$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa File: f73b5053-f5db-33cf-aecf-f99a7cff535a.roa (raw, json) Hash identifier: x7eRcIhsUISqu64A8yK7bNZOWqlOCsVX5kjZReQl98k= Subject key identifier: 4A:33:57:4C:0D:AB:01:BB:07:C7:28:AA:33:62:71:86:F1:56:0D:A0 Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F43285848C41B7D23D02D639E6A184B00 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 36290 IP address blocks: 204.16.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:7d:23:d0:2d:63:9e:6a:18:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=559127ee-c7fe-4043-81cc-dcf01e3899b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:1d:f2:a6:a7:d5:74:e3:e9:64:96:e1:ea: 48:c7:a7:8e:a1:b0:2f:1d:aa:ec:3d:2e:14:31:81: 44:67:6a:aa:56:de:34:bc:bb:df:b3:3d:18:ec:f9: e6:1e:1c:d5:0b:c9:f7:29:cb:15:bf:f3:b0:ac:92: 3d:57:d2:55:e4:ff:3e:34:85:fe:b7:81:cd:80:69: 7a:73:41:a9:48:b5:15:e6:1b:ce:d7:55:18:8f:1a: f7:b2:ac:70:41:bc:28:fb:8b:f2:4d:e3:3a:a2:8b: f9:e7:36:d3:d3:5c:21:22:90:ef:43:61:ad:f4:d8: 05:50:79:e6:6b:3d:63:0d:5a:30:af:60:09:43:b0: d4:29:bb:84:13:97:56:b5:a8:4f:ea:20:a3:8b:04: 0c:26:b3:d0:cd:bf:9b:b3:78:5e:47:de:b9:00:5c: e0:06:11:65:ca:87:47:f1:49:9c:c4:48:97:fb:38: de:2e:c5:3c:37:e1:d4:58:41:7e:69:85:0e:72:6d: 9a:bf:60:e2:61:e3:4f:d9:bb:70:f7:36:c8:0c:c3: 7e:3b:43:55:85:73:39:b2:13:e6:01:51:de:91:2e: 4d:34:6f:12:67:88:ce:0d:3c:76:89:96:49:31:ac: c0:eb:8f:7a:2f:3f:d9:87:87:68:24:4f:8d:00:b4: 99:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:33:57:4C:0D:AB:01:BB:07:C7:28:AA:33:62:71:86:F1:56:0D:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 204.16.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:39:25:91:7f:0c:4c:1c:6a:50:69:ca:49:65:f2:37:38:d1: 57:59:a7:ee:74:10:7c:0f:1d:74:57:ee:2f:a7:09:26:7b:3e: ab:a4:42:de:7f:5b:be:e2:1e:d5:7e:e0:04:09:b8:79:3b:db: c2:19:a0:07:aa:cf:1c:6d:3d:1d:60:7d:a3:3e:98:4c:5d:b7: 64:58:1b:32:33:84:b4:c4:3b:41:cb:94:06:ee:fd:0a:e9:e9: 81:fd:8b:d2:32:1a:b7:9b:54:56:60:df:10:e7:d0:ab:65:5e: 17:76:44:f9:7c:01:ab:ae:2c:78:5b:cd:c4:8b:71:dd:93:5e: 3a:72:9b:de:2f:86:7c:74:f0:26:66:7b:ca:24:42:ac:f7:17: 77:ee:92:30:b4:80:90:93:2e:d3:c0:bf:33:56:c7:1d:7e:92: 57:4d:ad:55:ef:1b:40:f6:0e:47:1e:34:26:b8:4e:b4:58:81: 69:7c:62:5a:5f:d3:27:dc:27:8c:8f:91:ee:c1:9d:c5:33:84: 4e:80:d7:b4:5a:03:ac:ca:e9:68:4c:f3:69:2c:fc:d8:a9:56: 93:74:93:cb:0f:c2:d1:69:0d:bc:cb:38:56:ad:7a:dd:e3:86: 3c:c8:f4:ad:de:05:dc:4f:3d:05:a4:6c:47:0d:59:bc:1a:f3: 63:fa:ba:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEG30j0C1jnmoYSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk NTU5MTI3ZWUtYzdmZS00MDQzLTgxY2MtZGNmMDFlMzg5OWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Md8qan1XTj6WSW4epIx6eOobAvHarsPS4U MYFEZ2qqVt40vLvfsz0Y7PnmHhzVC8n3KcsVv/OwrJI9V9JV5P8+NIX+t4HNgGl6 c0GpSLUV5hvO11UYjxr3sqxwQbwo+4vyTeM6oov55zbT01whIpDvQ2Gt9NgFUHnm az1jDVowr2AJQ7DUKbuEE5dWtahP6iCjiwQMJrPQzb+bs3heR965AFzgBhFlyodH 8UmcxEiX+zjeLsU8N+HUWEF+aYUOcm2av2DiYeNP2btw9zbIDMN+O0NVhXM5shPm AVHekS5NNG8SZ4jODTx2iZZJMazA6496Lz/Zh4doJE+NALSZVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEozV0wNqwG7B8coqjNicYbxVg2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvZjczYjUwNTMtZjVkYi0z M2NmLWFlY2YtZjk5YTdjZmY1MzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU5JZF/DEwcalBpykll8jc40VdZp+50EHwPHXRX7i+nCSZ7PqukQt5/ W77iHtV+4AQJuHk728IZoAeqzxxtPR1gfaM+mExdt2RYGzIzhLTEO0HLlAbu/Qrp 6YH9i9IyGrebVFZg3xDn0KtlXhd2RPl8AauuLHhbzcSLcd2TXjpym94vhnx08CZm e8okQqz3F3fukjC0gJCTLtPAvzNWxx1+kldNrVXvG0D2DkceNCa4TrRYgWl8Ylpf 0yfcJ4yPke7BncUzhE6A17RaA6zK6WhM82ks/NipVpN0k8sPwtFpDbzLOFatet3j hjzI9K3eBdxPPQWkbEcNWbwa82P6ulk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:02 2025 by rpki-client