$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/7804d6d8-e8c4-3c3e-b06b-61f591887b21.roa File: 7804d6d8-e8c4-3c3e-b06b-61f591887b21.roa (raw, json) Hash identifier: 6z+w+dJ3zQ04vI4PyhgjD4L9MBUHbJWH7fFcAfN/qT4= Subject key identifier: FA:A0:13:5D:17:06:47:2F:9F:BB:C4:2E:E0:D3:27:27:FB:DE:07:AF Certificate issuer: /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Certificate serial: 010D0C9F4328584812D538D8457D9694E2389400 Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/7804d6d8-e8c4-3c3e-b06b-61f591887b21.roa Signing time: Mon 02 Dec 2024 14:00:51 +0000 ROA not before: Mon 02 Dec 2024 14:00:51 +0000 ROA not after: Sun 02 Mar 2025 14:00:51 +0000 asID: 36421 IP address blocks: 216.99.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:12:d5:38:d8:45:7d:96:94:e2:38:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Validity Not Before: Dec 2 14:00:51 2024 GMT Not After : Mar 2 14:00:51 2025 GMT Subject: CN=d29852f8-4a89-4148-ac88-7b86cd473add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:36:14:90:56:28:f3:a8:65:d9:02:86:3b: 01:a8:df:94:d9:1a:5f:89:5f:03:65:cd:4d:3c:5a: 44:2c:9d:25:e9:b4:db:22:81:be:5c:c9:19:a0:82: e1:7f:0b:6d:28:a1:04:2f:e0:d8:36:9a:b5:09:99: 4c:b6:49:39:d0:83:26:19:eb:20:c4:ee:98:4e:48: 90:65:8d:28:8c:b5:56:4b:3e:57:b2:03:55:9b:09: 36:38:67:ac:6c:c0:b4:b6:3d:59:57:a4:c1:b8:7b: ba:8b:cf:fe:85:00:ec:6e:8a:57:23:61:cd:92:94: 72:d8:67:2e:72:c5:d5:84:a3:4f:43:d5:b9:ca:c0: 8a:82:cf:8e:05:62:51:09:98:47:e8:6f:c0:3f:f9: bc:a0:e3:2f:cd:5c:05:58:d5:ca:c5:6b:c0:0c:75: b7:f8:01:e2:2b:08:84:f9:cd:ab:35:1f:46:11:55: 97:1c:37:ff:b7:e9:9b:ad:7b:f7:96:e8:82:96:06: 9e:ce:91:dd:67:1a:06:e9:6e:6b:1b:d5:64:63:e8: bf:45:f5:a5:df:00:31:c8:ca:41:a9:61:07:c3:cf: ff:41:79:56:83:0b:f4:bc:65:22:34:2a:cf:ab:92: 9a:d9:ac:80:93:4f:5c:0f:f7:af:f3:b3:64:d9:a0: f8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A0:13:5D:17:06:47:2F:9F:BB:C4:2E:E0:D3:27:27:FB:DE:07:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/7804d6d8-e8c4-3c3e-b06b-61f591887b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl X509v3 Authority Key Identifier: keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer sbgp-ipAddrBlock: critical IPv4: 216.99.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:69:c5:af:8c:85:77:e7:d1:fb:7f:d0:93:4a:47:1e:12:18: 53:19:36:4c:5b:6c:39:a6:24:58:ca:3a:f0:ed:57:88:d8:7d: 33:87:2c:d2:61:6c:5d:b4:9e:4a:78:d5:f1:f6:0d:2f:ec:1f: 70:e8:ef:1b:45:21:c9:d7:b6:90:ac:f0:16:82:f4:52:40:1f: c1:7d:4c:22:bf:cb:ca:b4:95:72:f0:06:4f:18:32:ca:9b:ce: cf:07:8c:96:a1:bf:aa:24:98:b0:3b:b3:98:0e:85:0c:8d:2b: fe:6d:53:56:25:43:f1:d1:0c:ed:3a:72:0f:0f:a8:2f:af:03: ac:40:a6:fb:8f:1d:ce:a9:4a:8f:29:92:4f:96:ea:b1:59:7f: b9:20:d5:a9:e7:00:45:28:13:92:76:ad:87:57:61:7a:10:54: 18:29:c3:fe:fd:54:0e:e7:a6:fd:06:7c:73:49:4e:3c:99:27: 52:81:29:17:73:c5:fc:b6:2f:c2:1e:4e:10:95:75:7b:24:88: 59:d0:ee:7d:c6:7f:a7:c1:30:0d:3a:f2:b6:cc:a4:68:7b:f4: 3a:50:18:0b:bf:aa:c8:f6:1e:fc:42:e7:0f:2d:c3:cf:21:fb: d9:6c:e1:a8:43:b0:dd:9f:e7:3c:af:6f:b2:fd:2a:29:dd:f6: 4c:5d:89:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1TjYRX2WlOI4lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY3MmE3OTgtYTk3OS00ZjUxLTg1YWUtZTBlZWMzZGNi OWY3MB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk ZDI5ODUyZjgtNGE4OS00MTQ4LWFjODgtN2I4NmNkNDczYWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqY2FJBWKPOoZdkChjsBqN+U2RpfiV8DZc1N PFpELJ0l6bTbIoG+XMkZoILhfwttKKEEL+DYNpq1CZlMtkk50IMmGesgxO6YTkiQ ZY0ojLVWSz5XsgNVmwk2OGesbMC0tj1ZV6TBuHu6i8/+hQDsbopXI2HNkpRy2Gcu csXVhKNPQ9W5ysCKgs+OBWJRCZhH6G/AP/m8oOMvzVwFWNXKxWvADHW3+AHiKwiE +c2rNR9GEVWXHDf/t+mbrXv3luiClgaezpHdZxoG6W5rG9VkY+i/RfWl3wAxyMpB qWEHw8//QXlWgwv0vGUiNCrPq5Ka2ayAk09cD/ev87Nk2aD4KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqgE10XBkcvn7vELuDTJyf73gevMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcy YTc5OC1hOTc5LTRmNTEtODVhZS1lMGVlYzNkY2I5ZjcvNzgwNGQ2ZDgtZThjNC0z YzNlLWIwNmItNjFmNTkxODg3YjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzY3MmE3OTgtYTk3OS00ZjUxLTg1 YWUtZTBlZWMzZGNiOWY3L2M2NzJhNzk4LWE5NzktNGY1MS04NWFlLWUwZWVjM2Rj YjlmNy5jcmwwHwYDVR0jBBgwFoAUuikoNWCwwHyqzvaenrqtsKIgNgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcyYTc5OC1hOTc5LTRmNTEtODVhZS1lMGVl YzNkY2I5ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2GOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5pxa+MhXfn0ft/0JNKRx4SGFMZNkxbbDmmJFjKOvDtV4jYfTOHLNJh bF20nkp41fH2DS/sH3Do7xtFIcnXtpCs8BaC9FJAH8F9TCK/y8q0lXLwBk8YMsqb zs8HjJahv6okmLA7s5gOhQyNK/5tU1YlQ/HRDO06cg8PqC+vA6xApvuPHc6pSo8p kk+W6rFZf7kg1annAEUoE5J2rYdXYXoQVBgpw/79VA7npv0GfHNJTjyZJ1KBKRdz xfy2L8IeThCVdXskiFnQ7n3Gf6fBMA068rbMpGh79DpQGAu/qsj2HvxC5w8tw88h +9ls4ahDsN2f5zyvb7L9Kind9kxdiZ0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:45 2025 by rpki-client