$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa File: dfef9103-b23c-342c-83da-159fd5780ea7.roa (raw, json) Hash identifier: TOMgPsc4kqgXsRbIuw7gxuwuudGdXDxAkdDGCz5YzOw= Subject key identifier: 59:DF:BB:FB:8B:99:84:E4:D0:02:54:3D:0F:50:44:E9:7A:28:BB:70 Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F43285848EF61414588AA387A2C280500 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 13638 IP address blocks: 65.254.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:41:45:88:aa:38:7a:2c:28:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=a4c804ca-bea6-47af-8909-1c06df154b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:34:34:1e:f5:d6:5d:12:86:92:c7:e3:19: e3:f5:93:4d:dc:2e:54:74:02:06:a3:13:f5:f8:0c: c6:9c:8b:13:9f:6d:06:03:9a:7b:85:e1:7b:0d:c2: e1:b2:c3:f0:d9:b8:47:85:a8:2e:3a:ae:a0:c4:0e: 43:53:62:14:32:99:ae:21:77:db:16:27:9a:67:a0: 8f:11:7c:9e:7d:5e:18:32:db:a6:91:b4:b7:8d:2e: 50:46:56:c5:f1:78:aa:db:b3:c7:e6:0e:71:e8:a7: 2b:00:ad:c5:d5:a9:41:d3:69:6c:32:21:e1:38:70: 8c:5b:43:61:05:3a:b4:21:8c:46:8f:42:ea:a3:27: 31:56:9a:47:e0:42:6a:6d:fe:27:6b:24:d6:e3:f7: aa:9c:f9:af:78:e4:42:cc:ec:bb:1c:48:3b:49:e1: 93:88:da:41:87:54:e8:42:65:e8:3f:c6:e7:08:49: 56:2f:d0:23:0f:be:6e:64:05:1f:0b:97:6e:d2:e7: f6:83:c6:97:44:f2:8a:63:80:bf:eb:14:04:a3:83: 7b:5b:06:d7:4c:74:a4:6e:c3:79:25:dd:8e:70:c5: f2:ac:a4:52:48:6b:f9:b1:be:6f:90:3e:a6:ad:b6: db:10:0a:68:e6:6b:ee:6c:bd:d6:58:72:0b:0e:d8: 7e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DF:BB:FB:8B:99:84:E4:D0:02:54:3D:0F:50:44:E9:7A:28:BB:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 65.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:07:63:b9:5e:c3:1f:5c:42:17:59:71:c4:cd:27:ac:ac:9c: 2d:b5:75:85:f2:e8:6f:2a:4f:55:4d:84:ba:f7:d5:e9:a1:1c: c6:21:c7:2a:15:7c:35:62:8f:c5:43:70:04:64:2f:2d:ba:59: 39:d6:db:6f:0d:ba:7d:fd:13:3b:28:f9:0f:9d:62:31:18:12: 96:d5:65:53:18:55:cb:1c:f1:de:f4:4b:c8:97:9c:3c:13:40: 17:63:2c:94:c7:a4:84:b6:c6:7f:b5:94:bf:22:4a:6b:ca:54: c7:93:ab:e0:8f:e4:05:15:58:d1:47:3e:88:37:ef:c7:1b:80: 0c:8c:06:96:74:71:e8:23:36:74:6d:2b:a0:65:35:05:74:e1: ea:9f:78:0f:3e:dd:64:14:f0:80:17:bd:a0:0e:11:a1:c2:30: bb:4d:35:d6:35:26:b7:6a:50:91:cb:6b:0e:14:ac:93:d4:41: 87:82:69:ca:37:6b:4f:8c:2f:84:60:eb:2b:7c:ce:25:a0:a9: 6a:43:0d:e4:5b:63:02:34:9e:1c:65:11:38:5e:6f:2e:81:9a: e6:b4:04:c3:ac:72:00:4b:63:e7:ce:6d:e0:c2:d5:3f:44:88: 06:bb:d8:6a:ec:6c:b2:63:29:c0:ff:cb:c9:3d:c7:f5:5d:e7: c9:64:06:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUFFiKo4eiwoBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YTRjODA0Y2EtYmVhNi00N2FmLTg5MDktMWMwNmRmMTU0YjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuY0NB711l0ShpLH4xnj9ZNN3C5UdAIGoxP1 +AzGnIsTn20GA5p7heF7DcLhssPw2bhHhaguOq6gxA5DU2IUMpmuIXfbFieaZ6CP EXyefV4YMtumkbS3jS5QRlbF8Xiq27PH5g5x6KcrAK3F1alB02lsMiHhOHCMW0Nh BTq0IYxGj0LqoycxVppH4EJqbf4nayTW4/eqnPmveORCzOy7HEg7SeGTiNpBh1To QmXoP8bnCElWL9AjD75uZAUfC5du0uf2g8aXRPKKY4C/6xQEo4N7WwbXTHSkbsN5 Jd2OcMXyrKRSSGv5sb5vkD6mrbbbEApo5mvubL3WWHILDth+sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnfu/uLmYTk0AJUPQ9QROl6KLtwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvZGZlZjkxMDMtYjIzYy0z NDJjLTgzZGEtMTU5ZmQ1NzgwZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQf6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIHY7lewx9cQhdZccTNJ6ysnC21dYXy6G8qT1VNhLr31emhHMYhxyoV fDVij8VDcARkLy26WTnW228Nun39Ezso+Q+dYjEYEpbVZVMYVcsc8d70S8iXnDwT QBdjLJTHpIS2xn+1lL8iSmvKVMeTq+CP5AUVWNFHPog378cbgAyMBpZ0cegjNnRt K6BlNQV04eqfeA8+3WQU8IAXvaAOEaHCMLtNNdY1JrdqUJHLaw4UrJPUQYeCaco3 a0+ML4Rg6yt8ziWgqWpDDeRbYwI0nhxlETheby6Bmua0BMOscgBLY+fObeDC1T9E iAa72GrsbLJjKcD/y8k9x/Vd58lkBk8= -----END CERTIFICATE-----Generated at Sat Apr 12 01:26:01 2025 by rpki-client