$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa File: 4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa (raw, json) Hash identifier: CA5xinfTuCWCB8dqnBVdEJYkOI7Eu+mgWHmdAzbRtZ0= Subject key identifier: 73:FC:E5:4B:A6:30:7B:B1:0C:14:1E:2C:7C:CA:4C:09:D2:DD:9F:EA Certificate issuer: /CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b Certificate serial: 010D0C9F43285848222FCCBEB1E8370F4619C540 Authority key identifier: 86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa Signing time: Sun 08 Dec 2024 02:00:39 +0000 ROA not before: Sun 08 Dec 2024 02:00:39 +0000 ROA not after: Sat 08 Mar 2025 02:00:39 +0000 asID: 394875 IP address blocks: 52.144.25.0/24 maxlen: 24 2620:f9:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:22:2f:cc:be:b1:e8:37:0f:46:19:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b Validity Not Before: Dec 8 02:00:39 2024 GMT Not After : Mar 8 02:00:39 2025 GMT Subject: CN=3b041aab-61a7-4351-9643-ab46605941ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:94:71:3a:cd:3d:00:2d:41:cd:aa:e9:86:0f: d8:d9:c8:74:86:e6:8d:a7:a4:f9:89:17:46:d1:24: 80:11:07:05:8a:5d:3f:3d:6d:30:af:08:43:0f:28: ac:ab:64:a5:8e:d1:fc:d8:31:e0:9e:31:82:d3:f9: 88:cc:a6:c8:d9:33:85:99:86:a0:88:2e:bb:eb:3f: f6:51:92:35:94:05:96:dd:3c:5a:73:34:b3:2a:88: e4:b6:a3:b1:27:de:82:55:a9:d6:bc:88:2a:13:f3: e0:4b:15:38:56:39:ff:49:af:f3:84:3f:16:c8:7b: 1f:a2:04:6d:05:af:47:f5:18:c1:22:72:64:7c:43: 57:17:69:d9:1c:7d:21:2c:b6:77:19:ef:eb:e9:23: 54:04:07:cc:4d:5e:ac:45:5a:5f:20:3a:99:48:be: 68:5d:d4:16:14:54:ab:20:ca:35:1a:60:c0:53:c9: 00:dc:05:77:3f:25:7d:8a:87:16:71:c3:02:5a:72: 37:1c:16:72:08:44:7e:09:c3:ad:0e:e4:82:a4:e9: 7a:18:8e:95:ef:5b:c4:b8:ed:08:48:46:76:c3:40: da:dc:00:a2:d8:d3:be:e7:07:4d:b9:15:03:59:a9: a8:5a:78:29:49:2b:cf:64:74:43:28:db:f8:f1:fc: 55:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FC:E5:4B:A6:30:7B:B1:0C:14:1E:2C:7C:CA:4C:09:D2:DD:9F:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl X509v3 Authority Key Identifier: keyid:86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer sbgp-ipAddrBlock: critical IPv4: 52.144.25.0/24 IPv6: 2620:f9:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:cc:46:e5:5d:99:bf:0a:4a:81:ae:d1:31:51:82:15:24:11: 54:07:96:c1:6c:9b:03:ef:ab:04:9e:3d:de:ed:75:e7:04:24: d4:cd:27:c8:38:53:ca:0b:3f:6b:c7:64:e8:c2:06:ab:90:0e: b1:c4:13:40:33:fc:eb:84:21:03:9b:d6:d3:c4:f5:92:1f:b1: 6a:87:d5:16:5d:ea:5b:c7:f7:90:83:6d:56:f1:e3:53:25:ba: 58:6d:20:41:df:ce:a1:ef:5f:56:63:b9:d7:99:2c:cf:9b:74: 2c:35:c4:47:44:6d:dd:83:48:6c:b6:c5:f2:d6:38:fd:2b:25: cf:56:22:70:25:ac:84:4f:9e:6e:2a:25:13:2b:e9:db:1e:19: 1c:b0:34:0c:01:ac:72:fb:e2:b9:28:a0:3e:35:b1:d6:44:ca: 4d:b4:d0:df:fb:cd:82:19:b5:7d:0f:f9:39:25:5f:13:96:35: 12:37:43:c5:f6:d4:6c:3e:60:f0:17:46:61:f6:d3:6a:2e:40: 26:6e:c6:e8:12:a6:ff:24:6f:32:08:ae:ac:3f:d2:49:bf:3c: 5a:c2:8f:fa:4b:d2:d0:96:9d:66:ac:5c:f2:e4:04:40:af:b7: b6:18:e2:a5:96:d4:ac:0a:69:9f:0b:85:f5:6b:e5:62:37:60: d7:56:fe:b1 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEgiL8y+seg3D0YZxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ2MDMzNmItNGIzYy00OWViLWJmZDctZDk4MDNmN2Jh ZDZiMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk M2IwNDFhYWItNjFhNy00MzUxLTk2NDMtYWI0NjYwNTk0MWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpRxOs09AC1Bzarphg/Y2ch0huaNp6T5iRdG 0SSAEQcFil0/PW0wrwhDDyisq2SljtH82DHgnjGC0/mIzKbI2TOFmYagiC676z/2 UZI1lAWW3TxaczSzKojktqOxJ96CVanWvIgqE/PgSxU4Vjn/Sa/zhD8WyHsfogRt Ba9H9RjBInJkfENXF2nZHH0hLLZ3Ge/r6SNUBAfMTV6sRVpfIDqZSL5oXdQWFFSr IMo1GmDAU8kA3AV3PyV9iocWccMCWnI3HBZyCER+CcOtDuSCpOl6GI6V71vEuO0I SEZ2w0Da3ACi2NO+5wdNuRUDWamoWngpSSvPZHRDKNv48fxV8wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHP85UumMHuxDBQeLHzKTAnS3Z/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYw MzM2Yi00YjNjLTQ5ZWItYmZkNy1kOTgwM2Y3YmFkNmIvNGNlZDYzODYtNGRhMS0z ZTRiLWE5MjctZGI0NGE5YWQyOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGQ2MDMzNmItNGIzYy00OWViLWJm ZDctZDk4MDNmN2JhZDZiLzhkNjAzMzZiLTRiM2MtNDllYi1iZmQ3LWQ5ODAzZjdi YWQ2Yi5jcmwwHwYDVR0jBBgwFoAUhr5+KeF+Vnlp76h7dzy4ixjTKaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYwMzM2Yi00YjNjLTQ5ZWItYmZkNy1kOTgw M2Y3YmFkNmIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQANJAZMA8E AgACMAkDBwAmIAD5QAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAG8xG5V2ZvwpKga7RMVGCFSQRVAeWwWyb A++rBJ493u115wQk1M0nyDhTygs/a8dk6MIGq5AOscQTQDP864QhA5vW08T1kh+x aofVFl3qW8f3kINtVvHjUyW6WG0gQd/Ooe9fVmO515ksz5t0LDXER0Rt3YNIbLbF 8tY4/Sslz1YicCWshE+ebiolEyvp2x4ZHLA0DAGscvviuSigPjWx1kTKTbTQ3/vN ghm1fQ/5OSVfE5Y1EjdDxfbUbD5g8BdGYfbTai5AJm7G6BKm/yRvMgiurD/SSb88 WsKP+kvS0JadZqxc8uQEQK+3thjipZbUrAppnwuF9WvlYjdg11b+sQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:19 2025 by rpki-client