$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa File: 9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa (raw, json) Hash identifier: Ta63Rb3xKoD4OYQISkAeHWWyKS5b0IZPa3CEZdd0jwY= Subject key identifier: 8D:50:C2:F2:A1:B8:AA:DA:81:94:7D:36:96:16:9C:05:E5:55:CE:AC Certificate issuer: /CN=f7f8499b-2456-4be8-bad9-ced434198fa0 Certificate serial: 010D0C9F4328584897708FA02D35D526E4243E80 Authority key identifier: 35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa Signing time: Sun 19 Jan 2025 02:00:39 +0000 ROA not before: Sun 19 Jan 2025 02:00:39 +0000 ROA not after: Sat 19 Apr 2025 01:00:39 +0000 asID: 7896 IP address blocks: 144.216.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:70:8f:a0:2d:35:d5:26:e4:24:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7f8499b-2456-4be8-bad9-ced434198fa0 Validity Not Before: Jan 19 02:00:39 2025 GMT Not After : Apr 19 01:00:39 2025 GMT Subject: CN=c507dad4-07cc-471c-b7fd-6624e7804e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:77:2e:3d:bc:5b:d4:fd:11:13:3d:90:98: 4b:46:e9:ec:08:1c:46:cc:d6:33:21:bb:19:dd:be: 87:e9:2a:12:5b:a4:b6:d0:f5:98:a8:f2:b7:d1:7b: 54:21:1e:e9:c0:10:0e:ae:49:b9:24:15:c3:d7:6b: 7e:7c:4d:a4:6a:68:e8:d5:1f:62:8e:95:96:7d:a0: b0:fb:26:76:0a:d4:9a:4c:9a:c7:47:36:d7:f6:b3: 06:63:55:91:5e:df:83:05:04:ef:4b:61:a9:67:c1: c1:44:61:28:dc:7a:5d:1d:14:d8:4d:30:26:29:ed: 35:a8:0f:80:62:f0:58:56:06:d2:94:1a:f5:8b:69: 95:6b:05:60:1a:48:25:ba:39:46:fc:61:f4:f9:92: 6b:24:25:c2:7c:23:e7:0a:71:86:30:a4:4c:30:1d: 0e:9c:03:f7:be:05:f7:c5:59:11:c6:ff:d9:f9:b6: dc:95:7b:48:b8:22:27:d1:33:47:58:73:16:bc:03: ef:43:41:bf:a7:54:6a:ff:c4:6a:86:cc:60:5d:1b: f9:41:fa:14:77:cc:1b:c0:b0:55:1c:05:49:29:89: 87:c9:d8:a1:fc:7e:38:8f:1e:7d:d0:2c:11:77:d2: a7:1b:57:3b:b6:b6:2b:f4:f7:b1:70:be:b8:73:a8: a4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:50:C2:F2:A1:B8:AA:DA:81:94:7D:36:96:16:9C:05:E5:55:CE:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl X509v3 Authority Key Identifier: keyid:35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer sbgp-ipAddrBlock: critical IPv4: 144.216.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:93:0f:e4:f3:21:d0:89:1f:b1:46:79:08:32:a0:a5:6f:ed: b1:11:a6:59:b6:64:a6:23:53:51:44:e0:2f:c0:73:1a:c2:e6: 83:e7:6c:ce:53:4b:cc:e1:ed:ea:27:46:77:5b:70:34:a0:1f: c1:66:1c:cb:43:96:5d:e4:38:77:2c:85:d0:dd:8b:77:58:bb: 62:6b:83:0e:b0:12:6d:92:c3:14:d8:91:3f:1a:fb:03:ab:53: 3d:75:e9:7c:d7:b9:32:01:56:c2:27:38:76:15:fa:28:ce:9e: fa:3f:87:d1:30:62:97:81:d7:15:d8:88:d8:b5:5a:b1:86:40: f7:65:56:61:7c:4d:7f:d8:0f:b6:70:51:ea:dc:4c:0c:38:ee: 76:26:7c:61:5a:16:c2:18:ea:aa:4e:7b:ff:fa:1e:d4:e6:7c: 60:1d:64:14:11:31:23:18:22:d2:fa:ac:60:3d:c3:0b:1a:a8: 18:1b:85:c4:ae:82:b8:6a:44:f8:2c:ac:57:c7:35:9a:46:57: 53:09:89:1b:98:b5:5c:fc:b4:51:a4:da:b1:a0:60:e4:e7:3a: 9e:05:f9:b8:03:82:9b:51:ac:d8:f6:2c:d5:9d:86:2a:c3:b4: 23:72:bf:75:1d:e0:0d:b3:67:f8:2c:6e:d7:d2:2e:7d:ab:b4: 98:6f:41:15 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiXcI+gLTXVJuQkPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdmODQ5OWItMjQ1Ni00YmU4LWJhZDktY2VkNDM0MTk4 ZmEwMB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk YzUwN2RhZDQtMDdjYy00NzFjLWI3ZmQtNjYyNGU3ODA0ZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0J3Lj28W9T9ERM9kJhLRunsCBxGzNYzIbsZ 3b6H6SoSW6S20PWYqPK30XtUIR7pwBAOrkm5JBXD12t+fE2kamjo1R9ijpWWfaCw +yZ2CtSaTJrHRzbX9rMGY1WRXt+DBQTvS2GpZ8HBRGEo3HpdHRTYTTAmKe01qA+A YvBYVgbSlBr1i2mVawVgGkglujlG/GH0+ZJrJCXCfCPnCnGGMKRMMB0OnAP3vgX3 xVkRxv/Z+bbclXtIuCIn0TNHWHMWvAPvQ0G/p1Rq/8RqhsxgXRv5QfoUd8wbwLBV HAVJKYmHydih/H44jx590CwRd9KnG1c7trYr9PexcL64c6ikMwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI1QwvKhuKragZR9NpYWnAXlVc6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mN2Y4 NDk5Yi0yNDU2LTRiZTgtYmFkOS1jZWQ0MzQxOThmYTAvOWRlYWZhN2MtZTk3NC0z ZmNiLWJkNmItMTRmMmEwYjY2YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjdmODQ5OWItMjQ1Ni00YmU4LWJh ZDktY2VkNDM0MTk4ZmEwL2Y3Zjg0OTliLTI0NTYtNGJlOC1iYWQ5LWNlZDQzNDE5 OGZhMC5jcmwwHwYDVR0jBBgwFoAUNY08X4pzlnRC8WBNZVfaIPilZJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mN2Y4NDk5Yi0yNDU2LTRiZTgtYmFkOS1jZWQ0 MzQxOThmYTAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkNgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEJMP5PMh0IkfsUZ5CDKgpW/tsRGmWbZkpiNTUUTgL8BzGsLmg+dszlNL zOHt6idGd1twNKAfwWYcy0OWXeQ4dyyF0N2Ld1i7YmuDDrASbZLDFNiRPxr7A6tT PXXpfNe5MgFWwic4dhX6KM6e+j+H0TBil4HXFdiI2LVasYZA92VWYXxNf9gPtnBR 6txMDDjudiZ8YVoWwhjqqk57//oe1OZ8YB1kFBExIxgi0vqsYD3DCxqoGBuFxK6C uGpE+CysV8c1mkZXUwmJG5i1XPy0UaTasaBg5Oc6ngX5uAOCm1Gs2PYs1Z2GKsO0 I3K/dR3gDbNn+Cxu19Iufau0mG9BFQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:16 2025 by rpki-client