$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa File: 76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa (raw, json) Hash identifier: gCFLcXzsCnuX6Xzh8i0D9afDvEd0HGo8aPjXdYfGZc4= Subject key identifier: 4B:AA:D7:DD:80:6A:33:90:F5:10:36:3C:15:99:7E:DC:03:AA:21:45 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F432858481DFFE4222109056D17CF7240 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa Signing time: Fri 06 Dec 2024 14:00:51 +0000 ROA not before: Fri 06 Dec 2024 14:00:51 +0000 ROA not after: Thu 06 Mar 2025 14:00:51 +0000 asID: 8014 IP address blocks: 216.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1d:ff:e4:22:21:09:05:6d:17:cf:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Dec 6 14:00:51 2024 GMT Not After : Mar 6 14:00:51 2025 GMT Subject: CN=b0d90cc6-7e19-4f94-b579-a51ef86b2cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bc:29:bf:58:d8:13:da:48:0a:5a:82:84:a9: 7e:70:fa:32:b5:99:b6:42:b6:cc:6d:43:3c:80:5e: aa:c8:b7:1a:87:b8:43:02:a7:bb:57:55:24:e7:7b: 4a:3f:e2:e7:52:d9:90:b3:a7:e0:db:9f:f4:1f:44: 12:58:47:52:92:64:e2:0b:a1:20:59:9e:6c:f0:93: 64:df:a2:9a:12:3e:19:27:8f:3b:93:b5:95:b1:57: 71:cf:6f:e8:13:e4:03:43:ca:87:c0:24:ca:10:26: 8b:93:c2:06:62:a6:1e:eb:e6:6c:a3:e7:77:61:ab: 8a:0b:09:cd:c9:ca:05:5b:b1:a4:c5:5a:b4:a2:b1: 41:30:0b:b6:15:09:9c:a2:a3:7c:0d:bd:f2:78:21: 6e:86:12:67:34:3e:5b:3c:fb:b1:f6:c5:dc:9c:04: 2a:55:c5:32:99:34:74:17:12:9d:57:25:2f:7a:ee: 8a:a2:c5:ff:79:55:e4:38:33:ed:38:a5:75:59:77: 59:f2:a6:70:ce:da:26:34:a3:40:a3:f9:c6:77:40: 7a:9c:10:4c:9d:7d:ab:18:20:78:b5:ec:8f:a3:59: f2:72:10:5d:14:ba:36:7e:0d:1c:0b:46:79:6f:d8: ab:7e:72:7a:e4:5e:24:92:b7:ce:f4:66:9f:58:02: c3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AA:D7:DD:80:6A:33:90:F5:10:36:3C:15:99:7E:DC:03:AA:21:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 216.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d5:c0:62:2e:02:70:58:c7:27:24:35:2b:8f:b4:6e:f6:29: 36:cb:b6:56:02:a1:5a:bc:d9:e6:3b:29:ca:a4:0d:68:2b:3f: be:fc:f1:71:a8:7d:6b:b7:e4:c3:79:a4:8a:ed:62:5c:43:5c: c7:ae:47:5c:02:1e:df:95:41:c9:33:c2:c3:34:61:a6:18:79: 76:fe:e0:19:c3:fa:89:f7:2c:b6:a4:24:4f:b1:bd:b4:4b:bd: 32:f0:0d:75:6a:fd:e9:a0:47:9b:99:7d:c1:2c:ac:2a:f7:25: 29:36:dd:80:81:58:34:9d:37:e9:1e:dc:12:28:cd:6b:4a:fd: 2b:47:b9:72:51:19:ea:48:bf:f2:e3:56:83:c1:a6:42:cd:3a: 09:88:93:ce:81:60:7f:ea:5d:bc:65:93:28:42:9f:47:b2:ef: f2:dd:28:7f:ed:81:db:6d:95:04:8d:1a:39:57:8b:88:8c:d4: c9:cd:df:0a:88:f0:ed:d1:d0:83:ab:be:9f:cd:ad:b4:78:08: 52:74:7f:27:c6:07:99:f9:87:04:fe:63:9c:91:04:98:da:c4: c8:b1:ab:0c:64:ea:e3:35:db:ee:c8:b4:1d:53:d9:71:d8:af: bb:cf:af:19:65:01:ce:7f:54:25:f1:51:f8:bc:b6:5a:c2:8a: 7a:a3:16:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgd/+QiIQkFbRfPckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI0MTIwNjE0MDA1MVoXDTI1MDMwNjE0MDA1MVowLzEtMCsGA1UEAxMk YjBkOTBjYzYtN2UxOS00Zjk0LWI1NzktYTUxZWY4NmIyY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7wpv1jYE9pIClqChKl+cPoytZm2QrbMbUM8 gF6qyLcah7hDAqe7V1Uk53tKP+LnUtmQs6fg25/0H0QSWEdSkmTiC6EgWZ5s8JNk 36KaEj4ZJ487k7WVsVdxz2/oE+QDQ8qHwCTKECaLk8IGYqYe6+Zso+d3YauKCwnN ycoFW7GkxVq0orFBMAu2FQmcoqN8Db3yeCFuhhJnND5bPPux9sXcnAQqVcUymTR0 FxKdVyUveu6KosX/eVXkODPtOKV1WXdZ8qZwztomNKNAo/nGd0B6nBBMnX2rGCB4 teyPo1nychBdFLo2fg0cC0Z5b9irfnJ65F4kkrfO9GafWALDBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuq192AajOQ9RA2PBWZftwDqiFFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvNzZkMmNhZGItNjhmNS0z NzdjLWJlNmUtNzk5MmUxZTFjMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2IkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDVwGIuAnBYxyckNSuPtG72KTbLtlYCoVq82eY7KcqkDWgrP7788XGo fWu35MN5pIrtYlxDXMeuR1wCHt+VQckzwsM0YaYYeXb+4BnD+on3LLakJE+xvbRL vTLwDXVq/emgR5uZfcEsrCr3JSk23YCBWDSdN+ke3BIozWtK/StHuXJRGepIv/Lj VoPBpkLNOgmIk86BYH/qXbxlkyhCn0ey7/LdKH/tgdttlQSNGjlXi4iM1MnN3wqI 8O3R0IOrvp/NrbR4CFJ0fyfGB5n5hwT+Y5yRBJjaxMixqwxk6uM12+7ItB1T2XHY r7vPrxllAc5/VCXxUfi8tlrCinqjFh8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:22 2025 by rpki-client