$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/fa5c0192-914d-3a10-95c0-c4d44e1dc5d3.roa File: fa5c0192-914d-3a10-95c0-c4d44e1dc5d3.roa (raw, json) Hash identifier: MHiKWVMzQW4Ar6YopYK0f6UJCmF8PhmYO3KGHdmcj5Y= Subject key identifier: 6E:7F:4B:90:E9:5E:55:7F:9F:2F:16:27:2B:5B:E8:9A:8C:24:12:22 Certificate issuer: /CN=f952e113-8fae-44f8-9d98-a496f4e2fdc6 Certificate serial: 010D0C9F43285848530AECF191281A0EFD5C5400 Authority key identifier: 6A:B0:45:6B:89:75:14:9C:61:DD:E1:81:6E:F1:23:F2:97:8A:E7:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/fa5c0192-914d-3a10-95c0-c4d44e1dc5d3.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 11714 IP address blocks: 204.234.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/f952e113-8fae-44f8-9d98-a496f4e2fdc6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/f952e113-8fae-44f8-9d98-a496f4e2fdc6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:ec:f1:91:28:1a:0e:fd:5c:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952e113-8fae-44f8-9d98-a496f4e2fdc6 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=aa6596c0-2876-4800-8d98-cbb1d00e817d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:09:da:1e:da:c7:db:47:2a:85:d9:ae:96: d6:f0:df:6e:00:43:be:a5:f9:f7:e5:c3:ba:fc:3d: d4:de:98:81:84:03:f9:85:69:e9:8a:cd:00:f9:53: e4:40:e3:7f:28:62:31:fb:f4:fd:9f:4f:b1:cd:7d: a2:6e:5f:bd:42:d0:53:0d:39:92:e2:cc:c2:bb:42: 66:84:f7:d2:ae:a6:d9:1e:ec:b8:2b:b6:40:a8:cb: ff:8f:83:d2:b7:e4:20:81:ed:06:45:80:42:ea:75: b4:ba:a1:ad:5c:0d:cb:82:9c:ae:6a:3d:4a:64:20: 72:83:2d:e2:3f:bf:02:2c:73:6c:ff:8f:1d:c5:f6: c4:91:f0:8e:55:1d:eb:99:e7:14:9d:91:de:20:7a: 58:5d:00:01:92:bf:22:cb:cb:59:da:83:b6:e2:ec: 62:2c:07:71:3f:2b:4e:29:40:e5:eb:88:48:6b:64: ff:90:9e:38:2d:0b:d5:6a:bb:7b:3d:db:a6:65:47: a3:90:97:01:0e:0e:9a:4b:40:4e:86:9e:b2:a4:87: 8e:98:d2:fe:55:ec:63:e0:bb:59:2d:f1:24:eb:e5: 23:ac:9b:aa:68:31:84:9f:81:37:f1:c8:fa:91:28: 09:3c:d1:b1:f5:62:b9:9b:88:73:ab:90:fb:91:db: 7f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7F:4B:90:E9:5E:55:7F:9F:2F:16:27:2B:5B:E8:9A:8C:24:12:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/fa5c0192-914d-3a10-95c0-c4d44e1dc5d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/f952e113-8fae-44f8-9d98-a496f4e2fdc6.crl X509v3 Authority Key Identifier: keyid:6A:B0:45:6B:89:75:14:9C:61:DD:E1:81:6E:F1:23:F2:97:8A:E7:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer sbgp-ipAddrBlock: critical IPv4: 204.234.