$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8c6a9247-1a35-3ffe-ad0c-d7fd562dd846.roa File: 8c6a9247-1a35-3ffe-ad0c-d7fd562dd846.roa (raw, json) Hash identifier: 7Nqu2GMbRAD/UuAdMjNJ6ocHq3dnmk9H/YAClLAeOTI= Subject key identifier: 33:1D:A4:00:BE:4E:2B:0E:38:94:56:76:E4:2C:FB:D4:00:13:92:83 Certificate issuer: /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Certificate serial: 010D0C9F43285848ADC60718EBB4823044CC93F0 Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8c6a9247-1a35-3ffe-ad0c-d7fd562dd846.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 10497 IP address blocks: 192.86.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:07:18:eb:b4:82:30:44:cc:93:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=7e8018cc-5fc3-4d08-a173-45bac8263560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ac:ce:ee:f2:3b:e7:01:2e:e5:08:a8:29:68: 2d:43:33:a7:57:af:c8:e7:f6:3c:f9:f6:2e:cd:3f: d0:2b:f7:c0:c6:fd:83:23:51:b1:60:0d:fd:f9:2d: 44:49:ab:fa:33:4e:a8:55:9c:b1:79:f0:b1:85:5c: 12:aa:f9:cc:22:09:01:e7:73:c6:c7:78:d7:b5:2c: 8d:13:d6:95:d9:e8:ad:aa:52:a8:96:e8:33:2c:db: bf:48:5a:87:fc:09:f1:69:3a:9c:42:b0:be:cf:96: 8c:d2:50:c6:b5:72:fb:4e:e3:19:c5:ed:cb:e5:b7: c4:fc:98:08:d8:fa:1c:b8:3b:60:20:07:9c:ac:c3: a0:5a:84:b0:36:b9:36:08:07:98:a9:cd:9c:74:7a: 8b:62:ca:04:f8:08:3c:1b:a3:64:29:b8:26:59:e2: b8:d1:ba:61:87:7a:3c:0f:02:c1:57:4d:65:ba:b3: c3:6e:66:b4:d6:55:b3:8c:ac:60:8b:a9:62:a1:70: 69:d3:bd:2f:a3:f6:76:2b:9a:25:82:81:32:54:6c: 05:18:1d:93:6c:9d:3c:eb:f9:da:50:52:1a:a9:40: 35:ea:6a:46:a3:37:4b:72:21:da:86:42:35:d4:2c: 4b:36:67:eb:c0:d3:62:a6:2b:66:93:52:97:5b:87: 85:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1D:A4:00:BE:4E:2B:0E:38:94:56:76:E4:2C:FB:D4:00:13:92:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8c6a9247-1a35-3ffe-ad0c-d7fd562dd846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl X509v3 Authority Key Identifier: keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer sbgp-ipAddrBlock: critical IPv4: 192.86.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5a:a8:83:a1:bd:4b:97:b0:18:0e:c9:7f:aa:ff:e5:29:83: 3f:58:48:a9:78:10:c3:da:ff:f6:7d:cd:8a:87:56:12:3b:e3: fa:4d:2a:21:08:cf:e1:1d:93:e9:3c:ee:b4:f1:e1:02:20:16: fb:6a:eb:90:a5:b8:24:29:19:06:f3:01:50:84:b2:2b:a7:90: 0e:d8:dd:bb:b2:f0:73:c7:c3:1d:b1:16:92:82:c9:94:f6:8d: ee:e3:5d:e1:92:52:e7:72:e3:cb:ec:b1:dd:45:f2:7f:32:48: fa:6b:0f:a5:04:06:fd:11:0e:06:b9:bb:13:26:1f:48:58:1e: 9d:ac:86:9b:2a:6e:c6:59:53:66:e1:6b:b0:96:d4:c4:e6:be: 1c:e6:ae:b9:fd:ba:42:25:7f:ed:48:b7:a7:65:94:6c:1d:56: 20:45:95:b9:3a:bf:aa:fe:93:f5:26:11:5c:83:74:55:54:e8: 69:14:f6:21:28:7e:ff:4d:43:d8:f6:d3:bc:a8:c6:33:a6:27: e2:72:f8:24:e2:21:d6:38:f4:17:8c:aa:a3:d3:d9:16:52:fc: b6:32:34:f9:e5:18:d0:96:e4:df:25:96:fd:9b:31:21:05:5a: d1:73:f3:6d:12:07:f0:8f:73:79:ca:2f:90:c5:3a:b5:02:4c: e1:12:99:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgcY67SCMETMk/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I2MzVmZGQtODFhNy00YzVkLThmOTAtOWU3NTEzYjNk Y2RjMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk N2U4MDE4Y2MtNWZjMy00ZDA4LWExNzMtNDViYWM4MjYzNTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1azO7vI75wEu5QioKWgtQzOnV6/I5/Y8+fYu zT/QK/fAxv2DI1GxYA39+S1ESav6M06oVZyxefCxhVwSqvnMIgkB53PGx3jXtSyN E9aV2eitqlKolugzLNu/SFqH/AnxaTqcQrC+z5aM0lDGtXL7TuMZxe3L5bfE/JgI 2PocuDtgIAecrMOgWoSwNrk2CAeYqc2cdHqLYsoE+Ag8G6NkKbgmWeK40bphh3o8 DwLBV01lurPDbma01lWzjKxgi6lioXBp070vo/Z2K5olgoEyVGwFGB2TbJ086/na UFIaqUA16mpGozdLciHahkI11CxLNmfrwNNipitmk1KXW4eFoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMdpAC+TisOOJRWduQs+9QAE5KDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYjYz NWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1MTNiM2RjZGMvOGM2YTkyNDctMWEzNS0z ZmZlLWFkMGMtZDdmZDU2MmRkODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2I2MzVmZGQtODFhNy00YzVkLThm OTAtOWU3NTEzYjNkY2RjLzNiNjM1ZmRkLTgxYTctNGM1ZC04ZjkwLTllNzUxM2Iz ZGNkYy5jcmwwHwYDVR0jBBgwFoAUVjRw2StghbGnfKCXfaV6HbgnVAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYjYzNWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1 MTNiM2RjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFZpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5aqIOhvUuXsBgOyX+q/+Upgz9YSKl4EMPa//Z9zYqHVhI74/pNKiEI z+Edk+k87rTx4QIgFvtq65CluCQpGQbzAVCEsiunkA7Y3buy8HPHwx2xFpKCyZT2 je7jXeGSUudy48vssd1F8n8ySPprD6UEBv0RDga5uxMmH0hYHp2shpsqbsZZU2bh a7CW1MTmvhzmrrn9ukIlf+1It6dllGwdViBFlbk6v6r+k/UmEVyDdFVU6GkU9iEo fv9NQ9j207yoxjOmJ+Jy+CTiIdY49BeMqqPT2RZS/LYyNPnlGNCW5N8llv2bMSEF WtFz820SB/CPc3nKL5DFOrUCTOESmeg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:07 2025 by rpki-client