$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/4842beb7-f2ea-31f5-9ded-6eafa7953373.roa File: 4842beb7-f2ea-31f5-9ded-6eafa7953373.roa (raw, json) Hash identifier: gyOLeiqzSBN+flKamdxzcjZprpoETwFxhxlO19APMaM= Subject key identifier: 81:22:C0:3A:02:95:20:A8:B3:D3:06:FB:57:EE:9A:D8:C2:3C:40:1F Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F432858488904B87B3D94D88C330A3610 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/4842beb7-f2ea-31f5-9ded-6eafa7953373.roa Signing time: Mon 13 Jan 2025 22:02:09 +0000 ROA not before: Mon 13 Jan 2025 22:02:09 +0000 ROA not after: Sun 13 Apr 2025 21:02:09 +0000 asID: 174 IP address blocks: 204.94.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:04:b8:7b:3d:94:d8:8c:33:0a:36:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Jan 13 22:02:09 2025 GMT Not After : Apr 13 21:02:09 2025 GMT Subject: CN=bcf885b2-de52-4ec6-946b-cf5d33f4832b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fe:27:55:9e:41:45:8b:06:53:8d:98:0f:6e: 4c:2d:2c:23:db:a2:00:5c:7d:bf:3f:aa:dd:9e:d3: f1:c1:dc:13:69:73:c4:08:b1:15:2f:29:e8:93:c7: 72:0e:ff:82:3d:0e:d3:4d:da:91:e6:65:33:89:a0: 2c:65:15:36:18:d2:2e:0e:f9:b6:cf:d8:6d:24:ec: 6b:51:ea:34:15:38:8a:64:07:bc:3e:c8:f2:3b:f4: 91:03:40:68:31:d5:1f:20:1d:e9:53:b9:0c:1b:bd: 0b:e1:25:65:65:41:fe:4c:89:1d:bc:4f:37:a8:5c: d0:69:e2:5a:47:89:80:65:92:8a:5d:06:7f:97:ee: ab:42:f2:95:17:b9:63:86:69:1b:d1:b2:95:18:64: d2:4d:99:62:dc:a0:d0:43:20:a1:01:e0:9e:df:b4: 00:b1:f5:9e:a4:02:56:d7:41:69:0f:be:18:41:a8: 83:e3:9b:4e:22:3a:fd:b2:a5:48:57:fb:8f:e4:b1: 7c:57:79:ee:df:49:f7:8c:1b:bf:69:fb:72:5c:25: f3:a6:50:97:e6:4a:23:a1:37:ab:e4:07:55:14:d9: f6:f1:3f:f6:c1:d2:7e:45:b4:9d:b0:d4:67:c9:cb: 0b:a0:25:1a:67:c1:0c:3e:0c:54:af:71:d8:54:ee: 8b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:22:C0:3A:02:95:20:A8:B3:D3:06:FB:57:EE:9A:D8:C2:3C:40:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/4842beb7-f2ea-31f5-9ded-6eafa7953373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.94.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c3:27:85:17:17:ac:9d:22:83:d7:62:28:f3:ac:7c:a2:21: 60:7c:ec:26:e8:4d:2f:ad:6f:07:b5:54:a4:bd:30:da:6e:81: 9e:02:86:1f:82:9a:e3:e2:d3:59:8d:fc:df:1b:37:53:d5:ce: 6d:0e:61:8f:40:b7:e7:6a:3e:22:cd:76:b1:4a:49:52:29:4b: 5f:74:f0:f8:a8:00:57:78:38:a5:f2:c1:b7:1a:a5:37:d6:4f: ac:83:61:14:89:a0:4e:dd:8e:89:ed:ba:70:41:f1:08:83:fe: e6:27:c3:6f:b3:78:c3:5c:3f:d8:a5:81:e6:74:f1:cd:f1:16: 87:c2:c6:ac:8d:58:45:d7:a4:d6:18:5a:c8:cf:21:9f:01:33: 9c:e0:01:26:f2:bf:30:e7:db:90:33:a6:b6:42:24:a7:0f:00: e9:e2:4e:fd:50:fe:8c:4c:83:41:90:f1:cc:24:50:d6:a7:44: 96:f7:a2:26:f9:3d:4f:b4:3f:31:d1:ce:4c:1b:ba:e1:e7:9a: 2e:0e:7c:89:5a:46:aa:71:61:6e:f1:d1:bc:26:45:db:92:c6: ab:31:33:ca:f6:2c:e0:09:a2:04:31:3c:5a:22:a0:24:63:e2: b9:e5:71:ce:d8:2f:67:99:8b:d6:15:2f:1f:59:0a:e2:1b:f8: ad:6c:cd:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiJBLh7PZTYjDMKNhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDExMzIyMDIwOVoXDTI1MDQxMzIxMDIwOVowLzEtMCsGA1UEAxMk YmNmODg1YjItZGU1Mi00ZWM2LTk0NmItY2Y1ZDMzZjQ4MzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP4nVZ5BRYsGU42YD25MLSwj26IAXH2/P6rd ntPxwdwTaXPECLEVLynok8dyDv+CPQ7TTdqR5mUziaAsZRU2GNIuDvm2z9htJOxr Ueo0FTiKZAe8PsjyO/SRA0BoMdUfIB3pU7kMG70L4SVlZUH+TIkdvE83qFzQaeJa R4mAZZKKXQZ/l+6rQvKVF7ljhmkb0bKVGGTSTZli3KDQQyChAeCe37QAsfWepAJW 10FpD74YQaiD45tOIjr9sqVIV/uP5LF8V3nu30n3jBu/aftyXCXzplCX5kojoTer 5AdVFNn28T/2wdJ+RbSdsNRnycsLoCUaZ8EMPgxUr3HYVO6LnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEiwDoClSCos9MG+1fumtjCPEAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNDg0MmJlYjctZjJlYS0z MWY1LTlkZWQtNmVhZmE3OTUzMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzF5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLDJ4UXF6ydIoPXYijzrHyiIWB87CboTS+tbwe1VKS9MNpugZ4Chh+C muPi01mN/N8bN1PVzm0OYY9At+dqPiLNdrFKSVIpS1908PioAFd4OKXywbcapTfW T6yDYRSJoE7djontunBB8QiD/uYnw2+zeMNcP9ilgeZ08c3xFofCxqyNWEXXpNYY WsjPIZ8BM5zgASbyvzDn25AzprZCJKcPAOniTv1Q/oxMg0GQ8cwkUNanRJb3oib5 PU+0PzHRzkwbuuHnmi4OfIlaRqpxYW7x0bwmRduSxqsxM8r2LOAJogQxPFoioCRj 4rnlcc7YL2eZi9YVLx9ZCuIb+K1szdo= -----END CERTIFICATE-----Generated at Wed Feb 5 10:40:11 2025 by rpki-client