c3:13:05:fd:fb:2d:9d:44:7c: fa:bb:e3:6d:98:93:84:fb:29:be:b5:17:3e:d0:1b: 70:20:6a:cb:d2:20:d3:c3:86:ae:5d:03:1c:52:16: 9f:44:26:67:8d:36:24:7c:7c:0f:19:3b:da:0e:75: 52:f9:f0:77:ae:f0:9b:89:b4:d9:fc:ef:e0:6c:d9: 55:db:91:8b:2e:5e:ae:6d:02:5d:4c:08:e4:31:a9: 68:13:53:ba:a9:dd:b5:d2:f1:f0:dc:25:6e:53:c2: ec:6f:ff:26:71:10:ff:65:87:31:e0:e0:be:5c:18: a2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:54:5A:DD:EA:B3:9E:F8:49:F2:59:1A:8F:A4:90:73:A7:0B:65:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/bdd1e53f-ea79-38c5-a815-0d055865f047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.crl X509v3 Authority Key Identifier: keyid:BA:C6:BB:4D:F4:5D:FC:70:80:98:71:5C:B0:0A:68:12:51:20:81:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60eb98ca-c6d1-4011-9f72-62c1d16a0ec8.cer sbgp-ipAddrBlock: critical IPv4: 134.215.0.0/16 204.246.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f9:9a:56:4f:30:7f:21:6d:d2:35:dd:90:af:17:84:96:b5: f1:e2:01:3f:83:33:83:e6:34:fd:66:5a:f5:6e:94:cc:ce:56: 96:70:33:b9:55:04:5a:e3:83:a4:ec:f4:86:d2:97:ec:10:2a: c3:d2:9a:9c:43:7d:09:68:67:1a:54:da:ea:7a:cf:38:2f:21: 3a:b6:e6:ac:33:1d:62:96:54:da:2f:25:6b:a1:61:74:21:83: 34:6c:db:1b:e0:03:de:be:1a:87:80:51:8a:4e:3a:b9:03:44: 72:4e:63:ce:b0:f7:a9:b5:da:1e:b2:57:08:2f:6e:8a:84:87: ed:50:99:10:1e:56:7c:68:b9:f5:77:81:f4:18:46:98:26:f3: 2a:82:49:c9:57:29:a7:fd:24:60:07:f0:1c:e9:54:12:bf:fb: e1:6c:c9:3f:83:10:9b:3a:85:0f:f5:74:a2:1f:82:08:6b:a8: 30:16:5c:38:95:f2:88:05:aa:5a:1e:67:cc:8d:32:77:57:2d: ef:d4:2f:47:dc:c5:41:e5:86:16:e4:ac:d9:4b:55:d8:c4:bb: 2a:55:b1:e6:2a:90:af:67:7c:7a:c2:80:2c:8a:0d:a3:52:3a: 8b:9b:00:5d:ea:fb:7d:73:13:d4:3f:c6:15:e8:65:bd:76:81: 73:a7:a7:ba -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEgL2mNJjw7AKlerscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBlYjk4Y2EtYzZkMS00MDExLTlmNzItNjJjMWQxNmEw ZWM4MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk N2E2YzFhMzEtYzYyZC00NzhmLThhNGQtZWI1Yjk0NzA4ZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLtx6f211EjRlA8/nijD7h7YfAPdKQJcbApQ huMZkS6yfzbvCRP8dX9t2TWuvKDDUTPB43bNjg15OeKLDpozdJY97Qxmf8Oom9p5 Ccklco17B7h5YS99dUm1LsJ9N2wIfo5dKJIVsgVq2dInkV7cNAeppXJS5+/k3wA5 BCX2UoSkU8coZjf6/03Tp2bDEwX9+y2dRHz6u+NtmJOE+ym+tRc+0BtwIGrL0iDT w4auXQMcUhafRCZnjTYkfHwPGTvaDnVS+fB3rvCbibTZ/O/gbNlV25GLLl6ubQJd TAjkMaloE1O6qd210vHw3CVuU8Lsb/8mcRD/ZYcx4OC+XBiivQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFPVUWt3qs574SfJZGo+kkHOnC2XHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MGVi OThjYS1jNmQxLTQwMTEtOWY3Mi02MmMxZDE2YTBlYzgvYmRkMWU1M2YtZWE3OS0z OGM1LWE4MTUtMGQwNTU4NjVmMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjBlYjk4Y2EtYzZkMS00MDExLTlm NzItNjJjMWQxNmEwZWM4LzYwZWI5OGNhLWM2ZDEtNDAxMS05ZjcyLTYyYzFkMTZh MGVjOC5jcmwwHwYDVR0jBBgwFoAUusa7TfRd/HCAmHFcsApoElEggfswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MGViOThjYS1jNmQxLTQwMTEtOWY3Mi02MmMx ZDE2YTBlYzguY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAhtcDBATM 9gAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAQ/maVk8wfyFt0jXdkK8XhJa18eIBP4Mzg+Y0/WZa9W6UzM5W lnAzuVUEWuODpOz0htKX7BAqw9KanEN9CWhnGlTa6nrPOC8hOrbmrDMdYpZU2i8l a6FhdCGDNGzbG+AD3r4ah4BRik46uQNEck5jzrD3qbXaHrJXCC9uioSH7VCZEB5W fGi59XeB9BhGmCbzKoJJyVcpp/0kYAfwHOlUEr/74WzJP4MQmzqFD/V0oh+CCGuo MBZcOJXyiAWqWh5nzI0yd1ct79QvR9zFQeWGFuSs2UtV2MS7KlWx5iqQr2d8esKA LIoNo1I6i5sAXer7fXMT1D/GFehlvXaBc6enug== -----END CERTIFICATE-----Generated at Sun Feb 16 15:03:43 2025 by rpki-client