$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa File: 154594e0-ee8d-31de-8d13-6d107201791f.roa (raw, json) Hash identifier: +kWiCZiFlWnB4htiPLuds9JAEUWfrS2hGJne8k/V/cU= Subject key identifier: 43:E0:C5:22:E3:34:A6:5B:FB:7A:6A:69:27:22:E0:DA:D2:87:7C:98 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F432858486960680C0F719F536E12A600 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 393885 IP address blocks: 64.71.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:68:0c:0f:71:9f:53:6e:12:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=738339f9-756d-4f09-8ccf-9e250abb01c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:99:da:5e:f4:62:8e:4b:44:99:13:ed:a6:0b: c1:f8:c3:75:8a:f9:c5:5a:c2:04:9e:73:06:4f:22: 55:39:d7:ef:0c:73:58:27:b3:d9:5b:26:49:b4:d7: 6b:c2:aa:c0:e5:96:bb:77:6e:aa:73:58:13:21:b7: 5c:57:0b:73:d4:a0:27:99:18:bc:43:57:c2:33:32: 4f:94:62:54:09:03:ae:f0:39:f4:6d:fc:fd:5f:50: 46:f8:c1:10:9e:a1:38:ff:7f:cf:4a:49:47:dc:a5: 90:b4:a4:1f:e5:ae:fe:33:8c:4f:ae:70:b1:ec:50: a1:b5:5a:2c:c0:ca:8e:4a:c5:d4:92:76:9e:fd:b9: 1b:83:a5:07:ee:d9:29:da:90:9d:62:f7:18:8a:75: bf:16:19:56:23:7b:8f:25:53:bf:99:53:24:3c:b3: db:79:9c:f3:81:34:94:32:66:fb:e9:9a:81:76:fa: f6:29:87:c5:d3:0e:41:26:69:68:56:9b:f1:9b:5c: 57:c6:f2:b8:59:01:92:e5:23:2d:72:c4:71:ee:d5: 91:ad:30:fd:62:20:ce:f5:c2:c6:70:6a:9f:ec:f9: 5a:3e:fc:80:a7:2a:78:20:33:e8:a7:7a:e0:01:2f: f9:79:89:8e:ad:7a:4f:3b:a1:95:be:41:2a:00:d0: 94:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E0:C5:22:E3:34:A6:5B:FB:7A:6A:69:27:22:E0:DA:D2:87:7C:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv4: 64.71.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e3:88:fb:08:57:fa:66:64:51:32:a3:57:2c:cc:00:52:e8: b9:15:89:6c:2e:63:71:9a:64:20:27:4e:a5:6c:01:66:b7:cf: 22:a6:82:be:9b:ce:bc:03:83:70:83:dc:98:8f:2b:f3:04:21: 54:d8:ca:9a:ce:71:aa:21:67:a1:c7:f6:07:9d:79:f3:50:32: a2:4f:d6:13:26:f6:2f:bc:61:3b:8c:e7:49:35:5b:d0:01:c6: 61:eb:78:40:3d:b2:6f:9e:bb:c1:92:8f:78:18:0a:7c:64:7d: 9a:ce:e4:e5:75:05:9f:6e:c3:1a:34:ab:b6:e8:df:18:43:cf: 08:82:eb:97:a9:a8:32:99:e4:81:ac:b4:ef:15:e1:32:78:58: 98:5e:ab:2b:42:4c:39:76:59:f4:97:2e:50:21:35:37:86:e3: 2b:7d:77:d0:04:bc:cb:8b:48:25:08:c2:9f:26:8d:e8:e0:89: 7e:d4:c0:96:69:ce:c5:8b:fe:81:43:af:d3:1e:0f:de:50:c2: 7e:b1:42:e0:a4:34:be:5d:be:66:fd:f9:22:6c:77:a5:c2:a6: 01:b8:5b:8c:dc:41:05:f8:2d:db:57:c9:3b:db:d5:f2:12:3d: 8c:6a:67:09:f4:52:ff:9d:fa:4b:ec:3e:21:23:6c:18:cf:ff: 91:8d:bb:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYGgMD3GfU24SpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk NzM4MzM5ZjktNzU2ZC00ZjA5LThjY2YtOWUyNTBhYmIwMWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JnaXvRijktEmRPtpgvB+MN1ivnFWsIEnnMG TyJVOdfvDHNYJ7PZWyZJtNdrwqrA5Za7d26qc1gTIbdcVwtz1KAnmRi8Q1fCMzJP lGJUCQOu8Dn0bfz9X1BG+MEQnqE4/3/PSklH3KWQtKQf5a7+M4xPrnCx7FChtVos wMqOSsXUknae/bkbg6UH7tkp2pCdYvcYinW/FhlWI3uPJVO/mVMkPLPbeZzzgTSU Mmb76ZqBdvr2KYfF0w5BJmloVpvxm1xXxvK4WQGS5SMtcsRx7tWRrTD9YiDO9cLG cGqf7PlaPvyApyp4IDPop3rgAS/5eYmOrXpPO6GVvkEqANCUvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPgxSLjNKZb+3pqaSci4NrSh3yYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvMTU0NTk0ZTAtZWU4ZC0z MWRlLThkMTMtNmQxMDcyMDE3OTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQEfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjjiPsIV/pmZFEyo1cszABS6LkViWwuY3GaZCAnTqVsAWa3zyKmgr6b zrwDg3CD3JiPK/MEIVTYyprOcaohZ6HH9gedefNQMqJP1hMm9i+8YTuM50k1W9AB xmHreEA9sm+eu8GSj3gYCnxkfZrO5OV1BZ9uwxo0q7bo3xhDzwiC65epqDKZ5IGs tO8V4TJ4WJheqytCTDl2WfSXLlAhNTeG4yt9d9AEvMuLSCUIwp8mjejgiX7UwJZp zsWL/oFDr9MeD95Qwn6xQuCkNL5dvmb9+SJsd6XCpgG4W4zcQQX4LdtXyTvb1fIS PYxqZwn0Uv+d+kvsPiEjbBjP/5GNuwM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:46 2025 by rpki-client