$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2f731e1a-a297-3001-80b1-7b6f87b77ae3.roa File: 2f731e1a-a297-3001-80b1-7b6f87b77ae3.roa (raw, json) Hash identifier: FJwGdUc5PtAFvWTH30VovtrlgJpqvP7u4rt9g9hBIzs= Subject key identifier: E7:64:CF:EE:43:E7:A4:E1:E1:A6:A2:CA:0F:FA:94:2B:A9:C1:48:EC Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F432858482EC00F77F6EA0A296D976520 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2f731e1a-a297-3001-80b1-7b6f87b77ae3.roa Signing time: Thu 12 Dec 2024 14:00:51 +0000 ROA not before: Thu 12 Dec 2024 14:00:51 +0000 ROA not after: Wed 12 Mar 2025 13:00:51 +0000 asID: 834 IP address blocks: 68.67.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2e:c0:0f:77:f6:ea:0a:29:6d:97:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Dec 12 14:00:51 2024 GMT Not After : Mar 12 13:00:51 2025 GMT Subject: CN=c00704da-5f65-428f-9f6c-e870a09c9f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:29:8d:4c:1d:af:bc:e6:b6:da:fa:07:19:d8: 20:a2:ca:9e:fc:ed:95:cf:b6:81:29:9d:37:f7:ee: 90:04:b3:17:39:31:1a:50:9f:c2:50:94:74:ca:9b: 01:79:80:89:31:0f:f9:2f:f2:5e:52:c6:2c:16:ac: bf:d3:a4:20:81:81:50:4c:0f:e6:40:1a:ea:c3:f5: c1:71:ec:0f:27:5d:ec:2b:ac:e5:55:cd:74:16:55: 4c:fb:20:06:0c:c4:21:b6:21:c5:1c:c6:d8:66:28: c2:d8:69:aa:c9:e7:c5:a3:15:61:db:fe:37:34:92: 58:de:01:30:1e:6f:10:bb:69:8c:df:e0:4b:0d:2f: 69:bc:84:a1:a4:2d:27:6d:5c:63:1c:0b:1e:d5:9c: 12:c5:46:a4:4e:54:d7:fd:f7:d2:e2:8d:a3:e5:ad: 13:94:ec:7f:80:62:14:b7:0a:6d:09:65:78:8d:80: 3c:46:72:48:30:97:a3:80:6d:7d:83:88:97:33:70: a9:85:91:a8:1b:c4:eb:c6:f5:d1:ea:70:fa:fc:c5: 59:bd:92:13:67:48:fc:99:4d:d9:49:8f:cc:d8:e4: 35:4a:8c:b3:81:bb:82:7c:40:dd:d3:a5:b2:43:43: d7:e3:e6:b9:5d:35:27:4e:33:bf:19:9d:9f:b3:87: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:64:CF:EE:43:E7:A4:E1:E1:A6:A2:CA:0F:FA:94:2B:A9:C1:48:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2f731e1a-a297-3001-80b1-7b6f87b77ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:49:70:3c:19:da:8f:b0:3f:8d:e7:bb:4e:78:04:53:1a:44: 29:58:3a:0c:03:2a:25:f9:52:fc:ce:f0:5a:40:13:56:24:b0: a2:1d:20:c7:e8:3a:e8:48:11:ef:ae:07:f6:73:a1:b2:d7:75: 13:65:11:e6:44:e7:89:6e:02:3e:1b:7d:87:7d:87:35:d0:68: aa:65:6a:cf:8f:b2:93:64:f3:f8:35:4e:77:a8:73:71:74:9d: 7d:9a:80:d3:ed:a0:25:31:aa:d6:fe:65:97:1f:e5:30:d7:2d: eb:ad:c5:46:83:7b:0f:e0:bf:26:d0:7e:eb:f9:e3:1d:25:31: be:4d:ff:dd:11:1e:ac:1f:07:aa:72:a9:4e:df:03:67:3a:df: 75:cc:f8:e5:cd:47:8e:8f:4f:c4:97:fc:22:af:f8:0d:1d:44: 20:4b:97:df:85:3a:d6:90:7f:87:83:c4:9b:39:32:89:22:ff: dc:b5:e3:69:8d:b8:ec:13:73:b3:f9:7c:14:e6:0b:03:67:19: ad:f1:0e:c0:e8:15:8f:ee:44:9e:cd:55:83:7e:d4:de:71:58: c5:2b:de:41:de:37:2c:4d:ff:ac:47:76:74:33:5c:ad:b5:8a: 3c:65:6c:61:5b:c9:57:ae:f3:d9:30:1d:5e:86:2b:8b:3b:0c: 33:40:9e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguwA939uoKKW2XZSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk YzAwNzA0ZGEtNWY2NS00MjhmLTlmNmMtZTg3MGEwOWM5ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SmNTB2vvOa22voHGdggosqe/O2Vz7aBKZ03 9+6QBLMXOTEaUJ/CUJR0ypsBeYCJMQ/5L/JeUsYsFqy/06QggYFQTA/mQBrqw/XB cewPJ13sK6zlVc10FlVM+yAGDMQhtiHFHMbYZijC2GmqyefFoxVh2/43NJJY3gEw Hm8Qu2mM3+BLDS9pvIShpC0nbVxjHAse1ZwSxUakTlTX/ffS4o2j5a0TlOx/gGIU twptCWV4jYA8RnJIMJejgG19g4iXM3CphZGoG8TrxvXR6nD6/MVZvZITZ0j8mU3Z SY/M2OQ1SoyzgbuCfEDd06WyQ0PX4+a5XTUnTjO/GZ2fs4f3vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdkz+5D56Th4aaiyg/6lCupwUjsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvMmY3MzFlMWEtYTI5Ny0z MDAxLTgwYjEtN2I2Zjg3Yjc3YWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhJcDwZ2o+wP43nu054BFMaRClYOgwDKiX5UvzO8FpAE1YksKIdIMfo OuhIEe+uB/ZzobLXdRNlEeZE54luAj4bfYd9hzXQaKplas+PspNk8/g1Tneoc3F0 nX2agNPtoCUxqtb+ZZcf5TDXLeutxUaDew/gvybQfuv54x0lMb5N/90RHqwfB6py qU7fA2c633XM+OXNR46PT8SX/CKv+A0dRCBLl9+FOtaQf4eDxJs5Moki/9y142mN uOwTc7P5fBTmCwNnGa3xDsDoFY/uRJ7NVYN+1N5xWMUr3kHeNyxN/6xHdnQzXK21 ijxlbGFbyVeu89kwHV6GK4s7DDNAnv8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:24 2025 by rpki-client