$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/fd534e9c-4605-365f-b678-e5faa4b9bc67.roa File: fd534e9c-4605-365f-b678-e5faa4b9bc67.roa (raw, json) Hash identifier: 0/3YnAgaQC1A931CJq+5t8blZmJb4YeBH+g1K0B8mbM= Subject key identifier: 7C:C7:97:9E:FE:8E:0F:30:15:01:D1:F3:4A:CF:30:75:63:AC:42:0C Certificate issuer: /CN=ff3f112b-a6d8-4720-982d-117f151ed213 Certificate serial: 010D0C9F4328584886B06D79F637E2B33118A300 Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/fd534e9c-4605-365f-b678-e5faa4b9bc67.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 401348 IP address blocks: 72.46.24.0/24 maxlen: 24 72.46.25.0/24 maxlen: 24 72.46.26.0/24 maxlen: 24 72.46.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:6d:79:f6:37:e2:b3:31:18:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213 Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=49046531-2734-4ed4-8e1f-a79d3c0e702d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:05:a0:a8:8b:77:62:50:02:59:48:6c:7d:8c: 71:63:a4:e9:4b:e6:f9:f7:37:0b:84:3a:f8:54:45: 96:73:fa:67:96:73:c2:c5:9c:4b:2b:63:21:68:63: 26:e6:76:c8:f3:af:51:d1:d5:5e:13:57:2d:a0:8d: db:21:f9:0f:19:6d:60:01:d9:14:67:38:1f:0d:d8: ed:2f:84:89:16:16:0b:f8:e6:58:57:d0:44:e5:c0: bf:b7:b9:76:d5:4d:47:a7:ca:dc:dc:31:65:a5:a5: 86:35:20:ff:05:04:7a:6f:c0:6d:18:b7:fe:62:4e: 24:ee:53:8e:d6:77:66:08:fb:9b:f4:c8:99:0c:d1: 9d:49:cd:a0:24:24:a4:c3:3b:25:04:b8:00:94:c6: 39:3f:81:0d:ef:6d:e0:1a:4e:61:fc:f4:d4:fc:b6: 78:2d:28:69:a6:6f:61:6b:c8:d7:ca:f9:08:86:47: e2:ef:f3:14:df:e4:b4:93:51:2b:9f:4d:5c:bc:2e: 1a:ed:4d:cd:67:fe:38:38:8b:aa:ea:00:e8:80:46: 52:ef:58:55:14:4a:70:6a:a1:5d:a0:56:f5:60:48: 57:69:27:29:9b:08:1c:36:cb:bf:f8:61:a2:28:35: 5c:0f:3b:29:0c:8b:0c:b9:fe:ce:30:93:9d:34:df: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C7:97:9E:FE:8E:0F:30:15:01:D1:F3:4A:CF:30:75:63:AC:42:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/fd534e9c-4605-365f-b678-e5faa4b9bc67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl X509v3 Authority Key Identifier: keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer sbgp-ipAddrBlock: critical IPv4: 72.46.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:5f:59:9b:a8:2f:ec:80:0c:77:55:b7:72:d3:b3:f7:0a:fc: 04:c1:bf:d6:17:2e:52:58:3d:6a:56:18:d1:6e:a6:6e:4d:df: 95:67:0a:ab:48:6c:b2:58:3d:45:a1:d4:7b:9c:53:20:52:7b: b5:2b:84:c7:20:7c:da:2c:51:8a:44:3d:46:64:58:65:fe:69: 48:71:27:0a:68:26:ac:0d:20:32:f3:06:f6:61:cd:63:cd:5d: 92:14:a2:3a:c9:f0:44:21:88:c5:40:8a:ee:0b:a6:d8:ca:43: 26:9f:e5:a9:06:51:81:72:c7:ef:7d:50:a4:b9:b8:43:17:c5: 68:30:de:71:f8:b0:25:9a:2a:6b:e2:b0:f2:b7:52:29:25:c4: d9:7a:cd:16:ea:a4:77:1e:ff:1b:c7:84:6b:54:5f:10:29:fb: cb:0a:d6:31:fd:18:c9:2f:32:5c:5b:9b:02:a2:cf:c4:1c:22: 36:c4:be:37:19:4b:19:ff:43:03:ee:86:c9:e9:6b:3f:9c:77: fd:a3:1e:a9:d2:84:b5:8b:52:17:a8:2f:a6:4b:5e:48:ce:57: 0a:1a:62:d0:93:e0:b6:ac:39:0b:50:fe:bb:d1:8a:ee:4f:98: 0c:7d:3a:b5:15:86:80:6c:22:04:09:6f:75:c9:fe:d5:b6:b6: dd:94:e7:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsG159jfiszEYowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzZjExMmItYTZkOC00NzIwLTk4MmQtMTE3ZjE1MWVk MjEzMB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk NDkwNDY1MzEtMjczNC00ZWQ0LThlMWYtYTc5ZDNjMGU3MDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQWgqIt3YlACWUhsfYxxY6TpS+b59zcLhDr4 VEWWc/pnlnPCxZxLK2MhaGMm5nbI869R0dVeE1ctoI3bIfkPGW1gAdkUZzgfDdjt L4SJFhYL+OZYV9BE5cC/t7l21U1Hp8rc3DFlpaWGNSD/BQR6b8BtGLf+Yk4k7lOO 1ndmCPub9MiZDNGdSc2gJCSkwzslBLgAlMY5P4EN723gGk5h/PTU/LZ4LShppm9h a8jXyvkIhkfi7/MU3+S0k1Ern01cvC4a7U3NZ/44OIuq6gDogEZS71hVFEpwaqFd oFb1YEhXaScpmwgcNsu/+GGiKDVcDzspDIsMuf7OMJOdNN+eHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzHl57+jg8wFQHR80rPMHVjrEIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNm MTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdmMTUxZWQyMTMvZmQ1MzRlOWMtNDYwNS0z NjVmLWI2NzgtZTVmYWE0YjliYzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmYzZjExMmItYTZkOC00NzIwLTk4 MmQtMTE3ZjE1MWVkMjEzL2ZmM2YxMTJiLWE2ZDgtNDcyMC05ODJkLTExN2YxNTFl ZDIxMy5jcmwwHwYDVR0jBBgwFoAUD//9aqc1aJfzsgdSJ/3uBGLUlgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNmMTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdm MTUxZWQyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSC4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhfWZuoL+yADHdVt3LTs/cK/ATBv9YXLlJYPWpWGNFupm5N35VnCqtI bLJYPUWh1HucUyBSe7UrhMcgfNosUYpEPUZkWGX+aUhxJwpoJqwNIDLzBvZhzWPN XZIUojrJ8EQhiMVAiu4LptjKQyaf5akGUYFyx+99UKS5uEMXxWgw3nH4sCWaKmvi sPK3UiklxNl6zRbqpHce/xvHhGtUXxAp+8sK1jH9GMkvMlxbmwKiz8QcIjbEvjcZ Sxn/QwPuhsnpaz+cd/2jHqnShLWLUheoL6ZLXkjOVwoaYtCT4LasOQtQ/rvRiu5P mAx9OrUVhoBsIgQJb3XJ/tW2tt2U5wk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:06 2025 by rpki-client