$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa File: 7281ae23-867a-34c7-a504-aa8437b8e969.roa (raw, json) Hash identifier: vLQ2VccHeFbTF0R8IeFrF4N449z9oC2pSSNo8jbgFIs= Subject key identifier: FD:68:3D:8E:66:84:69:D2:EE:70:FA:DA:7A:4C:52:A1:03:AA:B9:CB Certificate issuer: /CN=874e86b5-586f-43d7-be6f-cf21e434b31a Certificate serial: 010D0C9F432858485040317AB7B20E91A7572740 Authority key identifier: 79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa Signing time: Tue 24 Dec 2024 14:00:53 +0000 ROA not before: Tue 24 Dec 2024 14:00:53 +0000 ROA not after: Mon 24 Mar 2025 13:00:53 +0000 asID: 55270 IP address blocks: 204.154.142.0/23 maxlen: 23 2602:ff43::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:50:40:31:7a:b7:b2:0e:91:a7:57:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874e86b5-586f-43d7-be6f-cf21e434b31a Validity Not Before: Dec 24 14:00:53 2024 GMT Not After : Mar 24 13:00:53 2025 GMT Subject: CN=52081e9f-b91a-46f7-b3c6-dae0051cd9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e6:58:73:27:94:94:d4:67:fb:e1:64:d8:c2: 87:d7:8a:04:de:9d:cb:d5:99:6d:df:ee:2a:4a:aa: a0:be:e6:5b:d0:06:a7:91:6d:ec:d4:19:83:e1:c5: 1a:74:7a:68:d0:e2:ad:8a:7b:5b:af:85:44:d8:08: 51:30:5e:72:1d:5f:ac:22:5a:7b:36:23:1a:69:d5: 93:b0:c0:87:18:c0:e1:f7:dc:77:b7:b5:1c:2f:a8: 5b:7c:e6:01:71:f6:24:bd:15:ec:31:9b:33:1e:c4: c1:66:3d:e7:88:bb:dd:f1:f9:f5:19:83:13:d7:8b: 01:7c:84:3e:6a:d9:dc:31:af:ba:f7:c3:ff:c6:d7: 58:77:e8:75:80:2c:a1:09:f5:a3:1a:81:af:e3:b9: d3:82:1d:d7:f6:0e:9b:24:b0:58:eb:81:af:5d:cd: 1f:24:d7:b1:05:bb:48:d7:bb:07:2e:16:33:ef:70: 42:fc:2b:7d:02:f1:8d:bb:3e:7f:d2:89:9d:a6:90: e3:9a:f4:ca:b5:62:7a:7e:da:de:30:33:f1:06:50: 3a:c2:70:94:cb:85:f8:92:28:d5:fe:77:d4:e6:eb: de:e9:8a:7a:f1:05:67:fc:38:2b:be:31:96:c8:76: aa:3d:bd:10:89:d8:3e:e0:0f:7a:ba:0e:33:7d:71: ab:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:68:3D:8E:66:84:69:D2:EE:70:FA:DA:7A:4C:52:A1:03:AA:B9:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl X509v3 Authority Key Identifier: keyid:79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer sbgp-ipAddrBlock: critical IPv4: 204.154.142.0/23 IPv6: 2602:ff43::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:49:34:94:eb:d8:1c:7c:e6:4b:0d:35:0e:c1:83:ad:af:66: a6:8b:fe:af:23:6d:14:40:02:e0:17:20:76:cf:3a:d6:9b:21: 72:fc:4a:ff:90:83:ed:19:8b:3f:13:5c:55:8d:f1:d5:20:c8: 