$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137312e302f32342d3234203d3e20323030303137.roa File: 36342e342e3137312e302f32342d3234203d3e20323030303137.roa (raw, json) Hash identifier: DXhYwU7/lLavaAo6HwQOFJSwltBd2lx2j1I9z+Yp+Ds= Subject key identifier: 6E:73:0C:34:A1:09:DB:1D:A2:9D:B4:94:6F:1F:95:E1:30:B8:4D:76 Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845 Certificate serial: 4B989A2693D6E63AACA8C4B96D335115222F7347 Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137312e302f32342d3234203d3e20323030303137.roa Signing time: Tue 07 Jan 2025 09:28:23 +0000 ROA not before: Tue 07 Jan 2025 09:23:23 +0000 ROA not after: Tue 06 Jan 2026 09:28:23 +0000 asID: 200017 IP address blocks: 64.4.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:98:9a:26:93:d6:e6:3a:ac:a8:c4:b9:6d:33:51:15:22:2f:73:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845 Validity Not Before: Jan 7 09:23:23 2025 GMT Not After : Jan 6 09:28:23 2026 GMT Subject: CN=6E730C34A109DB1DA29DB4946F1F95E130B84D76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:86:a3:a5:ef:b9:18:e1:15:cd:d2:97:b8: 79:ee:a1:83:35:f9:a4:f4:63:45:a8:89:ca:eb:de: 03:93:ed:8e:cf:dc:8e:fd:82:c0:8e:d4:11:0e:18: 81:ca:f5:0b:c8:41:88:88:2a:cc:e3:f3:d8:9f:d7: d0:a1:dc:63:ad:eb:b3:27:d5:f0:16:0b:29:e4:da: 2b:b1:22:e7:d4:0c:a3:1a:80:23:33:42:25:07:cb: 2a:02:e3:4f:8b:a3:c5:9f:39:6f:b9:97:ff:25:72: e4:5e:c5:89:f6:9a:0b:39:99:7e:9f:2f:07:0d:ee: 5f:bf:09:94:c2:51:8a:c0:52:f9:bc:e2:e4:bd:de: e5:20:6f:52:77:52:eb:0b:8c:60:81:b5:8d:22:ea: 67:56:23:05:4f:da:1a:cf:30:fb:0c:98:fb:48:9c: 34:0e:f2:4b:5e:d8:c4:8d:c9:d2:17:42:ea:a1:64: 7b:2a:45:eb:84:cf:95:70:bd:ea:37:d7:0d:33:38: 0a:7d:6b:f2:87:ea:b6:d8:60:68:01:f7:3d:c3:75: 6c:76:2c:50:3e:b9:4e:fb:53:66:61:e2:9d:a8:0e: ac:f0:96:90:dd:6d:c0:8d:7f:9f:d6:f0:ec:0d:b4: 38:bb:0a:b7:02:a8:6f:fa:26:f0:e9:73:7a:8b:8f: 57:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:73:0C:34:A1:09:DB:1D:A2:9D:B4:94:6F:1F:95:E1:30:B8:4D:76 X509v3 Authority Key Identifier: keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137312e302f32342d3234203d3e20323030303137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.4.171.