$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ce7fbd7a-a0d6-3051-9091-597749aa0f4e.roa File: ce7fbd7a-a0d6-3051-9091-597749aa0f4e.roa (raw, json) Hash identifier: Abp7++7riMdTqnoWxVgTgwPsC9Kq5/G49FKjy+AuNEI= Subject key identifier: 05:6A:62:1F:3F:97:61:71:62:C1:FA:3A:F2:D0:76:9F:BF:03:8E:14 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F43285848530AF2F413E5029C41236D00 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ce7fbd7a-a0d6-3051-9091-597749aa0f4e.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 15313 IP address blocks: 150.252.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:f2:f4:13:e5:02:9c:41:23:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=8709a411-69b2-40f5-9dc9-766f0c6399d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5b:b8:60:52:54:73:11:5e:96:2c:7f:35:5d: 98:79:4a:f4:59:0e:2c:5d:26:d5:27:6a:ba:0b:92: 1a:5f:e6:d3:09:97:e1:df:49:a3:9a:5a:8b:d9:3d: ef:6e:1b:b7:22:14:16:79:0a:03:9e:06:1d:e4:9e: 00:2d:74:01:d9:46:5d:e5:ba:97:bf:d8:10:6a:5f: 70:a8:d5:f8:39:87:5f:99:09:60:c0:ce:80:3b:aa: ad:52:f0:30:bb:8e:24:6b:d1:63:47:42:fc:12:e2: 64:65:bf:30:92:db:4a:c7:b3:7d:95:63:f0:54:a8: 9f:04:bb:19:d0:0d:d6:ae:fc:69:47:7b:b0:bf:28: 1c:fc:de:e8:91:ab:a2:ea:e7:36:71:1a:d1:31:da: c1:25:54:a3:9f:4a:7e:1f:2c:c5:48:6a:2f:d3:e5: a3:ab:7b:6c:88:3e:3e:ed:3b:a6:c9:d1:68:d1:bb: 25:27:81:41:8f:e5:29:4d:4c:38:46:8f:a2:61:bd: 2c:c1:52:e4:c2:29:39:2e:c4:fb:75:93:33:f0:af: b7:31:04:64:87:f9:d9:6c:b1:ea:11:d4:d0:fc:92: a4:49:fa:2b:3a:8d:30:5a:51:6d:0f:87:45:8d:93: 7f:04:eb:c4:70:8d:ba:06:e7:ea:51:99:c0:42:99: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6A:62:1F:3F:97:61:71:62:C1:FA:3A:F2:D0:76:9F:BF:03:8E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ce7fbd7a-a0d6-3051-9091-597749aa0f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:98:da:cc:37:8c:50:25:75:ac:b0:c1:73:50:4a:8c:2c:11: 81:70:38:60:d3:66:ec:24:57:e4:60:83:d5:59:c1:93:84:a1: e2:dd:cf:31:2d:5d:49:77:5b:d1:03:bc:fa:b2:e5:17:35:9a: 89:d0:35:3e:47:d6:86:e0:24:54:3c:f4:32:69:1e:f1:44:ae: bf:de:35:41:3a:a1:2e:e2:7a:75:47:24:79:64:d5:15:a6:4a: 61:88:16:fb:cd:64:03:d9:93:7a:31:79:d9:ed:a7:a9:4b:13: fa:02:dd:af:33:b4:57:aa:ee:d3:b7:63:52:17:8f:8e:fe:c5: ec:e8:2c:20:d4:d6:c2:f3:70:5a:f0:b7:c3:52:c0:c6:d5:17: 69:73:5b:92:7f:9b:8a:c8:b5:32:c7:a2:4b:cd:71:0a:24:15: 15:fc:78:49:af:af:35:92:b6:c4:93:ea:ef:1a:f3:5c:64:38: 3b:b9:b8:40:95:9a:88:53:ef:06:47:c3:0d:c4:a6:0a:b8:ec: fa:01:a1:21:1f:c6:db:4a:26:73:a0:6d:5a:72:3e:a1:01:e2: 7e:c0:11:d6:5f:9b:6d:c1:4c:44:2d:7e:6f:9e:9c:80:c6:7c: 08:34:1a:cf:7c:5d:22:74:d6:a4:76:6a:8d:64:68:3e:68:84: 6a:c7:41:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCvL0E+UCnEEjbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODcwOWE0MTEtNjliMi00MGY1LTlkYzktNzY2ZjBjNjM5OWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFu4YFJUcxFelix/NV2YeUr0WQ4sXSbVJ2q6 C5IaX+bTCZfh30mjmlqL2T3vbhu3IhQWeQoDngYd5J4ALXQB2UZd5bqXv9gQal9w qNX4OYdfmQlgwM6AO6qtUvAwu44ka9FjR0L8EuJkZb8wkttKx7N9lWPwVKifBLsZ 0A3WrvxpR3uwvygc/N7okaui6uc2cRrRMdrBJVSjn0p+HyzFSGov0+Wjq3tsiD4+ 7TumydFo0bslJ4FBj+UpTUw4Ro+iYb0swVLkwik5LsT7dZMz8K+3MQRkh/nZbLHq EdTQ/JKkSforOo0wWlFtD4dFjZN/BOvEcI26BufqUZnAQpmdyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVqYh8/l2FxYsH6OvLQdp+/A44UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvY2U3ZmJkN2EtYTBkNi0z MDUxLTkwOTEtNTk3NzQ5YWEwZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlvzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCY2sw3jFAldaywwXNQSowsEYFwOGDTZuwkV+Rgg9VZwZOEoeLdzzEt XUl3W9EDvPqy5Rc1monQNT5H1obgJFQ89DJpHvFErr/eNUE6oS7ienVHJHlk1RWm SmGIFvvNZAPZk3oxedntp6lLE/oC3a8ztFeq7tO3Y1IXj47+xezoLCDU1sLzcFrw t8NSwMbVF2lzW5J/m4rItTLHokvNcQokFRX8eEmvrzWStsST6u8a81xkODu5uECV mohT7wZHww3Epgq47PoBoSEfxttKJnOgbVpyPqEB4n7AEdZfm23BTEQtfm+enIDG fAg0Gs98XSJ01qR2ao1kaD5ohGrHQQE= -----END CERTIFICATE-----Generated at Fri Mar 14 09:05:10 2025 by rpki-client