$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa File: ae548fa2-acd0-3aa2-9463-b60c668965c8.roa (raw, json) Hash identifier: VmR2DyD/6Wz1mB1frbZsWRZYgCFGKq/Ib1H3Q3CgfNU= Subject key identifier: 88:D6:11:12:6B:F1:A3:E2:E4:32:54:BF:4E:38:B9:D8:7B:08:C5:68 Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F43285848C9B0DEEDA7866562FC6DC980 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa Signing time: Thu 06 Feb 2025 02:00:39 +0000 ROA not before: Thu 06 Feb 2025 02:00:39 +0000 ROA not after: Wed 07 May 2025 01:00:39 +0000 asID: 40495 IP address blocks: 174.137.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:b0:de:ed:a7:86:65:62:fc:6d:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Feb 6 02:00:39 2025 GMT Not After : May 7 01:00:39 2025 GMT Subject: CN=373d8f88-9491-4efc-943c-fd7269b91bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bb:01:87:56:cf:a2:30:63:97:e7:fc:d5:dd: 33:1a:af:ca:00:8a:74:0e:7b:ae:1b:d0:48:7f:8c: ab:4b:31:9b:43:93:86:3d:54:7b:f1:0f:4e:03:3a: 64:de:00:1e:69:eb:91:10:12:f1:8a:d7:6f:ad:fb: 4d:4e:9f:29:bb:e0:fe:93:15:5d:15:6d:87:47:35: 2a:87:68:ed:00:11:0a:d5:6b:ba:22:3d:e2:f2:fb: c8:d1:67:c4:73:3a:cc:1e:c5:20:e4:70:d3:ca:73: 65:5c:a6:cf:5c:9a:69:c6:6b:31:7f:43:81:1c:d6: 9b:c1:95:d0:9d:2e:aa:23:d6:32:13:79:88:86:dd: da:4c:49:f8:c8:46:11:c3:75:aa:9c:00:0c:bf:78: 20:cc:7f:74:fc:7e:ca:ef:a5:67:6a:28:8b:9e:c0: e5:90:55:ac:4d:e6:b6:51:3a:a3:c2:a2:16:5f:02: 66:9c:37:ab:78:5a:8f:c7:f2:b6:eb:af:61:22:04: ff:1f:7b:7d:04:00:e5:c2:2f:07:36:64:29:3a:4f: 23:4f:e3:21:f2:d8:17:84:7a:cb:39:e7:20:af:5d: d1:41:24:fb:1c:d0:9b:c4:74:0c:d2:67:4f:50:3a: 95:a9:9a:a9:19:41:8a:ac:20:0f:35:57:32:1b:c8: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D6:11:12:6B:F1:A3:E2:E4:32:54:BF:4E:38:B9:D8:7B:08:C5:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:28:59:93:82:68:73:1f:af:55:3b:b5:0e:b6:00:85:10:4a: b6:0d:53:09:55:86:47:17:bb:2c:97:7b:f9:59:63:5f:59:1e: a4:f3:75:94:26:94:54:81:02:83:36:0d:60:fa:76:6b:b6:bb: f6:bd:08:fe:60:9b:55:b1:07:4b:a1:26:7f:1b:fd:03:08:14: 75:01:a1:2f:6b:eb:c8:67:6f:d2:24:bf:c8:d7:e6:38:61:a3: 33:4f:26:cf:53:65:de:24:2c:1c:d6:ab:64:4c:7d:45:0f:25: 4b:ae:e3:11:5d:94:3b:87:0a:36:9e:27:02:68:67:95:d2:df: d6:4a:37:c9:ef:3f:b0:09:f1:73:d4:db:23:9c:8a:49:dc:c3: 1c:36:54:d5:2c:12:fc:23:69:21:70:5f:43:50:14:16:3d:19: 1d:b3:cb:a2:32:dc:6c:bf:9c:b8:f5:57:68:2a:f5:88:1a:7c: 4e:37:ad:6f:e6:90:a2:3e:32:ad:03:1e:b5:a0:a5:02:42:b5: d3:a9:3c:f9:88:09:15:75:ab:10:ad:20:d5:c8:f8:9a:b0:e7: 2e:0e:08:21:4d:99:72:cf:03:36:8b:d6:57:03:5e:fa:d9:3c: 24:ed:ee:ff:aa:3f:58:59:79:c1:c3:fd:5d:47:b6:24:f8:aa: b9:71:10:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJsN7tp4ZlYvxtyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk MzczZDhmODgtOTQ5MS00ZWZjLTk0M2MtZmQ3MjY5YjkxYmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrsBh1bPojBjl+f81d0zGq/KAIp0DnuuG9BI f4yrSzGbQ5OGPVR78Q9OAzpk3gAeaeuREBLxitdvrftNTp8pu+D+kxVdFW2HRzUq h2jtABEK1Wu6Ij3i8vvI0WfEczrMHsUg5HDTynNlXKbPXJppxmsxf0OBHNabwZXQ nS6qI9YyE3mIht3aTEn4yEYRw3WqnAAMv3ggzH90/H7K76VnaiiLnsDlkFWsTea2 UTqjwqIWXwJmnDereFqPx/K2669hIgT/H3t9BADlwi8HNmQpOk8jT+Mh8tgXhHrL Oecgr13RQST7HNCbxHQM0mdPUDqVqZqpGUGKrCAPNVcyG8h6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjWERJr8aPi5DJUv044udh7CMVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYWU1NDhmYTItYWNkMC0z YWEyLTk0NjMtYjYwYzY2ODk2NWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcoWZOCaHMfr1U7tQ62AIUQSrYNUwlVhkcXuyyXe/lZY19ZHqTzdZQm lFSBAoM2DWD6dmu2u/a9CP5gm1WxB0uhJn8b/QMIFHUBoS9r68hnb9Ikv8jX5jhh ozNPJs9TZd4kLBzWq2RMfUUPJUuu4xFdlDuHCjaeJwJoZ5XS39ZKN8nvP7AJ8XPU 2yOcikncwxw2VNUsEvwjaSFwX0NQFBY9GR2zy6Iy3Gy/nLj1V2gq9YgafE43rW/m kKI+Mq0DHrWgpQJCtdOpPPmICRV1qxCtINXI+Jqw5y4OCCFNmXLPAzaL1lcDXvrZ PCTt7v+qP1hZecHD/V1HtiT4qrlxENg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:37 2025 by rpki-client