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:81:e8:e1:d3:18:d8:4b:f9:d7:e6:0f:60:70:1e:dd:5c:e0: 5b:51:53:1c:db:15:4d:42:57:f8:f8:a1:f5:56:73:26:0a:e5: 78:bc:43:57:1f:44:47:1a:6f:73:2c:d7:2a:9f:95:9c:9d:32: ed:9b:fc:0f:09:d9:2d:9f:7f:c9:50:5b:b0:f6:03:93:67:da: b8:a1:48:15:59:f7:38:a5:79:4a:8c:1c:e9:57:00:1c:96:27: cd:3e:36:7a:5e:2b:b2:22:61:94:88:d1:a7:db:26:a1:24:4b: 3f:6c:f7:54:96:7e:2d:14:61:aa:67:ef:86:f1:ad:20:20:a0: 6f:6b:51:f2:74:08:7d:7e:78:e3:93:f7:70:78:ec:70:3e:10: 39:59:3d:f8:25:2b:af:a2:42:2e:87:99:c7:53:06:bd:23:e1: c3:92:92:8c:04:98:07:16:7d:0e:3a:0d:9a:95:2f:94:87:21: 99:c4:b6:12:87:e0:61:d9:0c:ba:37:e1:74:b8:1f:e7:33:98: ab:a9:cf:02:71:3a:9f:26:21:6f:70:77:6d:04:1f:56:ad:30: 5c:1f:88:30:ed:aa:16:7e:d8:ee:0a:5e:20:d8:6a:71:63:c4: 7a:4c:2f:bc:6a:48:82:b4:ef:f8:ef:d0:92:bf:b1:78:d4:cb: 86:e7:2f:04 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUS5iaJpPW5jqsqMS5bTNRFSIvc0cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNThmNzIxNzRhMGE5ZTNkMDdhMzdjYWQ4N2MyMjM1YTc2 MmVmYTZhOWI2MjAzNzI4NDUwHhcNMjUwMTA3MDkyMzIzWhcNMjYwMTA2MDkyODIz WjAzMTEwLwYDVQQDEyg2RTczMEMzNEExMDlEQjFEQTI5REI0OTQ2RjFGOTVFMTMw Qjg0RDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhWGo6XvuRjh Fc3Sl7h57qGDNfmk9GNFqInK694Dk+2Oz9yO/YLAjtQRDhiByvULyEGIiCrM4/PY n9fQodxjreuzJ9XwFgsp5NorsSLn1AyjGoAjM0IlB8sqAuNPi6PFnzlvuZf/JXLk XsWJ9poLOZl+ny8HDe5fvwmUwlGKwFL5vOLkvd7lIG9Sd1LrC4xggbWNIupnViMF T9oazzD7DJj7SJw0DvJLXtjEjcnSF0LqoWR7KkXrhM+VcL3qN9cNMzgKfWvyh+q2 2GBoAfc9w3VsdixQPrlO+1NmYeKdqA6s8JaQ3W3AjX+f1vDsDbQ4uwq3Aqhv+ibw 6XN6i49XywIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFG5zDDShCdsdop20lG8fleEw uE12MB8GA1UdIwQYMBaAFOmrgtTZv0wW6m58+vPuFM/sWkqKMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2OTk4NjYzZDgwNzAyLzAv RTlBQjgyRDREOUJGNEMxNkVBNkU3Q0ZBRjNFRTE0Q0ZFQzVBNEE4QS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1L2FlODVkMjRhLTc3ZDQtNGNmNy04MGFhLWMwNzExOTljMjg4OS81OGY3 MjE3NGEwYTllM2QwN2EzN2NhZDg3YzIyMzVhNzYyZWZhNmE5YjYyMDM3Mjg0NS5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg2OTQxZDVjMDE4Njk5 ODY2M2Q4MDcwMi8wLzM2MzQyZTM0MmUzMTM3MzEyZTMwMmYzMjM0MmQzMjM0MjAz ZDNlMjAzMjMwMzAzMDMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABABKswDQYJKoZIhvcNAQELBQAD ggEBAFuB6OHTGNhL+dfmD2BwHt1c4FtRUxzbFU1CV/j4ofVWcyYK5Xi8Q1cfREca b3Ms1yqflZydMu2b/A8J2S2ff8lQW7D2A5Nn2rihSBVZ9zileUqMHOlXAByWJ80+ NnpeK7IiYZSI0afbJqEkSz9s91SWfi0UYapn74bxrSAgoG9rUfJ0CH1+eOOT93B4 7HA+EDlZPfglK6+iQi6HmcdTBr0j4cOSkowEmAcWfQ46DZqVL5SHIZnEthKH4GHZ DLo34XS4H+czmKupzwJxOp8mIW9wd20EH1atMFwfiDDtqhZ+2O4KXiDYanFjxHpM L7xqSIK07/jv0JK/sXjUy4bnLwQ= -----END CERTIFICATE-----Generated at Sat Apr 5 07:56:58 2025 by rpki-client