$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa File: af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa (raw, json) Hash identifier: sfCh/NyjT8NIy9Kh42qG7Y3c+YzTwUSdNq3Z3Pi4nCw= Subject key identifier: 74:77:59:2A:62:8B:71:70:C9:65:2C:35:F9:9A:63:7C:E4:28:67:B2 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F432858480BDA6144ED9942BBE3D38180 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 42 IP address blocks: 207.34.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:61:44:ed:99:42:bb:e3:d3:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=a8fcede8-929a-4507-9a13-d384f5be4fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:43:fb:17:4b:25:97:9e:b2:42:07:22:52:bf: 20:16:7b:fd:0a:fd:1d:c5:15:c3:a6:53:44:ec:0e: 3a:93:71:3a:51:db:65:5b:d8:e1:82:dd:f9:56:c1: 1d:87:9b:a7:1f:38:f6:59:cd:a9:64:a0:64:4d:d6: 5f:ce:a7:39:20:af:e9:c9:b7:72:fe:ee:5d:45:30: a8:c2:0f:ab:f4:29:b3:9c:47:43:f9:a8:c5:fb:71: 95:5c:75:b7:a6:11:91:42:3d:e9:6a:cc:d3:2f:a9: de:71:f9:0a:66:91:d9:86:dc:3b:79:a2:3f:2a:54: 78:8d:43:17:b1:21:fa:f3:ee:e3:a2:44:e0:88:48: 75:70:fd:e9:6b:6c:eb:02:52:21:58:4e:23:4a:db: 3a:56:58:fa:31:ba:0f:41:46:09:f8:48:ff:a1:aa: c7:ed:46:32:57:36:11:d5:67:5a:1c:68:ad:37:35: cd:e0:49:50:aa:08:77:98:ac:7a:9a:4f:23:97:8b: 85:66:c5:f7:d7:f6:8b:22:f8:db:ff:be:b0:ef:5a: 8d:c4:b1:c3:c9:eb:04:dd:57:fa:c2:b4:59:7f:da: 10:4c:29:1f:4d:45:09:e1:8c:1c:d0:cb:bd:dc:5d: 93:39:09:1d:97:47:ae:ee:c9:9e:c4:f3:c2:9a:2a: 0f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:77:59:2A:62:8B:71:70:C9:65:2C:35:F9:9A:63:7C:E4:28:67:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 207.34.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a7:7f:4a:03:b5:23:74:00:8b:38:f6:01:5c:6b:5f:08:a3: 1d:b8:54:da:11:ba:bd:e8:66:d2:ca:19:97:f7:61:86:6a:33: 6d:09:64:dc:5c:95:3f:6f:d7:da:71:91:92:31:b6:02:bb:97: ed:8e:c0:d6:17:99:d8:3c:7c:c1:01:7a:d1:a2:f1:8a:07:1b: a8:e6:04:ca:84:91:ac:33:86:8e:e0:c8:a8:ca:07:58:6a:8d: a7:a1:be:7a:1b:c9:4d:7f:fa:bc:bd:94:74:09:95:3a:7a:4e: e1:93:30:48:27:04:e0:59:79:fe:b7:39:7e:e7:d3:4c:13:40: 65:a5:75:f6:13:a9:7c:0f:e5:32:b0:02:5d:2c:8f:ef:3a:20: 67:36:39:9a:02:b9:74:03:93:23:5b:31:32:58:c1:60:95:cb: d2:1d:ae:ba:d1:30:4b:d2:38:a7:95:c9:68:8c:9c:22:27:f5: a7:82:e5:a2:9e:35:5b:51:48:1d:bb:ca:9c:e4:9a:34:17:68: f6:e3:3b:42:2f:88:75:0a:5e:43:47:bd:82:c1:8a:1d:fa:a6: 8e:0f:a2:af:19:87:f8:3f:e6:a5:43:b9:43:4a:1b:ea:f3:be: ab:74:66:71:e5:51:be:30:ae:11:4a:54:7b:2f:ac:ec:52:e2: 2a:ac:0f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2mFE7ZlCu+PTgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk YThmY2VkZTgtOTI5YS00NTA3LTlhMTMtZDM4NGY1YmU0ZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0P7F0sll56yQgciUr8gFnv9Cv0dxRXDplNE 7A46k3E6UdtlW9jhgt35VsEdh5unHzj2Wc2pZKBkTdZfzqc5IK/pybdy/u5dRTCo wg+r9CmznEdD+ajF+3GVXHW3phGRQj3paszTL6necfkKZpHZhtw7eaI/KlR4jUMX sSH68+7jokTgiEh1cP3pa2zrAlIhWE4jSts6Vlj6MboPQUYJ+Ej/oarH7UYyVzYR 1WdaHGitNzXN4ElQqgh3mKx6mk8jl4uFZsX31/aLIvjb/76w71qNxLHDyesE3Vf6 wrRZf9oQTCkfTUUJ4Ywc0Mu93F2TOQkdl0eu7smexPPCmioPpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHR3WSpii3FwyWUsNfmaY3zkKGeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYWYzYTlhNTAtZjIzZi0z ZWY1LWEzNjYtNGFhMTQwNDgxYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzyIGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2nf0oDtSN0AIs49gFca18Iox24VNoRur3oZtLKGZf3YYZqM20JZNxc lT9v19pxkZIxtgK7l+2OwNYXmdg8fMEBetGi8YoHG6jmBMqEkawzho7gyKjKB1hq jaehvnobyU1/+ry9lHQJlTp6TuGTMEgnBOBZef63OX7n00wTQGWldfYTqXwP5TKw Al0sj+86IGc2OZoCuXQDkyNbMTJYwWCVy9IdrrrRMEvSOKeVyWiMnCIn9aeC5aKe NVtRSB27ypzkmjQXaPbjO0IviHUKXkNHvYLBih36po4Poq8Zh/g/5qVDuUNKG+rz vqt0ZnHlUb4wrhFKVHsvrOxS4iqsD+Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:27 2025 by rpki-client