$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ad69bafa-d28f-3f1b-b6b1-599322ce9e98.roa File: ad69bafa-d28f-3f1b-b6b1-599322ce9e98.roa (raw, json) Hash identifier: zBa/gaLSNevLo5TukGZaStNe9jj+pDex6Q/iOzEl73U= Subject key identifier: 21:07:C0:A9:3F:D4:73:D8:E3:21:E9:17:25:A4:4A:85:D5:12:D9:E8 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F432858484AAAE0D03DBA6AFE425E9656 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ad69bafa-d28f-3f1b-b6b1-599322ce9e98.roa Signing time: Sun 22 Dec 2024 14:00:51 +0000 ROA not before: Sun 22 Dec 2024 14:00:51 +0000 ROA not after: Sat 22 Mar 2025 13:00:51 +0000 asID: 13768 IP address blocks: 64.34.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4a:aa:e0:d0:3d:ba:6a:fe:42:5e:96:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Dec 22 14:00:51 2024 GMT Not After : Mar 22 13:00:51 2025 GMT Subject: CN=43d7c1db-a32a-4cf0-a9ed-701632865d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:41:14:4d:30:10:f1:0e:1e:1a:82:bc:37: 54:d3:96:3a:36:ac:73:a2:b6:f4:07:db:c6:c9:3e: 99:d5:eb:ee:a4:eb:3f:86:ef:38:22:8c:55:df:60: d3:4b:9a:ec:68:10:a4:ec:96:3f:7e:10:aa:92:51: 49:b5:3b:0a:1c:90:c7:22:59:d8:76:67:97:c8:5a: 8c:58:de:2a:02:30:a5:4b:ce:56:83:66:11:7c:df: 47:a5:5c:67:29:61:9a:8a:3b:5a:5f:5f:60:e8:6c: c1:49:fc:3a:b8:32:2d:98:ea:d3:da:c2:5a:17:b8: 30:b0:b1:8e:e7:21:66:e9:af:f8:ea:74:0d:8f:7d: 3e:43:67:1c:28:24:da:4d:75:c7:f5:fe:a3:ca:03: dc:fd:1d:0f:3b:14:c2:dd:da:af:92:b1:d4:22:41: 78:cc:46:f2:53:38:20:b6:c5:73:dc:8c:85:5c:c9: f6:8e:5c:c9:2b:2a:80:89:ab:1c:5c:59:77:7a:fa: d9:a5:eb:ff:b5:e3:d4:cd:ad:c2:1c:ec:91:58:5d: 64:6b:40:0e:2a:fd:2b:89:5d:b7:51:23:07:b9:2a: ae:df:1b:18:90:08:95:2f:79:93:37:75:91:c0:15: 82:e2:73:db:20:11:45:a1:ba:7f:82:ae:d9:ec:00: f5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:07:C0:A9:3F:D4:73:D8:E3:21:E9:17:25:A4:4A:85:D5:12:D9:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ad69bafa-d28f-3f1b-b6b1-599322ce9e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:61:1f:34:78:42:98:d4:a2:48:2f:9a:9a:11:d9:3c:c7:61: d9:c8:47:a4:52:c4:f4:7b:99:6f:31:87:56:b2:6e:03:25:bf: 1b:af:8e:64:48:84:b7:eb:64:f9:3f:c5:06:8c:3b:5b:f7:1c: e3:12:5b:c9:3c:28:0e:07:e8:e1:b1:c5:4f:aa:38:9e:6a:32: 6a:ec:fb:08:de:43:eb:ee:f6:a0:37:7d:11:22:a6:e9:e7:cd: 3f:0d:58:43:8a:9e:7b:96:c4:d9:51:2b:9c:c7:6a:e5:e0:be: 65:73:c8:59:0a:88:8e:6d:27:b0:31:58:94:6b:3a:69:a4:ae: ce:a8:21:8e:1f:fb:8f:e9:a7:5a:6c:05:40:4a:a4:8d:be:aa: 1d:c6:14:be:56:1a:a8:2f:89:09:b5:61:cd:54:a9:37:3e:0d: 10:af:e0:71:2f:93:3d:0f:fe:42:99:61:16:f4:ea:1b:11:55: 22:14:0c:0a:a8:0e:ef:c3:e4:70:81:84:9e:e3:b2:2a:4c:8f: 10:14:2d:a3:bb:90:91:1d:0b:22:f3:2f:6d:a5:54:7b:50:e8: c9:b0:d3:83:81:11:b8:fb:81:76:c0:35:bb:a8:71:6e:7f:5a: 9a:26:83:1c:ff:32:d8:ff:30:44:70:b5:af:65:29:e1:11:ff: 55:45:4f:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhKquDQPbpq/kJellYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk NDNkN2MxZGItYTMyYS00Y2YwLWE5ZWQtNzAxNjMyODY1ZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNhBFE0wEPEOHhqCvDdU05Y6Nqxzorb0B9vG yT6Z1evupOs/hu84IoxV32DTS5rsaBCk7JY/fhCqklFJtTsKHJDHIlnYdmeXyFqM WN4qAjClS85Wg2YRfN9HpVxnKWGaijtaX19g6GzBSfw6uDItmOrT2sJaF7gwsLGO 5yFm6a/46nQNj30+Q2ccKCTaTXXH9f6jygPc/R0POxTC3dqvkrHUIkF4zEbyUzgg tsVz3IyFXMn2jlzJKyqAiascXFl3evrZpev/tePUza3CHOyRWF1ka0AOKv0riV23 USMHuSqu3xsYkAiVL3mTN3WRwBWC4nPbIBFFobp/gq7Z7AD11wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEHwKk/1HPY4yHpFyWkSoXVEtnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvYWQ2OWJhZmEtZDI4Zi0z ZjFiLWI2YjEtNTk5MzIyY2U5ZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCI0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBhHzR4QpjUokgvmpoR2TzHYdnIR6RSxPR7mW8xh1aybgMlvxuvjmRI hLfrZPk/xQaMO1v3HOMSW8k8KA4H6OGxxU+qOJ5qMmrs+wjeQ+vu9qA3fREipunn zT8NWEOKnnuWxNlRK5zHauXgvmVzyFkKiI5tJ7AxWJRrOmmkrs6oIY4f+4/pp1ps BUBKpI2+qh3GFL5WGqgviQm1Yc1UqTc+DRCv4HEvkz0P/kKZYRb06hsRVSIUDAqo Du/D5HCBhJ7jsipMjxAULaO7kJEdCyLzL22lVHtQ6Mmw04OBEbj7gXbANbuocW5/ Wpomgxz/Mtj/MERwta9lKeER/1VFTzE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:37 2025 by rpki-client