$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/3184777e-25fd-379a-a23f-0b1444886974.roa File: 3184777e-25fd-379a-a23f-0b1444886974.roa (raw, json) Hash identifier: xLmB4EsXCV3H8AO6AgJGz7GjTx9m/QZ9pGY1pyicLNI= Subject key identifier: 7C:04:DE:DC:5D:74:F9:22:83:0B:3E:C0:41:47:3A:7B:DB:5F:58:E9 Certificate issuer: /CN=f521e4a2-fbd7-4291-9be0-2ea619a18c7e Certificate serial: 010D0C9F432858488220F5FF9F14CE5CC07B3700 Authority key identifier: DB:95:1A:DD:34:32:85:18:8C:F4:9F:23:A5:19:6E:D5:2D:37:A3:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/3184777e-25fd-379a-a23f-0b1444886974.roa Signing time: Sat 11 Jan 2025 10:48:23 +0000 ROA not before: Sat 11 Jan 2025 10:48:23 +0000 ROA not after: Fri 11 Apr 2025 09:48:23 +0000 asID: 30201 IP address blocks: 170.205.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:20:f5:ff:9f:14:ce:5c:c0:7b:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f521e4a2-fbd7-4291-9be0-2ea619a18c7e Validity Not Before: Jan 11 10:48:23 2025 GMT Not After : Apr 11 09:48:23 2025 GMT Subject: CN=e69f25f2-212b-4c2c-aa7e-f31a758b212f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:20:55:e1:93:4a:c2:54:a8:0d:32:fb:8a:ba: c4:8e:83:8d:f7:8e:a4:03:56:c4:51:bd:6f:2c:b9: 79:f9:70:83:ac:ec:07:1e:c0:61:9e:7e:ba:45:e1: 12:ef:b5:44:97:ce:b1:8a:80:dc:fe:0d:b7:a8:5c: 89:fb:31:77:c8:f7:d5:f8:9d:77:81:da:99:3f:80: 3c:5b:db:52:93:a5:61:bc:4d:04:49:58:f9:3c:3c: d4:e7:f1:11:cc:43:74:f2:08:09:e0:0e:77:82:87: 1b:23:31:8b:66:30:00:b6:5f:b2:1f:f1:56:db:42: 28:7a:d2:e6:fa:d1:8d:50:88:fe:48:53:7d:08:71: 2a:a8:82:dc:60:9c:88:ac:31:b8:6b:eb:2f:42:4f: df:9e:5e:54:26:58:e0:98:9f:b7:c9:3f:4b:b0:2e: 04:0e:7d:98:34:81:9a:f9:04:c0:3d:71:44:89:6c: ea:93:be:6b:9a:ca:a8:51:63:a8:27:80:e2:40:9f: cf:54:47:c4:47:56:3e:73:26:8c:49:77:67:c2:c9: ae:9e:2e:28:17:77:30:eb:a9:3e:b0:b8:42:b3:31: ee:b2:16:8b:aa:35:17:7c:d4:22:fb:7a:92:b4:89: 11:57:f4:90:49:0b:a5:17:c0:a0:8e:75:6a:70:fe: e7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:04:DE:DC:5D:74:F9:22:83:0B:3E:C0:41:47:3A:7B:DB:5F:58:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/3184777e-25fd-379a-a23f-0b1444886974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.crl X509v3 Authority Key Identifier: keyid:DB:95:1A:DD:34:32:85:18:8C:F4:9F:23:A5:19:6E:D5:2D:37:A3:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f521e4a2-fbd7-4291-9be0-2ea619a18c7e.cer sbgp-ipAddrBlock: critical IPv4: 170.205.