$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/08d65c5f-718e-3ae4-8a96-c813a4850ce5.roa File: 08d65c5f-718e-3ae4-8a96-c813a4850ce5.roa (raw, json) Hash identifier: Q+PZc6mcm6zHjOegwW3ZzKqrmHqNssFTRCWre89XYuA= Subject key identifier: 9C:C1:20:6E:FD:D8:4C:B1:3D:47:FE:00:59:44:1B:BF:13:AB:30:37 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584889043C1C96A40FCE98A54C80 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/08d65c5f-718e-3ae4-8a96-c813a4850ce5.roa Signing time: Mon 13 Jan 2025 22:01:10 +0000 ROA not before: Mon 13 Jan 2025 22:01:10 +0000 ROA not after: Sun 13 Apr 2025 21:01:10 +0000 asID: 174 IP address blocks: 65.165.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:04:3c:1c:96:a4:0f:ce:98:a5:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Jan 13 22:01:10 2025 GMT Not After : Apr 13 21:01:10 2025 GMT Subject: CN=2e21c894-fdbb-4d16-9bf8-568e64c00627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2a:fb:24:33:01:af:10:4e:44:41:65:3f:10: 69:6e:ce:7e:b8:b0:fd:02:66:cc:83:01:46:e9:af: 9b:c6:ab:90:92:e1:5b:c6:84:fc:b8:7b:5f:70:e3: 8e:f9:3b:04:8c:59:fb:4b:0e:01:8f:a3:12:77:54: 16:7d:20:6a:92:d4:4f:64:61:2c:17:d3:c5:97:ef: 33:60:04:47:86:9d:3e:e2:8d:52:7a:38:87:e6:20: 67:de:2b:ac:2a:35:2e:2a:d0:c5:13:07:e1:5d:cd: 2d:4a:db:15:a3:db:49:64:e2:89:6e:9f:28:a3:90: 09:0b:4b:bc:d8:c6:f6:92:4b:3f:79:be:bc:f2:da: 8c:bc:2e:c9:6b:64:9a:4a:a8:3f:a8:6a:07:07:31: db:0f:68:16:6f:88:a4:2d:c8:6c:0a:05:47:27:45: 09:1b:51:7c:d4:4f:af:9c:7b:3d:28:26:78:be:86: a4:e1:02:8f:a1:0e:d0:3d:08:a2:00:b5:eb:99:ba: 5b:e5:42:99:8a:5f:29:dc:7b:f8:63:ed:4d:18:43: 9d:62:d8:d3:d7:0a:5b:4b:86:9b:a2:02:b2:d8:9f: f0:1e:35:b6:b8:56:4d:88:fa:2c:c6:30:6a:40:9f: bf:da:fa:49:d6:16:6f:42:67:0a:b5:a5:cd:9f:74: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C1:20:6E:FD:D8:4C:B1:3D:47:FE:00:59:44:1B:BF:13:AB:30:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/08d65c5f-718e-3ae4-8a96-c813a4850ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 65.165.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:45:92:ec:fd:d8:5d:09:de:21:c4:ef:14:9d:69:36:0a:6d: e4:b2:72:34:d1:c4:f4:f2:d1:ed:88:41:40:88:50:a4:37:1e: ab:05:5c:05:cc:cb:c5:dc:d3:2a:ba:2d:b9:7f:6e:fc:32:72: fb:e2:46:44:8a:62:ea:f6:75:d7:71:86:3d:8a:bf:5e:97:56: 86:20:ef:74:e3:87:6d:b7:c6:db:8c:75:86:1e:38:ef:27:89: f2:47:31:b1:e3:9d:b8:0f:4c:e1:33:2b:82:97:64:17:e6:14: e6:fc:cb:4f:c4:47:01:e7:06:03:44:05:da:5c:fa:01:1f:21: d0:43:c2:ad:f5:fe:78:a8:32:54:1a:9c:0a:46:e5:6a:66:ec: b4:4a:fb:d3:3d:d4:e1:1e:28:07:9a:4b:5f:51:a9:65:51:b0: b5:7d:56:01:08:e9:12:3c:23:68:9a:65:0f:19:08:bb:f6:c1: 23:a6:f1:2b:34:c4:ce:3f:eb:a6:9f:4c:d6:ef:1b:35:f2:42: bd:33:50:45:da:1f:9c:79:a1:38:96:bd:27:e5:53:12:58:85: 9d:59:4e:78:18:e1:e0:e3:72:92:e8:ff:17:59:a7:90:62:83: 1b:8c:64:74:83:d0:7c:1d:80:f6:7c:e4:6b:5e:17:a3:64:d0: f9:b5:6b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiJBDwclqQPzpilTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDExMzIyMDExMFoXDTI1MDQxMzIxMDExMFowLzEtMCsGA1UEAxMk MmUyMWM4OTQtZmRiYi00ZDE2LTliZjgtNTY4ZTY0YzAwNjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSr7JDMBrxBOREFlPxBpbs5+uLD9AmbMgwFG 6a+bxquQkuFbxoT8uHtfcOOO+TsEjFn7Sw4Bj6MSd1QWfSBqktRPZGEsF9PFl+8z YARHhp0+4o1SejiH5iBn3iusKjUuKtDFEwfhXc0tStsVo9tJZOKJbp8oo5AJC0u8 2Mb2kks/eb688tqMvC7Ja2SaSqg/qGoHBzHbD2gWb4ikLchsCgVHJ0UJG1F81E+v nHs9KCZ4voak4QKPoQ7QPQiiALXrmbpb5UKZil8p3Hv4Y+1NGEOdYtjT1wpbS4ab ogKy2J/wHjW2uFZNiPosxjBqQJ+/2vpJ1hZvQmcKtaXNn3QeFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzBIG792EyxPUf+AFlEG78TqzA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvMDhkNjVjNWYtNzE4ZS0z YWU0LThhOTYtYzgxM2E0ODUwY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQaWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9Fkuz92F0J3iHE7xSdaTYKbeSycjTRxPTy0e2IQUCIUKQ3HqsFXAXM y8Xc0yq6Lbl/bvwycvviRkSKYur2dddxhj2Kv16XVoYg73Tjh223xtuMdYYeOO8n ifJHMbHjnbgPTOEzK4KXZBfmFOb8y0/ERwHnBgNEBdpc+gEfIdBDwq31/nioMlQa nApG5Wpm7LRK+9M91OEeKAeaS19RqWVRsLV9VgEI6RI8I2iaZQ8ZCLv2wSOm8Ss0 xM4/66afTNbvGzXyQr0zUEXaH5x5oTiWvSflUxJYhZ1ZTngY4eDjcpLo/xdZp5Bi gxuMZHSD0HwdgPZ85GteF6Nk0Pm1a7E= -----END CERTIFICATE-----Generated at Wed Feb 5 10:54:25 2025 by rpki-client