$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f97d150f-cf40-308f-bef0-2e9c3857a0f6.roa File: f97d150f-cf40-308f-bef0-2e9c3857a0f6.roa (raw, json) Hash identifier: z1tdldqNjy1vg8IpR3dh+4EC4sTva0UxvMGek6Kg18A= Subject key identifier: 11:DF:8A:FF:D9:8A:EF:BF:59:2C:BC:3D:E5:D0:79:F3:09:45:90:42 Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b Certificate serial: 010D0C9F432858488AE0917229BBD07A7A110A40 Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f97d150f-cf40-308f-bef0-2e9c3857a0f6.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 62831 IP address blocks: 64.96.0.0/17 maxlen: 24 2620:57:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:91:72:29:bb:d0:7a:7a:11:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=99ef1625-4667-47ca-88cf-959908dfd368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:cb:58:95:6f:e7:b7:85:81:51:e6:9d:16: 0c:ca:20:6b:b6:a4:c7:76:7a:e4:10:fb:24:80:21: 03:05:9e:c0:a8:9f:09:96:1b:00:2f:b9:17:4e:05: 9f:35:32:a4:da:e2:90:5c:09:33:7e:0d:3e:80:fe: 0b:f5:47:76:30:e2:cf:ad:8b:ee:cd:f7:6c:3f:f9: 84:15:00:d1:48:94:24:c8:5b:68:7a:e4:b2:bf:ec: 9e:b8:cf:fd:51:4d:52:01:4b:b2:b9:e4:76:80:51: 5c:ef:7f:72:a9:e2:24:80:f1:12:31:b9:18:91:85: 2a:26:97:34:d2:cb:38:bb:7a:46:8f:f7:24:ea:fb: a3:28:25:af:a2:9d:37:59:83:71:f5:4f:19:4e:88: ea:c9:93:bb:8e:c2:70:93:9f:47:c9:17:56:da:4c: bc:94:39:5f:bb:92:3d:a7:42:d3:67:80:1d:56:b4: 33:f4:36:87:4f:9f:7a:94:c1:65:cb:3a:ca:91:35: 7e:c5:4b:bf:7c:fb:01:fc:9b:45:9a:1e:49:de:b5: 22:f3:74:a6:47:b3:fd:73:ca:be:00:bc:9e:15:a6: 4e:97:a5:af:68:76:30:33:60:7f:d1:76:be:ff:05: 35:29:28:dc:9d:7a:c4:46:77:ca:03:3e:2b:70:3b: 00:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DF:8A:FF:D9:8A:EF:BF:59:2C:BC:3D:E5:D0:79:F3:09:45:90:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f97d150f-cf40-308f-bef0-2e9c3857a0f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl X509v3 Authority Key Identifier: keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer sbgp-ipAddrBlock: critical IPv4: 64.96.0.0/17 IPv6: 2620:57:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ad:f5:03:25:8b:f3:67:f4:5f:42:07:57:b9:e5:86:fe:3b: 6b:de:bb:cd:b5:29:f9:69:48:ea:6f:1b:1a:fc:ea:00:6f:68: 9f:c9:4f:3d:d1:47:1f:8e:99:2f:36:8d:73:2d:41:48:54:28: aa:7a:0a:c0:a4:9f:32:a2:0f:af:07:39:05:10:c4:4d:15:d2: fd:18:d8:83:e3:de:5f:cf:74:cf:a4:08:ac:a6:f1:c3:6a:0a: 53:dd:e9:13:f3:dc:48:aa:5f:b6:2e:36:be:5f:53:17:b3:e6: 46:e1:fd:b2:6b:13:7c:0a:4f:2d:30:ea:08:cc:d4:f0:0e:d0: 63:92:f9:cf:26:76:a5:15:6e:15:8f:37:bc:70:74:0e:1b:c3: 98:d6:dc:ba:26:7e:8f:6c:27:51:83:bc:9c:e9:57:57:98:38: 4e:d5:da:2c:c4:cc:36:e6:9c:35:ca:54:4b:64:09:33:30:2d: 89:ef:75:a6:92:f6:bd:cc:31:45:cb:9f:07:cb:49:61:21:6a: 54:eb:f4:dd:ad:44:5c:5f:d9:25:5b:64:5e:b2:0b:e8:e3:a3: 70:06:63:f2:33:73:be:da:0c:85:81:ba:8c:5a:c7:95:70:42: a9:be:d9:70:f0:fc:31:a4:26:a8:40:05:cb:30:9e:96:eb:da: d8:85:28:17 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEiK4JFyKbvQenoRCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk ZDBiMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk OTllZjE2MjUtNDY2Ny00N2NhLTg4Y2YtOTU5OTA4ZGZkMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui3LWJVv57eFgVHmnRYMyiBrtqTHdnrkEPsk gCEDBZ7AqJ8JlhsAL7kXTgWfNTKk2uKQXAkzfg0+gP4L9Ud2MOLPrYvuzfdsP/mE FQDRSJQkyFtoeuSyv+yeuM/9UU1SAUuyueR2gFFc739yqeIkgPESMbkYkYUqJpc0 0ss4u3pGj/ck6vujKCWvop03WYNx9U8ZTojqyZO7jsJwk59HyRdW2ky8lDlfu5I9 p0LTZ4AdVrQz9DaHT596lMFlyzrKkTV+xUu/fPsB/JtFmh5J3rUi83SmR7P9c8q+ ALyeFaZOl6WvaHYwM2B/0Xa+/wU1KSjcnXrERnfKAz4rcDsAPwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBHfiv/Ziu+/WSy8PeXQefMJRZBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5 MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvZjk3ZDE1MGYtY2Y0MC0z MDhmLWJlZjAtMmU5YzM4NTdhMGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3 ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy M2VhN2RkMGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQHQGAAMA4E AgACMAgDBgAmIABXQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHrfUDJYvzZ/RfQgdXueWG/jtr3rvNtSn5 aUjqbxsa/OoAb2ifyU890UcfjpkvNo1zLUFIVCiqegrApJ8yog+vBzkFEMRNFdL9 GNiD495fz3TPpAispvHDagpT3ekT89xIql+2Lja+X1MXs+ZG4f2yaxN8Ck8tMOoI zNTwDtBjkvnPJnalFW4Vjze8cHQOG8OY1ty6Jn6PbCdRg7yc6VdXmDhO1dosxMw2 5pw1ylRLZAkzMC2J73Wmkva9zDFFy58Hy0lhIWpU6/TdrURcX9klW2Resgvo46Nw BmPyM3O+2gyFgbqMWseVcEKpvtlw8PwxpCaoQAXLMJ6W69rYhSgX -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:11 2025 by rpki-client