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:cc:28:9d:19:c8:fb:79:82:41:3c:26:e2:22:73:40:71:a2: 3d:18:17:51:55:08:2c:5e:d8:7c:2c:af:89:1d:eb:a9:9c:d9: 31:a8:58:31:0a:ae:ce:31:b5:6b:d0:ca:41:5f:5a:d0:05:df: 77:e8:49:25:56:7a:f2:18:0b:fa:0e:c4:f8:3d:1c:86:54:b9: 60:f2:9e:f4:b0:d3:03:48:f4:e8:83:29:08:65:9a:0d:e9:db: e6:bf:c2:8b:b5:8f:f2:f2:87:b6:fb:b2:5d:cf:b7:96:ea:ab: 29:d4:1b:c7:4c:8f:dd:7d:09:6e:bf:54:97:2a:1f:43:0a:3a: 08:14:4f:22:4e:43:2d:b6:8c:36:9c:05:67:f3:22:ad:e2:48: a5:b8:d2:b8:27:0d:8f:a0:09:4c:83:21:06:d6:24:80:3b:e5: cc:5f:aa:f2:d7:56:01:9d:34:06:6d:41:6f:79:4a:b6:5f:8f: b6:3e:33:0b:d1:d5:3a:a2:b1:ac:c4:d8:4e:09:a9:5b:58:a8: 84:73:13:37:f8:4c:42:29:60:66:06:d6:aa:57:83:ce:3b:e9: 16:89:87:de:ff:c1:f3:8b:01:56:b6:e1:1e:26:0c:97:c4:4f: 91:fa:a0:9b:29:da:cd:de:23:0f:36:d9:e3:80:ad:24:26:62: 3e:c4:0b:bf -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhTCuzxkSgaDv1cVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmUxMTMtOGZhZS00NGY4LTlkOTgtYTQ5NmY0ZTJm ZGM2MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk YWE2NTk2YzAtMjg3Ni00ODAwLThkOTgtY2JiMWQwMGU4MTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE8J2h7ax9tHKoXZrpbW8N9uAEO+pfn35cO6 /D3U3piBhAP5hWnpis0A+VPkQON/KGIx+/T9n0+xzX2ibl+9QtBTDTmS4szCu0Jm hPfSrqbZHuy4K7ZAqMv/j4PSt+Qgge0GRYBC6nW0uqGtXA3Lgpyuaj1KZCBygy3i P78CLHNs/48dxfbEkfCOVR3rmecUnZHeIHpYXQABkr8iy8tZ2oO24uxiLAdxPytO KUDl64hIa2T/kJ44LQvVart7PdumZUejkJcBDg6aS0BOhp6ypIeOmNL+Vexj4LtZ LfEk6+UjrJuqaDGEn4E38cj6kSgJPNGx9WK5m4hzq5D7kdt/xQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFG5/S5DpXlV/ny8WJytb6JqMJBIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mOTUy ZTExMy04ZmFlLTQ0ZjgtOWQ5OC1hNDk2ZjRlMmZkYzYvZmE1YzAxOTItOTE0ZC0z YTEwLTk1YzAtYzRkNDRlMWRjNWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjk1MmUxMTMtOGZhZS00NGY4LTlk OTgtYTQ5NmY0ZTJmZGM2L2Y5NTJlMTEzLThmYWUtNDRmOC05ZDk4LWE0OTZmNGUy ZmRjNi5jcmwwHwYDVR0jBBgwFoAUarBFa4l1FJxh3eGBbvEj8peK5/EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mOTUyZTExMy04ZmFlLTQ0ZjgtOWQ5OC1hNDk2 ZjRlMmZkYzYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzOowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALcwonRnI+3mCQTwm4iJzQHGiPRgXUVUILF7YfCyviR3rqZzZMahYMQqu zjG1a9DKQV9a0AXfd+hJJVZ68hgL+g7E+D0chlS5YPKe9LDTA0j06IMpCGWaDenb 5r/Ci7WP8vKHtvuyXc+3luqrKdQbx0yP3X0Jbr9UlyofQwo6CBRPIk5DLbaMNpwF Z/MireJIpbjSuCcNj6AJTIMhBtYkgDvlzF+q8tdWAZ00Bm1Bb3lKtl+Ptj4zC9HV OqKxrMTYTgmpW1iohHMTN/hMQilgZgbWqleDzjvpFomH3v/B84sBVrbhHiYMl8RP kfqgmynazd4jDzbZ44CtJCZiPsQLvw== -----END CERTIFICATE-----Generated at Fri Mar 14 08:11:05 2025 by rpki-client