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:b7:aa:91:04:84:bb:1a:fe:31:bb:30:cb:c6:ab:01:ac:57: 57:30:90:59:97:42:91:dd:85:d1:21:89:1a:0f:59:0c:ed:20: 67:ae:38:08:41:6e:ae:2b:8b:11:3b:2b:a1:cc:b3:14:6c:00: 20:ca:81:21:5e:ad:44:05:7e:74:94:04:d8:34:89:71:ed:7a: e1:d6:94:df:cb:72:32:3b:d9:04:10:33:62:b7:b8:af:7a:6b: 66:d7:bd:43:62:09:c9:63:76:28:1c:b3:a8:51:be:9d:2d:c3: ed:56:7a:25:6e:d6:4b:ff:aa:79:4a:e8:5b:0e:15:fc:cd:28: d0:25:4e:d1:77:1e:6a:38:f8:9f:6a:8d:5c:fb:b4:38:ac:e0: 48:a6:b8:ea:0f:7f:4e:3b:d0:2a:9c:66:91:9c:ed:63:ef:1d: 5d:e1:34:62:cc:e9:3c:81:d6:e5:e1:86:63:ab:77:aa:71:66: 8c:33:9b:22:01:47:d3:18:d0:63:76:e9:a7:39:37:21:ea:78: 3b:af:4c:eb:5a:d3:ac:ed:70:97:a0:60:45:cf:54:a0:d4:1d: 2e:9a:01:ab:6d:c6:14:57:90:48:bb:63:9a:49:72:83:a4:ee: ae:7f:e0:59:e4:4c:17:de:df:81:3c:9c:0a:54:de:80:13:d9: 45:79:3f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCIPX/nxTOXMB7NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUyMWU0YTItZmJkNy00MjkxLTliZTAtMmVhNjE5YTE4 YzdlMB4XDTI1MDExMTEwNDgyM1oXDTI1MDQxMTA5NDgyM1owLzEtMCsGA1UEAxMk ZTY5ZjI1ZjItMjEyYi00YzJjLWFhN2UtZjMxYTc1OGIyMTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyBV4ZNKwlSoDTL7irrEjoON946kA1bEUb1v LLl5+XCDrOwHHsBhnn66ReES77VEl86xioDc/g23qFyJ+zF3yPfV+J13gdqZP4A8 W9tSk6VhvE0ESVj5PDzU5/ERzEN08ggJ4A53gocbIzGLZjAAtl+yH/FW20IoetLm +tGNUIj+SFN9CHEqqILcYJyIrDG4a+svQk/fnl5UJljgmJ+3yT9LsC4EDn2YNIGa +QTAPXFEiWzqk75rmsqoUWOoJ4DiQJ/PVEfER1Y+cyaMSXdnwsmuni4oF3cw66k+ sLhCszHushaLqjUXfNQi+3qStIkRV/SQSQulF8CgjnVqcP7n4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwE3txddPkigws+wEFHOnvbX1jpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNTIx ZTRhMi1mYmQ3LTQyOTEtOWJlMC0yZWE2MTlhMThjN2UvMzE4NDc3N2UtMjVmZC0z NzlhLWEyM2YtMGIxNDQ0ODg2OTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjUyMWU0YTItZmJkNy00MjkxLTli ZTAtMmVhNjE5YTE4YzdlL2Y1MjFlNGEyLWZiZDctNDI5MS05YmUwLTJlYTYxOWEx OGM3ZS5jcmwwHwYDVR0jBBgwFoAU25Ua3TQyhRiM9J8jpRlu1S03o6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNTIxZTRhMi1mYmQ3LTQyOTEtOWJlMC0yZWE2 MTlhMThjN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqs0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJO3qpEEhLsa/jG7MMvGqwGsV1cwkFmXQpHdhdEhiRoPWQztIGeuOAhB bq4rixE7K6HMsxRsACDKgSFerUQFfnSUBNg0iXHteuHWlN/LcjI72QQQM2K3uK96 a2bXvUNiCcljdigcs6hRvp0tw+1WeiVu1kv/qnlK6FsOFfzNKNAlTtF3Hmo4+J9q jVz7tDis4EimuOoPf0470CqcZpGc7WPvHV3hNGLM6TyB1uXhhmOrd6pxZowzmyIB R9MY0GN26ac5NyHqeDuvTOta06ztcJegYEXPVKDUHS6aAattxhRXkEi7Y5pJcoOk 7q5/4FnkTBfe34E8nApU3oAT2UV5P0A= -----END CERTIFICATE-----Generated at Sat Feb 22 03:57:55 2025 by rpki-client