$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/fbe03f0d-2592-32d1-9e8e-50bd46f95a2e.roa File: fbe03f0d-2592-32d1-9e8e-50bd46f95a2e.roa (raw, json) Hash identifier: kRYGQSb0C6JEtyS6KuqqWpMxXzpYN2Fl4Cy/wTzcZc0= Subject key identifier: 97:2B:1E:88:EB:CB:DC:24:89:39:11:A5:1B:EB:9E:F1:39:B4:45:57 Certificate issuer: /CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a Certificate serial: 010D0C9F43285848AC60D2BC4787E9071B10E700 Authority key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/fbe03f0d-2592-32d1-9e8e-50bd46f95a2e.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 20473 IP address blocks: 162.208.108.0/22 maxlen: 24 2604:ab80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:d2:bc:47:87:e9:07:1b:10:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=33b4fde2-0276-4c7e-9662-e273497d2037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:11:5d:8e:fc:a1:e8:d7:3f:f8:ce:cd:1f:b3: 9b:16:ce:98:de:b1:2f:2c:14:7b:cf:14:0c:04:6b: 6f:9d:18:73:7c:bf:94:a4:76:de:1c:67:cb:69:8b: 94:e1:9f:f3:db:98:2e:33:25:06:25:ef:5b:91:f1: 01:57:8b:3e:65:17:8e:1a:5a:ec:75:13:61:b7:89: 13:9f:9a:f8:2d:11:c5:f0:04:e0:a8:88:c6:fc:c3: 45:a5:60:01:f5:fa:7a:de:ec:bf:c0:bd:2b:e4:8a: 74:57:cd:5c:48:4d:91:4e:76:47:1b:b6:63:c9:38: 58:ca:ec:b1:b4:e0:71:45:29:b8:cf:ff:c4:8b:96: 79:c0:4c:81:73:ef:83:1c:6f:c5:e5:a1:9a:66:a7: d1:b7:c9:c8:81:2f:94:a6:ff:68:67:84:42:c5:8b: 4b:5a:b2:8a:2e:56:af:17:43:eb:4c:bf:dd:12:41: 67:d9:cc:8c:58:28:1d:a5:18:64:b5:75:a8:31:90: 3a:20:f5:ae:89:61:93:b6:d6:d7:6b:2a:a3:1b:e4: 3b:61:06:5e:ee:74:52:1e:60:6e:7d:2d:a9:1f:e1: bd:53:99:cc:f4:f8:93:79:d7:5a:8f:4a:d0:08:6f: dc:5e:64:a4:9e:17:41:a4:13:fa:3a:92:29:e4:15: f5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2B:1E:88:EB:CB:DC:24:89:39:11:A5:1B:EB:9E:F1:39:B4:45:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/fbe03f0d-2592-32d1-9e8e-50bd46f95a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl X509v3 Authority Key Identifier: keyid:58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer sbgp-ipAddrBlock: critical IPv4: 162.208.108.0/22 IPv6: 2604:ab80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:80:cc:c2:dd:cc:55:a7:2e:6d:4b:85:50:03:f6:e6:cc:4a: 80:42:db:07:74:72:92:80:40:61:8e:45:64:af:9e:d0:dc:4c: 6f:7a:2c:5f:38:c0:b7:7d:36:ab:4b:f9:90:4f:f6:02:cd:a0: 89:a5:db:a3:89:d6:ca:4f:0f:6d:76:f3:56:d6:6a:8b:28:6a: 71:49:df:2b:49:93:2a:37:90:fa:eb:66:f8:53:b7:b8:03:82: d7:06:85:05:e6:26:48:94:5f:58:d8:fc:75:69:1d:c4:02:07: 3c:12:28:e7:dc:99:25:e9:23:1f:5c:f3:64:93:5b:5f:98:6a: e5:9e:d8:3d:a0:02:b2:f2:24:45:13:73:8c:dd:b1:a4:86:ea: a4:04:6f:46:38:0e:e2:83:90:8a:f5:ae:f8:83:b0:92:34:3b: 78:bb:26:c1:44:16:89:c6:95:24:3f:ca:c4:0a:6e:22:fc:be: e2:b7:13:55:77:42:bf:9c:90:1a:e6:20:3a:a8:2c:d3:80:a1: 48:3d:2f:5a:77:0f:8c:bc:ec:3d:85:86:15:f0:fb:9d:17:9c: f6:b7:b4:4d:9d:41:63:ea:90:e7:87:87:f8:01:0b:f1:4c:ba: dc:e4:a8:0f:f3:41:12:87:d9:74:1e:43:24:35:cd:34:d4:e0: 0b:10:e0:e4 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEisYNK8R4fpBxsQ5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRlMjgzM2QtYTllYS00MjJkLWE1YjUtYmEyYjlhYTk0 ODZhMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk MzNiNGZkZTItMDI3Ni00YzdlLTk2NjItZTI3MzQ5N2QyMDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hFdjvyh6Nc/+M7NH7ObFs6Y3rEvLBR7zxQM BGtvnRhzfL+UpHbeHGfLaYuU4Z/z25guMyUGJe9bkfEBV4s+ZReOGlrsdRNht4kT n5r4LRHF8ATgqIjG/MNFpWAB9fp63uy/wL0r5Ip0V81cSE2RTnZHG7ZjyThYyuyx tOBxRSm4z//Ei5Z5wEyBc++DHG/F5aGaZqfRt8nIgS+Upv9oZ4RCxYtLWrKKLlav F0PrTL/dEkFn2cyMWCgdpRhktXWoMZA6IPWuiWGTttbXayqjG+Q7YQZe7nRSHmBu fS2pH+G9U5nM9PiTeddaj0rQCG/cXmSknhdBpBP6OpIp5BX1dQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJcrHojry9wkiTkRpRvrnvE5tEVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNGUy ODMzZC1hOWVhLTQyMmQtYTViNS1iYTJiOWFhOTQ4NmEvZmJlMDNmMGQtMjU5Mi0z MmQxLTllOGUtNTBiZDQ2Zjk1YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzRlMjgzM2QtYTllYS00MjJkLWE1 YjUtYmEyYjlhYTk0ODZhLzM0ZTI4MzNkLWE5ZWEtNDIyZC1hNWI1LWJhMmI5YWE5 NDg2YS5jcmwwHwYDVR0jBBgwFoAUWBrNGi+iDrfQcDwgm1lK/qlpxKEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNGUyODMzZC1hOWVhLTQyMmQtYTViNS1iYTJi OWFhOTQ4NmEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCotBsMA0E AgACMAcDBQAmBKuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADWAzMLdzFWnLm1LhVAD9ubMSoBC2wd0cpKA QGGORWSvntDcTG96LF84wLd9NqtL+ZBP9gLNoIml26OJ1spPD21281bWaosoanFJ 3ytJkyo3kPrrZvhTt7gDgtcGhQXmJkiUX1jY/HVpHcQCBzwSKOfcmSXpIx9c82ST W1+YauWe2D2gArLyJEUTc4zdsaSG6qQEb0Y4DuKDkIr1rviDsJI0O3i7JsFEFonG lSQ/ysQKbiL8vuK3E1V3Qr+ckBrmIDqoLNOAoUg9L1p3D4y87D2FhhXw+50XnPa3 tE2dQWPqkOeHh/gBC/FMutzkqA/zQRKH2XQeQyQ1zTTU4AsQ4OQ= -----END CERTIFICATE-----Generated at Sat Apr 5 11:31:44 2025 by rpki-client