$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4c8f6fcb-8b11-3a49-af62-f59a36fdce12.roa File: 4c8f6fcb-8b11-3a49-af62-f59a36fdce12.roa (raw, json) Hash identifier: qV9baQrKN+NzXpNkzLoo6KgYTWyuxhQDysC5vxHtGuo= Subject key identifier: 0D:AA:37:77:1C:BE:21:F9:38:24:0C:D1:00:A7:F2:3F:A2:33:4D:4F Certificate issuer: /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Certificate serial: 010D0C9F432858487596196F82D31FDED19D9C00 Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4c8f6fcb-8b11-3a49-af62-f59a36fdce12.roa Signing time: Mon 06 Jan 2025 22:58:54 +0000 ROA not before: Mon 06 Jan 2025 22:58:54 +0000 ROA not after: Sun 06 Apr 2025 21:58:54 +0000 asID: 33651 IP address blocks: 64.84.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:96:19:6f:82:d3:1f:de:d1:9d:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Validity Not Before: Jan 6 22:58:54 2025 GMT Not After : Apr 6 21:58:54 2025 GMT Subject: CN=e4860b79-d841-409c-84df-177befeb91c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:2d:df:54:26:6d:97:51:d7:ba:e6:b3:a1: 80:d9:43:98:fc:2f:a2:ef:ab:51:88:69:17:a1:04: 03:99:fe:f2:ad:23:b9:52:19:85:f2:69:3d:e2:68: c6:ab:3a:b4:1d:76:4f:e2:84:23:0f:09:7d:20:76: 28:4f:a2:f8:a8:ad:4e:91:8b:0d:e5:bd:2c:2b:10: e8:94:78:de:7e:24:cb:87:86:33:49:61:4d:31:24: 74:2a:db:d0:49:ef:43:5b:18:bf:1b:9c:d6:c2:c0: a1:1a:39:ef:7e:de:6c:bf:ea:b7:d2:5e:f3:a0:64: 7d:17:69:7c:57:82:3f:73:ce:3a:30:89:a8:3a:8b: 19:c1:34:10:e7:2f:2c:6e:59:7d:53:31:56:ca:19: c7:e7:ef:29:56:d2:4c:ce:52:dd:4c:b9:21:3d:2d: 94:4e:b3:63:22:eb:4e:cc:77:a3:1b:f9:67:5d:06: 04:9c:39:69:3a:85:ad:f4:4e:59:04:33:26:c9:18: 20:d1:72:a8:4c:7e:86:c9:7a:da:db:03:8f:5a:80: 54:7a:e2:c5:bb:9e:d2:0a:e7:a3:6a:66:ce:9d:28: 4e:c5:2f:64:ad:f5:ca:04:64:0c:ed:e2:25:4e:6d: fd:42:bf:db:f4:70:f4:7b:2e:94:23:d8:b5:14:d0: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AA:37:77:1C:BE:21:F9:38:24:0C:D1:00:A7:F2:3F:A2:33:4D:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4c8f6fcb-8b11-3a49-af62-f59a36fdce12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl X509v3 Authority Key Identifier: keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer sbgp-ipAddrBlock: critical IPv4: 64.84.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1c:12:bf:cc:cf:43:f5:46:10:b9:3b:63:ec:1c:cb:dd:a5: b0:8e:27:06:d0:aa:60:99:88:f3:3c:14:83:b5:56:02:1c:fc: fa:72:78:0f:39:4e:3e:59:e3:6d:d9:17:5c:7f:0d:57:13:c6: a2:fb:9f:85:5a:a1:60:66:d8:6d:28:f1:4a:72:42:60:1c:df: 10:0a:f1:e5:25:54:4c:13:16:b9:ae:86:6c:9b:2c:93:53:76: 09:74:11:7d:b6:ba:82:43:bb:40:b5:27:c8:3f:d1:63:b8:3c: f1:6a:57:0b:1d:02:23:f3:c8:7f:4c:d4:98:1c:01:f8:8e:f1: d0:f9:cd:4c:51:a7:d6:7b:d5:88:f5:78:75:98:d1:d6:75:07: 30:0d:0a:50:8b:54:19:5a:31:1e:33:6b:d8:8c:17:37:e3:d8: dd:67:a0:aa:a0:88:be:08:a8:b9:8d:ac:80:f6:20:c1:e2:8b: a4:2b:8d:7d:9c:7d:76:c9:66:94:59:c4:94:9d:6f:e4:ca:db: c0:8b:51:57:da:22:ad:8c:76:99:c6:a7:0e:55:f8:27:fe:9c: 35:48:71:ff:9e:77:73:f9:73:79:af:2f:e6:ae:f0:2a:2a:ed: ec:96:79:24:cc:39:42:ed:90:ed:9d:73:1c:31:a7:45:e8:48: 63:44:0a:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh1lhlvgtMf3tGdnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYwZjQ2ZGItYzllNi00ZDQ3LTkxMzQtMjA5NjNlYjFk YmJmMB4XDTI1MDEwNjIyNTg1NFoXDTI1MDQwNjIxNTg1NFowLzEtMCsGA1UEAxMk ZTQ4NjBiNzktZDg0MS00MDljLTg0ZGYtMTc3YmVmZWI5MWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5ot31QmbZdR17rms6GA2UOY/C+i76tRiGkX oQQDmf7yrSO5UhmF8mk94mjGqzq0HXZP4oQjDwl9IHYoT6L4qK1OkYsN5b0sKxDo lHjefiTLh4YzSWFNMSR0KtvQSe9DWxi/G5zWwsChGjnvft5sv+q30l7zoGR9F2l8 V4I/c846MImoOosZwTQQ5y8sbll9UzFWyhnH5+8pVtJMzlLdTLkhPS2UTrNjIutO zHejG/lnXQYEnDlpOoWt9E5ZBDMmyRgg0XKoTH6GyXra2wOPWoBUeuLFu57SCuej ambOnShOxS9krfXKBGQM7eIlTm39Qr/b9HD0ey6UI9i1FNBwyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2qN3ccviH5OCQM0QCn8j+iM01PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBm NDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2ViMWRiYmYvNGM4ZjZmY2ItOGIxMS0z YTQ5LWFmNjItZjU5YTM2ZmRjZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGYwZjQ2ZGItYzllNi00ZDQ3LTkx MzQtMjA5NjNlYjFkYmJmLzRmMGY0NmRiLWM5ZTYtNGQ0Ny05MTM0LTIwOTYzZWIx ZGJiZi5jcmwwHwYDVR0jBBgwFoAUcvOoLgEYY/Isv9tY40D3O4Z6l6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2 M2ViMWRiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQFR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEcEr/Mz0P1RhC5O2PsHMvdpbCOJwbQqmCZiPM8FIO1VgIc/PpyeA85 Tj5Z423ZF1x/DVcTxqL7n4VaoWBm2G0o8UpyQmAc3xAK8eUlVEwTFrmuhmybLJNT dgl0EX22uoJDu0C1J8g/0WO4PPFqVwsdAiPzyH9M1JgcAfiO8dD5zUxRp9Z71Yj1 eHWY0dZ1BzANClCLVBlaMR4za9iMFzfj2N1noKqgiL4IqLmNrID2IMHii6QrjX2c fXbJZpRZxJSdb+TK28CLUVfaIq2MdpnGpw5V+Cf+nDVIcf+ed3P5c3mvL+au8Coq 7eyWeSTMOULtkO2dcxwxp0XoSGNECqU= -----END CERTIFICATE-----Generated at Wed Feb 5 16:57:11 2025 by rpki-client