$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/51d9fd79-adf5-359e-b8be-9988b0cffa4c.roa File: 51d9fd79-adf5-359e-b8be-9988b0cffa4c.roa (raw, json) Hash identifier: MhjSLN7p9q6l5cyZlqRjyr04KWxJoUckWnLJhp7IUQs= Subject key identifier: FD:6E:3E:AA:13:6E:0C:93:35:75:31:23:1B:77:6E:AF:F6:EA:B6:8D Certificate issuer: /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Certificate serial: 010D0C9F432858487A28AF7426F2870EFCAE1860 Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/51d9fd79-adf5-359e-b8be-9988b0cffa4c.roa Signing time: Wed 08 Jan 2025 14:17:29 +0000 ROA not before: Wed 08 Jan 2025 14:17:29 +0000 ROA not after: Tue 08 Apr 2025 13:17:29 +0000 asID: 40788 IP address blocks: 172.87.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:28:af:74:26:f2:87:0e:fc:ae:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Validity Not Before: Jan 8 14:17:29 2025 GMT Not After : Apr 8 13:17:29 2025 GMT Subject: CN=3bf75552-2992-4203-978a-09b3039b9645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4d:d4:67:9c:81:33:82:86:45:61:72:3c:3a: de:88:a6:53:ba:4f:da:6e:c3:8f:19:e7:37:c1:10: 86:74:16:71:f2:ef:9a:a4:3f:6d:7a:e5:62:51:54: 68:63:f9:4d:63:5b:14:9a:f9:00:c8:3a:17:c2:38: cb:e0:c5:06:56:0f:94:5d:c3:75:1e:6d:b2:8c:59: 42:0b:7a:84:80:ba:6e:9f:14:45:e6:85:cb:ab:69: e7:ef:5d:a2:8f:0c:bc:48:b2:48:9e:db:bf:21:b3: f5:b3:64:0e:f0:26:ee:44:a0:a7:11:4d:b0:30:8a: 6b:98:ca:2c:99:05:af:96:95:0d:5e:40:77:ab:da: d1:83:93:e8:1f:dd:ef:c3:0b:c4:96:10:65:c5:c4: ea:9b:d7:20:18:ec:78:69:b9:59:bf:f5:79:b8:86: 6e:9f:aa:cf:18:da:a5:f4:0f:aa:a1:57:78:6a:ce: 9a:1e:f4:38:4b:e5:d0:3e:43:3c:3b:7b:78:3a:2c: e9:9b:15:ec:97:51:35:12:c3:21:a8:7f:a1:fa:94: 3e:7f:36:e3:85:da:51:3c:80:23:92:a1:ad:ee:43: e5:bb:59:77:05:43:ea:a9:ac:9a:12:9e:98:78:e7: 94:cf:e1:d4:28:54:99:c3:8f:0a:04:81:81:87:e1: 07:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6E:3E:AA:13:6E:0C:93:35:75:31:23:1B:77:6E:AF:F6:EA:B6:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/51d9fd79-adf5-359e-b8be-9988b0cffa4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl X509v3 Authority Key Identifier: keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer sbgp-ipAddrBlock: critical IPv4: 172.87.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8e:fe:2d:43:a8:9e:26:f8:7e:81:f0:94:65:c6:5f:79:9a: 91:db:3e:dd:b9:d5:85:e9:fc:fe:f5:b6:c8:9c:02:47:1b:4f: 8f:77:05:af:ce:91:bb:50:d5:7e:53:7b:66:b9:7f:e0:80:d3: b8:f1:2f:be:6b:4b:3e:ae:7c:fd:db:66:69:ec:63:52:45:68: f5:24:e8:7b:96:38:3f:58:f3:0f:60:f5:ab:89:97:1d:04:e7: b0:64:e7:82:0e:2e:71:8d:a5:6a:8d:05:fd:3e:94:d4:51:2b: b1:63:10:e9:fa:cc:9a:2e:a4:ae:d5:df:e6:b0:b3:a7:a7:da: 4c:f7:8f:6b:fd:b2:38:af:8c:ed:0f:58:db:22:44:eb:e1:65: 82:15:93:4c:f6:14:fa:28:36:65:11:28:92:e7:f5:2b:cd:f9: 69:ba:75:c7:56:bf:f1:cf:d0:65:b4:98:c7:9b:9c:b6:58:fe: 3e:07:09:b0:de:d6:86:31:56:dd:cf:69:67:31:de:7b:f2:37: f0:a9:15:ca:46:87:cc:61:37:24:10:10:51:f0:84:05:bc:a6: b8:64:2e:93:8a:b1:0e:d2:16:af:ae:a9:ec:bb:46:86:05:4a: 68:05:a7:a9:6e:d1:c1:bf:2a:d2:a7:ca:76:04:1a:a0:44:63: 22:ef:3a:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6KK90JvKHDvyuGGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhk MzI2MB4XDTI1MDEwODE0MTcyOVoXDTI1MDQwODEzMTcyOVowLzEtMCsGA1UEAxMk M2JmNzU1NTItMjk5Mi00MjAzLTk3OGEtMDliMzAzOWI5NjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U3UZ5yBM4KGRWFyPDreiKZTuk/absOPGec3 wRCGdBZx8u+apD9teuViUVRoY/lNY1sUmvkAyDoXwjjL4MUGVg+UXcN1Hm2yjFlC C3qEgLpunxRF5oXLq2nn712ijwy8SLJIntu/IbP1s2QO8CbuRKCnEU2wMIprmMos mQWvlpUNXkB3q9rRg5PoH93vwwvElhBlxcTqm9cgGOx4ablZv/V5uIZun6rPGNql 9A+qoVd4as6aHvQ4S+XQPkM8O3t4OizpmxXsl1E1EsMhqH+h+pQ+fzbjhdpRPIAj kqGt7kPlu1l3BUPqqayaEp6YeOeUz+HUKFSZw48KBIGBh+EHFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1uPqoTbgyTNXUxIxt3bq/26raNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYw NDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvNTFkOWZkNzktYWRmNS0z NTllLWI4YmUtOTk4OGIwY2ZmYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTM2MDQ3MDgtM2UwZi00ZWE2LWIx NTEtNGQyZjc0MDhkMzI2L2UzNjA0NzA4LTNlMGYtNGVhNi1iMTUxLTRkMmY3NDA4 ZDMyNi5jcmwwHwYDVR0jBBgwFoAU5LlVX3UhkJoYMg04VOQhuidg6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJm NzQwOGQzMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErFdQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2O/i1DqJ4m+H6B8JRlxl95mpHbPt251YXp/P71tsicAkcbT493Ba/O kbtQ1X5Te2a5f+CA07jxL75rSz6ufP3bZmnsY1JFaPUk6HuWOD9Y8w9g9auJlx0E 57Bk54IOLnGNpWqNBf0+lNRRK7FjEOn6zJoupK7V3+aws6en2kz3j2v9sjivjO0P WNsiROvhZYIVk0z2FPooNmURKJLn9SvN+Wm6dcdWv/HP0GW0mMebnLZY/j4HCbDe 1oYxVt3PaWcx3nvyN/CpFcpGh8xhNyQQEFHwhAW8prhkLpOKsQ7SFq+uqey7RoYF SmgFp6lu0cG/KtKnynYEGqBEYyLvOrg= -----END CERTIFICATE-----Generated at Wed Feb 5 19:02:23 2025 by rpki-client