$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/70c26a25-b800-38fb-821f-aa7c442b84ad.roa File: 70c26a25-b800-38fb-821f-aa7c442b84ad.roa (raw, json) Hash identifier: fpXIfME/sj8S4Aev8C5uKrSR3cd4f9+lF6nfwZJS+es= Subject key identifier: C4:47:78:C7:D8:BD:82:60:01:AF:EC:32:F5:D6:B5:25:16:7B:5D:1D Certificate issuer: /CN=10cf0e64-be53-4add-9414-d9b9f7f83aab Certificate serial: 010D0C9F432858487755E6AD7EBC604FC6A901C0 Authority key identifier: 19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/70c26a25-b800-38fb-821f-aa7c442b84ad.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 398906 IP address blocks: 203.217.148.0/23 maxlen: 23 203.217.148.0/24 maxlen: 24 203.217.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e6:ad:7e:bc:60:4f:c6:a9:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10cf0e64-be53-4add-9414-d9b9f7f83aab Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=3f6e43d2-4ac5-4b22-bf2c-c0c2cfccd3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a6:e3:e2:b9:1f:02:ed:48:9f:e7:3b:8f:b4: 67:08:07:01:86:49:fd:51:12:8e:1f:8d:4c:89:fe: 65:86:00:3b:1b:55:09:56:d2:80:44:1b:0e:1a:5f: f0:b8:d7:16:3b:24:05:b4:d7:71:96:0b:dd:db:36: d5:0d:14:ef:29:b2:a3:bd:fa:07:f1:88:56:3c:55: 77:cc:60:b7:55:91:51:36:75:0f:85:bd:a2:25:a6: 3d:2b:f6:28:c3:d3:c4:45:93:cf:b1:8f:8b:d3:53: a9:d8:07:46:58:07:79:ab:29:11:17:88:aa:e5:1a: b4:de:27:f7:0c:3d:67:22:d0:1f:18:2a:53:ad:74: 84:52:02:9b:e3:d3:37:12:25:99:68:b0:2f:fc:73: af:ea:7f:d3:00:dd:3a:35:cd:31:56:79:d4:ac:18: bf:52:48:31:48:bd:43:4b:c6:43:df:d0:c8:98:17: 9a:4d:8a:5b:7c:ba:ca:8e:e4:b0:a9:2c:e8:c0:07: ec:f5:74:a5:e5:c7:15:29:62:f0:bb:9e:f8:f5:62: 54:67:c1:93:af:8d:55:fa:b2:70:36:89:bc:b6:31: 70:5f:93:ae:65:e9:c4:ed:19:db:9b:b1:fe:5a:6f: fe:b4:65:32:d6:ad:0f:e9:23:b4:e0:e1:50:72:5f: 8a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:47:78:C7:D8:BD:82:60:01:AF:EC:32:F5:D6:B5:25:16:7B:5D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/70c26a25-b800-38fb-821f-aa7c442b84ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.crl X509v3 Authority Key Identifier: keyid:19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab.cer sbgp-ipAddrBlock: critical IPv4: 203.217.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8e:0b:73:39:1a:2a:e4:f7:16:cc:9a:89:a5:f0:d2:af:05: 6a:08:10:14:51:d8:14:50:a9:fc:00:6d:53:a8:9e:2c:9d:24: ad:d9:98:25:7f:07:d7:38:ca:75:4e:24:a5:db:a7:e5:55:87: a6:81:0e:4f:22:32:32:95:a4:44:9c:82:d9:94:cb:be:05:f1: 31:83:6c:51:7b:26:5b:70:bd:93:7f:09:09:7f:8d:a9:7c:50: c5:4c:ea:bc:6b:de:86:20:55:8a:a4:b3:54:4d:19:75:1d:61: bc:91:9f:e3:5a:52:fa:5f:fa:b7:08:56:66:22:a3:31:8c:48: f8:f4:1e:b9:c2:c6:7d:b4:cf:b4:c9:05:18:35:9a:53:48:a6: 9f:de:a3:33:d6:12:cb:87:9f:b0:84:ba:e6:41:89:ca:0b:a9: 74:c3:91:01:bb:70:5c:0c:07:59:00:1a:df:90:6e:d5:6e:8a: 96:28:c3:fa:6c:aa:50:7c:78:f2:1f:e5:c8:49:a3:de:7b:b2: 71:25:e7:72:5e:c9:62:11:15:b2:00:db:65:e2:fa:5f:53:72: 6c:be:a6:01:ce:d0:73:ef:28:81:06:f0:f3:3d:96:f9:8a:af: d0:d1:93:78:d0:42:d3:6a:c7:61:79:f5:57:8b:d0:e9:42:f3: 10:3f:7e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeatfrxgT8apAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBjZjBlNjQtYmU1My00YWRkLTk0MTQtZDliOWY3Zjgz YWFiMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk M2Y2ZTQzZDItNGFjNS00YjIyLWJmMmMtYzBjMmNmY2NkM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArabj4rkfAu1In+c7j7RnCAcBhkn9URKOH41M if5lhgA7G1UJVtKARBsOGl/wuNcWOyQFtNdxlgvd2zbVDRTvKbKjvfoH8YhWPFV3 zGC3VZFRNnUPhb2iJaY9K/Yow9PERZPPsY+L01Op2AdGWAd5qykRF4iq5Rq03if3 DD1nItAfGCpTrXSEUgKb49M3EiWZaLAv/HOv6n/TAN06Nc0xVnnUrBi/UkgxSL1D S8ZD39DImBeaTYpbfLrKjuSwqSzowAfs9XSl5ccVKWLwu5749WJUZ8GTr41V+rJw Nom8tjFwX5OuZenE7Rnbm7H+Wm/+tGUy1q0P6SO04OFQcl+KQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRHeMfYvYJgAa/sMvXWtSUWe10dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xMGNm MGU2NC1iZTUzLTRhZGQtOTQxNC1kOWI5ZjdmODNhYWIvNzBjMjZhMjUtYjgwMC0z OGZiLTgyMWYtYWE3YzQ0MmI4NGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTBjZjBlNjQtYmU1My00YWRkLTk0 MTQtZDliOWY3ZjgzYWFiLzEwY2YwZTY0LWJlNTMtNGFkZC05NDE0LWQ5YjlmN2Y4 M2FhYi5jcmwwHwYDVR0jBBgwFoAUGQoisuKanqnhrBB4DjW9Eq4KWD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xMGNmMGU2NC1iZTUzLTRhZGQtOTQxNC1kOWI5 ZjdmODNhYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy9mUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6OC3M5Girk9xbMmoml8NKvBWoIEBRR2BRQqfwAbVOoniydJK3ZmCV/ B9c4ynVOJKXbp+VVh6aBDk8iMjKVpEScgtmUy74F8TGDbFF7JltwvZN/CQl/jal8 UMVM6rxr3oYgVYqks1RNGXUdYbyRn+NaUvpf+rcIVmYiozGMSPj0HrnCxn20z7TJ BRg1mlNIpp/eozPWEsuHn7CEuuZBicoLqXTDkQG7cFwMB1kAGt+QbtVuipYow/ps qlB8ePIf5chJo957snEl53JeyWIRFbIA22Xi+l9Tcmy+pgHO0HPvKIEG8PM9lvmK r9DRk3jQQtNqx2F59VeL0OlC8xA/fmU= -----END CERTIFICATE-----Generated at Fri Mar 14 11:13:47 2025 by rpki-client