$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa File: a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa (raw, json) Hash identifier: 931ESvaFoewdIB+qkmyt2GIAwlNd2FJSGSN65j225EI= Subject key identifier: A7:5F:4B:73:D9:CF:C5:15:5E:10:26:B6:AB:54:79:96:01:65:38:A2 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F43285848854B4A7A0325D4CC63A6CE00 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 5769 IP address blocks: 144.172.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:4a:7a:03:25:d4:cc:63:a6:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=e4b316fa-bae4-42d5-8d5c-65a763148ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:25:9f:ac:de:2d:1c:4a:e7:bc:4a:fc:d0:ab: e1:7a:e3:01:ec:5c:f7:b3:6e:dc:52:59:8a:6e:18: 22:c9:e9:57:27:89:81:93:36:70:18:d2:ac:49:5a: b9:67:08:3a:f0:f4:dd:fd:44:9c:6a:16:2e:ab:61: 13:dc:10:f8:3c:f3:07:cf:69:74:57:43:e0:0e:50: 80:db:c9:61:7e:d6:b4:71:e8:84:02:50:4f:f9:c4: 8e:96:8d:83:77:ab:e9:cb:cf:3d:84:24:c5:ec:f4: ea:43:e4:b4:1a:d4:58:b8:43:e0:f6:65:a6:20:e1: a2:9b:9f:70:78:44:43:ef:e8:11:49:da:93:20:6c: 25:1b:cc:52:57:8d:30:8c:01:fc:7e:55:bb:43:2e: f5:38:3c:c0:46:e4:a1:1b:6c:2b:b5:9b:9b:78:1b: 62:80:07:2e:3e:77:50:c9:f5:d8:0e:43:3e:3e:d6: 0b:1b:75:b3:a6:01:38:19:b7:71:35:15:b0:68:e5: 93:19:5c:45:d1:eb:3d:1c:3e:14:c4:01:55:84:1d: 5e:74:47:e9:16:c2:f6:f0:f8:9f:cb:b4:f9:59:c5: 8b:a9:de:c8:dc:23:e8:e5:34:dc:a3:55:11:3a:21: d0:3f:0f:52:05:01:9c:f6:d1:0d:5a:ab:a7:63:d5: 38:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5F:4B:73:D9:CF:C5:15:5E:10:26:B6:AB:54:79:96:01:65:38:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 144.172.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:65:32:2c:8d:b5:fe:90:17:f7:5f:95:a4:06:87:c0:4e:4b: 02:04:93:02:62:35:da:19:3e:90:f8:db:ea:30:f3:d9:2e:10: 7a:e9:f3:a8:e6:9f:73:81:6e:5c:70:2f:ae:46:62:05:7c:50: d9:84:8e:32:54:9e:a2:54:4b:ed:25:7b:5f:cc:6c:0b:77:56: 4a:85:9c:41:23:99:90:78:92:d0:bc:87:11:d5:54:8c:db:24: 3e:ae:bd:a8:7e:d1:df:58:b0:a3:b8:97:23:0b:eb:a7:6d:4d: e9:c7:c5:09:f2:4f:61:cc:6b:c9:35:c3:16:09:6c:7a:81:dd: ac:28:e7:cd:fb:3b:e4:c7:31:bc:19:6d:55:75:83:16:af:8f: 83:65:ab:66:06:d2:51:bf:ed:f7:4e:13:eb:b1:8f:ab:1e:a3: fd:6c:54:11:80:8a:67:64:8d:2e:a3:d9:1d:65:6e:25:33:ab: 31:06:07:c8:58:22:b3:9a:be:ed:95:7f:cf:f9:5d:dd:f1:c0: aa:26:70:76:1e:55:01:02:0f:a9:28:f3:91:1d:06:10:12:68: 3a:73:a3:3b:63:bf:c9:7e:c4:2d:cd:89:9a:82:f5:a7:ac:8d: 00:ff:fe:7b:e8:14:f3:e4:49:f9:e1:b0:b8:15:e6:bb:f0:34: 6c:24:0d:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0p6AyXUzGOmzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk ZTRiMzE2ZmEtYmFlNC00MmQ1LThkNWMtNjVhNzYzMTQ4YWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCWfrN4tHErnvEr80KvheuMB7Fz3s27cUlmK bhgiyelXJ4mBkzZwGNKsSVq5Zwg68PTd/UScahYuq2ET3BD4PPMHz2l0V0PgDlCA 28lhfta0ceiEAlBP+cSOlo2Dd6vpy889hCTF7PTqQ+S0GtRYuEPg9mWmIOGim59w eERD7+gRSdqTIGwlG8xSV40wjAH8flW7Qy71ODzARuShG2wrtZubeBtigAcuPndQ yfXYDkM+PtYLG3WzpgE4GbdxNRWwaOWTGVxF0es9HD4UxAFVhB1edEfpFsL28Pif y7T5WcWLqd7I3CPo5TTco1UROiHQPw9SBQGc9tENWqunY9U4hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdfS3PZz8UVXhAmtqtUeZYBZTiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvYTljYmJmZDQtZDM4OC0z M2QxLWJjNDItODZkNjBkZDJlYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHkKyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9lMiyNtf6QF/dflaQGh8BOSwIEkwJiNdoZPpD42+ow89kuEHrp86jm n3OBblxwL65GYgV8UNmEjjJUnqJUS+0le1/MbAt3VkqFnEEjmZB4ktC8hxHVVIzb JD6uvah+0d9YsKO4lyML66dtTenHxQnyT2HMa8k1wxYJbHqB3awo5837O+THMbwZ bVV1gxavj4Nlq2YG0lG/7fdOE+uxj6seo/1sVBGAimdkjS6j2R1lbiUzqzEGB8hY IrOavu2Vf8/5Xd3xwKomcHYeVQECD6ko85EdBhASaDpzoztjv8l+xC3NiZqC9aes jQD//nvoFPPkSfnhsLgV5rvwNGwkDSs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:50 2025 by rpki-client