$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0abf865-3b92-36a2-9f86-2acfbb2a718c.roa File: f0abf865-3b92-36a2-9f86-2acfbb2a718c.roa (raw, json) Hash identifier: jlZMt8pwudOR/rtKBJoGmBjQmYpSJ8QQqoG5+td85pI= Subject key identifier: 1D:EE:E3:D3:08:E7:AD:5B:8B:C3:F1:A5:B7:D2:D1:80:C7:04:71:1B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D4E2AAC37F7A0F0576300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0abf865-3b92-36a2-9f86-2acfbb2a718c.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33489 IP address blocks: 69.245.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:4e:2a:ac:37:f7:a0:f0:57:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=1b45bb10-c1d2-4f0c-af97-253b7e256eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f3:81:7d:27:ad:89:cd:8e:25:c0:88:11:09: b5:31:ac:80:89:31:17:83:a9:c1:6f:4f:e6:e6:86: 93:21:9c:1b:dd:c9:30:ea:59:76:a7:0e:76:c1:64: d1:62:57:5b:0a:41:09:05:9d:da:63:b7:1c:e5:79: 4a:29:80:34:39:77:bb:ce:1e:c8:31:b5:11:5c:9d: 04:86:ca:6f:01:59:35:dd:45:ad:92:50:29:25:ab: 84:c2:5f:7e:8c:c1:d3:0c:8d:ce:89:43:10:9b:4d: 28:8f:34:5e:11:83:45:2b:1c:ba:b4:e1:c4:f6:fb: 69:58:01:22:86:13:eb:5c:f6:46:13:ca:e4:29:1f: e0:a1:7f:49:fb:ff:54:26:5e:48:11:72:24:63:88: 9c:59:e9:cd:b4:31:58:e3:07:23:2a:5e:b8:39:51: 03:12:d2:15:61:36:60:41:61:7e:e6:33:3d:44:03: 4c:58:ee:8b:79:dd:b5:70:55:04:43:24:5c:1b:97: 30:92:d0:bc:fb:8c:d6:01:bf:35:cc:31:78:53:d0: 44:7f:9e:67:f5:9d:49:22:59:10:98:fc:f5:48:eb: 17:40:0f:03:48:3f:97:78:ee:f9:f0:67:2c:a1:09: b2:26:c7:0d:28:2e:7a:b8:80:e7:c6:d7:c8:a3:82: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EE:E3:D3:08:E7:AD:5B:8B:C3:F1:A5:B7:D2:D1:80:C7:04:71:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0abf865-3b92-36a2-9f86-2acfbb2a718c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.245.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:22:ff:0b:ac:c6:82:3f:1e:6f:3a:9a:74:40:b1:4c:b7:ce: 15:19:4e:18:88:4f:c2:c2:40:ab:e5:13:b3:3d:34:11:ec:ac: 82:0f:f7:1b:5e:61:63:87:e8:67:d0:13:27:eb:f9:c2:82:1a: f8:22:e6:8a:02:fe:17:e9:d6:d7:82:3a:57:16:93:83:06:de: f2:3b:3d:5e:20:0c:fe:72:17:80:d3:5a:91:ee:d3:54:e2:91: 72:99:75:3d:5e:32:66:e6:6f:cb:31:19:7b:67:cb:5d:e5:69: 4b:ea:62:60:61:75:d5:e9:4a:04:74:c1:83:a2:d2:b8:4b:97: 3a:a3:10:71:00:39:48:14:53:56:74:ed:25:dc:cd:62:32:a6: c6:76:dd:80:b9:19:8d:54:8d:f3:0e:ea:12:ef:18:23:06:e0: ad:be:0a:96:4e:a2:3a:11:7f:7e:e5:87:77:c2:b5:b0:48:67: 83:e0:6d:17:05:55:51:fa:b1:8d:e7:a4:f9:6f:da:f4:55:8a: e8:fd:e1:44:29:e1:94:c2:0d:26:00:e6:85:5f:1b:f5:ad:98: 4c:3f:0f:05:1d:ef:dd:29:1b:0c:6b:4d:41:53:d1:9b:c7:2f: 7b:eb:26:da:75:2c:0c:9b:58:bb:9c:03:2f:c7:34:34:6c:f8: d4:6d:2d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebU4qrDf3oPBXYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MWI0NWJiMTAtYzFkMi00ZjBjLWFmOTctMjUzYjdlMjU2ZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPOBfSetic2OJcCIEQm1MayAiTEXg6nBb0/m 5oaTIZwb3ckw6ll2pw52wWTRYldbCkEJBZ3aY7cc5XlKKYA0OXe7zh7IMbURXJ0E hspvAVk13UWtklApJauEwl9+jMHTDI3OiUMQm00ojzReEYNFKxy6tOHE9vtpWAEi hhPrXPZGE8rkKR/goX9J+/9UJl5IEXIkY4icWenNtDFY4wcjKl64OVEDEtIVYTZg QWF+5jM9RANMWO6Led21cFUEQyRcG5cwktC8+4zWAb81zDF4U9BEf55n9Z1JIlkQ mPz1SOsXQA8DSD+XeO758GcsoQmyJscNKC56uIDnxtfIo4IUuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3u49MI561bi8PxpbfS0YDHBHEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjBhYmY4NjUtM2I5Mi0z NmEyLTlmODYtMmFjZmJiMmE3MThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRfVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoi/wusxoI/Hm86mnRAsUy3zhUZThiIT8LCQKvlE7M9NBHsrIIP9xte YWOH6GfQEyfr+cKCGvgi5ooC/hfp1teCOlcWk4MG3vI7PV4gDP5yF4DTWpHu01Ti kXKZdT1eMmbmb8sxGXtny13laUvqYmBhddXpSgR0wYOi0rhLlzqjEHEAOUgUU1Z0 7SXczWIypsZ23YC5GY1UjfMO6hLvGCMG4K2+CpZOojoRf37lh3fCtbBIZ4PgbRcF VVH6sY3npPlv2vRViuj94UQp4ZTCDSYA5oVfG/WtmEw/DwUd790pGwxrTUFT0ZvH L3vrJtp1LAybWLucAy/HNDRs+NRtLSc= -----END CERTIFICATE-----Generated at Mon Apr 7 05:56:38 2025 by rpki-client