$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d87c40ff-d690-3d23-bcdd-c4688a4507d2.roa File: d87c40ff-d690-3d23-bcdd-c4688a4507d2.roa (raw, json) Hash identifier: NQxGjAsQQrkoUNQKwqsvEzLdBhJ1OqeUqmOIjcDsBpQ= Subject key identifier: C1:CC:9A:DA:49:A5:D6:C4:25:C8:CF:84:61:47:1B:77:08:9F:30:E0 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584823954310B761205891ECE900 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d87c40ff-d690-3d23-bcdd-c4688a4507d2.roa Signing time: Sun 08 Dec 2024 14:00:51 +0000 ROA not before: Sun 08 Dec 2024 14:00:51 +0000 ROA not after: Sat 08 Mar 2025 14:00:51 +0000 asID: 399004 IP address blocks: 216.93.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:23:95:43:10:b7:61:20:58:91:ec:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Dec 8 14:00:51 2024 GMT Not After : Mar 8 14:00:51 2025 GMT Subject: CN=4da2e2be-f005-4f93-b27c-c24fc335595e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0f:43:a1:9d:2c:f7:cd:be:6a:f9:af:1e:95: 4d:b3:62:0f:e3:72:a1:bc:38:da:f5:0d:48:90:18: ca:ac:29:b0:7c:14:90:b2:a3:b7:19:65:37:71:96: 23:a0:56:19:b3:87:ca:b1:4d:ec:18:23:02:38:18: 44:59:e5:ef:9c:3b:99:09:bb:7a:6e:f8:80:2f:4f: ec:cf:2d:39:5e:30:36:aa:93:25:e2:16:fc:d7:72: d7:e8:b1:74:52:51:49:dc:86:27:72:48:eb:e4:88: 09:c0:0b:7d:55:48:b0:68:30:6e:4e:49:0c:2e:ef: d6:27:df:7d:a7:87:00:69:cb:d4:b5:63:b6:bb:d8: 69:f8:8e:39:1a:5b:98:e5:52:f4:b7:a2:40:bf:a0: b1:e3:13:32:87:bc:63:38:84:8f:ae:a6:af:76:a7: 80:5d:85:cf:f2:55:e1:4d:fe:2e:02:38:68:cd:69: ed:0d:bf:af:0d:d3:3a:0c:54:83:3b:18:4e:9e:40: f6:f0:8d:2a:c0:01:9c:46:b4:a5:5f:a8:5d:d2:51: a0:ce:d3:73:0e:f2:a7:72:b2:0e:b4:8a:da:85:b7: ac:c0:8e:5d:de:83:36:f5:f4:15:8c:a2:6d:05:42: b6:c9:08:6b:5d:0a:3a:24:ae:35:2f:11:d8:ec:57: a2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CC:9A:DA:49:A5:D6:C4:25:C8:CF:84:61:47:1B:77:08:9F:30:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d87c40ff-d690-3d23-bcdd-c4688a4507d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 216.93.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ef:9c:55:62:cb:de:20:af:9d:65:64:09:62:9c:93:9a:69: ef:78:27:47:65:db:70:ca:89:6b:c2:c3:2c:e6:a2:3d:e2:d1: f5:e9:82:c9:49:33:6f:09:bd:83:4a:0f:23:05:0d:71:ff:47: 2f:cf:ef:56:b9:f8:56:c9:76:e2:bc:a9:ac:de:e3:b7:b3:3d: 4b:c5:92:19:6f:a6:65:02:c9:6d:07:34:9a:be:9b:52:89:b5: dd:c9:8b:4c:6d:10:6b:67:02:f3:0c:05:06:7a:c3:32:3e:6b: 21:1d:ec:2a:6f:80:d7:33:fc:a7:be:af:da:4d:e7:3f:4d:40: 46:b9:13:13:72:2e:71:3c:2b:33:99:ed:08:4b:70:33:50:fe: 50:8c:69:23:a0:85:8e:35:83:53:03:87:80:d9:5e:21:0f:63: fb:5a:4b:13:1c:11:62:36:b8:64:9d:f3:de:bc:20:cb:55:9e: 79:30:3c:89:14:bf:34:db:fc:ed:74:99:47:e6:33:e3:08:55: 9f:a2:76:7a:7b:71:d4:70:0b:24:50:27:9e:cf:4d:67:08:57: 1f:92:3a:ef:73:69:c1:0c:a4:09:b2:81:37:8c:92:ee:b1:57: 77:d2:01:6c:5f:91:2d:2a:b1:b4:fb:b2:1b:27:c6:a4:5c:f7: c2:37:d9:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgjlUMQt2EgWJHs6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI0MTIwODE0MDA1MVoXDTI1MDMwODE0MDA1MVowLzEtMCsGA1UEAxMk NGRhMmUyYmUtZjAwNS00ZjkzLWIyN2MtYzI0ZmMzMzU1OTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw9DoZ0s982+avmvHpVNs2IP43KhvDja9Q1I kBjKrCmwfBSQsqO3GWU3cZYjoFYZs4fKsU3sGCMCOBhEWeXvnDuZCbt6bviAL0/s zy05XjA2qpMl4hb813LX6LF0UlFJ3IYnckjr5IgJwAt9VUiwaDBuTkkMLu/WJ999 p4cAacvUtWO2u9hp+I45GluY5VL0t6JAv6Cx4xMyh7xjOISPrqavdqeAXYXP8lXh Tf4uAjhozWntDb+vDdM6DFSDOxhOnkD28I0qwAGcRrSlX6hd0lGgztNzDvKncrIO tIrahbeswI5d3oM29fQVjKJtBUK2yQhrXQo6JK41LxHY7FeiSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHMmtpJpdbEJcjPhGFHG3cInzDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvZDg3YzQwZmYtZDY5MC0z ZDIzLWJjZGQtYzQ2ODhhNDUwN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2F32MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHvnFViy94gr51lZAlinJOaae94J0dl23DKiWvCwyzmoj3i0fXpgslJ M28JvYNKDyMFDXH/Ry/P71a5+FbJduK8qaze47ezPUvFkhlvpmUCyW0HNJq+m1KJ td3Ji0xtEGtnAvMMBQZ6wzI+ayEd7CpvgNcz/Ke+r9pN5z9NQEa5ExNyLnE8KzOZ 7QhLcDNQ/lCMaSOghY41g1MDh4DZXiEPY/taSxMcEWI2uGSd8968IMtVnnkwPIkU vzTb/O10mUfmM+MIVZ+idnp7cdRwCyRQJ57PTWcIVx+SOu9zacEMpAmygTeMku6x V3fSAWxfkS0qsbT7shsnxqRc98I32f8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:01 2025 by rpki-client