$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa File: 37677602-0a43-34e8-9622-a4ac56d7d1e8.roa (raw, json) Hash identifier: aXG2PeTiHjUQDRCqteOPa+JvBeehO2WdhRL0zD4EQV4= Subject key identifier: 66:1F:81:B5:95:CD:FE:2E:41:50:81:99:56:06:66:50:D7:38:1E:24 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F43285848AF2B77F68B77627A3FF8BF00 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 64.52.111.0/24 maxlen: 24 192.153.76.0/24 maxlen: 24 199.201.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:77:f6:8b:77:62:7a:3f:f8:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=843de6c4-07b3-44b9-b809-29c6644e2033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:34:5d:93:5a:c6:e6:41:66:27:23:3c:be:00: 22:f9:f8:ef:7c:d4:aa:ee:eb:84:74:2c:dd:c6:52: 97:09:5d:e2:bd:fa:ef:ba:15:09:f9:25:48:ad:22: 55:ca:53:39:9d:e4:96:c7:58:f5:d5:c1:ac:60:91: fd:2a:50:91:42:60:a2:b6:5a:15:22:79:0f:ec:b2: 68:88:5d:53:4f:da:c0:a9:17:e6:17:03:69:90:70: 2c:29:79:61:95:73:3b:14:47:c4:2e:a4:1c:31:9f: 06:52:ae:4b:eb:32:1a:1f:bb:9b:47:f3:4d:82:ba: 8b:41:ad:bb:71:6c:d5:d6:7e:eb:51:20:7f:49:b2: f7:35:d9:41:17:3e:4e:d0:63:c0:0b:72:41:a3:96: 34:ea:ac:fd:bb:2e:c8:f9:5a:88:76:68:65:b3:44: 2a:a7:eb:10:a6:1a:7a:79:1c:fa:b7:49:1a:3d:4b: 1c:91:6b:f3:1e:75:88:51:22:7e:86:64:65:88:90: a6:6b:17:3b:30:97:a5:32:df:65:41:17:85:fc:af: d6:bf:40:b1:55:2e:ab:0a:2b:4d:bc:1d:94:73:13: 9b:8d:2a:77:44:f0:c6:99:33:de:9e:7c:88:85:2a: 8f:55:50:52:20:54:a1:4e:7b:72:97:bf:f1:74:04: bf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1F:81:B5:95:CD:FE:2E:41:50:81:99:56:06:66:50:D7:38:1E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 192.153.76.0/24 199.201.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:aa:8b:b6:4d:62:2d:fd:f6:2b:2d:38:c4:d5:25:c6:62:49: 5f:7d:c8:09:66:ea:25:b1:2c:f8:8e:e7:f4:1a:38:1b:b1:32: 29:9d:f6:b2:88:ee:e6:45:de:d8:9f:fc:c6:ef:47:02:d2:4d: 02:ca:51:92:ff:f4:e7:3f:dd:23:bd:88:12:f3:cb:88:c7:e2: 67:bc:e0:ac:82:2b:97:14:14:21:1a:36:9e:62:27:12:8d:49: 62:0b:ac:8d:94:8f:d7:e3:7f:22:e4:23:c0:b0:e8:f8:d6:86: 3a:ac:2e:99:66:64:4a:29:d5:45:68:75:d4:b8:6a:bf:7a:6e: 6e:c1:a9:49:2b:f5:5c:c9:05:37:cb:b4:53:fd:5c:a2:8a:3b: 7f:76:17:2a:62:dd:ad:3f:27:07:97:a8:9a:a3:5d:58:9a:44: 07:51:a9:b5:8a:85:d7:9a:b9:5f:ec:7a:8a:ac:fb:61:e5:18: 00:85:90:38:d1:a0:af:68:07:55:2a:c0:56:ed:d6:12:08:d1: dd:96:6a:8a:7f:9a:91:66:ef:da:1c:59:55:85:94:91:d0:ae: 32:7a:96:c7:4b:31:24:b4:15:ca:55:ca:04:ae:08:99:8e:44: 5e:d7:52:ae:80:85:15:69:b8:f6:b8:aa:6d:5b:d9:85:48:64: a0:5e:09:6c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEivK3f2i3diej/4vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ODQzZGU2YzQtMDdiMy00NGI5LWI4MDktMjljNjY0NGUyMDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzRdk1rG5kFmJyM8vgAi+fjvfNSq7uuEdCzd xlKXCV3ivfrvuhUJ+SVIrSJVylM5neSWx1j11cGsYJH9KlCRQmCitloVInkP7LJo iF1TT9rAqRfmFwNpkHAsKXlhlXM7FEfELqQcMZ8GUq5L6zIaH7ubR/NNgrqLQa27 cWzV1n7rUSB/SbL3NdlBFz5O0GPAC3JBo5Y06qz9uy7I+VqIdmhls0Qqp+sQphp6 eRz6t0kaPUsckWvzHnWIUSJ+hmRliJCmaxc7MJelMt9lQReF/K/Wv0CxVS6rCitN vB2UcxObjSp3RPDGmTPennyIhSqPVVBSIFShTntyl7/xdAS/awIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGYfgbWVzf4uQVCBmVYGZlDXOB4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvMzc2Nzc2MDItMGE0My0z NGU4LTk2MjItYTRhYzU2ZDdkMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQDRvAwQA wJlMAwQAx8l/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAESqi7ZNYi399istOMTVJcZiSV99yAlm6iWxLPiO 5/QaOBuxMimd9rKI7uZF3tif/MbvRwLSTQLKUZL/9Oc/3SO9iBLzy4jH4me84KyC K5cUFCEaNp5iJxKNSWILrI2Uj9fjfyLkI8Cw6PjWhjqsLplmZEop1UVoddS4ar96 bm7BqUkr9VzJBTfLtFP9XKKKO392Fypi3a0/JweXqJqjXViaRAdRqbWKhdeauV/s eoqs+2HlGACFkDjRoK9oB1UqwFbt1hII0d2Waop/mpFm79ocWVWFlJHQrjJ6lsdL MSS0FcpVygSuCJmORF7XUq6AhRVpuPa4qm1b2YVIZKBeCWw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:21 2025 by rpki-client