$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/def067ae-b82e-30fa-9333-d497170132c6.roa File: def067ae-b82e-30fa-9333-d497170132c6.roa (raw, json) Hash identifier: iE5y198UNfjUXVBm54RoexsqiZn4szMfzkNGrqj6nyI= Subject key identifier: F1:25:6B:C5:97:43:D5:B2:A3:6A:A3:FC:B9:31:A6:87:5F:F4:3F:DE Certificate issuer: /CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162 Certificate serial: 010D0C9F432858489D05E56B15A9C54B4DCDBE00 Authority key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/def067ae-b82e-30fa-9333-d497170132c6.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 399761 IP address blocks: 12.35.211.0/24 maxlen: 24 12.42.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:e5:6b:15:a9:c5:4b:4d:cd:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162 Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=0c7ddb64-24b0-4315-8e1d-bedbff52ff31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:32:29:be:84:fd:25:70:03:d1:0f:32:49: 4c:ad:cd:52:f0:62:2a:f0:81:9a:ec:15:12:15:47: e7:ef:bf:39:20:b9:04:a6:cd:bd:e5:b5:91:21:08: 26:f8:a6:a4:0b:73:6d:3d:94:7e:dd:08:ea:ab:78: 01:e9:50:6a:5e:46:5b:ef:e1:89:ac:e5:70:60:d1: 2e:f2:c4:47:db:05:ee:de:89:0d:d0:67:26:80:c3: db:0f:25:34:e3:69:75:26:de:95:17:4e:d1:aa:f3: 8b:fa:54:42:19:bc:92:41:dd:14:2b:19:cf:56:ce: 96:ee:d4:63:9f:16:5f:2a:c8:12:28:d6:6e:ea:3f: 22:78:17:77:38:6f:c3:c3:67:08:08:c0:7f:b9:c5: c9:61:48:9c:92:e7:32:c1:7f:85:62:af:7d:15:ab: 0e:3b:0e:52:ec:c0:16:12:a2:a6:00:37:78:b0:61: e6:a5:a3:d0:5a:a7:d0:3b:33:1b:32:35:f8:e1:c0: f1:98:97:6c:11:1c:9d:fe:be:a2:c1:a9:ca:fa:f3: f5:7b:c5:e5:8b:b6:58:53:4a:ec:0d:f7:0c:e9:36: 3f:1b:73:4d:90:67:8c:66:de:46:f2:66:7d:4c:24: 91:3c:ef:1a:3d:a3:6c:4f:a6:04:ed:62:a8:8f:4e: d8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:25:6B:C5:97:43:D5:B2:A3:6A:A3:FC:B9:31:A6:87:5F:F4:3F:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/def067ae-b82e-30fa-9333-d497170132c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl X509v3 Authority Key Identifier: keyid:FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer sbgp-ipAddrBlock: critical IPv4: 12.35.211.0/24 12.42.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e0:44:a8:a6:28:11:0e:d8:5b:a0:c7:57:35:bc:2c:aa:17: 5d:1e:73:d4:f9:10:e1:a7:76:cf:da:99:aa:84:fb:3b:25:44: f1:96:1e:a5:e3:e5:03:93:c3:f8:ad:06:0f:fc:5d:79:4a:3c: 36:a0:86:98:1a:8d:e0:d3:ec:f0:49:6b:2d:d7:1d:94:52:e2: 63:50:13:1a:de:c3:e1:16:95:f8:eb:db:d2:2d:b6:c3:17:fd: 48:18:76:26:49:3e:3c:f6:ce:71:bb:5e:e3:91:1e:09:9a:70: bb:6f:3c:c1:ff:c1:02:82:52:e4:f8:9d:18:d3:51:80:ae:00: 3a:d3:f6:de:92:35:b4:50:61:06:54:99:7c:18:48:0e:42:0b: 94:21:5f:3f:11:cd:7e:b4:9a:c3:4b:bf:3d:73:4f:42:c5:bd: 42:6f:42:9b:ca:0e:1f:57:9f:af:69:fd:95:e1:91:4e:87:81: 88:49:f6:aa:9f:e7:2c:41:1e:60:1f:6e:40:be:85:41:1e:f2: 81:28:4b:d7:a9:21:97:ce:28:09:ed:38:b3:09:a0:95:cd:b8: 65:37:45:99:1a:b3:9b:76:e4:e7:98:50:bc:dd:45:bf:2b:4d: e7:cd:6c:0d:36:ff:39:53:3a:21:cb:74:b3:4c:b4:8e:67:7d: ce:d3:07:41 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEidBeVrFanFS03NvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkYWFiNWQtOGNjNC00YWQ4LWE3YzQtYTM2YzY0ODhk MTYyMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk MGM3ZGRiNjQtMjRiMC00MzE1LThlMWQtYmVkYmZmNTJmZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFIyKb6E/SVwA9EPMklMrc1S8GIq8IGa7BUS FUfn7785ILkEps295bWRIQgm+KakC3NtPZR+3Qjqq3gB6VBqXkZb7+GJrOVwYNEu 8sRH2wXu3okN0GcmgMPbDyU042l1Jt6VF07RqvOL+lRCGbySQd0UKxnPVs6W7tRj nxZfKsgSKNZu6j8ieBd3OG/Dw2cICMB/ucXJYUickucywX+FYq99FasOOw5S7MAW EqKmADd4sGHmpaPQWqfQOzMbMjX44cDxmJdsERyd/r6iwanK+vP1e8Xli7ZYU0rs DfcM6TY/G3NNkGeMZt5G8mZ9TCSRPO8aPaNsT6YE7WKoj07Y/wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPEla8WXQ9Wyo2qj/Lkxpodf9D/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmRh YWI1ZC04Y2M0LTRhZDgtYTdjNC1hMzZjNjQ4OGQxNjIvZGVmMDY3YWUtYjgyZS0z MGZhLTkzMzMtZDQ5NzE3MDEzMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWJkYWFiNWQtOGNjNC00YWQ4LWE3 YzQtYTM2YzY0ODhkMTYyLzFiZGFhYjVkLThjYzQtNGFkOC1hN2M0LWEzNmM2NDg4 ZDE2Mi5jcmwwHwYDVR0jBBgwFoAU/mUxLRIfo7qCgfXHsKzPHcvwB7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmRhYWI1ZC04Y2M0LTRhZDgtYTdjNC1hMzZj NjQ4OGQxNjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQADCPTAwQA DCp/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJzgRKimKBEO2Fugx1c1vCyqF10ec9T5EOGnds/amaqE+zsl RPGWHqXj5QOTw/itBg/8XXlKPDaghpgajeDT7PBJay3XHZRS4mNQExrew+EWlfjr 29IttsMX/UgYdiZJPjz2znG7XuORHgmacLtvPMH/wQKCUuT4nRjTUYCuADrT9t6S NbRQYQZUmXwYSA5CC5QhXz8RzX60msNLvz1zT0LFvUJvQpvKDh9Xn69p/ZXhkU6H gYhJ9qqf5yxBHmAfbkC+hUEe8oEoS9epIZfOKAntOLMJoJXNuGU3RZkas5t25OeY ULzdRb8rTefNbA02/zlTOiHLdLNMtI5nfc7TB0E= -----END CERTIFICATE-----Generated at Fri Mar 14 10:55:37 2025 by rpki-client