$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa File: 973a96a2-0162-35e7-90db-f4882fddf92f.roa (raw, json) Hash identifier: fIwIxfP8F5VgJCwcW2SjdVbKuN7b6Tod+1/HPenqqZQ= Subject key identifier: B2:BA:24:38:BF:9B:FF:6B:91:74:14:D3:85:52:D1:F7:27:E0:49:0C Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F43285848222FDB5996D6FB0F1515C280 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa Signing time: Sun 08 Dec 2024 02:00:39 +0000 ROA not before: Sun 08 Dec 2024 02:00:39 +0000 ROA not after: Sat 08 Mar 2025 02:00:39 +0000 asID: 16509 IP address blocks: 64.52.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:22:2f:db:59:96:d6:fb:0f:15:15:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Dec 8 02:00:39 2024 GMT Not After : Mar 8 02:00:39 2025 GMT Subject: CN=2b987b85-5890-4ac8-ae61-c2f134e825fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:13:f7:e1:ae:72:4f:07:56:81:48:a5:64:ef: 56:13:14:fd:e7:ec:40:db:32:83:ec:1b:8f:d9:fb: 29:c0:34:48:4f:04:e4:24:c3:b5:05:48:cc:97:90: a2:4b:e8:06:5a:25:04:9f:83:5e:4b:79:6a:10:cf: 52:b0:b6:e7:ff:29:9c:d1:91:8d:6a:2c:a3:63:2a: e4:1b:d9:fe:2a:26:f8:e2:4d:7d:7d:75:28:f2:ac: 45:91:23:62:b3:35:65:ac:04:ea:dd:f1:4b:a5:e7: 85:8d:55:ce:ac:c8:b7:a1:d3:0c:be:a2:5b:42:28: 7b:ef:28:10:c6:16:94:32:df:fb:6d:9b:e4:02:ab: 31:2b:5a:de:7c:4a:2e:cc:f1:ce:fe:3f:4e:e2:d3: df:9e:54:a8:7b:cd:76:14:43:17:79:5c:46:49:2e: 21:ce:c5:74:4d:43:ce:17:69:bc:06:92:e0:38:02: 93:e8:74:ee:24:a5:f5:95:52:6a:34:a1:5f:bc:21: 5d:5f:bb:b6:47:c2:ca:97:a5:94:99:18:63:7b:d5: d6:46:0d:56:79:fb:67:16:9c:0c:be:2c:dc:a9:3a: 5d:6a:5b:9a:2d:b5:f2:95:74:a6:18:5e:a6:cd:99: ab:ca:13:d9:e9:19:64:4e:62:97:5a:ce:9c:6a:d8: 7f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BA:24:38:BF:9B:FF:6B:91:74:14:D3:85:52:D1:F7:27:E0:49:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:91:63:ed:94:63:a1:12:42:d0:bd:8b:bf:cb:fb:00:ca:35: 62:db:8c:00:25:c8:45:73:00:37:80:a2:a3:72:9c:f2:30:f1: 69:4e:86:85:0b:c4:6a:bc:e1:4e:5b:e9:5b:95:2e:1d:50:9a: 92:0f:55:a5:a1:5a:97:ba:03:3d:9f:5e:27:42:ed:16:8c:f1: 2e:ff:3f:b5:74:d4:b9:4e:49:25:51:63:f9:31:40:1a:3d:c5: b2:ac:80:98:e9:59:dc:dd:74:68:ef:b3:10:0a:e2:ac:62:7b: fd:3d:f9:fd:1f:6f:37:87:f7:9b:fa:43:08:0e:7f:5f:37:ff: 31:11:77:f8:34:71:b2:2d:c5:b5:37:14:96:89:43:f5:b6:f2: 78:9c:ea:52:0a:c3:2c:12:a1:e5:4b:a5:6f:ac:5a:30:c6:39: 79:8f:5c:6e:40:9c:71:88:a5:58:34:ba:52:5a:e5:9d:e6:b8: a5:4d:67:b9:15:a2:3a:2f:ee:4d:4a:54:88:97:39:a2:e9:6f: 41:73:3e:b0:fb:fd:b9:7d:dd:ed:3d:82:05:30:c9:f3:5e:69: 55:5c:14:08:f9:b8:57:7d:ea:fa:a9:3a:42:b1:a3:39:be:bf: f0:1f:e4:d5:b1:04:67:e4:88:07:a0:8e:1d:7b:55:3c:34:6b: db:7c:d0:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL9tZltb7DxUVwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk MmI5ODdiODUtNTg5MC00YWM4LWFlNjEtYzJmMTM0ZTgyNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhP34a5yTwdWgUilZO9WExT95+xA2zKD7BuP 2fspwDRITwTkJMO1BUjMl5CiS+gGWiUEn4NeS3lqEM9SsLbn/ymc0ZGNaiyjYyrk G9n+Kib44k19fXUo8qxFkSNiszVlrATq3fFLpeeFjVXOrMi3odMMvqJbQih77ygQ xhaUMt/7bZvkAqsxK1refEouzPHO/j9O4tPfnlSoe812FEMXeVxGSS4hzsV0TUPO F2m8BpLgOAKT6HTuJKX1lVJqNKFfvCFdX7u2R8LKl6WUmRhje9XWRg1WeftnFpwM vizcqTpdaluaLbXylXSmGF6mzZmryhPZ6RlkTmKXWs6cath/KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLK6JDi/m/9rkXQU04VS0fcn4EkMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvOTczYTk2YTItMDE2Mi0z NWU3LTkwZGItZjQ4ODJmZGRmOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuRY+2UY6ESQtC9i7/L+wDKNWLbjAAlyEVzADeAoqNynPIw8WlOhoUL xGq84U5b6VuVLh1QmpIPVaWhWpe6Az2fXidC7RaM8S7/P7V01LlOSSVRY/kxQBo9 xbKsgJjpWdzddGjvsxAK4qxie/09+f0fbzeH95v6QwgOf183/zERd/g0cbItxbU3 FJaJQ/W28nic6lIKwywSoeVLpW+sWjDGOXmPXG5AnHGIpVg0ulJa5Z3muKVNZ7kV ojov7k1KVIiXOaLpb0FzPrD7/bl93e09ggUwyfNeaVVcFAj5uFd96vqpOkKxozm+ v/Af5NWxBGfkiAegjh17VTw0a9t80Ms= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:34 2025 by rpki-client