$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/c49b3b11-b5be-3457-9944-344841e05c2c.roa File: c49b3b11-b5be-3457-9944-344841e05c2c.roa (raw, json) Hash identifier: lsrRSFQyXI5Sr+kekXFua66ZC4plJl1jSPh3sGAWETY= Subject key identifier: 99:FE:73:B0:C5:36:EB:86:7D:C1:03:57:1A:25:16:13:A1:B1:92:55 Certificate issuer: /CN=5ff2cbdb-2720-448b-951d-699a8e60cb7d Certificate serial: 010D0C9F43285848CDE112DBAD6DD2839F4E3F20 Authority key identifier: A2:46:63:F9:01:FB:63:EC:13:17:31:16:54:0C:A8:01:5C:7D:10:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/c49b3b11-b5be-3457-9944-344841e05c2c.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 396465 IP address blocks: 134.71.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:12:db:ad:6d:d2:83:9f:4e:3f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff2cbdb-2720-448b-951d-699a8e60cb7d Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=df5933c1-e765-44d1-a6aa-26a227ea1c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:15:42:04:38:36:c6:40:97:76:79:3e:89:3a: f0:b5:00:88:40:19:d1:38:a9:0c:d0:4a:0b:5f:f7: fb:3d:25:bd:99:3e:c1:33:71:3f:c8:f7:4c:2d:d0: 78:46:13:95:b9:22:f3:e1:c7:cd:ae:4d:0f:42:ac: 83:72:d5:a1:0e:ca:e2:e9:3b:03:0b:ce:6c:e6:b1: 61:83:2b:80:04:d5:51:14:93:24:96:ba:e9:12:0b: 25:28:5c:9f:d6:71:e6:d6:07:46:c1:7a:f3:31:48: 1d:29:40:d5:8e:e4:cd:05:34:38:0a:14:30:4e:2d: 31:4a:e0:5d:5d:5c:eb:97:71:4f:75:56:e5:c3:f8: 36:cf:f8:7d:22:14:b5:e2:8e:4a:73:59:49:6b:38: 02:43:ec:2f:cd:59:04:11:b8:6e:b6:d1:1e:b8:5b: 86:2a:cc:be:99:d0:fb:dd:44:02:ca:07:4f:16:7c: 3e:19:ee:e8:4d:56:bc:ca:01:5a:45:81:2a:25:c2: 38:43:9a:86:78:84:a3:13:14:b5:d3:6b:3e:3b:11: ff:75:41:4a:15:b5:4f:4e:f6:b7:38:4e:4a:2f:8c: 0f:3e:9c:de:6d:5c:9f:dc:3b:db:4f:4b:ae:ae:87: fc:5e:6f:20:f5:00:ee:3a:6a:6c:90:76:5d:12:ab: 0f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FE:73:B0:C5:36:EB:86:7D:C1:03:57:1A:25:16:13:A1:B1:92:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/c49b3b11-b5be-3457-9944-344841e05c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.crl X509v3 Authority Key Identifier: keyid:A2:46:63:F9:01:FB:63:EC:13:17:31:16:54:0C:A8:01:5C:7D:10:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer sbgp-ipAddrBlock: critical IPv4: 134.71.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:1e:a2:1a:18:10:58:55:b7:b0:a5:b2:3a:82:bb:10:c2:bb: b7:ed:35:f6:fa:13:22:b3:f7:19:22:6f:e8:6e:0b:5f:f4:4b: 95:df:ca:9a:b9:3e:14:30:f5:37:04:ac:ba:3e:12:da:f6:d7: 05:f2:73:1f:4b:1b:fb:a5:ae:c5:6d:8b:a2:6a:0f:e7:ba:86: 27:3a:f5:7d:db:13:3a:52:2d:6a:bb:b1:a8:59:ce:6a:3a:b8: 5a:43:4a:c0:43:ad:89:96:a3:12:41:e2:4f:53:ce:4a:91:ba: f3:88:a3:34:7e:5f:3a:eb:d2:e0:2f:cd:d8:0d:6c:88:d9:d7: 8f:9c:9b:97:79:e4:1b:a1:a1:2a:b5:a3:54:3b:bf:6a:ff:84: f4:79:a9:61:a1:30:a3:4c:0e:74:f2:97:26:11:fe:6c:a8:f2: f0:c8:b8:3e:33:08:c3:18:67:37:0f:f9:6c:b1:57:5b:6b:24: 95:3e:4b:8d:7d:f7:71:f0:66:d2:00:2b:21:ed:75:d3:2e:e8: b9:c4:b3:93:ae:8e:12:5f:c3:a8:58:e6:74:96:5a:1b:b4:99: 0a:ef:38:93:02:4d:af:4d:a7:ba:a1:f3:78:ea:b6:3e:85:ef: 0d:19:be:a0:59:47:6b:5f:b7:9f:63:ba:5f:e3:73:1c:6d:03: 83:e9:74:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RLbrW3Sg59OPyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZmMmNiZGItMjcyMC00NDhiLTk1MWQtNjk5YThlNjBj YjdkMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZGY1OTMzYzEtZTc2NS00NGQxLWE2YWEtMjZhMjI3ZWExYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRVCBDg2xkCXdnk+iTrwtQCIQBnROKkM0EoL X/f7PSW9mT7BM3E/yPdMLdB4RhOVuSLz4cfNrk0PQqyDctWhDsri6TsDC85s5rFh gyuABNVRFJMklrrpEgslKFyf1nHm1gdGwXrzMUgdKUDVjuTNBTQ4ChQwTi0xSuBd XVzrl3FPdVblw/g2z/h9IhS14o5Kc1lJazgCQ+wvzVkEEbhuttEeuFuGKsy+mdD7 3UQCygdPFnw+Ge7oTVa8ygFaRYEqJcI4Q5qGeISjExS102s+OxH/dUFKFbVPTva3 OE5KL4wPPpzebVyf3DvbT0uurof8Xm8g9QDuOmpskHZdEqsPhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn+c7DFNuuGfcEDVxolFhOhsZJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmYy Y2JkYi0yNzIwLTQ0OGItOTUxZC02OTlhOGU2MGNiN2QvYzQ5YjNiMTEtYjViZS0z NDU3LTk5NDQtMzQ0ODQxZTA1YzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWZmMmNiZGItMjcyMC00NDhiLTk1 MWQtNjk5YThlNjBjYjdkLzVmZjJjYmRiLTI3MjAtNDQ4Yi05NTFkLTY5OWE4ZTYw Y2I3ZC5jcmwwHwYDVR0jBBgwFoAUokZj+QH7Y+wTFzEWVAyoAVx9EGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmYyY2JkYi0yNzIwLTQ0OGItOTUxZC02OTlh OGU2MGNiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhkf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8eohoYEFhVt7ClsjqCuxDCu7ftNfb6EyKz9xkib+huC1/0S5Xfypq5 PhQw9TcErLo+Etr21wXycx9LG/ulrsVti6JqD+e6hic69X3bEzpSLWq7sahZzmo6 uFpDSsBDrYmWoxJB4k9TzkqRuvOIozR+Xzrr0uAvzdgNbIjZ14+cm5d55BuhoSq1 o1Q7v2r/hPR5qWGhMKNMDnTylyYR/myo8vDIuD4zCMMYZzcP+WyxV1trJJU+S419 93HwZtIAKyHtddMu6LnEs5OujhJfw6hY5nSWWhu0mQrvOJMCTa9Np7qh83jqtj6F 7w0ZvqBZR2tft59jul/jcxxtA4PpdKQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:16 2025 by rpki-client