$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa File: cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa (raw, json) Hash identifier: +YoqjOiUGkohlXSvfErsayj2FzhPjyBsI4li2BjtP1E= Subject key identifier: 14:24:72:52:6E:48:01:5E:0C:BC:05:63:6A:C4:0D:8F:5B:00:47:2B Certificate issuer: /CN=31009a8b-537b-4076-8ee6-38c45e51e37a Certificate serial: 010D0C9F43285848F9267FAD8606B099ABCACEC0 Authority key identifier: C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 63.133.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:7f:ad:86:06:b0:99:ab:ca:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31009a8b-537b-4076-8ee6-38c45e51e37a Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=5cc8f35d-f136-4433-a584-2cfe82c763e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:92:e2:ad:2c:d2:5f:b5:7d:4e:47:3e:87:de: 7e:de:2a:57:35:99:2d:96:6b:aa:e5:e1:58:25:6e: 20:27:d9:8f:eb:8a:9e:7b:17:e3:7f:bf:1c:36:cc: 79:f2:e7:63:b3:6d:1c:63:e2:75:93:21:fe:d6:ee: 58:c8:c5:ba:c5:fa:71:20:c7:56:79:d5:95:e1:80: 3f:9c:87:c4:cd:b5:77:3a:db:e4:7f:78:3c:b9:8f: de:ac:ed:49:85:fb:26:3b:3e:9b:31:d6:68:12:df: b7:7b:d4:3b:53:ad:b0:32:55:98:83:d5:d7:55:08: 5b:ef:3c:64:9a:48:bc:db:28:1a:59:ab:3f:2b:90: 1f:bb:61:60:10:d7:03:30:0e:16:03:80:12:ef:dd: a4:4e:f3:e9:93:d1:6f:72:bc:47:bb:a9:c1:51:8b: 4d:0e:d8:73:a9:59:3e:23:31:cb:e9:a7:3f:d0:6a: 3a:16:85:d9:71:41:47:bf:46:d7:24:bd:d6:5e:a9: a3:dc:ec:43:9b:46:70:ed:19:28:1a:e0:af:c5:53: 69:71:c4:e1:e8:e2:c4:12:17:f0:31:d8:97:97:2d: 74:7a:e1:00:bf:fd:e5:27:86:82:12:34:ae:d5:12: 79:ea:f0:e5:77:fd:b6:4e:7d:ac:79:73:3f:41:16: 23:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:24:72:52:6E:48:01:5E:0C:BC:05:63:6A:C4:0D:8F:5B:00:47:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl X509v3 Authority Key Identifier: keyid:C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer sbgp-ipAddrBlock: critical IPv4: 63.133.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:21:e8:6b:f8:6f:5d:c7:42:60:d9:85:ce:3d:68:a5:9c:8d: c8:50:80:97:31:b7:20:7e:df:17:b8:96:20:70:91:34:64:a5: 4d:d2:a0:c0:47:14:fa:a5:d7:46:ce:6e:35:4d:0b:a8:04:15: f0:79:5d:a8:06:85:2f:01:13:53:5e:36:45:a5:06:c4:e3:6e: f0:18:2e:d1:49:0d:cb:99:48:f9:d9:bf:77:9d:57:dc:8e:29: b5:93:f9:ea:2f:28:fe:11:e9:5c:d7:02:2d:29:bc:78:e8:27: 80:03:54:ef:41:e9:ca:9b:37:a1:d9:fe:f9:18:0d:9f:fc:7d: d1:26:24:dc:4a:5b:7d:55:46:f6:52:06:25:60:1c:b9:5f:9d: 71:b6:a0:b7:d5:bf:18:2f:0f:0f:1d:c4:fd:d6:4d:25:5c:38: 4a:2d:5b:dc:8a:16:99:32:c0:36:ec:2e:0a:55:17:d8:59:71: 65:f6:cb:0f:57:bd:dc:6b:d5:8c:27:12:c2:9a:b1:77:39:e8: 3c:ec:fc:f0:ed:68:e3:34:d1:12:c3:01:7c:9e:f8:34:16:51: 6d:65:fb:e9:73:60:fa:cd:cd:17:6f:cd:ce:58:85:f0:23:2a: ea:8e:f8:b3:50:22:9b:dc:03:3f:8e:81:ff:cf:9e:89:b3:73: 23:06:40:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jn+thgawmavKzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwMDlhOGItNTM3Yi00MDc2LThlZTYtMzhjNDVlNTFl MzdhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NWNjOGYzNWQtZjEzNi00NDMzLWE1ODQtMmNmZTgyYzc2M2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZLirSzSX7V9Tkc+h95+3ipXNZktlmuq5eFY JW4gJ9mP64qeexfjf78cNsx58udjs20cY+J1kyH+1u5YyMW6xfpxIMdWedWV4YA/ nIfEzbV3Otvkf3g8uY/erO1JhfsmOz6bMdZoEt+3e9Q7U62wMlWYg9XXVQhb7zxk mki82ygaWas/K5Afu2FgENcDMA4WA4AS792kTvPpk9FvcrxHu6nBUYtNDthzqVk+ IzHL6ac/0Go6FoXZcUFHv0bXJL3WXqmj3OxDm0Zw7RkoGuCvxVNpccTh6OLEEhfw MdiXly10euEAv/3lJ4aCEjSu1RJ56vDld/22Tn2seXM/QRYjsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQkclJuSAFeDLwFY2rEDY9bAEcrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMTAw OWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0NWU1MWUzN2EvY2RjZjFlM2MtYjBmNC0z OGQyLTlhYTEtMmFlNjZhNDI1ZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzEwMDlhOGItNTM3Yi00MDc2LThl ZTYtMzhjNDVlNTFlMzdhLzMxMDA5YThiLTUzN2ItNDA3Ni04ZWU2LTM4YzQ1ZTUx ZTM3YS5jcmwwHwYDVR0jBBgwFoAUyL9Yo+jg9ye2+B/ryjAfoLdEkTEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMTAwOWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0 NWU1MWUzN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoh6Gv4b13HQmDZhc49aKWcjchQgJcxtyB+3xe4liBwkTRkpU3SoMBH FPql10bObjVNC6gEFfB5XagGhS8BE1NeNkWlBsTjbvAYLtFJDcuZSPnZv3edV9yO KbWT+eovKP4R6VzXAi0pvHjoJ4ADVO9B6cqbN6HZ/vkYDZ/8fdEmJNxKW31VRvZS BiVgHLlfnXG2oLfVvxgvDw8dxP3WTSVcOEotW9yKFpkywDbsLgpVF9hZcWX2yw9X vdxr1YwnEsKasXc56Dzs/PDtaOM00RLDAXye+DQWUW1l++lzYPrNzRdvzc5YhfAj KuqO+LNQIpvcAz+Ogf/PnomzcyMGQPA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:10:43 2025 by rpki-client