$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/33a15d20-681d-3fde-98e7-9009e686b584.roa File: 33a15d20-681d-3fde-98e7-9009e686b584.roa (raw, json) Hash identifier: CHRGcgP10ENxFbx1Xv3jYtJKkfg5sO1rI7XzUvvnp7k= Subject key identifier: 1D:EF:89:91:72:DF:0E:A4:C5:7D:AA:30:0F:BF:E1:8C:F7:EA:05:1F Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584851A56A82310EBBEE09DDC180 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/33a15d20-681d-3fde-98e7-9009e686b584.roa Signing time: Wed 25 Dec 2024 02:00:38 +0000 ROA not before: Wed 25 Dec 2024 02:00:38 +0000 ROA not after: Tue 25 Mar 2025 01:00:38 +0000 asID: 14618 IP address blocks: 198.160.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:a5:6a:82:31:0e:bb:ee:09:dd:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Dec 25 02:00:38 2024 GMT Not After : Mar 25 01:00:38 2025 GMT Subject: CN=011a18d0-5d84-49e7-b0cd-816ec5213475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:05:f2:77:6f:f2:c0:49:10:2d:ff:98:77:28: f9:c3:1c:9a:88:9c:05:90:fc:f9:55:4a:04:a6:30: 25:d9:46:e7:c8:43:ca:10:a1:ba:a1:e4:53:9a:39: 32:d8:f5:15:5f:ab:9e:d4:29:a9:47:d7:2d:17:89: 8e:a0:05:10:0a:35:da:38:04:e3:fe:a7:12:f6:0f: 90:e5:bc:08:f8:24:90:ba:37:fa:e6:f5:c5:16:61: 3d:6c:37:9a:48:24:97:0c:a8:9c:29:7c:02:b9:56: b0:9f:e3:de:95:ee:89:18:7d:89:11:8c:46:b0:47: e2:ae:ec:64:ba:5c:1a:76:11:5d:1a:a9:a5:18:20: 4b:f6:d4:da:57:78:e6:0f:6c:c3:94:c8:52:e5:58: b6:be:1a:bc:3f:4a:ab:a9:a4:c1:d9:b2:77:26:a0: 3f:03:6e:de:d3:3b:19:9e:34:3d:50:9e:7b:31:aa: 0e:a6:28:d6:ee:8a:7d:70:b1:c5:b9:a5:65:aa:e3: ca:cd:5f:59:f2:ab:eb:e3:d6:93:59:bd:30:43:14: 13:e4:34:b9:40:e7:5a:a5:8d:ad:67:5e:ef:2c:39: 62:53:4f:75:56:02:b7:b9:36:e7:e6:dd:df:7f:30: 32:fd:0a:0f:57:6d:fd:1c:16:61:14:31:5f:c0:de: 5f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EF:89:91:72:DF:0E:A4:C5:7D:AA:30:0F:BF:E1:8C:F7:EA:05:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/33a15d20-681d-3fde-98e7-9009e686b584.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 198.160.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:81:c4:dc:63:9c:1a:89:4e:10:68:aa:f6:49:b1:45:38:2f: cf:35:74:7d:dd:7c:49:aa:9a:6a:a4:e6:cd:cc:fa:c9:06:50: 9c:b3:ed:92:f4:9a:b7:c4:ba:76:d5:67:81:0c:4e:22:f7:bf: 88:7b:0b:ff:21:43:3e:d6:a9:00:e7:90:b2:6c:47:6f:4e:cb: 74:3c:05:38:c7:e7:67:33:8f:d2:83:29:3d:08:ec:23:c2:4c: ef:a5:fb:fd:ef:fa:02:76:6d:ec:51:6d:da:cb:28:71:e2:d4: b1:51:cf:14:f6:d9:08:c3:a5:d8:35:22:70:ef:98:d6:ae:1d: c7:45:13:62:83:bb:66:6b:a8:aa:50:aa:21:84:10:b0:93:ae: a0:ed:95:de:3e:c3:1b:84:84:a5:77:4c:94:ae:bd:05:f8:7e: ff:1c:74:9d:f0:00:7b:dc:6a:ca:76:e3:2f:e8:54:8e:7b:3a: cb:52:aa:b8:b7:9f:ab:58:7c:dc:d5:31:f1:51:bc:8c:93:8c: 2f:cc:ca:ab:68:2d:0a:f8:61:2a:87:14:70:bd:fe:22:67:de: 18:12:04:43:54:38:83:42:c5:7a:a6:18:a2:6a:3b:ea:18:c9: 5f:df:25:8f:30:d5:52:e7:7f:2b:e8:99:80:dc:af:a8:ca:46: f5:56:41:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpWqCMQ677gndwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk MDExYTE4ZDAtNWQ4NC00OWU3LWIwY2QtODE2ZWM1MjEzNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwXyd2/ywEkQLf+Ydyj5wxyaiJwFkPz5VUoE pjAl2UbnyEPKEKG6oeRTmjky2PUVX6ue1CmpR9ctF4mOoAUQCjXaOATj/qcS9g+Q 5bwI+CSQujf65vXFFmE9bDeaSCSXDKicKXwCuVawn+Pele6JGH2JEYxGsEfiruxk ulwadhFdGqmlGCBL9tTaV3jmD2zDlMhS5Vi2vhq8P0qrqaTB2bJ3JqA/A27e0zsZ njQ9UJ57MaoOpijW7op9cLHFuaVlquPKzV9Z8qvr49aTWb0wQxQT5DS5QOdapY2t Z17vLDliU091VgK3uTbn5t3ffzAy/QoPV239HBZhFDFfwN5fXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3viZFy3w6kxX2qMA+/4Yz36gUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvMzNhMTVkMjAtNjgxZC0z ZmRlLTk4ZTctOTAwOWU2ODZiNTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqCXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSBxNxjnBqJThBoqvZJsUU4L881dH3dfEmqmmqk5s3M+skGUJyz7ZL0 mrfEunbVZ4EMTiL3v4h7C/8hQz7WqQDnkLJsR29Oy3Q8BTjH52czj9KDKT0I7CPC TO+l+/3v+gJ2bexRbdrLKHHi1LFRzxT22QjDpdg1InDvmNauHcdFE2KDu2ZrqKpQ qiGEELCTrqDtld4+wxuEhKV3TJSuvQX4fv8cdJ3wAHvcasp24y/oVI57OstSqri3 n6tYfNzVMfFRvIyTjC/MyqtoLQr4YSqHFHC9/iJn3hgSBENUOINCxXqmGKJqO+oY yV/fJY8w1VLnfyvomYDcr6jKRvVWQf8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:58 2025 by rpki-client