$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/52460d0a-e8d7-3b11-852d-24a12eb83235.roa File: 52460d0a-e8d7-3b11-852d-24a12eb83235.roa (raw, json) Hash identifier: hLgFADtSSlYKYBoZkQPIgjnk/6P4uXgaluS3FjYSlE8= Subject key identifier: 4C:7B:9E:89:C4:F5:D1:D1:6E:6B:13:7D:A0:22:04:5A:54:5A:5E:A7 Certificate issuer: /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98 Certificate serial: 010D0C9F432858487755DF3C051A97ED02460680 Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/52460d0a-e8d7-3b11-852d-24a12eb83235.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 7992 IP address blocks: 24.143.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:df:3c:05:1a:97:ed:02:46:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=5f769575-6ecf-4125-9e3b-d4a8b96a852f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dc:a4:75:5a:81:7b:f6:5f:c2:34:c7:69:39: c6:e9:ef:e1:dd:54:65:e6:05:5e:96:ff:9f:9e:12: 94:d7:bc:51:3f:9a:02:ae:35:74:b5:b6:c7:18:4d: 6c:d3:74:d3:57:20:3d:b7:39:5c:cb:48:ad:54:8d: f2:3b:97:01:76:db:08:04:f1:56:df:9b:7e:e9:a6: b5:3f:3e:79:df:32:0a:15:2c:c4:fc:fd:4e:33:ef: 09:f6:57:92:5d:71:7a:9d:16:73:83:1e:76:b0:0c: 2f:3d:45:04:5d:96:a0:e2:9b:53:a2:be:54:f8:f2: 5a:71:ab:08:d7:55:6b:bf:48:f3:1e:a9:d1:88:37: b1:13:aa:f5:c8:84:49:7d:85:62:15:02:e2:a5:3c: 0b:9e:ef:17:73:57:e4:70:2d:f0:7f:a3:1c:f7:f9: 1c:d1:f8:2c:13:06:9e:51:18:10:62:bd:ce:b7:41: a5:3e:61:13:60:a2:2f:1e:24:33:5a:9c:dc:42:b5: fc:71:aa:f6:5f:b4:3c:39:eb:bf:e4:cd:d3:22:b3: bd:9d:2b:89:a8:04:1d:e7:ef:42:4a:fb:ae:d7:45: 53:a4:0f:f5:db:a4:be:bc:15:94:98:a4:31:e5:6f: 1e:57:b1:ac:98:ed:1f:d6:3d:7a:c7:5f:a0:0c:04: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7B:9E:89:C4:F5:D1:D1:6E:6B:13:7D:A0:22:04:5A:54:5A:5E:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/52460d0a-e8d7-3b11-852d-24a12eb83235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl X509v3 Authority Key Identifier: keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer sbgp-ipAddrBlock: critical IPv4: 24.143.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:25:8c:c8:1f:ea:9c:d5:04:1b:63:78:bb:ea:14:e3:ea:0e: 4f:cb:21:3f:8d:f1:9f:46:65:cb:24:3f:c1:75:80:63:f0:66: 61:9e:c1:62:81:91:13:83:bb:e4:41:3d:ad:e3:61:44:b2:6c: d1:b6:87:7c:a4:92:e7:cc:eb:b3:1d:d3:53:c8:57:b7:42:47: e8:ca:75:f4:f7:e4:e1:0a:6c:64:11:11:7f:7f:eb:b7:eb:a6: bd:a1:02:2a:9e:82:42:3c:0a:5a:44:ee:fe:f2:e9:aa:1b:f1: e0:a4:f0:61:be:86:72:5f:0f:6b:7b:14:86:f5:4a:96:73:95: c8:02:31:35:69:37:e2:29:42:c1:82:f3:9d:91:88:79:20:b0: 68:f7:cb:6c:83:5c:0e:04:ef:6e:6f:1d:07:4f:9f:64:c3:9e: 31:50:8a:7d:4c:02:a4:ea:b8:f1:4f:09:c5:6c:1e:18:a9:80: 4c:00:9b:35:cd:9a:a6:ab:05:aa:94:a0:0a:54:55:da:3e:1a: 8c:55:aa:21:7b:09:47:a8:46:2d:56:ba:15:a9:a7:ec:3a:24: 3b:02:2f:ba:36:cc:ec:fa:f9:8c:e4:58:3d:e1:51:d0:4b:99: 52:0a:9f:1e:38:87:4d:69:71:b5:d1:7f:62:84:04:74:87:c4: 2d:6e:48:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3Vd88BRqX7QJGBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNmMjg0N2QtNTNhYi00YWJiLWE1ZTUtMjZiOTk4Yzdm Zjk4MB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk NWY3Njk1NzUtNmVjZi00MTI1LTllM2ItZDRhOGI5NmE4NTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNykdVqBe/ZfwjTHaTnG6e/h3VRl5gVelv+f nhKU17xRP5oCrjV0tbbHGE1s03TTVyA9tzlcy0itVI3yO5cBdtsIBPFW35t+6aa1 Pz553zIKFSzE/P1OM+8J9leSXXF6nRZzgx52sAwvPUUEXZag4ptTor5U+PJacasI 11Vrv0jzHqnRiDexE6r1yIRJfYViFQLipTwLnu8Xc1fkcC3wf6Mc9/kc0fgsEwae URgQYr3Ot0GlPmETYKIvHiQzWpzcQrX8car2X7Q8Oeu/5M3TIrO9nSuJqAQd5+9C Svuu10VTpA/126S+vBWUmKQx5W8eV7GsmO0f1j16x1+gDAQ+LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx7nonE9dHRbmsTfaAiBFpUWl6nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83M2Yy ODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5OThjN2ZmOTgvNTI0NjBkMGEtZThkNy0z YjExLTg1MmQtMjRhMTJlYjgzMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzNmMjg0N2QtNTNhYi00YWJiLWE1 ZTUtMjZiOTk4YzdmZjk4LzczZjI4NDdkLTUzYWItNGFiYi1hNWU1LTI2Yjk5OGM3 ZmY5OC5jcmwwHwYDVR0jBBgwFoAU4z9DS4XDJg2cVrC7yD+2Teg7fcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83M2YyODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5 OThjN2ZmOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGI+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEljMgf6pzVBBtjeLvqFOPqDk/LIT+N8Z9GZcskP8F1gGPwZmGewWKB kRODu+RBPa3jYUSybNG2h3ykkufM67Md01PIV7dCR+jKdfT35OEKbGQREX9/67fr pr2hAiqegkI8ClpE7v7y6aob8eCk8GG+hnJfD2t7FIb1SpZzlcgCMTVpN+IpQsGC 852RiHkgsGj3y2yDXA4E725vHQdPn2TDnjFQin1MAqTquPFPCcVsHhipgEwAmzXN mqarBaqUoApUVdo+GoxVqiF7CUeoRi1WuhWpp+w6JDsCL7o2zOz6+YzkWD3hUdBL mVIKnx44h01pcbXRf2KEBHSHxC1uSHk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:44 2025 by rpki-client