$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/8d16e8b6-023d-31c2-b651-81c42ca8072b.roa File: 8d16e8b6-023d-31c2-b651-81c42ca8072b.roa (raw, json) Hash identifier: vXMTPXphSKCmFk5x0PtaFORxB4DyWgH1uIWm3fg1TlI= Subject key identifier: DA:9E:3B:39:F5:DF:EE:CB:15:C7:40:DA:A1:B0:6D:71:2A:19:67:36 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F43285848E59BCD02D501F3FBC40CD300 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/8d16e8b6-023d-31c2-b651-81c42ca8072b.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 35847 IP address blocks: 146.85.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:cd:02:d5:01:f3:fb:c4:0c:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=e0e5c72b-1598-4e7c-8816-7c66ab770d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0a:0b:1b:29:79:59:f9:ce:c7:bd:c1:59:29: 1c:ef:27:51:be:33:03:ce:63:83:6c:da:b2:f1:58: 26:0c:c7:42:a5:cb:88:a3:91:bd:bc:a5:92:77:53: 07:ff:03:cd:47:64:e8:e9:b0:79:dd:06:1f:e6:59: 26:b8:71:f2:3f:30:16:f1:63:ad:05:0b:6f:de:8e: fb:a5:c0:35:8f:d3:3e:1c:b0:4b:a6:ab:d2:59:52: b1:a5:db:9a:74:9d:11:8e:3b:8c:c8:70:26:90:c5: 0b:0c:4e:0e:b3:42:77:dc:21:3d:8a:f8:40:f1:7f: d7:81:ed:88:3a:32:07:80:1f:6b:b8:46:e4:fd:0d: e6:f0:79:7d:68:c4:c4:64:46:e1:2c:70:9c:72:13: 4b:ff:38:ed:ad:68:7a:f6:16:da:cf:bd:17:d6:88: 83:a4:53:ce:b3:a6:33:4a:e5:a1:7d:2c:97:73:b9: a8:c9:6d:4b:a0:5f:68:38:39:5a:8b:4f:cf:5e:b6: aa:90:bd:5d:cc:77:d1:bb:cc:61:10:bb:c5:b8:20: ae:fb:60:5b:9f:67:91:48:0b:62:f3:57:13:18:8f: d8:83:4e:97:e6:03:0d:77:b4:88:64:a3:47:45:33: b5:12:b5:b5:9a:37:d2:94:f8:ec:9e:6b:ff:d6:27: 7d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9E:3B:39:F5:DF:EE:CB:15:C7:40:DA:A1:B0:6D:71:2A:19:67:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/8d16e8b6-023d-31c2-b651-81c42ca8072b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 146.85.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e6:3e:81:64:6b:a1:ef:49:75:75:6b:aa:11:4b:bf:f1:40: b5:2f:26:7b:b9:c6:43:3a:a2:70:b2:76:b2:62:c1:e3:24:3f: 00:60:d0:3e:89:7f:73:42:78:9f:36:d6:9a:0d:fc:c2:dd:e1: 86:6d:07:9c:ef:9f:5b:da:56:4d:83:5f:c6:2c:ba:d3:a1:c0: 37:31:df:f3:1e:d5:cf:9d:5e:ac:5b:bc:5d:dd:8d:1e:34:28: 9f:0e:f9:6c:6b:3f:28:23:6d:31:69:5d:0a:f8:37:e4:ea:3d: 4e:c5:3e:01:0f:06:43:95:d9:18:66:1d:7a:eb:56:8d:82:9a: c0:c6:5b:10:5a:e5:bc:e0:ea:31:81:b6:3f:39:95:28:fc:9e: 18:a7:4f:3c:8f:10:24:bb:1f:14:8a:8d:66:14:21:6c:e4:8d: 93:18:ea:4f:f5:de:38:7a:b1:84:61:db:25:29:aa:e3:12:5c: e8:a5:c1:f0:a7:74:f5:b1:fa:0d:ec:07:51:4a:4d:11:c4:ed: ef:e0:ac:a8:d5:17:1b:23:cb:fb:a0:92:82:5a:2d:6a:80:9d: 6b:49:54:43:da:a4:e5:55:1d:37:8b:ee:0b:4b:69:2a:61:bc: 7f:a3:48:81:d5:72:c7:80:51:f9:7d:34:34:0a:81:f0:40:3a: c1:ae:e3:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm80C1QHz+8QM0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZTBlNWM3MmItMTU5OC00ZTdjLTg4MTYtN2M2NmFiNzcwZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AoLGyl5WfnOx73BWSkc7ydRvjMDzmODbNqy 8VgmDMdCpcuIo5G9vKWSd1MH/wPNR2To6bB53QYf5lkmuHHyPzAW8WOtBQtv3o77 pcA1j9M+HLBLpqvSWVKxpduadJ0RjjuMyHAmkMULDE4Os0J33CE9ivhA8X/Xge2I OjIHgB9ruEbk/Q3m8Hl9aMTEZEbhLHCcchNL/zjtrWh69hbaz70X1oiDpFPOs6Yz SuWhfSyXc7moyW1LoF9oODlai0/PXraqkL1dzHfRu8xhELvFuCCu+2Bbn2eRSAti 81cTGI/Yg06X5gMNd7SIZKNHRTO1ErW1mjfSlPjsnmv/1id99QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqeOzn13+7LFcdA2qGwbXEqGWc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvOGQxNmU4YjYtMDIzZC0z MWMyLWI2NTEtODFjNDJjYTgwNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFklWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITmPoFka6HvSXV1a6oRS7/xQLUvJnu5xkM6onCydrJiweMkPwBg0D6J f3NCeJ821poN/MLd4YZtB5zvn1vaVk2DX8YsutOhwDcx3/Me1c+dXqxbvF3djR40 KJ8O+WxrPygjbTFpXQr4N+TqPU7FPgEPBkOV2RhmHXrrVo2CmsDGWxBa5bzg6jGB tj85lSj8nhinTzyPECS7HxSKjWYUIWzkjZMY6k/13jh6sYRh2yUpquMSXOilwfCn dPWx+g3sB1FKTRHE7e/grKjVFxsjy/ugkoJaLWqAnWtJVEPapOVVHTeL7gtLaSph vH+jSIHVcseAUfl9NDQKgfBAOsGu42s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:30 2025 by rpki-client