$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa File: 6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa (raw, json) Hash identifier: EWieXe1BOIy18sNzFRPkYeQ0n2gQHn0900Bp+Q/Wsg8= Subject key identifier: 4C:0C:C5:95:39:19:6E:B5:B2:1E:E8:A4:0D:9E:72:4B:E9:D6:A1:E2 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858481F651FDDD9F09CABDBC0C7C0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa Signing time: Sat 07 Dec 2024 02:00:39 +0000 ROA not before: Sat 07 Dec 2024 02:00:39 +0000 ROA not after: Fri 07 Mar 2025 02:00:39 +0000 asID: 16815 IP address blocks: 67.217.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1f:65:1f:dd:d9:f0:9c:ab:db:c0:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Dec 7 02:00:39 2024 GMT Not After : Mar 7 02:00:39 2025 GMT Subject: CN=bf0a74dc-a96b-43a6-8ff9-7a75ba4dcef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f9:30:87:b3:20:7b:9b:b6:28:99:ba:45:81: e4:3e:25:ac:dc:a1:75:7e:4d:dc:27:06:a8:41:6f: 1a:44:d0:69:aa:76:26:1c:43:5d:6d:c7:7a:a0:22: b9:6e:03:b7:3c:a5:4e:a3:0f:48:f8:8d:bf:99:2a: e7:84:f1:db:06:59:db:5a:55:97:e7:7b:d6:1f:1f: 84:7a:25:45:08:2c:92:16:c4:53:89:67:57:34:86: 5f:8b:e0:90:8d:15:4b:48:f8:ec:15:a4:e6:c2:ae: f5:20:69:b3:21:69:ec:25:9d:02:5d:cb:2e:8f:fe: 9e:f7:ba:4a:e1:24:16:7c:1f:1e:6c:24:79:90:df: ce:cc:ae:8d:f4:40:a6:65:bd:6b:ef:dc:fb:63:3b: 1c:0e:e4:02:c7:0f:0e:2a:e4:35:cf:1d:90:4b:d4: 59:69:55:79:80:0e:c1:21:1b:21:86:42:0c:ef:81: f1:db:85:fd:2e:86:a4:7a:6f:b9:96:c0:09:d0:41: 13:30:07:20:82:41:81:b4:31:d0:3a:f3:87:41:16: da:a5:99:d9:0d:51:45:10:2f:86:5f:2e:40:45:58: c9:ca:18:a3:d2:47:56:1c:08:2d:4f:a2:9b:20:fb: 66:28:c6:72:fb:30:d0:5a:e4:d5:9d:73:63:65:74: 10:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0C:C5:95:39:19:6E:B5:B2:1E:E8:A4:0D:9E:72:4B:E9:D6:A1:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6a2da362-ab8e-30e7-aafe-7e3a59b11f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:43:3f:3c:eb:5e:99:15:30:21:a5:a5:c7:07:c7:71:0e:5a: 9d:2c:12:e9:a3:e8:6b:88:ea:6d:14:fa:97:3f:8e:c0:84:d7: 48:09:13:ac:df:22:71:8b:e9:f2:f8:94:f9:1e:ed:76:1d:e2: f2:0a:dd:8c:c0:d6:16:d1:02:14:c9:19:ad:6c:eb:6a:20:4a: 7e:a7:3c:08:ce:6d:b9:ef:52:e3:9f:c6:c4:98:4c:bb:d5:41: 99:0b:8b:c3:37:52:04:63:d6:a9:77:93:13:e3:e0:59:f7:c7: e8:92:45:a5:c2:19:e3:b9:48:45:0f:d6:eb:71:3e:58:5a:ca: e2:68:53:f9:27:2a:a8:29:f4:78:dd:e8:37:b8:cc:13:fc:00: 28:70:74:3f:47:8b:14:40:32:fe:67:db:be:38:1a:83:ae:46: 7f:b8:52:3d:90:43:44:3e:e2:08:a4:0f:98:d0:49:1a:75:ef: 01:18:ed:69:5f:52:ed:62:9e:31:c0:41:d1:59:73:ea:46:e7: 72:a7:20:13:97:e2:de:ee:01:8b:b2:02:61:5e:f0:6d:46:cb: 10:bd:54:5b:e9:cd:d4:d7:d8:e8:6a:6a:af:f2:ff:b7:11:e3: ab:13:48:18:c4:92:cd:dc:91:61:8e:22:08:a9:8b:b5:14:68: aa:6e:84:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZR/d2fCcq9vAx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk YmYwYTc0ZGMtYTk2Yi00M2E2LThmZjktN2E3NWJhNGRjZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfkwh7Mge5u2KJm6RYHkPiWs3KF1fk3cJwao QW8aRNBpqnYmHENdbcd6oCK5bgO3PKVOow9I+I2/mSrnhPHbBlnbWlWX53vWHx+E eiVFCCySFsRTiWdXNIZfi+CQjRVLSPjsFaTmwq71IGmzIWnsJZ0CXcsuj/6e97pK 4SQWfB8ebCR5kN/OzK6N9ECmZb1r79z7YzscDuQCxw8OKuQ1zx2QS9RZaVV5gA7B IRshhkIM74Hx24X9Loakem+5lsAJ0EETMAcggkGBtDHQOvOHQRbapZnZDVFFEC+G Xy5ARVjJyhij0kdWHAgtT6KbIPtmKMZy+zDQWuTVnXNjZXQQuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwMxZU5GW61sh7opA2eckvp1qHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNmEyZGEzNjItYWI4ZS0z MGU3LWFhZmUtN2UzYTU5YjExZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ9lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJDPzzrXpkVMCGlpccHx3EOWp0sEumj6GuI6m0U+pc/jsCE10gJE6zf InGL6fL4lPke7XYd4vIK3YzA1hbRAhTJGa1s62ogSn6nPAjObbnvUuOfxsSYTLvV QZkLi8M3UgRj1ql3kxPj4Fn3x+iSRaXCGeO5SEUP1utxPlhayuJoU/knKqgp9Hjd 6De4zBP8AChwdD9HixRAMv5n2744GoOuRn+4Uj2QQ0Q+4gikD5jQSRp17wEY7Wlf Uu1injHAQdFZc+pG53KnIBOX4t7uAYuyAmFe8G1GyxC9VFvpzdTX2Ohqaq/y/7cR 46sTSBjEks3ckWGOIgipi7UUaKpuhOM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:46 2025 by rpki-client