$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1de741cb-e671-3b99-b03e-4b53456a4151.roa File: 1de741cb-e671-3b99-b03e-4b53456a4151.roa (raw, json) Hash identifier: 4T7CEh6vt/EQV0t97xryGDf/8SsNt+cEvhEYFGzw2Rc= Subject key identifier: 07:28:DE:F6:B1:77:9E:09:47:B0:FE:53:FB:10:EC:B4:1A:B3:35:00 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F432858484D7596FC6BAB27257D2EC400 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1de741cb-e671-3b99-b03e-4b53456a4151.roa Signing time: Mon 23 Dec 2024 14:00:51 +0000 ROA not before: Mon 23 Dec 2024 14:00:51 +0000 ROA not after: Sun 23 Mar 2025 13:00:51 +0000 asID: 13768 IP address blocks: 64.34.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:75:96:fc:6b:ab:27:25:7d:2e:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Dec 23 14:00:51 2024 GMT Not After : Mar 23 13:00:51 2025 GMT Subject: CN=f61221f0-b997-48a6-8d71-0cd961aa2906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8f:3a:b3:2c:a4:77:85:cf:e0:ce:0f:fc:25: 3c:59:aa:d6:6c:ca:17:d1:a4:63:17:27:40:c1:ef: 20:48:c6:1c:26:99:24:83:60:53:43:68:9f:2c:43: d1:c2:c1:2c:a0:5b:ba:fb:93:f2:4b:ff:df:de:50: 3b:b0:66:3b:4f:ff:b6:17:39:7e:c5:2d:a5:f6:db: 11:da:7d:1f:33:68:02:ce:40:6a:3a:17:bf:59:ee: f6:b1:1f:bf:1a:e8:e3:fc:8c:9e:06:f3:93:92:8e: 5e:4a:fb:6b:87:34:84:34:65:69:39:2a:cb:82:c7: a8:49:ec:91:1d:bf:cd:58:78:7a:df:d4:11:ab:91: f0:01:de:f0:f3:26:6b:32:08:6d:83:4b:0b:77:d9: 44:f4:f0:fe:da:5f:2a:17:c6:fb:af:56:a2:81:44: bc:bd:d0:ba:7a:20:49:ce:99:d5:73:5d:3e:9f:50: 4b:50:48:e6:f1:23:d3:4e:21:bb:d6:fe:1b:53:2f: 17:35:0b:78:70:c8:e7:06:ed:97:7d:a7:34:7d:3e: d5:85:70:c6:39:d3:74:a3:a5:fe:e2:9b:ab:22:0b: 76:90:7e:02:56:6e:18:2d:b5:e1:41:34:f2:6c:c3: 0a:c5:dc:1a:0c:ac:fe:ef:2b:9c:d7:1d:49:72:53: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:28:DE:F6:B1:77:9E:09:47:B0:FE:53:FB:10:EC:B4:1A:B3:35:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1de741cb-e671-3b99-b03e-4b53456a4151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:55:9a:5d:c4:43:98:73:33:d2:82:91:14:1b:0d:39:13:30: 5b:b9:b8:f4:ef:0d:14:a8:b7:bc:7f:8e:15:7b:fd:7f:35:af: be:ec:81:4c:28:9d:b3:4c:49:ea:fb:d7:e1:7e:3c:0f:1d:b3: 7c:b3:4f:cd:98:80:2e:57:5c:2b:ad:3e:b6:2d:71:70:f6:3d: 6c:3c:a5:d9:0d:52:82:c5:51:36:70:d7:fe:f3:5d:b6:11:9f: ab:ea:d8:26:45:56:7a:63:ba:cc:28:59:12:c1:98:bc:95:5d: 45:89:34:66:77:70:d8:6e:72:df:b2:b1:7a:1a:db:ba:fa:e3: f9:88:55:4b:e6:57:a3:41:90:fa:a6:f3:71:8b:cb:ab:af:30: d7:67:f4:49:05:38:97:f6:8a:2d:87:cd:bd:08:a7:38:5d:e0: 97:ee:7d:4a:35:bf:9e:a3:05:87:96:2f:c1:e6:ac:a7:cd:e1: 1c:a7:54:cb:83:90:f1:4e:af:c2:20:68:06:95:7d:95:41:bc: e5:54:10:d1:c8:4b:e0:47:0c:8d:ac:a0:dc:76:2a:be:80:39: e5:be:c1:8e:f0:20:7e:4f:6a:6a:c4:35:a1:01:fd:15:ad:27: b3:ea:0b:2f:40:18:dd:a7:fa:ca:07:1e:b3:7d:73:73:29:5c: 28:3d:56:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdZb8a6snJX0uxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZjYxMjIxZjAtYjk5Ny00OGE2LThkNzEtMGNkOTYxYWEyOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI86syykd4XP4M4P/CU8WarWbMoX0aRjFydA we8gSMYcJpkkg2BTQ2ifLEPRwsEsoFu6+5PyS//f3lA7sGY7T/+2Fzl+xS2l9tsR 2n0fM2gCzkBqOhe/We72sR+/Gujj/IyeBvOTko5eSvtrhzSENGVpOSrLgseoSeyR Hb/NWHh639QRq5HwAd7w8yZrMghtg0sLd9lE9PD+2l8qF8b7r1aigUS8vdC6eiBJ zpnVc10+n1BLUEjm8SPTTiG71v4bUy8XNQt4cMjnBu2Xfac0fT7VhXDGOdN0o6X+ 4purIgt2kH4CVm4YLbXhQTTybMMKxdwaDKz+7yuc1x1JclMvEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAco3vaxd54JR7D+U/sQ7LQaszUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMWRlNzQxY2ItZTY3MS0z Yjk5LWIwM2UtNGI1MzQ1NmE0MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhVml3EQ5hzM9KCkRQbDTkTMFu5uPTvDRSot7x/jhV7/X81r77sgUwo nbNMSer71+F+PA8ds3yzT82YgC5XXCutPrYtcXD2PWw8pdkNUoLFUTZw1/7zXbYR n6vq2CZFVnpjuswoWRLBmLyVXUWJNGZ3cNhuct+ysXoa27r64/mIVUvmV6NBkPqm 83GLy6uvMNdn9EkFOJf2ii2Hzb0Ipzhd4JfufUo1v56jBYeWL8HmrKfN4RynVMuD kPFOr8IgaAaVfZVBvOVUENHIS+BHDI2soNx2Kr6AOeW+wY7wIH5PamrENaEB/RWt J7PqCy9AGN2n+soHHrN9c3MpXCg9VvA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:35 2025 by rpki-client