$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/9d15fe5d-3d44-3889-ad66-a09ec59f9563.roa File: 9d15fe5d-3d44-3889-ad66-a09ec59f9563.roa (raw, json) Hash identifier: At8c7vL7ayQo2WNk0LVlaOjC8BVP1dje18YCZZiVLDo= Subject key identifier: 90:BE:07:1C:C9:EB:52:60:C7:12:11:28:E0:B8:48:82:4A:88:80:30 Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F43285848090FB4F5E9F980ABFFBB28C0 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/9d15fe5d-3d44-3889-ad66-a09ec59f9563.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 21659 IP address blocks: 96.126.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:b4:f5:e9:f9:80:ab:ff:bb:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=cc2f5034-b269-47a0-a8ec-f5dac15694f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a7:ea:2a:62:3a:ac:67:ad:94:5a:52:0f:89: 2d:49:0d:b4:bc:70:98:3d:75:10:b2:09:f0:b7:81: 5a:76:2e:4b:7e:37:13:40:aa:af:b8:d4:0c:5a:8d: 02:f0:7e:02:7c:21:34:7e:fe:9d:b3:ad:ad:68:a0: f1:e3:39:3f:bb:c3:24:ae:ca:a1:16:8f:7b:c3:45: 30:bd:43:06:38:af:6d:af:af:33:39:0f:61:87:66: 0d:62:8f:ec:10:9f:9b:0c:2b:e5:ae:43:5c:1d:0e: 1d:2f:65:30:24:6e:89:96:94:97:1b:df:60:14:65: 49:78:ea:0c:60:5d:2a:56:b3:d2:ce:df:f4:47:c3: eb:c3:0f:42:3e:1d:ae:40:7f:b3:76:f5:56:11:44: 42:37:a7:0b:4a:57:a2:5c:85:ed:a0:a7:69:70:d3: 27:61:57:6d:90:54:bb:dc:7f:19:bc:4c:ec:a3:2d: 4a:0d:25:07:35:28:a0:63:ba:87:17:07:8b:b0:43: c8:1f:24:f6:c1:74:7a:28:db:79:91:8e:76:ef:74: 1f:a1:00:8e:21:f3:83:1e:6a:51:7a:62:7c:a6:e1: 4b:9c:be:cd:ad:aa:d9:50:14:77:bc:2e:28:39:4a: 24:61:50:c0:7c:5a:c1:5a:93:e3:7f:7d:61:70:32: 62:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BE:07:1C:C9:EB:52:60:C7:12:11:28:E0:B8:48:82:4A:88:80:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/9d15fe5d-3d44-3889-ad66-a09ec59f9563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv4: 96.126.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7b:b1:ea:4f:9a:44:6b:03:aa:dc:7b:7f:7c:98:7a:5d:68: 07:03:ef:54:e9:1d:ae:12:bc:61:61:3e:53:a9:b7:19:e3:09: 68:eb:42:5f:83:31:5b:37:02:19:42:5c:4b:d2:c4:b3:7b:9c: 1d:f4:e8:0a:8a:7b:6b:b8:7f:6d:63:68:0f:99:fb:bc:cd:e4: d5:96:59:66:2c:3f:d1:27:21:59:d4:ca:c4:28:99:22:fc:55: f6:8c:47:95:2f:66:88:d5:bf:e9:53:d4:a3:63:99:e6:58:01: f6:2f:e9:28:b4:27:03:b8:9c:e0:6a:73:14:79:fb:61:85:75: 5d:fc:ea:84:78:0c:e6:a2:3c:db:73:b8:ed:e1:e2:89:cf:0c: e7:d2:9b:cc:68:79:d4:d6:a6:64:a3:89:d6:a6:0d:25:cf:0c: 25:eb:e6:be:50:1c:2b:89:06:64:44:f2:65:d5:a3:67:14:bd: b2:69:4b:27:a7:7c:b0:37:df:a2:9c:4e:0d:f3:45:94:51:94: 20:57:83:c3:af:ff:e8:a9:1f:21:fe:00:e5:74:98:bb:23:ef: fc:c6:00:99:9c:2a:9e:01:47:ca:2a:97:22:89:b4:6b:be:98: 7f:46:5f:85:73:b6:f7:37:b7:e7:38:57:23:3c:1f:6b:ed:70: 55:81:13:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD7T16fmAq/+7KMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk Y2MyZjUwMzQtYjI2OS00N2EwLWE4ZWMtZjVkYWMxNTY5NGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqfqKmI6rGetlFpSD4ktSQ20vHCYPXUQsgnw t4Fadi5LfjcTQKqvuNQMWo0C8H4CfCE0fv6ds62taKDx4zk/u8MkrsqhFo97w0Uw vUMGOK9tr68zOQ9hh2YNYo/sEJ+bDCvlrkNcHQ4dL2UwJG6JlpSXG99gFGVJeOoM YF0qVrPSzt/0R8Prww9CPh2uQH+zdvVWEURCN6cLSleiXIXtoKdpcNMnYVdtkFS7 3H8ZvEzsoy1KDSUHNSigY7qHFweLsEPIHyT2wXR6KNt5kY5273QfoQCOIfODHmpR emJ8puFLnL7NrarZUBR3vC4oOUokYVDAfFrBWpPjf31hcDJiqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC+BxzJ61JgxxIRKOC4SIJKiIAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvOWQxNWZlNWQtM2Q0NC0z ODg5LWFkNjYtYTA5ZWM1OWY5NTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYH5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN7sepPmkRrA6rce398mHpdaAcD71TpHa4SvGFhPlOptxnjCWjrQl+D MVs3AhlCXEvSxLN7nB306AqKe2u4f21jaA+Z+7zN5NWWWWYsP9EnIVnUysQomSL8 VfaMR5UvZojVv+lT1KNjmeZYAfYv6Si0JwO4nOBqcxR5+2GFdV386oR4DOaiPNtz uO3h4onPDOfSm8xoedTWpmSjidamDSXPDCXr5r5QHCuJBmRE8mXVo2cUvbJpSyen fLA336KcTg3zRZRRlCBXg8Ov/+ipHyH+AOV0mLsj7/zGAJmcKp4BR8oqlyKJtGu+ mH9GX4Vztvc3t+c4VyM8H2vtcFWBE5M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:15 2025 by rpki-client