$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/f1be4de9-e20f-315c-a751-f51dffa6b7f0.roa File: f1be4de9-e20f-315c-a751-f51dffa6b7f0.roa (raw, json) Hash identifier: HKycIJvQKVymuLsKnn9cY+d0R6Xg9G2EolLpApFmsmc= Subject key identifier: 14:ED:9E:FF:2D:57:53:C0:F2:FD:BA:00:06:A2:5D:09:B0:C6:C4:25 Certificate issuer: /CN=960e110b-8a58-4e15-a2f1-8d907656427c Certificate serial: 010D0C9F43285848090FAB9354EF0B631A513B00 Authority key identifier: 1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/f1be4de9-e20f-315c-a751-f51dffa6b7f0.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 14618 IP address blocks: 69.10.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:ab:93:54:ef:0b:63:1a:51:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=960e110b-8a58-4e15-a2f1-8d907656427c Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=de4890f3-4af0-4851-adc7-dec74333b38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:df:bc:a0:b4:06:b9:a5:6a:aa:9b:fe:10:91: af:2e:8f:24:f2:4c:57:2a:b1:73:6a:a4:6e:2f:05: 69:04:8c:a3:13:4f:fa:64:01:c3:46:4d:0b:29:c7: 5a:36:b8:37:60:1f:25:c6:7a:31:d6:99:dd:d7:cc: e0:32:51:b6:48:00:af:a0:a7:ba:d0:da:aa:75:6c: 2b:db:e5:45:df:04:64:ae:62:2e:d6:3e:01:ff:37: 3c:a4:37:82:1b:a3:be:f5:11:9e:34:36:72:dc:cb: 74:99:5d:00:17:d7:24:15:f4:1d:23:3d:7b:94:8a: ad:e6:74:47:c8:43:52:f6:16:1d:f3:ae:1f:86:c5: 75:c3:25:67:4b:92:5a:8c:0e:53:0b:1c:41:02:2a: e1:8e:9d:aa:96:31:31:88:f8:be:c0:f7:47:95:d0: 92:86:ae:6f:15:be:62:f5:c0:51:95:d1:96:c2:f3: d6:16:c0:9c:41:c8:f1:3f:74:2a:8d:74:54:c5:9a: 1e:2e:03:a1:c2:83:4f:d6:c1:4e:66:6d:df:24:44: 20:ca:a8:bb:95:ac:db:0a:65:d6:41:a9:6d:ea:7f: 59:fb:26:ef:73:41:32:13:12:18:d4:c3:ee:a3:56: 96:13:5e:f3:c8:aa:71:2c:cd:5a:10:71:79:0e:de: e4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:ED:9E:FF:2D:57:53:C0:F2:FD:BA:00:06:A2:5D:09:B0:C6:C4:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/f1be4de9-e20f-315c-a751-f51dffa6b7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl X509v3 Authority Key Identifier: keyid:1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer sbgp-ipAddrBlock: critical IPv4: 69.10.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:cc:25:a0:9f:d8:1f:5b:51:c1:c7:71:00:ac:2e:0c:1c:73: 14:fe:ce:d7:be:7a:09:53:3c:4f:be:26:41:af:00:5f:7a:6a: 5c:c6:79:00:af:ba:b9:33:3a:f8:1c:de:a4:14:df:74:63:52: 04:00:82:d2:6a:d9:3f:a7:0a:2c:7f:bc:fe:89:58:52:91:20: 73:32:14:f4:9e:98:cc:d2:6e:dc:95:2a:28:92:74:0d:28:52: 5f:20:fc:0d:1c:c1:06:f4:ef:98:be:b9:ed:7a:1a:1e:b3:65: 94:44:1e:1d:5f:0c:14:c2:60:0d:0a:4c:ef:da:bc:7f:d5:1a: ac:5c:7c:b2:e3:fd:68:02:77:0c:13:a5:b1:80:a3:f2:63:6d: 3c:0e:91:e5:09:1d:7a:a0:b5:92:4d:b7:51:aa:b2:bc:ea:e3: 13:b8:22:bd:d2:aa:d0:19:bc:b2:21:c4:4d:67:19:9e:c1:ad: f0:0b:92:69:86:b6:09:40:bf:39:8d:63:76:41:b5:42:b5:4d: 16:9b:ad:ab:74:41:3d:09:62:66:6f:8f:91:b1:0b:52:e3:74: 30:3b:fe:de:2f:04:48:25:3a:46:6b:28:24:de:92:dc:f3:e1: 7b:e8:06:30:7b:7a:e0:3c:b9:96:4c:3a:31:77:bf:00:2a:0a: fc:c3:7f:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD6uTVO8LYxpROwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYwZTExMGItOGE1OC00ZTE1LWEyZjEtOGQ5MDc2NTY0 MjdjMB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk ZGU0ODkwZjMtNGFmMC00ODUxLWFkYzctZGVjNzQzMzNiMzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN+8oLQGuaVqqpv+EJGvLo8k8kxXKrFzaqRu LwVpBIyjE0/6ZAHDRk0LKcdaNrg3YB8lxnox1pnd18zgMlG2SACvoKe60NqqdWwr 2+VF3wRkrmIu1j4B/zc8pDeCG6O+9RGeNDZy3Mt0mV0AF9ckFfQdIz17lIqt5nRH yENS9hYd864fhsV1wyVnS5JajA5TCxxBAirhjp2qljExiPi+wPdHldCShq5vFb5i 9cBRldGWwvPWFsCcQcjxP3QqjXRUxZoeLgOhwoNP1sFOZm3fJEQgyqi7lazbCmXW Qalt6n9Z+ybvc0EyExIY1MPuo1aWE17zyKpxLM1aEHF5Dt7krwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTtnv8tV1PA8v26AAaiXQmwxsQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjBl MTEwYi04YTU4LTRlMTUtYTJmMS04ZDkwNzY1NjQyN2MvZjFiZTRkZTktZTIwZi0z MTVjLWE3NTEtZjUxZGZmYTZiN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTYwZTExMGItOGE1OC00ZTE1LWEy ZjEtOGQ5MDc2NTY0MjdjLzk2MGUxMTBiLThhNTgtNGUxNS1hMmYxLThkOTA3NjU2 NDI3Yy5jcmwwHwYDVR0jBBgwFoAUG4unJBoQNOgwpGOK6KOnjQ5dnbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjBlMTEwYi04YTU4LTRlMTUtYTJmMS04ZDkw NzY1NjQyN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfMJaCf2B9bUcHHcQCsLgwccxT+zte+eglTPE++JkGvAF96alzGeQCv urkzOvgc3qQU33RjUgQAgtJq2T+nCix/vP6JWFKRIHMyFPSemMzSbtyVKiiSdA0o Ul8g/A0cwQb075i+ue16Gh6zZZREHh1fDBTCYA0KTO/avH/VGqxcfLLj/WgCdwwT pbGAo/JjbTwOkeUJHXqgtZJNt1Gqsrzq4xO4Ir3SqtAZvLIhxE1nGZ7BrfALkmmG tglAvzmNY3ZBtUK1TRabrat0QT0JYmZvj5GxC1LjdDA7/t4vBEglOkZrKCTektzz 4XvoBjB7euA8uZZMOjF3vwAqCvzDf9Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:56 2025 by rpki-client