$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa File: ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa (raw, json) Hash identifier: suTT8iYWt9PTVh4949QOEe++oLOkv8AcYTdmNW70hQY= Subject key identifier: 62:F9:C3:2B:44:88:77:B5:CD:9D:E7:9C:97:66:D7:CC:23:2A:70:0A Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F432858484EDAC4D3EA84678FE3575C60 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa Signing time: Tue 24 Dec 2024 02:00:38 +0000 ROA not before: Tue 24 Dec 2024 02:00:38 +0000 ROA not after: Mon 24 Mar 2025 01:00:38 +0000 asID: 16509 IP address blocks: 85.113.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4e:da:c4:d3:ea:84:67:8f:e3:57:5c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Dec 24 02:00:38 2024 GMT Not After : Mar 24 01:00:38 2025 GMT Subject: CN=5c90dd73-43ab-4521-8876-5fb1dac81293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:03:ad:76:98:69:44:57:c7:ea:db:f9:34:74: 2c:ef:0f:e2:63:a6:04:26:39:32:db:fd:5a:89:47: cc:44:0b:25:a5:ba:f1:4c:9a:fa:f4:df:69:c5:84: b1:e4:c8:61:6f:9e:b4:68:6f:70:22:e8:22:17:1f: e4:4c:fd:19:b8:29:06:54:25:3e:c4:5e:b4:01:21: ed:c4:24:d5:ce:fc:ce:37:04:94:a9:21:33:0a:8b: 0e:b6:84:71:16:a0:d0:df:a5:f0:46:40:4d:82:a5: eb:8b:a7:34:3b:2f:8b:54:c2:84:c5:87:5f:48:48: a2:f0:27:9a:6b:b4:60:e3:82:9c:a2:c9:57:3a:7c: 9e:01:92:bf:7a:18:80:7a:c5:b8:eb:16:b8:66:b3: a2:d2:a2:59:81:17:a1:10:c2:99:1c:3a:fc:85:0c: c4:4f:f1:77:55:09:2f:a5:10:5b:85:94:d7:24:49: 37:79:4e:ab:04:7c:3c:fc:4a:5e:06:79:1c:c5:c0: c4:89:54:b7:f1:52:66:5b:32:d0:a1:35:0b:1a:6f: 45:1b:0f:2b:9f:d4:30:55:d7:5b:ab:1f:7c:50:cd: 68:2d:47:f9:a9:28:aa:d7:fa:d2:35:1c:da:a1:a2: ff:e2:a3:06:1a:59:7b:cd:a3:4a:55:ea:bd:87:03: 6b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F9:C3:2B:44:88:77:B5:CD:9D:E7:9C:97:66:D7:CC:23:2A:70:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 85.113.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ac:8b:3c:56:27:43:f2:21:3e:17:e1:86:c2:16:11:53:de: 9c:40:3f:ba:0f:34:c1:6b:80:ad:3e:ff:3d:60:44:45:a8:2c: 7e:81:21:c4:c8:f0:1d:70:85:1e:ee:b1:90:00:5c:db:89:31: e6:a8:f7:49:01:38:6f:65:5d:e2:22:81:ad:25:c1:cf:90:e4: 58:70:47:6c:aa:9c:db:5f:1f:85:e0:6e:e9:e6:62:08:e4:49: 6a:a0:0a:3d:61:17:b6:3d:b5:b6:c1:b7:32:6a:c8:e5:88:ce: 18:91:fb:cc:d4:f6:ba:af:c1:25:7c:eb:dc:c6:ba:bb:64:f7: fd:fd:5f:28:a7:1a:32:0f:b9:28:41:9a:ff:70:2e:c3:31:3d: 2b:07:e1:ab:0f:63:50:70:67:a1:72:22:ac:1a:9e:8a:01:5a: f8:7b:ae:ba:6a:2d:7a:3f:ba:ad:8d:2d:4e:80:8f:97:fe:77: a7:93:16:f8:a4:e3:e6:d4:2c:3f:eb:a8:d7:d0:40:55:2e:d8: 00:1c:d4:f1:13:86:4c:b1:93:11:d5:eb:df:24:74:5f:c0:6c: 96:40:79:c5:c0:71:64:28:88:bc:04:7d:79:e6:9c:cf:54:40: 1b:cc:2d:99:8b:3f:f9:51:87:d8:89:82:a2:14:01:c0:7e:de: 2c:31:4f:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2sTT6oRnj+NXXGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk NWM5MGRkNzMtNDNhYi00NTIxLTg4NzYtNWZiMWRhYzgxMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQOtdphpRFfH6tv5NHQs7w/iY6YEJjky2/1a iUfMRAslpbrxTJr69N9pxYSx5Mhhb560aG9wIugiFx/kTP0ZuCkGVCU+xF60ASHt xCTVzvzONwSUqSEzCosOtoRxFqDQ36XwRkBNgqXri6c0Oy+LVMKExYdfSEii8Cea a7Rg44KcoslXOnyeAZK/ehiAesW46xa4ZrOi0qJZgRehEMKZHDr8hQzET/F3VQkv pRBbhZTXJEk3eU6rBHw8/EpeBnkcxcDEiVS38VJmWzLQoTULGm9FGw8rn9QwVddb qx98UM1oLUf5qSiq1/rSNRzaoaL/4qMGGll7zaNKVeq9hwNrUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL5wytEiHe1zZ3nnJdm18wjKnAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvY2EwZTc5NWYtNDA5Yy0z OTk1LTlmNmQtYjg3M2E0YWVjMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOsizxWJ0PyIT4X4YbCFhFT3pxAP7oPNMFrgK0+/z1gREWoLH6BIcTI 8B1whR7usZAAXNuJMeao90kBOG9lXeIiga0lwc+Q5FhwR2yqnNtfH4XgbunmYgjk SWqgCj1hF7Y9tbbBtzJqyOWIzhiR+8zU9rqvwSV869zGurtk9/39XyinGjIPuShB mv9wLsMxPSsH4asPY1BwZ6FyIqwanooBWvh7rrpqLXo/uq2NLU6Aj5f+d6eTFvik 4+bULD/rqNfQQFUu2AAc1PEThkyxkxHV698kdF/AbJZAecXAcWQoiLwEfXnmnM9U QBvMLZmLP/lRh9iJgqIUAcB+3iwxT6Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:44 2025 by rpki-client