$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2f5aa71c-5d8b-32d2-ab1b-eec1b0ac48d3.roa File: 2f5aa71c-5d8b-32d2-ab1b-eec1b0ac48d3.roa (raw, json) Hash identifier: m8kpoX2DgIwxBWUnaYOwCxgPua6ja+PpmQHcKRC3Bg4= Subject key identifier: 3F:E2:42:AD:38:63:51:EB:B7:EF:A8:FE:6C:E3:53:FB:59:03:C8:C3 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584835BAA1BDF0FCB9AC717A7200 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2f5aa71c-5d8b-32d2-ab1b-eec1b0ac48d3.roa Signing time: Sun 15 Dec 2024 02:00:39 +0000 ROA not before: Sun 15 Dec 2024 02:00:39 +0000 ROA not after: Sat 15 Mar 2025 01:00:39 +0000 asID: 13335 IP address blocks: 204.195.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:35:ba:a1:bd:f0:fc:b9:ac:71:7a:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 15 02:00:39 2024 GMT Not After : Mar 15 01:00:39 2025 GMT Subject: CN=cd89d34b-7322-4f1b-a0a1-db4cafe465d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9d:0b:35:6e:cc:ff:ad:bd:89:7d:0e:6b:62: f0:52:85:57:4c:01:1d:b2:bc:90:70:38:1b:ae:20: e5:3a:09:b6:34:6d:9d:ad:75:93:85:f3:78:f4:a3: ba:01:51:63:ff:05:82:78:a3:07:81:24:a7:c4:d1: 3c:95:17:53:10:32:c6:1c:55:96:08:ba:fe:3b:58: a2:5a:81:fb:1a:df:2a:fe:fe:52:d4:de:56:c9:f4: c3:6f:2a:d5:09:ce:e0:a8:e6:2b:47:b0:90:7b:72: 62:c5:41:32:22:37:92:03:bb:b9:26:2b:ab:24:ea: fe:8f:51:d5:97:1e:92:b2:b4:2b:88:0c:e7:03:6d: 40:30:ff:07:ba:c1:2b:b2:2e:f0:dc:1a:ec:f4:78: 19:ed:fd:8e:2b:89:8f:dd:c9:41:19:ce:9d:58:33: 44:bc:4e:c9:4a:ec:f4:a1:25:88:38:ec:5d:0a:b9: 15:83:82:4d:ce:98:ac:8d:33:82:f1:60:01:f8:98: dd:72:50:58:c1:88:2e:1d:c1:e0:c0:af:05:dd:29: 71:b8:f3:3b:53:18:e0:80:ef:ae:90:cd:1c:02:2c: 38:19:ff:ba:a6:fb:d8:9f:58:14:12:18:dc:e4:58: 0a:40:78:77:01:e9:d3:3e:68:45:f7:f0:41:f8:c2: 14:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E2:42:AD:38:63:51:EB:B7:EF:A8:FE:6C:E3:53:FB:59:03:C8:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2f5aa71c-5d8b-32d2-ab1b-eec1b0ac48d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b4:d4:43:4d:2e:a6:3e:2f:d3:b1:9e:b6:63:e3:83:5a:f1: ee:21:3d:07:ad:31:f9:59:57:cb:b2:c3:e3:25:15:8f:d3:c5: 80:5f:b0:26:63:ea:4e:aa:84:84:2a:6d:c1:29:bb:f4:10:1f: 50:f6:64:13:b5:c6:59:07:25:29:31:6d:09:16:2a:2d:87:34: 0d:56:4b:75:52:56:1b:5a:b6:e2:b5:09:64:cf:1a:16:48:1b: 5e:23:96:42:84:57:6e:91:ff:98:27:c5:db:9d:df:17:6e:e0: 3f:2e:9f:09:c0:87:2f:cc:e4:0e:3d:e1:85:dd:1d:5a:ed:29: 52:39:82:93:1f:b3:14:a9:9a:b6:2f:af:e3:28:92:8d:44:ba: 1a:a9:ab:41:82:08:c3:68:c2:ba:9a:77:ea:ed:11:64:71:96: c2:e5:ff:e2:9e:8e:21:c4:4d:68:da:cc:2b:2a:37:30:79:97: f6:fc:9b:ff:ea:40:39:6f:01:a8:6c:3f:9f:f4:61:b6:ba:39: 4e:f5:83:aa:5f:4c:bf:9d:0c:65:ec:ff:22:49:3c:f3:1e:30: a1:df:ce:b7:8c:16:11:47:ad:0c:78:15:cb:3f:7f:14:75:91: d3:8b:b6:86:cc:39:00:4a:e9:b8:a1:ea:87:92:be:f6:d7:66: 7e:92:b5:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg1uqG98Py5rHF6cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIxNTAyMDAzOVoXDTI1MDMxNTAxMDAzOVowLzEtMCsGA1UEAxMk Y2Q4OWQzNGItNzMyMi00ZjFiLWEwYTEtZGI0Y2FmZTQ2NWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ0LNW7M/629iX0Oa2LwUoVXTAEdsryQcDgb riDlOgm2NG2drXWThfN49KO6AVFj/wWCeKMHgSSnxNE8lRdTEDLGHFWWCLr+O1ii WoH7Gt8q/v5S1N5WyfTDbyrVCc7gqOYrR7CQe3JixUEyIjeSA7u5JiurJOr+j1HV lx6SsrQriAznA21AMP8HusErsi7w3Brs9HgZ7f2OK4mP3clBGc6dWDNEvE7JSuz0 oSWIOOxdCrkVg4JNzpisjTOC8WAB+JjdclBYwYguHcHgwK8F3SlxuPM7UxjggO+u kM0cAiw4Gf+6pvvYn1gUEhjc5FgKQHh3AenTPmhF9/BB+MIUUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/iQq04Y1Hrt++o/mzjU/tZA8jDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmY1YWE3MWMtNWQ4Yi0z MmQyLWFiMWItZWVjMWIwYWM0OGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC01ENNLqY+L9OxnrZj44Na8e4hPQetMflZV8uyw+MlFY/TxYBfsCZj 6k6qhIQqbcEpu/QQH1D2ZBO1xlkHJSkxbQkWKi2HNA1WS3VSVhtatuK1CWTPGhZI G14jlkKEV26R/5gnxdud3xdu4D8unwnAhy/M5A494YXdHVrtKVI5gpMfsxSpmrYv r+Moko1Euhqpq0GCCMNowrqad+rtEWRxlsLl/+KejiHETWjazCsqNzB5l/b8m//q QDlvAahsP5/0Yba6OU71g6pfTL+dDGXs/yJJPPMeMKHfzreMFhFHrQx4Fcs/fxR1 kdOLtobMOQBK6bih6oeSvvbXZn6StSc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:26 2025 by rpki-client