$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa File: 5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa (raw, json) Hash identifier: C5jvTUSlAHjbHI2Srdk1/y5lrBqBmVCOA3Ex0x0FC6U= Subject key identifier: 6C:02:CF:CF:A5:83:9B:12:59:34:FB:65:1B:7A:07:5F:99:D0:90:62 Certificate issuer: /CN=4c6110af-3017-4d96-90e3-d18a76894aa0 Certificate serial: 010D0C9F43285848DA70F7E4CAF68B8C9BEE2D40 Authority key identifier: 1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 394333 IP address blocks: 204.69.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f7:e4:ca:f6:8b:8c:9b:ee:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c6110af-3017-4d96-90e3-d18a76894aa0 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=937174c5-3fe8-42ba-9e47-191ae6e13120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:af:0a:3c:39:bf:54:a8:f5:9e:ca:fe:10:7a: df:9e:30:61:aa:1b:77:43:8a:4a:ff:68:1a:3d:bd: 80:e3:fa:69:2b:85:c6:d6:08:e1:1c:49:61:24:cf: a8:43:09:4d:9d:cd:09:38:a7:c6:fd:f7:a6:77:2c: 5f:bb:d9:3e:ee:78:0a:ec:d6:d6:f1:02:07:77:95: c4:63:ea:35:e5:2b:d2:e5:54:ae:7a:68:96:1e:45: 9f:3b:59:3f:d0:ba:64:13:34:24:cb:4e:df:3e:9f: 6d:fd:a8:b9:2c:a0:cf:d7:89:af:45:28:62:51:a6: 0a:0c:3d:e8:5b:8a:68:8f:d2:26:c4:32:f9:09:1e: 9f:9e:ce:c0:29:af:95:49:51:67:ff:08:b5:8d:f3: fe:89:3f:d7:71:01:6c:ac:13:c2:b9:c0:49:fb:33: 4d:60:33:89:b4:8c:01:94:8f:77:bd:23:e4:5d:8a: 7d:9a:34:55:7c:68:b4:d3:bf:99:e9:37:6f:a3:dc: 05:ba:b7:31:8d:0b:f1:fc:c3:16:ec:dd:8c:a5:49: 78:63:fc:ed:b8:83:bd:1b:f2:5a:20:3c:7e:ee:b0: b4:88:71:29:88:be:fc:0a:a9:39:fd:04:52:be:ad: fa:73:53:36:d9:19:8d:dd:af:7d:fb:24:10:1d:4f: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:02:CF:CF:A5:83:9B:12:59:34:FB:65:1B:7A:07:5F:99:D0:90:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl X509v3 Authority Key Identifier: keyid:1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer sbgp-ipAddrBlock: critical IPv4: 204.69.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:97:3c:c6:e6:87:37:fc:f4:5e:fb:94:f3:58:99:f9:13:38: 10:14:60:17:65:54:2d:93:bf:f2:e3:20:d8:a9:10:df:a7:dd: 35:9a:8e:48:f0:05:a8:55:2b:6d:c5:59:22:5b:bb:b0:e2:20: 7f:b9:42:4c:60:a4:bc:d4:0a:31:bb:ec:09:2e:aa:b4:29:5b: 6b:75:c3:37:ae:01:13:57:a9:52:8d:aa:39:58:4b:bd:71:80: ba:21:1f:2b:f5:63:82:9b:fa:d4:f5:f5:26:75:9b:97:5f:c2: ad:b1:10:e3:9a:b3:fb:86:39:a7:5f:2d:da:44:80:0f:23:06: 61:82:95:95:99:7e:04:bd:aa:6f:2f:01:84:f5:4f:51:39:a8: 56:4e:46:04:40:f0:70:41:5a:a0:ef:37:08:bf:5b:ef:f8:2a: 80:19:d0:63:c0:47:d2:25:dc:24:d6:f5:1f:91:32:07:b6:40: 40:70:de:f8:55:d5:f2:ba:fa:df:92:cf:6a:51:fd:cf:f6:07: e3:5e:43:e7:b1:70:a4:55:48:15:14:f2:c2:53:b3:6c:de:da: 2d:86:b8:a6:d0:c2:b5:24:47:28:b3:49:42:16:c0:9d:e3:bd: 32:4d:ef:dc:81:10:ae:e5:95:cf:ed:c4:d8:0d:f6:f9:aa:0b: 88:b0:28:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPfkyvaLjJvuLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM2MTEwYWYtMzAxNy00ZDk2LTkwZTMtZDE4YTc2ODk0 YWEwMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk OTM3MTc0YzUtM2ZlOC00MmJhLTllNDctMTkxYWU2ZTEzMTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK8KPDm/VKj1nsr+EHrfnjBhqht3Q4pK/2ga Pb2A4/ppK4XG1gjhHElhJM+oQwlNnc0JOKfG/femdyxfu9k+7ngK7NbW8QIHd5XE Y+o15SvS5VSuemiWHkWfO1k/0LpkEzQky07fPp9t/ai5LKDP14mvRShiUaYKDD3o W4poj9ImxDL5CR6fns7AKa+VSVFn/wi1jfP+iT/XcQFsrBPCucBJ+zNNYDOJtIwB lI93vSPkXYp9mjRVfGi007+Z6Tdvo9wFurcxjQvx/MMW7N2MpUl4Y/ztuIO9G/Ja IDx+7rC0iHEpiL78Cqk5/QRSvq36c1M22RmN3a99+yQQHU+v7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwCz8+lg5sSWTT7ZRt6B1+Z0JBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzYx MTBhZi0zMDE3LTRkOTYtOTBlMy1kMThhNzY4OTRhYTAvNTExMDk0NmYtYjdkMC0z ODcxLTliMjAtM2ZjZjE5YTYxZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGM2MTEwYWYtMzAxNy00ZDk2LTkw ZTMtZDE4YTc2ODk0YWEwLzRjNjExMGFmLTMwMTctNGQ5Ni05MGUzLWQxOGE3Njg5 NGFhMC5jcmwwHwYDVR0jBBgwFoAUHU5Hu1/rgWiCqcW5MRJpnvd9KHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzYxMTBhZi0zMDE3LTRkOTYtOTBlMy1kMThh NzY4OTRhYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEXrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuXPMbmhzf89F77lPNYmfkTOBAUYBdlVC2Tv/LjINipEN+n3TWajkjw BahVK23FWSJbu7DiIH+5QkxgpLzUCjG77AkuqrQpW2t1wzeuARNXqVKNqjlYS71x gLohHyv1Y4Kb+tT19SZ1m5dfwq2xEOOas/uGOadfLdpEgA8jBmGClZWZfgS9qm8v AYT1T1E5qFZORgRA8HBBWqDvNwi/W+/4KoAZ0GPAR9Il3CTW9R+RMge2QEBw3vhV 1fK6+t+Sz2pR/c/2B+NeQ+excKRVSBUU8sJTs2ze2i2GuKbQwrUkRyizSUIWwJ3j vTJN79yBEK7llc/txNgN9vmqC4iwKJE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:23 2025 by rpki-client