$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/4c1dd647-4f2f-311f-aec4-d810d2fd3a46.roa File: 4c1dd647-4f2f-311f-aec4-d810d2fd3a46.roa (raw, json) Hash identifier: i5AH1ppuI64AHfaIWsLEjaCfVjVQ+0Sh58Kj5A09RXA= Subject key identifier: 2D:60:1D:17:75:84:4C:0F:BE:1C:9F:1E:B3:9A:D3:70:8C:37:D2:D6 Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Certificate serial: 010D0C9F4328584855D594F30BC45DCDC01C09C0 Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/4c1dd647-4f2f-311f-aec4-d810d2fd3a46.roa Signing time: Thu 26 Dec 2024 14:00:52 +0000 ROA not before: Thu 26 Dec 2024 14:00:52 +0000 ROA not after: Wed 26 Mar 2025 13:00:52 +0000 asID: 397270 IP address blocks: 208.86.32.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:55:d5:94:f3:0b:c4:5d:cd:c0:1c:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Validity Not Before: Dec 26 14:00:52 2024 GMT Not After : Mar 26 13:00:52 2025 GMT Subject: CN=e84b9f1d-5721-451d-a137-13fba5a63f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:15:4c:5a:92:4b:fd:6f:50:85:30:c4:03: ce:fc:c8:7d:cc:4a:0f:a3:a7:15:e1:1e:5a:cc:7c: 76:f5:01:69:71:d6:95:c7:b2:fb:5f:8a:d0:ef:00: 7b:38:c4:d0:65:bb:3f:b5:21:4b:ff:06:77:ef:ca: f3:9c:31:fe:7d:df:3b:cc:87:a5:6b:89:da:80:c8: d4:fb:58:17:0a:7c:dd:03:7c:d2:f2:8e:22:c0:08: 25:f2:5c:16:11:6b:1e:ce:4d:b5:c9:c9:0b:ac:17: de:9c:ea:db:ee:1c:fe:c7:50:30:20:27:1c:e9:6a: 01:26:1f:a2:9e:39:e8:ac:fb:df:0d:8b:50:37:c0: 3a:47:90:3f:70:3e:01:53:97:ae:5a:c1:b1:d6:2f: 10:fe:31:6c:a6:2c:1a:79:25:e1:56:9f:4d:52:16: 99:00:7e:a3:76:8d:06:05:d5:f8:97:30:d4:ce:42: f6:23:86:d8:1c:b5:d9:71:1f:29:9f:5c:de:96:6a: 72:78:7c:9d:a8:cf:ac:64:ef:2a:6d:9e:80:19:9f: 7c:cd:ed:0a:d0:13:3d:5e:0c:7f:d7:4c:3e:13:21: da:90:ce:69:64:c8:f3:29:40:45:8b:71:97:f7:fb: 93:e3:5a:69:26:73:5b:ff:23:bf:e8:c3:3e:89:f8: 91:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:60:1D:17:75:84:4C:0F:BE:1C:9F:1E:B3:9A:D3:70:8C:37:D2:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/4c1dd647-4f2f-311f-aec4-d810d2fd3a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl X509v3 Authority Key Identifier: keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c1:af:f6:9b:e5:30:d3:83:b7:d3:09:d9:3c:58:e2:1f:ea: 98:ac:1f:ee:90:7e:a3:d3:4c:6d:6f:ec:ce:54:37:fc:60:6b: a7:1c:83:30:4c:99:e3:40:16:ad:bd:01:73:a9:78:e3:38:c9: 27:54:e1:6b:4f:35:ad:d8:3f:bf:1b:90:0d:32:bd:8e:3a:d6: ac:bf:e6:94:dc:54:af:9b:d1:e6:e6:1e:68:d5:d6:78:19:e3: 2b:f7:f5:5d:d9:9d:dc:73:02:b5:3e:58:e2:a0:eb:1c:60:bd: f4:68:af:92:a7:bf:e4:14:86:6a:c3:3e:91:87:ef:80:3a:1c: 43:91:74:46:bf:6b:f9:fa:7e:d6:14:df:a7:b6:69:09:a9:7b: b4:db:16:c8:70:6f:24:d5:d3:a2:2b:df:e9:9a:39:28:71:88: 91:1c:c1:48:06:a8:37:3c:50:70:b0:1f:62:7e:04:a8:24:4c: 00:34:13:fc:82:e8:1a:e7:1f:82:bf:13:ba:d0:0d:71:66:90: a2:78:9a:7b:e6:ec:9c:62:44:98:f2:7d:cf:95:04:3f:ea:2c: a5:09:e7:f3:1f:f9:3a:e5:23:0d:2f:fd:48:29:ed:29:65:ef: 59:e0:2a:6d:b3:6f:6a:2b:d3:ba:42:52:fb:30:23:35:f1:cf: 7e:a7:ff:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1ZTzC8RdzcAcCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcy MDBlMB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZTg0YjlmMWQtNTcyMS00NTFkLWExMzctMTNmYmE1YTYzZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU8VTFqSS/1vUIUwxAPO/Mh9zEoPo6cV4R5a zHx29QFpcdaVx7L7X4rQ7wB7OMTQZbs/tSFL/wZ378rznDH+fd87zIela4nagMjU +1gXCnzdA3zS8o4iwAgl8lwWEWsezk21yckLrBfenOrb7hz+x1AwICcc6WoBJh+i njnorPvfDYtQN8A6R5A/cD4BU5euWsGx1i8Q/jFspiwaeSXhVp9NUhaZAH6jdo0G BdX4lzDUzkL2I4bYHLXZcR8pn1zelmpyeHydqM+sZO8qbZ6AGZ98ze0K0BM9Xgx/ 10w+EyHakM5pZMjzKUBFi3GX9/uT41ppJnNb/yO/6MM+ifiR5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1gHRd1hEwPvhyfHrOa03CMN9LWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5 Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvNGMxZGQ2NDctNGYyZi0z MTFmLWFlYzQtZDgxMGQyZmQzYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzViOWNiOGUtN2E3Ny00MDhlLTgx ZDktMDc1ZjhlZjcyMDBlLzc1YjljYjhlLTdhNzctNDA4ZS04MWQ5LTA3NWY4ZWY3 MjAwZS5jcmwwHwYDVR0jBBgwFoAUUCXJ4rB8e2VaqkLiQ9juoPxY5KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVm OGVmNzIwMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjBr/ab5TDTg7fTCdk8WOIf6pisH+6QfqPTTG1v7M5UN/xga6ccgzBM meNAFq29AXOpeOM4ySdU4WtPNa3YP78bkA0yvY461qy/5pTcVK+b0ebmHmjV1ngZ 4yv39V3ZndxzArU+WOKg6xxgvfRor5Knv+QUhmrDPpGH74A6HEORdEa/a/n6ftYU 36e2aQmpe7TbFshwbyTV06Ir3+maOShxiJEcwUgGqDc8UHCwH2J+BKgkTAA0E/yC 6BrnH4K/E7rQDXFmkKJ4mnvm7JxiRJjyfc+VBD/qLKUJ5/Mf+TrlIw0v/Ugp7Sll 71ngKm2zb2or07pCUvswIzXxz36n/6E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:04 2025 by rpki-client