$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa File: c3a4120a-832f-3d49-9b46-e10f35565a99.roa (raw, json) Hash identifier: UtfRFi/wsYyRmkWx8a9IwkSXQ/v2onL5aL022JZKKR0= Subject key identifier: 88:92:76:64:CA:25:B0:E3:65:58:7A:A0:7B:0E:60:1A:00:81:BA:8D Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F43285848DD3BAECD0E8670C1A00D2600 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa Signing time: Thu 13 Feb 2025 02:00:40 +0000 ROA not before: Thu 13 Feb 2025 02:00:40 +0000 ROA not after: Wed 14 May 2025 01:00:40 +0000 asID: 31898 IP address blocks: 174.137.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:3b:ae:cd:0e:86:70:c1:a0:0d:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Feb 13 02:00:40 2025 GMT Not After : May 14 01:00:40 2025 GMT Subject: CN=8e659597-d5ba-46a9-aa24-cd65bf59a2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:6f:f8:5c:f8:68:65:46:7d:52:84:52:32: 0c:2a:a2:72:ac:89:e3:75:92:ad:cf:c3:38:1f:e7: ac:52:84:71:8c:9b:d6:48:f9:5b:aa:e6:f6:d7:25: e5:db:ed:f9:f1:e3:6f:4a:2b:fb:be:81:61:7d:35: ef:f0:40:b4:1c:5f:f8:ba:40:43:c6:eb:1d:aa:63: 99:25:40:ce:ce:f0:c0:b8:1a:8b:3c:c7:e2:73:a1: 97:37:b7:c1:70:91:fa:e8:90:da:c8:3f:c4:7d:06: c0:39:35:b0:c0:d9:d5:81:e0:e1:09:5f:fe:1a:7c: 56:64:85:ee:ea:5c:0c:88:ab:8a:1e:eb:f3:c0:be: 39:20:3d:45:8a:8f:d0:a0:93:10:e1:ca:01:8f:bc: 5a:8c:06:3f:be:7a:02:91:99:78:0b:3c:63:40:23: e5:5f:a4:be:64:36:fb:93:b8:95:c2:34:be:64:d3: e3:9e:06:2b:13:77:bd:e1:9c:f1:5d:ab:6c:34:7c: e0:ad:d3:6f:6c:96:d8:87:56:66:6b:fe:5e:a7:1e: 0a:93:69:fc:c2:13:03:e2:44:7e:4f:79:88:26:ea: 6c:08:51:2e:cd:e3:9d:35:75:a6:ed:c5:37:a8:ac: b5:3f:b0:b5:13:00:4d:80:fb:ce:07:a7:25:13:a2: 08:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:92:76:64:CA:25:B0:E3:65:58:7A:A0:7B:0E:60:1A:00:81:BA:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:9b:4a:80:a4:b3:35:10:ef:ac:d7:54:50:58:3d:18:8a:14: 0d:5e:59:9e:4a:0e:4a:f0:61:2e:12:ae:e9:b4:38:53:36:91: 9e:81:fe:c3:a4:74:42:7c:f7:05:89:1a:f2:66:20:81:89:d7: 15:8f:61:fb:00:08:e8:21:f8:45:14:4e:3e:89:a2:8e:04:c1: dc:65:95:df:8f:95:23:5a:bc:4f:6d:33:68:33:e9:08:a3:4b: 37:51:1c:be:bf:49:a6:5e:93:0f:54:4c:4c:8c:e8:85:20:0d: c3:0f:bd:3d:d9:82:b5:67:e4:9a:7d:6e:c0:8d:b6:2e:49:b9: 35:51:b4:d3:88:ef:cd:af:2e:8f:02:05:23:7c:78:c6:81:ff: ad:bd:36:28:cd:0b:72:d1:8b:3a:6c:1f:46:22:a6:fa:87:b0: 9f:8d:f8:b8:07:77:e2:a9:13:db:86:9a:07:fb:f1:11:8f:82: 95:1e:58:ec:ee:3d:ae:8a:f8:aa:ce:8b:a2:57:60:d8:40:34: 0b:aa:3b:77:d8:ae:a7:c8:7e:70:cd:48:7a:ee:5f:6b:a4:db: af:df:1a:86:80:21:76:0c:a2:1c:46:f9:84:99:2e:e4:22:f0: e7:99:62:40:57:49:e1:0a:ad:d5:fb:2d:32:52:9a:a6:a4:1d: 33:f5:ae:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjdO67NDoZwwaANJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk OGU2NTk1OTctZDViYS00NmE5LWFhMjQtY2Q2NWJmNTlhMmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOJv+Fz4aGVGfVKEUjIMKqJyrInjdZKtz8M4 H+esUoRxjJvWSPlbqub21yXl2+358eNvSiv7voFhfTXv8EC0HF/4ukBDxusdqmOZ JUDOzvDAuBqLPMfic6GXN7fBcJH66JDayD/EfQbAOTWwwNnVgeDhCV/+GnxWZIXu 6lwMiKuKHuvzwL45ID1Fio/QoJMQ4coBj7xajAY/vnoCkZl4CzxjQCPlX6S+ZDb7 k7iVwjS+ZNPjngYrE3e94ZzxXatsNHzgrdNvbJbYh1Zma/5epx4Kk2n8whMD4kR+ T3mIJupsCFEuzeOdNXWm7cU3qKy1P7C1EwBNgPvOB6clE6IIDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiSdmTKJbDjZVh6oHsOYBoAgbqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYzNhNDEyMGEtODMyZi0z ZDQ5LTliNDYtZTEwZjM1NTY1YTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHybSoCkszUQ76zXVFBYPRiKFA1eWZ5KDkrwYS4Srum0OFM2kZ6B/sOk dEJ89wWJGvJmIIGJ1xWPYfsACOgh+EUUTj6Joo4Ewdxlld+PlSNavE9tM2gz6Qij SzdRHL6/SaZekw9UTEyM6IUgDcMPvT3ZgrVn5Jp9bsCNti5JuTVRtNOI782vLo8C BSN8eMaB/629NijNC3LRizpsH0YipvqHsJ+N+LgHd+KpE9uGmgf78RGPgpUeWOzu Pa6K+KrOi6JXYNhANAuqO3fYrqfIfnDNSHruX2uk26/fGoaAIXYMohxG+YSZLuQi 8OeZYkBXSeEKrdX7LTJSmqakHTP1rik= -----END CERTIFICATE-----Generated at Sat Apr 5 18:28:41 2025 by rpki-client