$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa File: 84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa (raw, json) Hash identifier: 3chaUY5GvBNKxEcMkWeyRuS+Qhc70TKij0/HwPmUiA0= Subject key identifier: 4D:84:EE:61:60:EF:6A:DF:F6:EF:DC:F6:E9:D2:14:AA:1B:DF:61:6E Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F43285848E16BE74DFBC0D074CE642990 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 22843 IP address blocks: 67.231.144.0/20 maxlen: 24 148.163.128.0/19 maxlen: 24 208.84.64.0/22 maxlen: 24 208.86.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e7:4d:fb:c0:d0:74:ce:64:29:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=4d59426d-c6bf-4e4b-b54e-bfd8a641d19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:2b:ea:70:99:8e:e8:b9:5d:12:4f:c2:1c: 87:3d:0a:0c:fa:2c:39:db:ac:60:e2:6c:ee:9b:32: c4:7e:39:54:1d:bd:b4:cc:0a:f4:f1:c1:ec:82:05: 31:ac:ce:b8:3b:36:c0:24:8f:4a:d2:98:19:65:b8: 33:0a:7e:24:db:6e:57:95:24:cb:cb:f6:41:cc:cc: 20:8f:29:a3:ec:45:92:df:bc:35:b2:b3:00:9f:4b: 6e:bf:57:5e:6d:6d:2a:16:7f:22:b2:65:80:a5:ff: 54:0f:6b:aa:e2:05:dd:16:21:e7:72:d8:5b:3d:36: 2f:93:81:4b:75:7e:1a:a2:fe:89:7e:8e:c1:9f:80: 78:10:a6:ed:3c:c1:4f:b0:3a:00:e2:07:76:90:1e: b7:06:f4:8f:92:1d:c3:75:d2:ad:1a:1f:04:34:f6: f9:ff:c1:20:4b:72:32:f2:4e:2d:e4:39:26:16:89: 9d:1e:43:2b:5e:e2:49:fa:78:3b:c7:9b:3a:80:48: c9:7c:a1:d3:c6:66:a6:cf:3a:28:27:a5:c7:92:9b: 98:51:34:44:96:4f:d1:7a:d5:fe:f4:9d:8b:4d:e1: 87:eb:72:1a:13:e8:eb:7a:37:45:30:32:6f:c4:a2: 92:f5:81:d6:de:32:22:bf:dd:d4:c4:df:54:b0:d6: 14:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:84:EE:61:60:EF:6A:DF:F6:EF:DC:F6:E9:D2:14:AA:1B:DF:61:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv4: 67.231.144.0/20 148.163.128.0/19 208.84.64.0/22 208.86.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:bc:c4:bb:46:0e:38:14:ef:24:71:fc:0b:00:4c:e8:13:b4: 50:4b:a3:97:b3:7e:b9:69:3f:ce:dd:c5:0b:b7:83:68:b2:c1: 50:a9:18:a3:4f:1b:64:49:40:25:b7:03:aa:57:b3:ce:30:f6: 2c:3e:46:b6:23:5d:69:75:51:08:44:3e:c9:ee:59:6a:8b:07: 74:16:e7:c7:5d:9a:7b:36:2b:48:98:f4:83:59:be:4a:eb:a5: b3:7b:85:8d:80:96:78:79:d8:eb:45:83:49:7e:60:ab:b5:d6: 6c:03:f0:55:bf:d2:a4:a6:d6:43:33:de:23:32:76:77:0b:29: 3c:58:e3:a6:4a:5b:6e:9f:12:e0:b5:37:e4:f1:46:c0:d8:34: 61:76:4f:dd:9d:77:6d:97:6a:47:ab:77:60:b8:0d:a7:e6:0c: 80:e8:63:c8:e4:26:b8:55:9b:cb:db:6a:16:08:0c:4d:8a:f4: 0c:cd:49:21:20:e2:42:fb:1a:c8:13:ed:65:bf:9e:dc:a3:dd: 5e:b6:54:b4:21:67:80:ea:c0:f1:ed:0b:8a:43:9e:42:aa:07: 29:23:d3:a1:d8:ee:73:9c:ec:7a:8a:9c:a9:68:3b:23:05:90: f9:26:04:db:31:d2:73:41:76:df:39:84:4c:6e:bb:aa:01:c5: de:76:64:0b -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEjha+dN+8DQdM5kKZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NGQ1OTQyNmQtYzZiZi00ZTRiLWI1NGUtYmZkOGE2NDFkMTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ0r6nCZjui5XRJPwhyHPQoM+iw526xg4mzu mzLEfjlUHb20zAr08cHsggUxrM64OzbAJI9K0pgZZbgzCn4k225XlSTLy/ZBzMwg jymj7EWS37w1srMAn0tuv1debW0qFn8ismWApf9UD2uq4gXdFiHncthbPTYvk4FL dX4aov6Jfo7Bn4B4EKbtPMFPsDoA4gd2kB63BvSPkh3DddKtGh8ENPb5/8EgS3Iy 8k4t5DkmFomdHkMrXuJJ+ng7x5s6gEjJfKHTxmamzzooJ6XHkpuYUTRElk/RetX+ 9J2LTeGH63IaE+jrejdFMDJvxKKS9YHW3jIiv93UxN9UsNYUcwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFE2E7mFg72rf9u/c9unSFKob32FuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvODRmNjgyOWQtZGE2YS0z NmEyLTllZDMtNmRiNmM4NmE1MGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEQ+eQAwQF lKOAAwQC0FRAAwQC0FbIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKa8xLtGDjgU7yRx/AsATOgTtFBLo5ez frlpP87dxQu3g2iywVCpGKNPG2RJQCW3A6pXs84w9iw+RrYjXWl1UQhEPsnuWWqL B3QW58ddmns2K0iY9INZvkrrpbN7hY2Alnh52OtFg0l+YKu11mwD8FW/0qSm1kMz 3iMydncLKTxY46ZKW26fEuC1N+TxRsDYNGF2T92dd22Xakerd2C4DafmDIDoY8jk JrhVm8vbahYIDE2K9AzNSSEg4kL7GsgT7WW/ntyj3V62VLQhZ4DqwPHtC4pDnkKq Bykj06HY7nOc7HqKnKloOyMFkPkmBNsx0nNBdt85hExuu6oBxd52ZAs= -----END CERTIFICATE-----Generated at Sat Apr 5 12:32:39 2025 by rpki-client