$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa File: 012553be-cadc-391f-be02-761ff5c3fe9c.roa (raw, json) Hash identifier: vXyQGtMrgWSdDqyAMhEMr2njZiiAO09bPUXhkK8on0c= Subject key identifier: DA:CA:A3:52:BC:FC:A6:63:C4:C1:82:41:F5:E1:F5:21:87:C0:0F:D7 Certificate issuer: /CN=e4877b41-a7e3-491a-a87e-56a8cf46d169 Certificate serial: 010D0C9F432858485B6AFBF98A3A4F6FB4D46C80 Authority key identifier: 79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 26269 IP address blocks: 160.223.176.0/22 maxlen: 24 162.216.232.0/22 maxlen: 24 173.45.176.0/20 maxlen: 24 198.135.144.0/21 maxlen: 24 199.58.144.0/22 maxlen: 24 199.241.220.0/22 maxlen: 24 2602:ff89::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6a:fb:f9:8a:3a:4f:6f:b4:d4:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4877b41-a7e3-491a-a87e-56a8cf46d169 Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=773dfbd3-4cc0-49a9-8948-5e10e2a74cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:26:7c:de:c2:05:06:0b:4e:00:2c:a0:8f: 65:56:17:fb:5a:5b:88:1f:58:66:5e:12:56:09:50: c7:1e:3e:4c:3b:9c:88:0a:68:fc:91:cd:89:70:d3: 0e:d0:0a:bc:4f:53:d1:d3:33:f9:e9:ae:56:d7:e1: c7:4a:82:ae:e2:6a:86:bb:61:68:13:95:59:af:47: a1:7b:1a:9b:54:ee:4a:86:35:46:7e:2c:e4:7f:3f: 04:1f:62:cb:f2:18:5a:f5:28:ae:9b:9f:74:aa:4a: 6d:f5:04:d6:8d:b7:6f:a1:7d:85:84:56:c3:75:72: 3c:77:be:77:70:7d:20:d6:f4:28:73:d1:0d:99:f1: c2:5f:e7:d3:ad:de:cb:d8:79:17:90:d1:dc:a7:1f: aa:b2:66:28:78:85:2a:ea:12:39:2a:bd:7e:2e:28: 0d:ff:38:6b:98:a1:16:09:a5:5f:bf:d5:bb:55:cc: 6b:55:b5:f0:81:52:3f:e7:1d:58:78:ee:a9:79:5b: ae:14:ae:5d:1e:ea:26:58:cc:90:89:fb:40:30:4d: cb:30:5a:4f:d0:02:40:3c:18:80:f5:1f:09:58:5a: 1a:89:56:ae:b1:0c:31:ac:b6:64:d8:ff:20:20:c4: 54:e2:5a:aa:c7:a4:0b:ec:79:d7:be:83:ed:b8:e6: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CA:A3:52:BC:FC:A6:63:C4:C1:82:41:F5:E1:F5:21:87:C0:0F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.crl X509v3 Authority Key Identifier: keyid:79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer sbgp-ipAddrBlock: critical IPv4: 160.223.176.0/22 162.216.232.0/22 173.45.176.0/20 198.135.144.0/21 199.58.144.0/22 199.241.220.0/22 IPv6: 2602:ff89::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f8:0a:af:47:f5:87:b6:f2:9c:f9:59:9d:dc:27:67:19:a3: aa:23:21:b9:ce:27:6f:b5:64:bc:93:e3:81:d4:6a:10:3a:5b: 5b:35:6c:9d:55:8c:7d:82:be:9e:1b:6f:b2:1d:94:c7:1d:43: 