$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6a77ca73-dc19-3013-b245-2c1af94b6002.roa File: 6a77ca73-dc19-3013-b245-2c1af94b6002.roa (raw, json) Hash identifier: CR1W+DQSnroHD0E2exCszylqep14p6DhoVak7HvA2gI= Subject key identifier: 44:4B:7B:9A:06:DB:47:C6:9E:5B:DC:B5:02:A2:1E:71:31:FD:AD:D1 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858485B6B0341D790E7978B4FFA40 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6a77ca73-dc19-3013-b245-2c1af94b6002.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 4213 IP address blocks: 173.214.20.0/22 maxlen: 24 173.214.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6b:03:41:d7:90:e7:97:8b:4f:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=775f9d40-ab08-49a9-915d-4f1448820396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:95:b0:69:5c:49:65:e5:68:58:c4:6a:b6:62: 83:86:b6:84:e8:b8:78:28:63:8b:36:a5:13:20:d3: 69:3c:62:4a:db:3f:f1:8e:fe:45:ba:2e:b4:67:f3: 57:bc:da:42:b8:41:db:fd:db:16:cc:7a:44:31:2d: ea:e5:7b:2a:69:5f:cb:07:34:6a:00:ef:41:08:cd: 5b:66:14:bf:f4:e0:6e:55:f5:d8:80:94:cf:b6:14: 17:01:62:05:99:58:99:05:b9:64:f5:4e:45:6c:7d: 6d:57:36:16:9f:01:19:05:04:08:fb:be:e7:18:fc: 5b:05:18:e2:bf:d3:1a:3f:0a:c4:f7:cc:3f:a3:e1: 55:fc:de:19:c5:ab:47:e6:68:75:e8:78:27:2e:29: b9:c7:63:82:3a:dd:af:61:ba:03:ad:9f:2e:64:2d: 0d:02:3c:a9:ce:5d:53:53:79:5b:74:e5:49:28:5d: 6d:42:6d:79:c9:ac:ff:38:2c:6c:80:2b:76:ec:bd: 68:3e:e4:ed:3e:00:60:d2:1c:72:7e:e6:cf:a6:47: c9:91:c7:25:73:e7:68:59:26:70:82:b3:5d:33:ee: b2:c1:1e:ca:b2:3d:a6:73:16:20:de:b7:2c:2d:8a: 3b:a4:27:f8:e6:f2:63:7a:81:63:38:01:cb:1c:60: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4B:7B:9A:06:DB:47:C6:9E:5B:DC:B5:02:A2:1E:71:31:FD:AD:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6a77ca73-dc19-3013-b245-2c1af94b6002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 173.214.20.0-173.214.27.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:91:65:d1:c5:22:bc:67:2a:11:13:2c:eb:d8:e8:8d:59:31: 9c:76:e6:82:ec:39:bd:20:0a:23:f9:7d:25:ca:eb:44:94:be: 09:92:5e:64:8a:bb:fe:f7:7c:87:4d:55:03:1a:0a:25:06:4f: 4b:b1:d4:e7:a8:d3:ee:05:51:83:64:d8:c7:75:c8:75:10:53: 48:6d:35:74:8a:87:9d:b2:79:20:2e:42:06:0a:28:1d:32:cd: 52:2a:40:b0:fa:75:e0:07:15:28:dc:27:99:52:9f:85:e1:ed: 2b:e8:e9:18:ef:d8:87:c3:49:e8:cb:0c:7f:04:96:26:a0:4a: bb:9b:92:a8:e3:e1:7f:7b:d7:a4:3f:e0:c3:c8:8f:ee:01:d4: 19:21:a0:05:71:30:e9:13:bd:b1:de:40:68:17:48:be:ea:65: 45:25:fa:b5:19:7a:38:44:cd:5a:3c:52:49:4c:27:5c:10:2c: 92:a3:e6:59:2f:22:3e:be:83:66:a2:8c:77:5d:b6:33:1a:dc: d0:b5:dd:2b:23:6e:ba:06:68:01:8c:7c:bd:3d:c3:fb:7a:1b: 53:95:ff:9c:84:d9:bb:d8:74:e7:04:79:5f:b4:dd:ab:56:34: f5:a2:55:e0:99:32:69:c2:9a:eb:c7:f6:67:37:2d:d9:b7:b4: 68:86:0d:92 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEhbawNB15Dnl4tP+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk Nzc1ZjlkNDAtYWIwOC00OWE5LTkxNWQtNGYxNDQ4ODIwMzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJWwaVxJZeVoWMRqtmKDhraE6Lh4KGOLNqUT INNpPGJK2z/xjv5Fui60Z/NXvNpCuEHb/dsWzHpEMS3q5XsqaV/LBzRqAO9BCM1b ZhS/9OBuVfXYgJTPthQXAWIFmViZBblk9U5FbH1tVzYWnwEZBQQI+77nGPxbBRji v9MaPwrE98w/o+FV/N4ZxatH5mh16HgnLim5x2OCOt2vYboDrZ8uZC0NAjypzl1T U3lbdOVJKF1tQm15yaz/OCxsgCt27L1oPuTtPgBg0hxyfubPpkfJkcclc+doWSZw grNdM+6ywR7Ksj2mcxYg3rcsLYo7pCf45vJjeoFjOAHLHGDoHQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFERLe5oG20fGnlvctQKiHnEx/a3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNmE3N2NhNzMtZGMxOS0z MDEzLWIyNDUtMmMxYWY5NGI2MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKt1hQD BAKt1hgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEASZFl0cUivGcqERMs69jojVkxnHbmguw5vSAKI/l9Jcrr RJS+CZJeZIq7/vd8h01VAxoKJQZPS7HU56jT7gVRg2TYx3XIdRBTSG01dIqHnbJ5 IC5CBgooHTLNUipAsPp14AcVKNwnmVKfheHtK+jpGO/Yh8NJ6MsMfwSWJqBKu5uS qOPhf3vXpD/gw8iP7gHUGSGgBXEw6RO9sd5AaBdIvuplRSX6tRl6OETNWjxSSUwn XBAskqPmWS8iPr6DZqKMd122Mxrc0LXdKyNuugZoAYx8vT3D+3obU5X/nITZu9h0 5wR5X7Tdq1Y09aJV4JkyacKa68f2Zzct2be0aIYNkg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:05 2025 by rpki-client