$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/424ac7fb-6720-33a7-9d21-730580de8ab4.roa File: 424ac7fb-6720-33a7-9d21-730580de8ab4.roa (raw, json) Hash identifier: Ih4oIpRqwYDt7vk8dRbBcm7IuH9yXge38yN0PTRZ7t4= Subject key identifier: AF:3C:55:DC:1A:5C:BC:59:F6:25:73:29:C4:EE:83:61:2F:B3:C0:21 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F43285848A29B518E30ED046BEB4FFF80 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/424ac7fb-6720-33a7-9d21-730580de8ab4.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 13768 IP address blocks: 65.39.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:51:8e:30:ed:04:6b:eb:4f:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=560b0fc6-0742-4f90-a5d5-8dd58c9124ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a0:41:6d:ea:70:f1:89:e8:d6:53:a4:7b:9f: ae:fc:dd:f0:09:bd:9a:4c:b1:94:38:ac:cf:e6:9e: 76:d4:69:75:0e:c6:f5:e1:9e:fb:a0:e7:6e:c8:7f: d6:af:00:4e:c9:3a:03:98:15:96:9d:09:0e:4c:76: 2f:0f:75:5a:09:58:b9:8e:05:74:9d:f1:ac:12:e0: 48:4d:be:82:f0:bb:b3:b9:22:08:8c:ca:63:c7:68: 7a:21:46:9d:67:c0:67:26:b7:4c:ab:02:8c:78:c0: b1:9d:63:79:cb:57:fe:9e:48:a7:44:da:c8:d5:37: 84:fb:ea:e0:20:17:4f:3b:33:42:43:6b:e8:1d:78: 85:c8:01:18:5d:0c:8e:f7:ad:00:e3:3a:18:9a:e5: de:33:ad:a3:2b:56:f9:8c:1f:3c:be:04:b9:2a:54: be:5d:5a:33:84:b0:21:fe:3d:70:89:32:18:70:be: ff:95:6f:cc:10:84:1b:7d:40:91:58:8f:ec:e1:c7: fa:b4:f2:31:0a:51:81:13:ed:39:d4:19:2e:b5:28: 7b:1f:89:35:94:9d:86:80:5f:d3:8b:71:69:78:fa: ca:30:d9:4c:7e:d0:36:1a:07:1f:01:13:e9:f1:f6: bd:22:ec:a8:cc:a6:78:32:55:36:d4:a8:37:e7:21: d9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3C:55:DC:1A:5C:BC:59:F6:25:73:29:C4:EE:83:61:2F:B3:C0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/424ac7fb-6720-33a7-9d21-730580de8ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b5:93:c2:a6:a5:46:34:96:e9:45:fd:e1:b1:d9:53:03:40: c3:f3:25:58:ea:ec:db:dd:b4:4c:aa:07:3f:17:d1:e4:fc:0f: 59:54:ac:06:b8:e7:5f:a3:b6:4d:60:6f:48:01:11:24:62:46: 00:14:9d:ef:9a:f9:ba:28:59:1b:0c:a0:1f:f6:1a:9a:80:7b: d3:11:3f:0e:cf:6d:41:ee:03:3c:21:e4:58:e8:9b:bd:5f:e8: 60:6a:2d:9a:06:2e:1f:9b:22:46:ce:5d:52:01:a7:94:2b:c7: b3:8c:75:16:a8:5b:0c:c8:6b:8b:bf:75:2b:7f:b0:d0:21:ef: 19:f4:0b:37:8b:57:80:89:84:ee:67:96:b8:d7:9a:9e:ae:50: 23:1d:ee:c7:c4:e3:87:7c:57:9b:98:39:80:7d:c4:13:aa:0c: ad:0e:22:44:8b:1b:75:85:ec:0b:16:c9:3b:6e:e1:47:9d:1b: fc:b3:f5:d4:d8:8e:13:7f:a2:5a:e5:d7:2b:e9:1f:9d:be:da: 8c:13:c1:e3:89:14:23:01:57:0a:2e:67:ea:0a:49:f3:16:88: ed:b4:47:0a:a4:de:52:dd:b3:28:28:a7:b9:17:73:25:d5:8c: e3:16:47:61:80:46:0e:a4:9d:ee:5c:de:5e:2c:ee:fe:fb:c2: 28:d9:8a:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1GOMO0Ea+tP/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk NTYwYjBmYzYtMDc0Mi00ZjkwLWE1ZDUtOGRkNThjOTEyNGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqBBbepw8Yno1lOke5+u/N3wCb2aTLGUOKzP 5p521Gl1Dsb14Z77oOduyH/WrwBOyToDmBWWnQkOTHYvD3VaCVi5jgV0nfGsEuBI Tb6C8LuzuSIIjMpjx2h6IUadZ8BnJrdMqwKMeMCxnWN5y1f+nkinRNrI1TeE++rg IBdPOzNCQ2voHXiFyAEYXQyO960A4zoYmuXeM62jK1b5jB88vgS5KlS+XVozhLAh /j1wiTIYcL7/lW/MEIQbfUCRWI/s4cf6tPIxClGBE+051BkutSh7H4k1lJ2GgF/T i3FpePrKMNlMftA2GgcfARPp8fa9IuyozKZ4MlU21Kg35yHZYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK88VdwaXLxZ9iVzKcTug2Evs8AhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNDI0YWM3ZmItNjcyMC0z M2E3LTlkMjEtNzMwNTgwZGU4YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQSecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG1k8KmpUY0lulF/eGx2VMDQMPzJVjq7NvdtEyqBz8X0eT8D1lUrAa4 51+jtk1gb0gBESRiRgAUne+a+booWRsMoB/2GpqAe9MRPw7PbUHuAzwh5Fjom71f 6GBqLZoGLh+bIkbOXVIBp5Qrx7OMdRaoWwzIa4u/dSt/sNAh7xn0CzeLV4CJhO5n lrjXmp6uUCMd7sfE44d8V5uYOYB9xBOqDK0OIkSLG3WF7AsWyTtu4UedG/yz9dTY jhN/olrl1yvpH52+2owTweOJFCMBVwouZ+oKSfMWiO20Rwqk3lLdsygop7kXcyXV jOMWR2GARg6kne5c3l4s7v77wijZikM= -----END CERTIFICATE-----Generated at Fri Mar 14 09:51:45 2025 by rpki-client