$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa File: fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa (raw, json) Hash identifier: lBRTjL2K3rms5m3ZNgAVCSR+2Mr0WMEnt/O1PFcIMso= Subject key identifier: DC:34:AF:9E:1F:00:1E:2B:04:5E:54:C8:78:6D:28:3B:F2:A4:D1:81 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F43285848748B137C64654E761E86A420 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa Signing time: Mon 06 Jan 2025 14:00:52 +0000 ROA not before: Mon 06 Jan 2025 14:00:52 +0000 ROA not after: Sun 06 Apr 2025 13:00:52 +0000 asID: 11051 IP address blocks: 174.139.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:8b:13:7c:64:65:4e:76:1e:86:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jan 6 14:00:52 2025 GMT Not After : Apr 6 13:00:52 2025 GMT Subject: CN=74f944b1-684f-4ec1-a975-803e9a7b3949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:d4:09:01:60:5c:0c:67:98:69:b1:52:73: fb:db:96:21:70:af:15:30:20:3d:b9:a9:d9:ca:71: ed:bd:fb:bf:14:8e:26:2b:60:dd:58:dc:e3:2e:45: eb:02:6e:03:4e:8d:db:a8:50:54:f1:48:b7:5e:09: 8a:93:16:63:60:fa:23:80:55:45:65:d8:d5:05:4c: 6b:c1:32:96:c7:a0:a8:2b:59:ae:84:ef:72:9e:bf: 3b:c3:65:6a:4e:0b:db:f2:73:40:39:9b:2c:26:a0: dc:a6:d4:18:5a:00:e0:10:fe:61:d0:37:48:71:bb: 58:71:49:f1:52:d8:ac:b0:16:a2:e8:59:09:6f:98: f3:2b:9c:8b:7d:d8:25:83:16:c1:d8:58:a9:a4:d6: ae:25:ec:81:2a:c7:76:02:7d:c3:e8:2a:01:da:85: 90:4d:69:0d:d5:b1:a0:d5:08:ed:1b:03:27:19:ff: 6a:ee:06:fc:bb:ed:56:6a:ed:01:1c:5b:85:95:d1: 7d:9b:e3:99:e2:68:68:1d:ca:ca:12:88:5f:16:6a: e9:b6:ba:88:58:73:2f:d2:a7:07:aa:15:58:f2:9f: 83:0b:49:0e:ac:a5:19:bd:33:1c:0a:88:5a:9d:14: 22:98:ca:84:1e:51:51:dd:a6:f0:8b:a9:1e:86:a7: ba:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:34:AF:9E:1F:00:1E:2B:04:5E:54:C8:78:6D:28:3B:F2:A4:D1:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:97:c4:f2:24:91:0a:cc:36:58:63:6b:74:6c:58:ff:05:24: af:13:d2:b3:dc:07:53:b8:a4:ac:8b:8d:31:99:59:c4:6a:cd: 83:75:f8:fa:06:b6:12:da:fd:59:ee:98:d7:84:62:6a:d6:fd: eb:f5:0b:ce:61:f2:03:9d:39:a7:93:e7:cb:5f:a8:ea:59:a0: 00:9f:9d:34:e4:3a:f6:ca:56:49:a1:47:04:9d:d5:f4:3d:73: 82:fc:80:d3:0b:31:64:e5:17:79:94:d5:e1:79:3f:fa:10:ca: 36:14:c6:0d:04:66:20:b8:5d:f8:bb:3e:d1:07:ec:d8:0d:36: 21:7b:51:cd:33:95:0c:6d:4d:52:71:14:e0:7a:e8:91:e4:d0: 8f:a3:70:92:52:88:8d:f7:7e:3f:62:30:a6:18:6b:63:e3:ef: 9d:df:e8:f8:4d:d4:dd:ad:50:01:13:11:25:ee:5a:30:ef:ae: 1b:41:99:8e:c5:2c:7e:50:50:61:36:4c:bc:4e:d5:21:25:2e: e6:44:07:1d:4f:02:2c:8e:aa:3a:18:96:39:8f:20:cd:61:f9: 92:8c:e7:06:d4:f5:ad:be:72:39:e2:25:81:fc:8c:3d:b2:3e: 53:58:5c:b2:33:45:44:c5:b9:fd:99:ed:46:af:07:34:24:01: c0:f9:9a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0ixN8ZGVOdh6GpCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk NzRmOTQ0YjEtNjg0Zi00ZWMxLWE5NzUtODAzZTlhN2IzOTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsDUCQFgXAxnmGmxUnP725YhcK8VMCA9uanZ ynHtvfu/FI4mK2DdWNzjLkXrAm4DTo3bqFBU8Ui3XgmKkxZjYPojgFVFZdjVBUxr wTKWx6CoK1muhO9ynr87w2VqTgvb8nNAOZssJqDcptQYWgDgEP5h0DdIcbtYcUnx UtissBai6FkJb5jzK5yLfdglgxbB2FippNauJeyBKsd2An3D6CoB2oWQTWkN1bGg 1QjtGwMnGf9q7gb8u+1Wau0BHFuFldF9m+OZ4mhoHcrKEohfFmrptrqIWHMv0qcH qhVY8p+DC0kOrKUZvTMcCohanRQimMqEHlFR3abwi6kehqe6+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNw0r54fAB4rBF5UyHhtKDvypNGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZmM1MjNjZTQtYTZmNC0z ZTUzLWE0OGItMTM4ZTVhYjUwOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArosBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyXxPIkkQrMNlhja3RsWP8FJK8T0rPcB1O4pKyLjTGZWcRqzYN1+PoG thLa/VnumNeEYmrW/ev1C85h8gOdOaeT58tfqOpZoACfnTTkOvbKVkmhRwSd1fQ9 c4L8gNMLMWTlF3mU1eF5P/oQyjYUxg0EZiC4Xfi7PtEH7NgNNiF7Uc0zlQxtTVJx FOB66JHk0I+jcJJSiI33fj9iMKYYa2Pj753f6PhN1N2tUAETESXuWjDvrhtBmY7F LH5QUGE2TLxO1SElLuZEBx1PAiyOqjoYljmPIM1h+ZKM5wbU9a2+cjniJYH8jD2y PlNYXLIzRUTFuf2Z7UavBzQkAcD5mvM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:31 2025 by rpki-client