$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa File: d0192a55-432f-3594-81cd-d16e7579e4e8.roa (raw, json) Hash identifier: VKcuv9n97m54nTairXzc/QDJziUkJKJCt87W9vZW2fI= Subject key identifier: A1:B0:46:79:27:BC:DD:7A:A5:9A:4A:4A:C4:1F:AD:7E:83:5F:08:F1 Certificate issuer: /CN=378928e8-c134-40aa-9858-3838053cbbe9 Certificate serial: 010D0C9F432858486695BBAC35BB00F96D021240 Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 12261 IP address blocks: 64.253.208.0/22 maxlen: 22 64.253.212.0/22 maxlen: 22 64.253.216.0/22 maxlen: 23 64.253.220.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:bb:ac:35:bb:00:f9:6d:02:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9 Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=64b9ecf7-b2ac-45d0-b9a3-9c675aeff01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:95:63:39:8c:d2:e9:2e:0d:f7:5b:72:b9:1a: 9c:d6:2b:f4:fa:7c:fc:4c:66:db:22:10:18:00:6a: e4:a7:0a:87:00:aa:74:88:db:70:ba:d6:fc:41:f7: af:17:3b:46:e7:66:56:a6:be:3e:de:52:aa:18:8f: 16:1e:2f:b5:62:e5:18:e8:ff:04:8e:6c:4a:3c:a9: 93:90:be:c7:01:ca:25:5d:1d:bb:f9:c8:e5:38:28: 2d:ea:d1:e1:9b:75:d3:83:fc:59:7c:46:d6:b0:27: 36:d8:dc:42:c6:b3:ab:b1:c8:c5:e2:7b:60:bb:a5: 10:69:c9:2a:ed:6a:58:8b:f7:4a:34:0a:16:4e:a6: 9b:2c:5e:c9:06:29:94:fe:25:35:22:44:8e:59:48: fb:64:99:6f:07:b7:62:6c:88:73:26:39:d9:d0:30: 38:83:ce:92:65:59:76:78:16:2e:2e:b4:f1:a5:58: 8e:51:18:ce:73:a9:5d:36:80:65:35:bc:12:f3:3c: 1f:2a:d5:24:c8:50:75:40:17:1a:b3:5d:a2:b3:24: 3d:e3:ea:c3:e8:9d:41:61:14:55:d3:3c:6a:f3:ee: f3:cb:fe:a3:d3:53:9c:ca:1c:cd:26:a4:8a:75:1b: 3e:4f:c8:7d:4c:0a:96:e0:0d:70:63:45:5e:a8:55: b2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B0:46:79:27:BC:DD:7A:A5:9A:4A:4A:C4:1F:AD:7E:83:5F:08:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl X509v3 Authority Key Identifier: keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer sbgp-ipAddrBlock: critical IPv4: 64.253.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a4:b6:d0:6d:8c:82:29:89:98:a4:a6:05:51:5f:01:17:2a: 1e:81:f3:fd:49:68:ab:5e:bd:1e:fc:b3:7e:ee:77:08:02:dc: ee:94:63:31:bc:45:e7:1a:f6:be:a0:33:83:fb:10:1f:c3:13: f8:38:db:f6:68:39:6d:a8:08:3e:c2:13:e5:ec:8b:ff:cc:84: e8:76:16:81:a2:47:d5:7d:b1:5a:5f:5b:53:96:f8:36:8f:f7: b4:a0:2b:51:aa:6e:37:2f:56:86:7f:5c:99:56:0f:58:1a:4d: 41:ab:fb:7c:da:43:c2:17:16:1a:b2:d9:39:25:c1:16:f1:94: 59:68:4c:51:7e:43:81:1f:8a:ef:4e:98:bb:2a:17:11:70:69: 0f:96:e8:0d:a0:b9:32:1c:8d:03:68:01:0b:f4:b1:70:58:74: 3f:9d:ed:6e:1f:33:27:19:42:80:1e:5a:fd:ab:21:e3:31:7a: e0:d3:89:73:0a:a5:fa:81:32:4c:8a:ea:3d:25:16:c2:af:98: 6b:88:45:2a:fd:52:45:e6:24:95:9f:db:0f:91:ce:e8:7c:d2: 42:33:84:57:ed:4a:39:45:b9:c8:c8:b8:83:17:37:2c:26:c4: 16:3d:5b:0b:25:c5:35:5d:5b:9b:48:9a:23:41:68:f5:c7:59: 1d:60:58:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlbusNbsA+W0CEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTI4ZTgtYzEzNC00MGFhLTk4NTgtMzgzODA1M2Ni YmU5MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk NjRiOWVjZjctYjJhYy00NWQwLWI5YTMtOWM2NzVhZWZmMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJVjOYzS6S4N91tyuRqc1iv0+nz8TGbbIhAY AGrkpwqHAKp0iNtwutb8QfevFztG52ZWpr4+3lKqGI8WHi+1YuUY6P8EjmxKPKmT kL7HAcolXR27+cjlOCgt6tHhm3XTg/xZfEbWsCc22NxCxrOrscjF4ntgu6UQackq 7WpYi/dKNAoWTqabLF7JBimU/iU1IkSOWUj7ZJlvB7dibIhzJjnZ0DA4g86SZVl2 eBYuLrTxpViOURjOc6ldNoBlNbwS8zwfKtUkyFB1QBcas12isyQ94+rD6J1BYRRV 0zxq8+7zy/6j01OcyhzNJqSKdRs+T8h9TAqW4A1wY0VeqFWy9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGwRnknvN16pZpKSsQfrX6DXwjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5 MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4MDUzY2JiZTkvZDAxOTJhNTUtNDMyZi0z NTk0LTgxY2QtZDE2ZTc1NzllNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzc4OTI4ZTgtYzEzNC00MGFhLTk4 NTgtMzgzODA1M2NiYmU5LzM3ODkyOGU4LWMxMzQtNDBhYS05ODU4LTM4MzgwNTNj YmJlOS5jcmwwHwYDVR0jBBgwFoAUBYTnTjebSl6FC+Qck2G4ZCYVGJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4 MDUzY2JiZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQP3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGkttBtjIIpiZikpgVRXwEXKh6B8/1JaKtevR78s37udwgC3O6UYzG8 Reca9r6gM4P7EB/DE/g42/ZoOW2oCD7CE+Xsi//MhOh2FoGiR9V9sVpfW1OW+DaP 97SgK1GqbjcvVoZ/XJlWD1gaTUGr+3zaQ8IXFhqy2TklwRbxlFloTFF+Q4Efiu9O mLsqFxFwaQ+W6A2guTIcjQNoAQv0sXBYdD+d7W4fMycZQoAeWv2rIeMxeuDTiXMK pfqBMkyK6j0lFsKvmGuIRSr9UkXmJJWf2w+Rzuh80kIzhFftSjlFucjIuIMXNywm xBY9WwslxTVdW5tImiNBaPXHWR1gWEc= -----END CERTIFICATE-----Generated at Fri Mar 14 13:20:07 2025 by rpki-client