$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/7e1a0045-e852-31b6-889a-153d36aba873.roa File: 7e1a0045-e852-31b6-889a-153d36aba873.roa (raw, json) Hash identifier: hrqqcztnz7cDs0i2wVkDTMD2bGqeaU4cs0Qtk1oY7FY= Subject key identifier: 0F:73:59:31:EF:CA:41:D3:28:6A:7B:60:0D:6B:DB:0F:74:C4:85:88 Certificate issuer: /CN=6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1 Certificate serial: 010D0C9F43285848100A7A4FE98CCF5FD6F54800 Authority key identifier: 08:C5:16:FE:55:6B:05:62:D3:38:35:D7:67:B5:3F:C0:57:FB:97:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/7e1a0045-e852-31b6-889a-153d36aba873.roa Signing time: Sun 01 Dec 2024 14:00:51 +0000 ROA not before: Sun 01 Dec 2024 14:00:51 +0000 ROA not after: Sat 01 Mar 2025 14:00:51 +0000 asID: 16509 IP address blocks: 205.167.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:0a:7a:4f:e9:8c:cf:5f:d6:f5:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1 Validity Not Before: Dec 1 14:00:51 2024 GMT Not After : Mar 1 14:00:51 2025 GMT Subject: CN=550c87ab-02d9-4455-b106-9a6cf7de9128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:45:cc:40:52:7b:8b:6e:c6:99:94:c3:5e:dc: 56:a5:db:89:fa:a2:29:6c:e6:16:85:14:d4:57:64: c8:d0:7c:76:ae:62:ef:b2:fd:04:7a:2c:b0:01:ce: 35:5e:f8:61:f8:50:8b:6e:41:82:c3:2e:26:de:4d: 2d:7c:c0:09:3e:36:55:e2:c6:99:3b:42:81:6b:73: ff:64:f5:16:ff:31:0e:77:fd:44:fa:8b:52:c5:c3: a9:8e:02:ce:04:b3:39:f9:1f:a2:27:2c:f4:b3:31: b2:f0:c6:67:ad:36:e6:73:b0:a4:48:66:e9:32:11: 6b:7d:19:ba:39:07:f8:e7:cd:69:66:c2:14:12:b4: e1:ba:bb:63:06:ab:ec:0e:25:10:2c:8b:11:45:f7: 21:6f:5f:82:70:a7:f2:d3:f9:e1:ea:93:54:a2:32: 34:a0:fb:6f:fb:76:01:80:06:be:e9:34:89:0a:18: 8b:8e:71:f1:d0:ab:61:2a:90:32:62:bf:d7:31:11: 2b:36:a5:95:51:23:25:94:8c:ab:ab:fd:a8:b8:65: 0d:fe:63:dc:08:e8:ce:c8:50:44:25:af:5d:11:28: 67:ed:5d:1e:f8:0a:ea:55:f8:78:48:e4:57:47:ad: 97:7c:71:9a:e8:3a:3d:94:a0:1d:1c:37:9f:76:06: ae:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:73:59:31:EF:CA:41:D3:28:6A:7B:60:0D:6B:DB:0F:74:C4:85:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/7e1a0045-e852-31b6-889a-153d36aba873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.crl X509v3 Authority Key Identifier: keyid:08:C5:16:FE:55:6B:05:62:D3:38:35:D7:67:B5:3F:C0:57:FB:97:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.cer sbgp-ipAddrBlock: critical IPv4: 205.167.