10:5c:10:85:22:95:8c:f6:06:f1:6b:24:76:29:c6:fd:c4:af: 22:a5:3e:72:ba:e6:ef:6f:91:58:91:fc:75:68:e5:eb:68:69: ea:77:cb:72:14:bb:18:c6:0e:e1:15:a1:9e:bc:3e:67:ae:9d: f6:80:de:1b:b2:76:2e:9a:6b:c8:e5:66:25:f9:b1:42:1f:e6: 34:a6:12:46:cb:d8:c1:48:79:42:44:c0:7f:6e:fe:aa:16:58: 0b:49:bc:95:8c:21:c5:fc:76:db:f9:31:46:70:6e:45:08:8b: a0:17:f1:fb:8b:61:b1:b0:9a:6b:cd:97:0b:ab:28:bb:b8:93: 50:df:a7:cf:3d:3a:c5:a5:d3:8b:1f:f0:11:8b:1b:07:10:13: a4:f6:74:06:e7:8f:4a:17:06:c2:2f:b3:42:17:b3:af:80:97: d8:37:31:31:5c:31:09:92:d5:b6:73:cf:47:66:33:5b:6b:a7: 44:e8:53:b7:e7:1e:25:8e:f4:81:68:cc:f6:40:cc:3b:67:94: a6:04:a5:12 -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWEhbavv5ijpPb7TUbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ4NzdiNDEtYTdlMy00OTFhLWE4N2UtNTZhOGNmNDZk MTY5MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk NzczZGZiZDMtNGNjMC00OWE5LTg5NDgtNWUxMGUyYTc0Y2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbwmfN7CBQYLTgAsoI9lVhf7WluIH1hmXhJW CVDHHj5MO5yICmj8kc2JcNMO0Aq8T1PR0zP56a5W1+HHSoKu4mqGu2FoE5VZr0eh exqbVO5KhjVGfizkfz8EH2LL8hha9Sium590qkpt9QTWjbdvoX2FhFbDdXI8d753 cH0g1vQoc9ENmfHCX+fTrd7L2HkXkNHcpx+qsmYoeIUq6hI5Kr1+LigN/zhrmKEW CaVfv9W7VcxrVbXwgVI/5x1YeO6peVuuFK5dHuomWMyQiftAME3LMFpP0AJAPBiA 9R8JWFoaiVausQwxrLZk2P8gIMRU4lqqx6QL7HnXvoPtuOZjuwIDAQABo4IDgzCC A38wHQYDVR0OBBYEFNrKo1K8/KZjxMGCQfXh9SGHwA/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNDg3 N2I0MS1hN2UzLTQ5MWEtYTg3ZS01NmE4Y2Y0NmQxNjkvMDEyNTUzYmUtY2FkYy0z OTFmLWJlMDItNzYxZmY1YzNmZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTQ4NzdiNDEtYTdlMy00OTFhLWE4 N2UtNTZhOGNmNDZkMTY5L2U0ODc3YjQxLWE3ZTMtNDkxYS1hODdlLTU2YThjZjQ2 ZDE2OS5jcmwwHwYDVR0jBBgwFoAUeU/s9F/sLc89/I7kYL/QlEbVJuUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNDg3N2I0MS1hN2UzLTQ5MWEtYTg3ZS01NmE4 Y2Y0NmQxNjkuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDAqBAIAATAkAwQCoN+wAwQC otjoAwQErS2wAwQDxoeQAwQCxzqQAwQCx/HcMA4EAgACMAgDBgQmAv+JADBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAc+AqvR/WHtvKc+Vmd3CdnGaOqIyG5zidvtWS8k+OB1GoQOltbNWydVYx9 gr6eG2+yHZTHHUMQXBCFIpWM9gbxayR2Kcb9xK8ipT5yuubvb5FYkfx1aOXraGnq d8tyFLsYxg7hFaGevD5nrp32gN4bsnYummvI5WYl+bFCH+Y0phJGy9jBSHlCRMB/ bv6qFlgLSbyVjCHF/Hbb+TFGcG5FCIugF/H7i2GxsJprzZcLqyi7uJNQ36fPPTrF pdOLH/ARixsHEBOk9nQG549KFwbCL7NCF7OvgJfYNzExXDEJktW2c89HZjNba6dE 6FO35x4ljvSBaMz2QMw7Z5SmBKUS -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:27 2025 by rpki-client