$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa File: 2d8ca45f-228d-3ffc-9008-f26a1700290a.roa (raw, json) Hash identifier: UxK9dTEM9G2Yk2wy5T/yA8gA5OWKvg6ClnIQ8iwbnV4= Subject key identifier: AD:1F:F7:91:B4:DF:74:45:24:EF:5C:68:0F:AD:32:E8:0F:B9:21:E7 Certificate issuer: /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Certificate serial: 010D0C9F432858484515924E2F7CB79C1A6D9470 Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 8075 IP address blocks: 216.99.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:92:4e:2f:7c:b7:9c:1a:6d:94:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=3f6bfba6-a85f-4cee-96d2-c8c7899b9e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:46:2f:0c:e7:29:cf:1e:f2:4f:e9:e5:6c: 72:09:82:0c:0c:47:7e:0b:f0:fd:0c:59:fd:30:05: 74:a4:3d:6b:a2:24:77:33:91:57:bb:68:cf:7f:3e: 58:a9:f6:de:43:51:86:13:d0:ed:f6:c5:12:9c:37: dc:16:8f:dd:3c:fc:8a:db:ee:70:20:37:87:95:d1: fb:f0:5e:ca:5f:7c:43:04:bc:ef:62:45:36:41:5a: 94:4e:f1:98:ed:5a:d8:6e:7b:c2:48:be:46:ca:5c: 45:19:2c:d6:03:8a:77:28:0d:7b:e8:15:af:2e:8b: 46:93:c7:31:f0:e4:30:76:11:25:a2:77:aa:cc:4f: ef:cc:06:58:cc:cf:4f:33:f0:3a:5e:1d:a1:45:ef: 84:e0:ae:73:ed:5a:ba:da:70:54:ee:56:32:16:00: 2a:54:f0:62:0d:96:7a:12:ff:49:35:78:e2:1a:f5: e0:24:b0:7c:4c:6b:bd:e1:38:6f:16:1a:54:30:c4: 15:a3:81:14:0c:1e:2c:68:c1:1a:07:5a:af:64:62: 48:c6:dd:8a:a7:a7:76:60:60:b9:c3:3b:08:fb:85: f9:13:81:c4:72:9c:95:be:68:6a:2a:fb:f7:b3:4a: 54:91:3b:81:2c:da:71:10:94:5d:f3:d5:13:f3:b5: aa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1F:F7:91:B4:DF:74:45:24:EF:5C:68:0F:AD:32:E8:0F:B9:21:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl X509v3 Authority Key Identifier: keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer sbgp-ipAddrBlock: critical IPv4: 216.99.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:f3:fa:c9:89:4c:79:79:b3:d6:72:17:e0:96:51:df:1f:40: 70:0a:f5:94:50:4a:70:aa:63:27:77:d2:02:18:78:7b:fb:25: 0e:0c:52:c8:ab:da:80:3f:c9:44:48:ee:6a:6d:a6:ff:af:ee: 2e:ea:85:55:e9:ad:e1:50:9d:3e:65:64:40:21:33:09:e4:b1: 98:53:76:05:5f:95:26:6d:db:63:57:55:65:8d:22:c8:df:77: 0b:6e:a9:d0:11:3c:c8:2c:7b:bd:47:66:a3:b8:e5:c7:5c:a0: 70:5a:99:9d:93:95:b4:4c:d4:f8:04:28:f9:58:9b:ed:c7:b2: ae:8e:22:6f:2c:b8:1d:e9:77:7a:37:a5:17:9a:a3:34:7c:0f: 2c:7c:ad:ef:7c:13:a8:0b:dd:a3:48:22:f4:ba:55:82:1d:ea: c5:b1:76:b8:80:cf:2a:b4:2b:95:cc:ff:cc:f1:78:96:23:87: b4:5c:1b:23:27:f2:e3:5e:19:74:6b:b2:97:6f:c5:66:2a:10: dc:83:aa:14:9b:6f:f7:3d:9f:60:4d:f8:a8:80:51:3a:d2:68: 46:7d:74:cf:b4:e0:b0:2a:4f:aa:8d:35:be:c8:0c:a4:bd:1b: ec:8a:cf:0e:98:ae:be:9a:b5:a9:a0:cd:89:fb:2e:41:a8:6c: 10:86:7e:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFZJOL3y3nBptlHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY3MmE3OTgtYTk3OS00ZjUxLTg1YWUtZTBlZWMzZGNi OWY3MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk M2Y2YmZiYTYtYTg1Zi00Y2VlLTk2ZDItYzhjNzg5OWI5ZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwehGLwznKc8e8k/p5WxyCYIMDEd+C/D9DFn9 MAV0pD1roiR3M5FXu2jPfz5YqfbeQ1GGE9Dt9sUSnDfcFo/dPPyK2+5wIDeHldH7 8F7KX3xDBLzvYkU2QVqUTvGY7VrYbnvCSL5GylxFGSzWA4p3KA176BWvLotGk8cx 8OQwdhEloneqzE/vzAZYzM9PM/A6Xh2hRe+E4K5z7Vq62nBU7lYyFgAqVPBiDZZ6 Ev9JNXjiGvXgJLB8TGu94ThvFhpUMMQVo4EUDB4saMEaB1qvZGJIxt2Kp6d2YGC5 wzsI+4X5E4HEcpyVvmhqKvv3s0pUkTuBLNpxEJRd89UT87WqqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0f95G033RFJO9caA+tMugPuSHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcy YTc5OC1hOTc5LTRmNTEtODVhZS1lMGVlYzNkY2I5ZjcvMmQ4Y2E0NWYtMjI4ZC0z ZmZjLTkwMDgtZjI2YTE3MDAyOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzY3MmE3OTgtYTk3OS00ZjUxLTg1 YWUtZTBlZWMzZGNiOWY3L2M2NzJhNzk4LWE5NzktNGY1MS04NWFlLWUwZWVjM2Rj YjlmNy5jcmwwHwYDVR0jBBgwFoAUuikoNWCwwHyqzvaenrqtsKIgNgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcyYTc5OC1hOTc5LTRmNTEtODVhZS1lMGVl YzNkY2I5ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2GOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjz+smJTHl5s9ZyF+CWUd8fQHAK9ZRQSnCqYyd30gIYeHv7JQ4MUsir 2oA/yURI7mptpv+v7i7qhVXpreFQnT5lZEAhMwnksZhTdgVflSZt22NXVWWNIsjf dwtuqdARPMgse71HZqO45cdcoHBamZ2TlbRM1PgEKPlYm+3Hsq6OIm8suB3pd3o3 pReaozR8Dyx8re98E6gL3aNIIvS6VYId6sWxdriAzyq0K5XM/8zxeJYjh7RcGyMn 8uNeGXRrspdvxWYqENyDqhSbb/c9n2BN+KiAUTrSaEZ9dM+04LAqT6qNNb7IDKS9 G+yKzw6Yrr6atamgzYn7LkGobBCGfjs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:19 2025 by rpki-client