53:05:0a:41:78:c7:44:b3:51:6b:db:57:11:c7:06:81:01:3f: c7:5a:28:e8:43:65:de:32:08:67:5d:46:02:7a:c9:57:81:84: 82:e2:00:c0:82:ed:82:71:7a:1a:dd:8a:bf:d1:2e:42:51:a8: 34:51:01:e6:12:7c:b1:46:c1:52:f7:8c:00:d4:00:34:3c:7a: 8e:7f:7b:85:93:0e:b8:23:30:ec:b2:bf:fc:6a:ac:e6:4a:d6: 78:7e:2b:02:75:10:c9:3a:3b:f6:e5:99:bf:3d:ee:10:5d:31: 94:cb:c7:06:28:5f:ec:94:4e:c7:11:f4:df:b3:2e:51:1e:7d: 43:61:89:cb:58:13:e0:c5:d2:67:66:21:47:98:7a:37:5d:09: 5a:1e:98:1d:d4:7c:ba:ff:6d:c9:33:fa:a0:74:67:7d:cb:fb: 94:0f:88:6e:20:a3:ea:34:64:b0:49:cc:4c:42:26:68:c5:f8: 0c:47:31:96:cd:dd:d7:b0:33:67:35:4c:f4:df:c1:86:bb:c2: 5f:39:8d:a1 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEhQQDF6t7IOkadXJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc0ZTg2YjUtNTg2Zi00M2Q3LWJlNmYtY2YyMWU0MzRi MzFhMB4XDTI0MTIyNDE0MDA1M1oXDTI1MDMyNDEzMDA1M1owLzEtMCsGA1UEAxMk NTIwODFlOWYtYjkxYS00NmY3LWIzYzYtZGFlMDA1MWNkOWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+ZYcyeUlNRn++Fk2MKH14oE3p3L1Zlt3+4q SqqgvuZb0AankW3s1BmD4cUadHpo0OKtintbr4VE2AhRMF5yHV+sIlp7NiMaadWT sMCHGMDh99x3t7UcL6hbfOYBcfYkvRXsMZszHsTBZj3niLvd8fn1GYMT14sBfIQ+ atncMa+698P/xtdYd+h1gCyhCfWjGoGv47nTgh3X9g6bJLBY64GvXc0fJNexBbtI 17sHLhYz73BC/Ct9AvGNuz5/0omdppDjmvTKtWJ6ftreMDPxBlA6wnCUy4X4kijV /nfU5uve6Yp68QVn/DgrvjGWyHaqPb0Qidg+4A96ug4zfXGr/wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFP1oPY5mhGnS7nD62npMUqEDqrnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84NzRl ODZiNS01ODZmLTQzZDctYmU2Zi1jZjIxZTQzNGIzMWEvNzI4MWFlMjMtODY3YS0z NGM3LWE1MDQtYWE4NDM3YjhlOTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODc0ZTg2YjUtNTg2Zi00M2Q3LWJl NmYtY2YyMWU0MzRiMzFhLzg3NGU4NmI1LTU4NmYtNDNkNy1iZTZmLWNmMjFlNDM0 YjMxYS5jcmwwHwYDVR0jBBgwFoAUeU1ChMm712cQU58VdYLc1BLE/u0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84NzRlODZiNS01ODZmLTQzZDctYmU2Zi1jZjIx ZTQzNGIzMWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBzJqOMA4E AgACMAgDBgQmAv9DADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpSTSU69gcfOZLDTUOwYOtr2ami/6vI20U QALgFyB2zzrWmyFy/Er/kIPtGYs/E1xVjfHVIMhTBQpBeMdEs1Fr21cRxwaBAT/H WijoQ2XeMghnXUYCeslXgYSC4gDAgu2CcXoa3Yq/0S5CUag0UQHmEnyxRsFS94wA 1AA0PHqOf3uFkw64IzDssr/8aqzmStZ4fisCdRDJOjv25Zm/Pe4QXTGUy8cGKF/s lE7HEfTfsy5RHn1DYYnLWBPgxdJnZiFHmHo3XQlaHpgd1Hy6/23JM/qgdGd9y/uU D4huIKPqNGSwScxMQiZoxfgMRzGWzd3XsDNnNUz038GGu8JfOY2h -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:10 2025 by rpki-client