$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/33cbeda8-ef84-3e20-ad85-a5be7b117a8c.roa File: 33cbeda8-ef84-3e20-ad85-a5be7b117a8c.roa (raw, json) Hash identifier: LEWp/8pvMplOJxUu1GMfffVYoGTZUeP21eirdSnFk3g= Subject key identifier: 11:38:61:F1:B8:F8:D7:9F:38:59:1F:94:A4:3C:93:99:61:30:BB:89 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F432858488904E9D944A936AD55B3B600 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/33cbeda8-ef84-3e20-ad85-a5be7b117a8c.roa Signing time: Mon 13 Jan 2025 22:02:32 +0000 ROA not before: Mon 13 Jan 2025 22:02:32 +0000 ROA not after: Sun 13 Apr 2025 21:02:32 +0000 asID: 174 IP address blocks: 204.95.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:04:e9:d9:44:a9:36:ad:55:b3:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Jan 13 22:02:32 2025 GMT Not After : Apr 13 21:02:32 2025 GMT Subject: CN=d07962a0-3fa6-4c7e-a183-213e05e1bd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e8:0c:1c:34:60:34:7e:91:d9:9e:71:99:fc: a7:f0:8c:73:d6:2e:a1:0d:6a:78:53:87:7e:56:54: 2b:36:d1:30:d9:4f:ab:0c:79:94:ea:2c:f7:97:2b: b2:c2:0c:b0:80:1d:4a:c4:24:09:c2:5d:1f:fc:8a: 7c:06:33:ec:44:80:30:bb:ef:15:da:04:54:0b:b6: d3:61:5c:04:6c:b4:31:b1:b5:3f:57:b6:42:e1:ac: 45:86:74:e8:a0:ae:3e:1e:c4:6f:2a:0f:33:48:ec: 43:f0:b2:33:13:43:83:37:84:d7:d1:c9:6b:96:d8: 31:30:e2:44:e9:0a:04:ce:e8:56:17:ff:c4:a4:68: ff:5f:fa:86:9b:e2:e2:e7:d3:0e:c2:34:e8:c5:a5: 88:cf:a8:d8:d2:cb:f6:f2:f1:27:94:ca:b6:44:e4: 22:14:3b:23:b8:98:58:0b:c3:3a:1d:e2:19:e8:de: 3e:9b:6c:6a:7b:96:25:9e:49:c4:e3:d8:8c:23:86: a1:ed:7b:cd:cf:96:6c:ca:11:9c:20:ce:15:8a:f7: 8f:e8:1b:e3:3d:c0:20:52:58:5e:85:17:6f:98:ed: 10:68:96:6b:7c:46:9f:d8:e0:d4:72:c3:a4:0c:df: 6b:03:b1:8e:84:23:8a:27:64:5f:f5:d1:9d:bb:fb: 76:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:38:61:F1:B8:F8:D7:9F:38:59:1F:94:A4:3C:93:99:61:30:BB:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/33cbeda8-ef84-3e20-ad85-a5be7b117a8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.95.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:5c:f4:c6:8d:0a:c8:89:68:9a:50:85:03:3e:a7:24:ec:0d: 59:6d:3b:3b:f7:ea:8a:6e:3b:c8:2d:36:be:dd:28:07:c1:4b: db:89:d9:c3:86:67:76:b4:f3:4e:5b:75:d2:1f:10:99:15:65: 28:92:7c:65:ba:3f:8d:03:a5:8d:95:87:ef:ab:7c:a3:70:c3: e1:99:d0:a7:8d:44:9a:a9:e8:a4:b7:67:78:42:98:d6:9c:4f: 31:fc:a3:a0:a9:ee:55:b7:93:c5:23:ed:ab:7b:11:ce:60:9e: b2:33:db:a9:33:a1:27:3a:ed:4d:30:4e:e8:9b:43:ef:97:58: 96:b5:a2:58:06:54:21:52:51:62:52:c8:b9:78:fe:9c:83:bc: b7:cf:64:5c:f4:74:e2:30:a6:4a:0f:b0:d0:85:c0:d1:af:cb: bf:c3:e5:41:d8:ea:db:94:91:2d:95:2f:0f:db:62:25:89:e3: 68:8c:a2:fb:33:57:12:07:1e:9d:ed:32:30:d1:3a:12:47:82: f4:bd:5e:59:90:5d:4d:29:72:02:1a:36:98:01:ad:32:0a:a0: db:46:56:ff:80:bd:7e:56:d3:c4:67:4e:46:b5:ad:e5:01:e3: f6:1c:ef:86:48:41:1e:7a:98:f7:6e:87:cb:06:fe:63:c8:c3: 85:5a:2d:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiJBOnZRKk2rVWztgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDExMzIyMDIzMloXDTI1MDQxMzIxMDIzMlowLzEtMCsGA1UEAxMk ZDA3OTYyYTAtM2ZhNi00YzdlLWExODMtMjEzZTA1ZTFiZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnugMHDRgNH6R2Z5xmfyn8Ixz1i6hDWp4U4d+ VlQrNtEw2U+rDHmU6iz3lyuywgywgB1KxCQJwl0f/Ip8BjPsRIAwu+8V2gRUC7bT YVwEbLQxsbU/V7ZC4axFhnTooK4+HsRvKg8zSOxD8LIzE0ODN4TX0clrltgxMOJE 6QoEzuhWF//EpGj/X/qGm+Li59MOwjToxaWIz6jY0sv28vEnlMq2ROQiFDsjuJhY C8M6HeIZ6N4+m2xqe5YlnknE49iMI4ah7XvNz5ZsyhGcIM4ViveP6BvjPcAgUlhe hRdvmO0QaJZrfEaf2ODUcsOkDN9rA7GOhCOKJ2Rf9dGdu/t2LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBE4YfG4+NefOFkflKQ8k5lhMLuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMzNjYmVkYTgtZWY4NC0z ZTIwLWFkODUtYTViZTdiMTE3YThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzF8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5c9MaNCsiJaJpQhQM+pyTsDVltOzv36opuO8gtNr7dKAfBS9uJ2cOG Z3a0805bddIfEJkVZSiSfGW6P40DpY2Vh++rfKNww+GZ0KeNRJqp6KS3Z3hCmNac TzH8o6Cp7lW3k8Uj7at7Ec5gnrIz26kzoSc67U0wTuibQ++XWJa1olgGVCFSUWJS yLl4/pyDvLfPZFz0dOIwpkoPsNCFwNGvy7/D5UHY6tuUkS2VLw/bYiWJ42iMovsz VxIHHp3tMjDROhJHgvS9XlmQXU0pcgIaNpgBrTIKoNtGVv+AvX5W08RnTka1reUB 4/Yc74ZIQR56mPduh8sG/mPIw4VaLZU= -----END CERTIFICATE-----Generated at Wed Feb 5 10:39:39 2025 by rpki-client