$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5863f2cd-69d2-33bd-8af7-d1bcb385afa3.roa File: 5863f2cd-69d2-33bd-8af7-d1bcb385afa3.roa (raw, json) Hash identifier: VCYRxwESlfooGADQS2UHcYSsFd0C9FhrNI8fhb65ros= Subject key identifier: 27:B7:94:F1:AE:0E:F2:B1:EB:B8:13:F5:C1:16:61:82:2E:7F:0A:BD Certificate issuer: /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98 Certificate serial: 010D0C9F432858487325B2EC781B74E9FB64FDC0 Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5863f2cd-69d2-33bd-8af7-d1bcb385afa3.roa Signing time: Mon 06 Jan 2025 02:00:40 +0000 ROA not before: Mon 06 Jan 2025 02:00:40 +0000 ROA not after: Sun 06 Apr 2025 01:00:40 +0000 asID: 7992 IP address blocks: 24.36.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:73:25:b2:ec:78:1b:74:e9:fb:64:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98 Validity Not Before: Jan 6 02:00:40 2025 GMT Not After : Apr 6 01:00:40 2025 GMT Subject: CN=db9db1ce-7944-4485-a569-fb89a5f4a2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:34:f6:01:cd:ee:1e:68:46:11:d0:52:30:89: a5:72:e0:cc:7c:c9:a6:d0:55:10:7f:73:13:a3:41: bf:da:81:fe:fb:5f:64:95:01:68:67:eb:c8:89:3c: 4c:f5:2a:79:02:88:57:30:b8:06:96:97:b3:ac:0a: d9:db:71:6f:48:ca:e7:46:55:68:72:6c:b1:79:88: 70:89:b4:de:16:8f:0d:70:de:a8:3e:fa:e0:3f:01: 87:0e:08:e1:cd:ee:f4:ad:b6:c1:53:44:93:6e:25: 8f:e4:0f:96:b2:5c:02:b6:ef:7e:c4:16:44:27:a6: 37:b2:4b:ab:2b:87:96:be:4c:57:9b:81:35:f0:76: c1:dd:2e:69:6c:8b:88:d7:47:6d:32:fd:cf:2b:53: 3e:c8:b3:ba:05:a1:c2:a6:44:c0:5e:2c:67:e7:17: f1:1a:15:fc:56:d3:b2:4a:a2:ed:32:4b:91:3a:8a: 68:1d:1d:7f:50:0d:72:60:56:68:7e:9f:4a:0b:a7: f3:23:bb:5c:b5:94:59:39:a4:ce:3a:d6:bc:21:66: 3d:7c:6d:2b:16:18:c5:a4:3b:b5:41:bb:e0:3b:58: 86:1b:8a:9b:4e:66:5a:11:13:ab:a3:7b:c1:62:40: c6:59:d8:b6:4e:98:b6:e0:25:13:74:4d:a2:1a:14: 2e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B7:94:F1:AE:0E:F2:B1:EB:B8:13:F5:C1:16:61:82:2E:7F:0A:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5863f2cd-69d2-33bd-8af7-d1bcb385afa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl X509v3 Authority Key Identifier: keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer sbgp-ipAddrBlock: critical IPv4: 24.36.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:04:d4:f9:ae:a0:fb:53:ec:57:60:ad:21:a4:b2:90:18:14: 8f:69:f7:27:c0:1a:84:18:22:d2:f6:bb:e9:2a:3e:8d:43:de: 74:72:61:a5:96:0e:2d:7b:2c:d8:4a:08:5e:57:2f:1a:92:ce: c7:2e:84:3b:77:70:c1:b6:39:3e:52:d9:77:14:44:3f:12:8a: a5:e9:f8:21:33:07:6d:e2:88:72:ad:23:fc:dc:ec:72:71:e8: 56:33:1f:8c:0f:86:00:59:d4:df:54:8e:56:5e:7a:42:c3:99: ec:ae:16:91:a8:fa:4c:3c:92:c2:1c:59:de:c9:83:13:8e:12: d6:40:35:6c:b3:9e:9e:05:cb:6b:e9:8d:12:b0:2c:82:7c:1a: 4c:43:e4:02:f7:6d:19:69:77:6d:b2:8d:11:2f:d3:27:4f:b5: ef:35:fa:f2:18:e4:66:ce:f8:29:ce:dd:d7:f5:4d:40:5d:20: 59:33:44:a1:77:80:c0:dd:8f:a3:0d:cc:9d:a7:d1:7b:46:d3: 02:9b:55:69:fc:4d:c7:35:8b:99:84:ee:73:b2:ed:3b:2c:a8: c2:f3:ee:ce:8c:95:c9:7a:75:96:75:3b:53:28:d5:ba:06:ea: 87:8f:c6:c9:27:eb:9d:45:25:5c:06:2c:2e:c0:0a:e4:5a:51: 95:94:bd:35 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhzJbLseBt06ftk/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNmMjg0N2QtNTNhYi00YWJiLWE1ZTUtMjZiOTk4Yzdm Zjk4MB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk ZGI5ZGIxY2UtNzk0NC00NDg1LWE1NjktZmI4OWE1ZjRhMmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTT2Ac3uHmhGEdBSMImlcuDMfMmm0FUQf3MT o0G/2oH++19klQFoZ+vIiTxM9Sp5AohXMLgGlpezrArZ23FvSMrnRlVocmyxeYhw ibTeFo8NcN6oPvrgPwGHDgjhze70rbbBU0STbiWP5A+WslwCtu9+xBZEJ6Y3skur K4eWvkxXm4E18HbB3S5pbIuI10dtMv3PK1M+yLO6BaHCpkTAXixn5xfxGhX8VtOy SqLtMkuROopoHR1/UA1yYFZofp9KC6fzI7tctZRZOaTOOta8IWY9fG0rFhjFpDu1 QbvgO1iGG4qbTmZaEROro3vBYkDGWdi2Tpi24CUTdE2iGhQuKwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCe3lPGuDvKx67gT9cEWYYIufwq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83M2Yy ODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5OThjN2ZmOTgvNTg2M2YyY2QtNjlkMi0z M2JkLThhZjctZDFiY2IzODVhZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzNmMjg0N2QtNTNhYi00YWJiLWE1 ZTUtMjZiOTk4YzdmZjk4LzczZjI4NDdkLTUzYWItNGFiYi1hNWU1LTI2Yjk5OGM3 ZmY5OC5jcmwwHwYDVR0jBBgwFoAU4z9DS4XDJg2cVrC7yD+2Teg7fcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83M2YyODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5 OThjN2ZmOTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAGCQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQQTU+a6g+1PsV2CtIaSykBgUj2n3J8AahBgi0va76So+jUPedHJhpZYO LXss2EoIXlcvGpLOxy6EO3dwwbY5PlLZdxREPxKKpen4ITMHbeKIcq0j/NzscnHo VjMfjA+GAFnU31SOVl56QsOZ7K4Wkaj6TDySwhxZ3smDE44S1kA1bLOengXLa+mN ErAsgnwaTEPkAvdtGWl3bbKNES/TJ0+17zX68hjkZs74Kc7d1/VNQF0gWTNEoXeA wN2Pow3MnafRe0bTAptVafxNxzWLmYTuc7LtOyyowvPuzoyVyXp1lnU7UyjVugbq h4/GySfrnUUlXAYsLsAK5FpRlZS9NQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:55 2025 by rpki-client