$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa File: f9a2facb-e73a-3151-8001-8276673133ae.roa (raw, json) Hash identifier: VZsrrhPVrQtSKmw2RoLt+EbSZJUQYqbRPrxiB67hhqI= Subject key identifier: 4C:28:9C:29:A3:65:17:7D:4B:FD:A3:D9:77:30:6E:6C:D1:92:B3:A9 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848B8F0D0FB16F689BBA219BC60 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 198.135.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d0:fb:16:f6:89:bb:a2:19:bc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=8486c2cb-7aa1-4743-b9ef-a86f84774cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:f8:49:b1:87:85:4b:7b:b5:6f:c5:d0:5a: 8c:fa:0c:2b:c3:64:f7:14:27:c6:ea:c3:7d:64:a6: 6b:0e:46:22:e6:f2:13:a5:60:a0:35:8c:59:e1:e3: ef:8c:8f:2d:c2:7d:68:ba:f1:94:b3:82:84:1c:32: 5f:de:76:68:23:63:20:4b:1b:10:5b:24:5d:f0:a0: 62:b1:a5:4d:45:ab:fa:55:53:09:d9:b8:66:43:23: 45:52:6e:f8:e2:ef:30:10:3a:da:03:41:3a:2c:fc: 91:53:30:b8:ec:33:9d:28:30:49:55:37:dd:0b:65: b5:a6:a8:ca:13:81:de:a2:1f:d6:a2:a7:37:8e:12: bd:e2:f8:d6:07:7a:24:46:47:69:2a:c7:94:1a:78: 1c:4d:ae:6a:51:ee:55:2b:d6:ab:e0:ee:d6:aa:36: e3:79:5e:d4:fa:b5:0c:f0:16:72:e7:00:d5:f3:de: 6c:b3:ed:88:a7:3a:1c:d3:5d:a3:17:5f:c4:f7:06: 42:83:cd:89:3e:02:3c:0c:d0:14:24:13:e1:b0:67: 35:e5:2f:68:2e:6e:2b:af:df:d9:10:d9:5c:ff:ca: a1:1a:71:b5:11:3c:69:49:a5:66:92:fc:b2:49:9e: 21:d4:84:09:8a:b1:23:13:51:d5:89:f4:45:ac:17: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:28:9C:29:A3:65:17:7D:4B:FD:A3:D9:77:30:6E:6C:D1:92:B3:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 198.135.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b6:22:68:ef:c3:e2:b1:25:f1:83:f5:75:69:95:d0:17:07: 86:d2:8a:c2:1d:5e:30:bf:25:b2:c5:14:2b:b3:f9:32:e6:c3: b6:cc:c7:73:91:32:b1:39:25:cc:3e:92:8e:26:00:18:4a:e6: 87:b8:ca:a9:8c:2d:7f:c4:30:c6:96:e2:50:02:a6:18:51:5d: 5a:b8:e7:dd:06:a1:0a:36:5c:25:24:38:bd:19:58:a6:ff:39: 09:69:37:48:8f:7d:cc:78:a0:c7:8a:c6:02:db:08:5e:ce:d1: 47:36:ce:41:aa:cf:5b:98:ca:cd:54:c5:0e:36:f4:d4:9a:df: 10:80:82:89:6d:e6:0d:5c:dd:bc:a9:83:c7:ee:c9:b3:e3:87: e4:1a:a9:51:ed:4e:b7:d6:7e:83:84:75:20:44:8a:6b:0b:3f: 5b:55:09:3a:3c:e2:e2:71:b9:d8:dd:32:4c:a3:7c:17:4d:a1: 05:6d:d9:1b:a5:f3:d5:d6:e7:be:2c:6b:b8:5e:5a:d8:87:c1: d5:0f:e3:f2:58:08:02:3a:ee:cf:a6:33:7b:49:9d:da:58:9f: 08:92:45:7b:83:26:fa:83:42:9b:1e:2c:99:7b:8e:6d:b3:05: ac:c0:29:fa:bc:76:93:f8:2a:67:58:0c:64:c9:8d:cc:51:cc: 9b:ea:99:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48ND7FvaJu6IZvGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ODQ4NmMyY2ItN2FhMS00NzQzLWI5ZWYtYTg2Zjg0Nzc0Y2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdb4SbGHhUt7tW/F0FqM+gwrw2T3FCfG6sN9 ZKZrDkYi5vITpWCgNYxZ4ePvjI8twn1ouvGUs4KEHDJf3nZoI2MgSxsQWyRd8KBi saVNRav6VVMJ2bhmQyNFUm744u8wEDraA0E6LPyRUzC47DOdKDBJVTfdC2W1pqjK E4Heoh/Woqc3jhK94vjWB3okRkdpKseUGngcTa5qUe5VK9ar4O7WqjbjeV7U+rUM 8BZy5wDV895ss+2Ipzoc012jF1/E9wZCg82JPgI8DNAUJBPhsGc15S9oLm4rr9/Z ENlc/8qhGnG1ETxpSaVmkvyySZ4h1IQJirEjE1HVifRFrBf/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwonCmjZRd9S/2j2XcwbmzRkrOpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZjlhMmZhY2ItZTczYS0z MTUxLTgwMDEtODI3NjY3MzEzM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxoegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK2Imjvw+KxJfGD9XVpldAXB4bSisIdXjC/JbLFFCuz+TLmw7bMx3OR MrE5Jcw+ko4mABhK5oe4yqmMLX/EMMaW4lACphhRXVq4590GoQo2XCUkOL0ZWKb/ OQlpN0iPfcx4oMeKxgLbCF7O0Uc2zkGqz1uYys1UxQ429NSa3xCAgolt5g1c3byp g8fuybPjh+QaqVHtTrfWfoOEdSBEimsLP1tVCTo84uJxudjdMkyjfBdNoQVt2Rul 89XW574sa7heWtiHwdUP4/JYCAI67s+mM3tJndpYnwiSRXuDJvqDQpseLJl7jm2z BazAKfq8dpP4KmdYDGTJjcxRzJvqmaA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:33 2025 by rpki-client