$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa File: 490e40f9-36a1-3d80-91b1-b67f36065073.roa (raw, json) Hash identifier: kOgnENsi0UikYq5BCSQJUDWh5Q+TP7n5dcLsi8jjPlo= Subject key identifier: 1E:73:A7:AC:75:7E:95:FD:B3:65:E2:5E:A6:84:6B:0E:66:34:28:AB Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F43285848C9B0DEA8430192089268B4EF Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa Signing time: Thu 06 Feb 2025 02:00:39 +0000 ROA not before: Thu 06 Feb 2025 02:00:39 +0000 ROA not after: Wed 07 May 2025 01:00:39 +0000 asID: 54668 IP address blocks: 174.137.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:b0:de:a8:43:01:92:08:92:68:b4:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Feb 6 02:00:39 2025 GMT Not After : May 7 01:00:39 2025 GMT Subject: CN=4cf1fcd3-5a44-46c4-871d-1e40a37d7b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:d5:31:59:90:04:83:ca:06:91:bc:b3:5e: 8b:e8:13:dc:b3:e6:31:45:68:43:ae:7f:ea:b1:48: 76:5d:41:17:04:74:ed:c6:fe:b1:a2:19:af:57:fc: c9:61:5f:71:09:e6:39:b5:f2:a4:17:22:42:ec:2e: 3e:43:c7:af:9b:cd:3b:d3:71:de:24:d5:c7:b8:09: ca:3a:cc:49:a5:59:22:04:cd:60:3e:72:92:05:e7: 46:7d:63:e1:d2:00:2d:5a:f4:bb:05:19:be:f5:6e: d6:db:9a:00:1d:90:c6:b4:79:82:eb:6b:1c:81:ab: 5d:9c:e6:4c:0b:1f:98:c9:5e:d4:17:7c:9e:7b:76: 74:36:fd:f1:bc:2c:96:b8:eb:37:53:29:93:2f:3d: 21:5b:f2:63:63:28:72:cd:e6:d8:06:03:48:78:59: 05:c3:07:c9:33:e2:73:79:49:88:53:25:11:b5:47: 90:29:0d:9b:ad:74:ed:17:f0:e4:f6:6f:37:79:04: 4a:6b:a8:08:aa:e1:9e:97:e2:b6:5b:79:fd:03:8b: ae:72:cd:41:d9:3b:a2:cc:75:7c:68:08:99:9b:d6: ad:1e:a4:59:48:55:c7:49:cf:fd:0d:de:50:dd:a0: b8:ba:a3:11:34:00:b9:c2:1a:9d:0e:36:20:1c:99: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:73:A7:AC:75:7E:95:FD:B3:65:E2:5E:A6:84:6B:0E:66:34:28:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:e8:01:83:e4:20:92:18:f5:ad:46:f3:0f:bc:18:e1:89:77: a3:68:e4:fb:68:2a:74:48:29:70:c1:1a:be:2d:87:2d:91:7e: fe:87:2e:9a:80:84:00:9c:85:44:a0:f9:5a:a2:07:ea:1e:f4: c0:d5:5a:be:c3:05:5e:98:f1:bf:6f:9f:d0:fd:7b:d3:58:2e: 60:e5:94:18:3d:76:98:f5:99:31:e9:33:e2:b5:21:6c:a9:8a: b8:a4:f4:e2:fc:f5:80:7a:ae:9d:c9:96:bf:2c:21:61:39:d4: ce:5a:d7:2d:a9:46:2b:13:b4:5f:38:b7:26:09:0d:f7:7d:6c: e5:7a:4e:13:45:cd:0c:67:a7:2d:f0:8a:6d:ac:2d:63:f8:6b: f7:0f:40:99:f5:03:7a:86:90:58:c1:3d:4d:03:64:d5:5d:d5: 72:27:3e:6c:e6:c3:dd:88:c9:ed:8f:a2:6e:f1:1b:5c:a7:50: ed:b7:34:a9:2d:ed:ef:c0:e8:93:77:f1:10:fe:6e:59:a1:d2: 97:1b:20:bc:a2:a3:41:41:8e:fd:71:82:02:de:b7:ec:fe:f8: b4:3b:8d:7c:cf:86:5c:7f:dd:c0:e8:27:ef:ab:cd:7c:7a:2d: a1:22:c0:f1:d8:e2:17:fe:7d:98:ab:30:6d:33:e6:60:63:b3: cb:fe:ff:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJsN6oQwGSCJJotO8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk NGNmMWZjZDMtNWE0NC00NmM0LTg3MWQtMWU0MGEzN2Q3YjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HvVMVmQBIPKBpG8s16L6BPcs+YxRWhDrn/q sUh2XUEXBHTtxv6xohmvV/zJYV9xCeY5tfKkFyJC7C4+Q8evm80703HeJNXHuAnK OsxJpVkiBM1gPnKSBedGfWPh0gAtWvS7BRm+9W7W25oAHZDGtHmC62scgatdnOZM Cx+YyV7UF3yee3Z0Nv3xvCyWuOs3UymTLz0hW/JjYyhyzebYBgNIeFkFwwfJM+Jz eUmIUyURtUeQKQ2brXTtF/Dk9m83eQRKa6gIquGel+K2W3n9A4uucs1B2TuizHV8 aAiZm9atHqRZSFXHSc/9Dd5Q3aC4uqMRNAC5whqdDjYgHJlswwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5zp6x1fpX9s2XiXqaEaw5mNCirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvNDkwZTQwZjktMzZhMS0z ZDgwLTkxYjEtYjY3ZjM2MDY1MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrol4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7oAYPkIJIY9a1G8w+8GOGJd6No5PtoKnRIKXDBGr4thy2Rfv6HLpqA hACchUSg+VqiB+oe9MDVWr7DBV6Y8b9vn9D9e9NYLmDllBg9dpj1mTHpM+K1IWyp irik9OL89YB6rp3Jlr8sIWE51M5a1y2pRisTtF84tyYJDfd9bOV6ThNFzQxnpy3w im2sLWP4a/cPQJn1A3qGkFjBPU0DZNVd1XInPmzmw92Iye2Pom7xG1ynUO23NKkt 7e/A6JN38RD+blmh0pcbILyio0FBjv1xggLet+z++LQ7jXzPhlx/3cDoJ++rzXx6 LaEiwPHY4hf+fZirMG0z5mBjs8v+/5I= -----END CERTIFICATE-----Generated at Fri Mar 14 10:13:11 2025 by rpki-client