$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa File: 2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa (raw, json) Hash identifier: 0IXI0T4C5xv0n6er0QXPzO4CKbQuo39Kh2yN/OZ75oY= Subject key identifier: 2A:83:B2:57:69:B6:5D:12:21:91:A6:28:28:03:6F:43:5B:B0:42:07 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848CC7B959FAEE789B2ADDA2DF0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 64.4.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:95:9f:ae:e7:89:b2:ad:da:2d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=fcc7de47-dc0d-4550-9cf6-9da08314a04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:3d:ce:4c:f8:51:cf:e0:3b:46:c2:81:48: e1:ee:8e:58:f5:78:45:d4:4a:8a:03:c8:ca:3c:f1: 46:ee:e4:21:77:06:69:c3:1d:1a:dd:27:a9:0e:f2: 1d:1f:6e:d9:06:13:8b:ff:9e:9d:e9:a1:5c:08:63: 73:f5:12:b3:37:33:4f:59:3d:14:a6:90:a9:64:07: 71:ef:6b:9c:80:f5:ad:d9:80:f0:2d:ad:b5:e7:cf: 17:a4:5f:af:a3:72:80:1b:90:04:8f:d9:63:84:b9: 0c:19:3a:97:d0:28:61:35:bc:1a:d1:7c:32:41:dc: 79:c3:5f:12:cf:83:b7:91:ba:83:17:92:24:cb:b4: 9e:10:d6:33:c4:a4:07:ce:b0:92:e6:53:15:57:d4: a9:84:37:35:1a:c1:f8:d7:ad:d9:9a:c9:1f:23:7d: 27:ce:9b:64:e3:19:46:03:c0:a2:27:15:de:6e:16: 02:9b:7a:fa:01:9d:67:24:d7:e2:f0:5f:51:13:ef: 79:5c:0b:34:17:30:12:30:b0:1f:f9:a7:0c:2e:f7: c2:0e:f0:dc:44:ac:12:c5:15:48:91:b0:68:40:c5: f9:b1:59:57:6e:b2:61:96:cd:cd:2d:db:7c:3a:20: d5:33:6d:54:1a:c7:6f:0a:d2:f6:16:c5:c9:aa:d8: 4d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:83:B2:57:69:B6:5D:12:21:91:A6:28:28:03:6F:43:5B:B0:42:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7d:ee:9a:ea:a2:71:7c:63:6c:96:ff:a8:15:0a:be:4c:5f: ab:bf:d8:ec:ad:55:16:b0:31:47:37:47:d4:39:64:7e:e3:9f: 42:c4:9d:14:80:d5:c9:a3:e2:eb:ba:e9:4c:45:d9:df:21:ad: 58:64:89:dc:1b:64:31:e4:41:3c:70:0a:73:0f:a5:a5:2f:e5: 9d:4b:f4:0c:d3:7f:d9:e2:c8:46:a6:02:89:bd:c5:4d:b1:e7: de:0d:99:89:8d:57:ce:87:dd:70:49:2f:06:62:63:8c:42:5f: 93:b9:e7:56:5c:68:cf:ec:16:dc:62:bf:03:ba:e7:24:5a:d5: 7c:8f:80:7b:ba:c3:ff:f9:b0:d7:2f:8f:66:42:9a:7f:0b:4f: 88:d5:6b:4c:ad:fc:3e:bf:e4:c7:5f:1c:89:b0:61:82:02:e9: e0:a7:b7:c0:35:a3:95:c6:fe:f6:76:14:06:ee:aa:0f:7c:b7: 4b:aa:77:95:ad:4d:ff:f4:38:22:81:0b:0b:30:a9:7e:89:f7: ad:bf:ac:73:b9:6e:cd:35:de:b9:7d:ed:83:c5:e0:b6:b4:31: 4c:bc:d8:2e:e1:43:54:76:77:a8:98:b0:30:96:d0:85:03:e6: 9e:b4:de:71:fc:41:bd:03:41:07:fb:69:62:ef:f0:9b:0d:26: 75:9f:08:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5WfrueJsq3aLfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk ZmNjN2RlNDctZGMwZC00NTUwLTljZjYtOWRhMDgzMTRhMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry49zkz4Uc/gO0bCgUjh7o5Y9XhF1EqKA8jK PPFG7uQhdwZpwx0a3SepDvIdH27ZBhOL/56d6aFcCGNz9RKzNzNPWT0UppCpZAdx 72ucgPWt2YDwLa21588XpF+vo3KAG5AEj9ljhLkMGTqX0ChhNbwa0XwyQdx5w18S z4O3kbqDF5Iky7SeENYzxKQHzrCS5lMVV9SphDc1GsH4163ZmskfI30nzptk4xlG A8CiJxXebhYCm3r6AZ1nJNfi8F9RE+95XAs0FzASMLAf+acMLvfCDvDcRKwSxRVI kbBoQMX5sVlXbrJhls3NLdt8OiDVM21UGsdvCtL2FsXJqthNYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqDsldptl0SIZGmKCgDb0NbsEIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMjgxNWUyZmItMDk5NS0z YTJkLTg0YjktODlhOGU3ZWViNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd97prqonF8Y2yW/6gVCr5MX6u/2OytVRawMUc3R9Q5ZH7jn0LEnRSA 1cmj4uu66UxF2d8hrVhkidwbZDHkQTxwCnMPpaUv5Z1L9AzTf9niyEamAom9xU2x 594NmYmNV86H3XBJLwZiY4xCX5O551ZcaM/sFtxivwO65yRa1XyPgHu6w//5sNcv j2ZCmn8LT4jVa0yt/D6/5MdfHImwYYIC6eCnt8A1o5XG/vZ2FAbuqg98t0uqd5Wt Tf/0OCKBCwswqX6J962/rHO5bs013rl97YPF4La0MUy82C7hQ1R2d6iYsDCW0IUD 5p603nH8Qb0DQQf7aWLv8JsNJnWfCB4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:03 2025 by rpki-client