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:68:40:88:63:f4:4e:b4:f1:9e:ac:4b:68:da:7b:ce:ce:e2: 26:ca:da:35:7e:0f:da:ea:ed:01:f2:2d:d1:87:b7:64:30:c0: 93:ac:cb:9c:04:d2:01:35:9d:f2:f9:e9:b7:a7:cb:e9:bd:68: 07:d3:6a:a9:f4:45:20:4b:05:2a:87:e9:5c:ed:e6:e8:96:29: e9:d8:5d:6e:50:f3:1b:20:80:a1:4d:e6:ed:d4:fb:7a:9b:8f: 13:21:dc:93:87:98:58:fa:79:a0:3e:49:dd:2b:a2:ac:5a:58: f5:23:5a:d6:53:eb:3d:4c:06:69:46:c0:01:07:df:c1:42:f3: 2f:4a:83:e8:20:47:da:df:ea:29:9b:ce:e2:ca:24:55:ab:50: 5d:65:af:cc:82:28:64:f7:f1:ae:f7:c6:96:6f:cb:b0:a0:9a: 63:5e:72:74:a1:97:21:a3:71:09:f8:49:76:48:e5:f3:60:a6: a8:7f:e3:12:26:dd:b6:14:ef:18:46:1e:89:4c:23:63:c0:b2: ad:d6:cf:30:2f:42:c1:f2:7f:8f:e5:0f:cb:99:c8:ad:65:0e: 11:90:36:3f:8d:9c:32:52:cf:d8:8c:c9:50:66:5f:34:7c:19: fa:80:4e:15:a2:ee:9d:e6:af:56:39:b5:3d:26:21:ea:5b:6c: 63:e5:e4:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCnpP6YzPX9b1SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmEwZGM1MmUtMTBjNC00YzcwLWFiYTMtM2E3YzZlOWU1 Y2QxMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk NTUwYzg3YWItMDJkOS00NDU1LWIxMDYtOWE2Y2Y3ZGU5MTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUXMQFJ7i27GmZTDXtxWpduJ+qIpbOYWhRTU V2TI0Hx2rmLvsv0EeiywAc41Xvhh+FCLbkGCwy4m3k0tfMAJPjZV4saZO0KBa3P/ ZPUW/zEOd/1E+otSxcOpjgLOBLM5+R+iJyz0szGy8MZnrTbmc7CkSGbpMhFrfRm6 OQf4581pZsIUErThurtjBqvsDiUQLIsRRfchb1+CcKfy0/nh6pNUojI0oPtv+3YB gAa+6TSJChiLjnHx0KthKpAyYr/XMRErNqWVUSMllIyrq/2ouGUN/mPcCOjOyFBE Ja9dEShn7V0e+ArqVfh4SORXR62XfHGa6Do9lKAdHDefdgaulwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9zWTHvykHTKGp7YA1r2w90xIWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YTBk YzUyZS0xMGM0LTRjNzAtYWJhMy0zYTdjNmU5ZTVjZDEvN2UxYTAwNDUtZTg1Mi0z MWI2LTg4OWEtMTUzZDM2YWJhODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmEwZGM1MmUtMTBjNC00YzcwLWFi YTMtM2E3YzZlOWU1Y2QxLzZhMGRjNTJlLTEwYzQtNGM3MC1hYmEzLTNhN2M2ZTll NWNkMS5jcmwwHwYDVR0jBBgwFoAUCMUW/lVrBWLTODXXZ7U/wFf7l+4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YTBkYzUyZS0xMGM0LTRjNzAtYWJhMy0zYTdj NmU5ZTVjZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzafXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACloQIhj9E608Z6sS2jae87O4ibK2jV+D9rq7QHyLdGHt2QwwJOsy5wE 0gE1nfL56beny+m9aAfTaqn0RSBLBSqH6Vzt5uiWKenYXW5Q8xsggKFN5u3U+3qb jxMh3JOHmFj6eaA+Sd0roqxaWPUjWtZT6z1MBmlGwAEH38FC8y9Kg+ggR9rf6imb zuLKJFWrUF1lr8yCKGT38a73xpZvy7CgmmNecnShlyGjcQn4SXZI5fNgpqh/4xIm 3bYU7xhGHolMI2PAsq3WzzAvQsHyf4/lD8uZyK1lDhGQNj+NnDJSz9iMyVBmXzR8 GfqAThWi7p3mr1Y5tT0mIepbbGPl5FI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:21 2025 by rpki-client