$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/851f3e0b-80ca-32fe-ae16-0ea062c4e4b8.roa File: 851f3e0b-80ca-32fe-ae16-0ea062c4e4b8.roa (raw, json) Hash identifier: TgOXGsoJNV5b3tLk6NXv6nDfPXTr2gYxXS5o792NMLg= Subject key identifier: 77:9D:24:6A:2F:D8:A4:F8:99:F1:60:DC:EA:BA:73:CF:E9:DD:B4:53 Certificate issuer: /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Certificate serial: 010D0C9F4328584851A575D9B11BE86C34BC7500 Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/851f3e0b-80ca-32fe-ae16-0ea062c4e4b8.roa Signing time: Wed 25 Dec 2024 02:00:38 +0000 ROA not before: Wed 25 Dec 2024 02:00:38 +0000 ROA not after: Tue 25 Mar 2025 01:00:38 +0000 asID: 36374 IP address blocks: 216.122.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:a5:75:d9:b1:1b:e8:6c:34:bc:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Validity Not Before: Dec 25 02:00:38 2024 GMT Not After : Mar 25 01:00:38 2025 GMT Subject: CN=ec26639b-cf91-4bd8-b972-b20079afebf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:eb:b5:09:48:a8:84:19:f1:00:13:e1:30: a7:43:91:b8:95:6a:f2:af:de:67:25:7c:72:0b:cd: d7:36:4e:1e:af:4c:4a:ef:f3:dc:fe:33:51:3d:fd: 4e:58:b3:94:9c:ef:8c:35:50:50:6e:28:b7:57:38: 80:27:ad:d0:4b:6e:a2:b6:3a:38:29:7f:27:c6:12: 41:2f:33:01:a0:97:cb:a1:2d:0c:15:37:e3:9d:f6: 42:49:5c:e7:71:20:71:0d:e9:b4:1c:6e:12:90:d8: 82:49:a7:b1:08:42:1f:b6:d7:4d:ba:05:41:ea:69: 27:c9:82:4a:ac:a7:8c:c1:2f:3b:07:78:35:08:22: 19:84:a2:47:5a:93:f2:fa:7f:6c:b2:3d:9f:d7:07: 5e:1b:e2:b6:19:1f:8e:f6:09:4c:02:be:17:14:1e: 36:54:37:bb:a3:1d:8d:52:1d:4f:de:a6:12:a1:09: bf:5f:7b:aa:c1:a7:c6:a7:37:e6:75:c6:53:de:dc: bf:2d:97:cc:8e:15:5c:74:30:dc:19:20:ed:20:9e: 9d:c6:d9:c6:05:8e:80:a0:df:d1:b8:a3:4d:09:47: 65:16:4e:8b:b0:5a:b7:45:e7:20:e8:d8:12:41:65: 54:25:3a:71:7d:40:22:fd:8e:aa:76:37:fa:a1:ea: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9D:24:6A:2F:D8:A4:F8:99:F1:60:DC:EA:BA:73:CF:E9:DD:B4:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/851f3e0b-80ca-32fe-ae16-0ea062c4e4b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl X509v3 Authority Key Identifier: keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer sbgp-ipAddrBlock: critical IPv4: 216.122.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:7a:61:c0:fc:1c:1a:f2:1a:e9:bb:fc:53:83:ed:a2:dd:20: ca:67:34:4c:94:89:b9:f5:c6:49:4f:b0:f0:d0:ee:55:cf:52: 3c:2e:8b:1b:b5:d7:81:c2:6c:7b:f7:01:94:f4:9c:72:9b:cc: 40:f2:24:98:1a:32:a4:09:09:dd:48:1f:bf:10:c3:e5:76:14: 42:89:a7:d3:f2:7f:7d:d4:c1:87:8c:e1:cd:49:31:7a:e2:6e: c4:94:44:ed:95:f5:25:85:ba:aa:a3:a8:a2:0a:af:da:85:16: a4:0d:c0:b3:5c:a2:55:20:e4:dc:23:03:68:a9:4c:0d:b9:99: 9c:10:33:d3:19:9f:93:88:03:65:23:03:b8:39:e1:35:19:87: 84:e8:18:9c:04:c3:62:a7:f4:a2:34:b5:a7:20:c6:e5:40:8d: e7:32:d8:74:0b:66:b4:b6:fb:7d:d4:8d:4f:ae:6d:c2:6e:be: d7:42:5e:d4:6d:a9:b4:24:1e:c3:8a:4c:96:2f:f6:8e:4a:4a: e8:59:12:65:ee:af:1c:3c:47:e0:59:df:7a:01:63:be:28:a5: 36:92:62:51:8d:77:9d:51:f6:cd:c2:2a:0e:0f:0e:65:ab:3c: e2:cd:85:32:b1:50:9b:5e:26:3e:45:d5:8e:82:0d:cb:00:d2: aa:b8:53:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpXXZsRvobDS8dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E2MjBkNDUtMWYyNi00NjBjLTlhM2UtOWJjMGNjNGE1 ZDU5MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk ZWMyNjYzOWItY2Y5MS00YmQ4LWI5NzItYjIwMDc5YWZlYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxPrtQlIqIQZ8QAT4TCnQ5G4lWryr95nJXxy C83XNk4er0xK7/Pc/jNRPf1OWLOUnO+MNVBQbii3VziAJ63QS26itjo4KX8nxhJB LzMBoJfLoS0MFTfjnfZCSVzncSBxDem0HG4SkNiCSaexCEIfttdNugVB6mknyYJK rKeMwS87B3g1CCIZhKJHWpPy+n9ssj2f1wdeG+K2GR+O9glMAr4XFB42VDe7ox2N Uh1P3qYSoQm/X3uqwafGpzfmdcZT3ty/LZfMjhVcdDDcGSDtIJ6dxtnGBY6AoN/R uKNNCUdlFk6LsFq3Recg6NgSQWVUJTpxfUAi/Y6qdjf6oep71wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHedJGov2KT4mfFg3Oq6c8/p3bRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTYy MGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMwY2M0YTVkNTkvODUxZjNlMGItODBjYS0z MmZlLWFlMTYtMGVhMDYyYzRlNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2E2MjBkNDUtMWYyNi00NjBjLTlh M2UtOWJjMGNjNGE1ZDU5LzdhNjIwZDQ1LTFmMjYtNDYwYy05YTNlLTliYzBjYzRh NWQ1OS5jcmwwHwYDVR0jBBgwFoAUKRxwwEbJq9wo7iaQmtx92QAr9MIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTYyMGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMw Y2M0YTVkNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2HpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF6YcD8HBryGum7/FOD7aLdIMpnNEyUibn1xklPsPDQ7lXPUjwuixu1 14HCbHv3AZT0nHKbzEDyJJgaMqQJCd1IH78Qw+V2FEKJp9Pyf33UwYeM4c1JMXri bsSURO2V9SWFuqqjqKIKr9qFFqQNwLNcolUg5NwjA2ipTA25mZwQM9MZn5OIA2Uj A7g54TUZh4ToGJwEw2Kn9KI0tacgxuVAjecy2HQLZrS2+33UjU+ubcJuvtdCXtRt qbQkHsOKTJYv9o5KSuhZEmXurxw8R+BZ33oBY74opTaSYlGNd51R9s3CKg4PDmWr POLNhTKxUJteJj5F1Y6CDcsA0qq4U1w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:59 2025 by rpki-client