$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/b1ccda99-02e2-3927-8808-445f6fc6880d.roa File: b1ccda99-02e2-3927-8808-445f6fc6880d.roa (raw, json) Hash identifier: 3Am8Z6Sc6YWgkbZ1KHP5iNINknbm3B/AE8B+/um3Rtw= Subject key identifier: CE:37:0F:3A:1A:50:7D:71:6A:1C:E9:06:54:DE:B6:45:BC:79:1C:B5 Certificate issuer: /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Certificate serial: 010D0C9F43285848ADC606B30B23E663009D5580 Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/b1ccda99-02e2-3927-8808-445f6fc6880d.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 22135 IP address blocks: 173.242.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:06:b3:0b:23:e6:63:00:9d:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=a0a8e42c-1813-4be3-a16c-6ea968c2f09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:74:c1:bf:24:27:08:5a:2c:f5:d9:c9:39:43: fb:73:2c:ca:61:1f:3c:63:a4:68:c7:6e:ba:61:56: 09:26:cd:1c:d1:ac:f8:b0:70:7a:18:be:a5:c9:46: 38:1a:32:d3:35:2f:77:8e:cb:f7:ae:af:5d:d5:a7: de:da:71:e1:63:b8:af:90:82:8c:19:f7:e0:fc:d5: fd:bb:a4:b9:ca:d4:ed:ec:4a:f3:0c:60:20:c5:f0: 30:09:a3:4c:1c:a0:fc:37:be:58:22:de:b7:b0:41: 87:95:00:5c:2c:59:d3:6c:29:6b:9b:a9:37:4b:cf: 66:cd:c6:1a:cd:68:c4:b0:a6:d1:b9:0c:ec:07:dc: 00:ef:08:7b:d9:1c:e5:13:b4:26:ba:a9:df:9b:49: 35:1a:10:a6:a6:0a:a5:43:6d:76:1e:af:df:b1:c2: 87:42:e8:a9:6e:5e:5f:a6:b4:bb:35:eb:0c:ff:21: e9:68:6c:6f:7d:60:e3:25:84:25:85:9a:73:36:7c: a0:e2:8d:e5:c4:10:0b:24:88:7e:3b:f9:94:a0:63: 80:ca:be:56:d4:8d:74:c1:49:28:07:61:76:7c:b2: a0:a6:84:b6:58:fd:7a:42:ee:61:82:eb:2a:24:fc: 28:17:a1:e6:82:3b:32:4c:e8:82:45:f5:16:21:5a: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:37:0F:3A:1A:50:7D:71:6A:1C:E9:06:54:DE:B6:45:BC:79:1C:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/b1ccda99-02e2-3927-8808-445f6fc6880d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl X509v3 Authority Key Identifier: keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer sbgp-ipAddrBlock: critical IPv4: 173.242.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:01:bc:b7:95:55:05:7f:b2:f6:73:bd:d4:0c:a8:11:8b:4d: e2:d9:a9:79:1e:b0:69:a1:3b:a9:58:9d:c9:5e:33:d7:d2:ff: 95:ae:a5:34:15:31:cc:83:16:9d:1f:23:6f:4a:c4:b6:ec:ef: 47:bd:28:03:6b:b7:ab:b0:7f:c2:a8:d0:ea:ab:80:69:38:b4: 64:c1:ac:80:2b:1b:25:13:e6:6a:f1:da:04:94:50:12:2e:3b: b8:58:97:44:56:74:f4:81:cf:87:96:41:8a:e3:ed:37:77:a8: f0:a2:09:e7:16:3f:f9:a6:47:c8:f9:c5:12:3c:50:8d:73:6f: 2e:7d:b4:9f:ae:de:71:9d:56:7e:55:74:47:42:55:cf:5b:51: 06:09:57:c1:84:e7:d8:e1:49:3d:02:fd:8f:50:e5:7d:38:dc: 20:59:0f:1a:a5:8c:c2:37:36:6b:9e:1d:71:86:38:fb:98:ed: bf:76:3a:31:79:d1:9f:fc:fd:c0:bf:c2:91:10:63:43:b8:d2: 75:12:fc:c1:bf:c9:c7:36:04:77:60:50:95:0b:cd:95:a0:95: 6e:de:d8:b3:8a:73:f7:ac:52:7e:d9:da:f6:07:d4:c8:ec:dc: ec:0e:a8:e4:2e:d0:1b:15:68:5f:59:fa:e8:33:85:c4:d5:3c: bd:6a:b5:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgazCyPmYwCdVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5NDk5YTctZGQ3My00ZDI4LWIzYWQtMjgxM2UxNDIx YzY0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YTBhOGU0MmMtMTgxMy00YmUzLWExNmMtNmVhOTY4YzJmMDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHTBvyQnCFos9dnJOUP7cyzKYR88Y6Rox266 YVYJJs0c0az4sHB6GL6lyUY4GjLTNS93jsv3rq9d1afe2nHhY7ivkIKMGffg/NX9 u6S5ytTt7ErzDGAgxfAwCaNMHKD8N75YIt63sEGHlQBcLFnTbClrm6k3S89mzcYa zWjEsKbRuQzsB9wA7wh72RzlE7Qmuqnfm0k1GhCmpgqlQ212Hq/fscKHQuipbl5f prS7NesM/yHpaGxvfWDjJYQlhZpzNnyg4o3lxBALJIh+O/mUoGOAyr5W1I10wUko B2F2fLKgpoS2WP16Qu5hgusqJPwoF6HmgjsyTOiCRfUWIVr9uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM43DzoaUH1xahzpBlTetkW8eRy1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDk0 OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0MjFjNjQvYjFjY2RhOTktMDJlMi0z OTI3LTg4MDgtNDQ1ZjZmYzY4ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ5NDk5YTctZGQ3My00ZDI4LWIz YWQtMjgxM2UxNDIxYzY0LzVkOTQ5OWE3LWRkNzMtNGQyOC1iM2FkLTI4MTNlMTQy MWM2NC5jcmwwHwYDVR0jBBgwFoAUButBQNUQLNt8DYziewcWWtswkqkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEz ZTE0MjFjNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfIPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMBvLeVVQV/svZzvdQMqBGLTeLZqXkesGmhO6lYncleM9fS/5WupTQV McyDFp0fI29KxLbs70e9KANrt6uwf8Ko0OqrgGk4tGTBrIArGyUT5mrx2gSUUBIu O7hYl0RWdPSBz4eWQYrj7Td3qPCiCecWP/mmR8j5xRI8UI1zby59tJ+u3nGdVn5V dEdCVc9bUQYJV8GE59jhST0C/Y9Q5X043CBZDxqljMI3NmueHXGGOPuY7b92OjF5 0Z/8/cC/wpEQY0O40nUS/MG/ycc2BHdgUJULzZWglW7e2LOKc/esUn7Z2vYH1Mjs 3OwOqOQu0BsVaF9Z+ugzhcTVPL1qtVg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:23 2025 by rpki-client