$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/c97a0ad1-de37-3bf5-8959-a5d761fd468a.roa File: c97a0ad1-de37-3bf5-8959-a5d761fd468a.roa (raw, json) Hash identifier: qO/ePqVMDP6pT2c2Q+oKJJ80dfHfskSh63QL9Eg0EGo= Subject key identifier: B4:26:E2:01:B9:AA:30:FF:F9:4F:22:8A:06:60:8C:51:62:6A:FE:70 Certificate issuer: /CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1 Certificate serial: 010D0C9F432858487B85B36E2EE0993BE9323E00 Authority key identifier: 80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/c97a0ad1-de37-3bf5-8959-a5d761fd468a.roa Signing time: Thu 09 Jan 2025 02:00:40 +0000 ROA not before: Thu 09 Jan 2025 02:00:40 +0000 ROA not after: Wed 09 Apr 2025 01:00:40 +0000 asID: 7029 IP address blocks: 205.236.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7b:85:b3:6e:2e:e0:99:3b:e9:32:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1 Validity Not Before: Jan 9 02:00:40 2025 GMT Not After : Apr 9 01:00:40 2025 GMT Subject: CN=697e9c50-7e2c-4941-8cae-5e90248491a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:a1:12:ba:80:f5:5e:da:ab:3e:39:ea:20: 78:d2:d5:26:13:92:7d:aa:06:b8:3d:be:02:d9:44: 92:85:cb:ac:fd:0b:50:ef:2b:e3:34:59:b1:8a:db: 46:1c:22:d0:20:f1:2a:a2:1c:84:63:60:da:41:23: 4a:f1:8a:02:92:52:1f:0d:01:c4:f4:f5:f7:45:c4: e3:bb:bc:51:5b:53:50:9a:f0:10:6f:56:25:9c:7c: 35:f0:a3:24:21:2a:21:b2:22:2a:54:f6:7b:bd:10: df:40:87:27:2d:66:7f:4e:3d:29:34:34:0d:c6:43: 31:3d:a1:b4:5e:22:22:7d:9f:28:19:4e:04:bf:a3: eb:49:a0:96:ad:e2:80:69:63:9f:cf:bb:0e:3a:54: 9d:68:3f:fa:2d:f9:c0:94:22:6f:b2:6e:eb:4c:e5: 1e:46:cc:f7:ab:1b:10:af:d0:31:79:0f:71:29:d1: 00:86:39:98:e7:ce:d4:db:c6:bd:80:b1:21:0b:9f: 94:1a:89:18:8b:a0:f9:08:cd:4e:13:f9:33:da:a3: 78:48:b3:f8:dc:0c:fa:15:9e:e8:5e:79:02:aa:8c: c6:ea:3e:39:bb:98:cb:10:aa:94:18:8d:80:a3:a8: 3e:88:ff:88:f8:bd:b7:85:8a:22:28:82:4c:a1:31: 7b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:26:E2:01:B9:AA:30:FF:F9:4F:22:8A:06:60:8C:51:62:6A:FE:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/c97a0ad1-de37-3bf5-8959-a5d761fd468a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.crl X509v3 Authority Key Identifier: keyid:80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer sbgp-ipAddrBlock: critical IPv4: 205.236.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:79:31:70:94:cc:c2:fe:0b:aa:00:ab:1d:65:1f:20:40:3f: 0f:f1:1a:3f:88:95:15:1c:f3:09:43:18:52:54:e8:38:13:7c: bf:d9:50:93:74:8c:7e:c0:95:98:89:15:8e:5e:e8:ff:60:10: dc:f0:59:b3:cf:4e:ff:e9:26:4f:3b:5c:f4:6a:70:37:f0:43: 66:5b:78:09:e7:b1:45:63:16:7f:5e:55:37:52:03:37:0b:35: c1:5f:3c:79:e1:b1:1b:ec:bd:26:21:dd:df:b2:91:89:dc:58: 3c:e1:38:63:0e:a8:ac:36:c9:cc:04:c5:f1:71:86:5d:bf:82: a8:e0:96:ab:59:30:22:62:f6:60:02:ec:92:e7:f6:5b:80:1a: 8e:7a:1d:f7:b3:d3:6b:9d:fd:71:52:ca:9c:81:a0:dd:70:1b: ff:17:ba:b8:15:46:21:ee:30:e4:18:46:4e:cb:7e:18:00:9c: 54:85:cd:64:9d:e1:3c:1a:67:9c:16:63:9f:3b:6c:da:fe:b7: 2b:da:36:07:9d:a5:75:c8:3d:0c:ae:42:1f:9a:98:1c:70:a7: 8b:e8:e5:85:09:ca:c3:fa:76:98:04:23:9a:2e:13:72:1d:89: 23:9b:3f:25:78:4a:46:b1:40:fe:2a:2e:9a:7c:a4:5b:db:cc: 38:b9:68:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh7hbNuLuCZO+kyPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QwMjJlNGQtYTJlYy00ZDE0LTkzNDItYTUwM2VjNjNj YWMxMB4XDTI1MDEwOTAyMDA0MFoXDTI1MDQwOTAxMDA0MFowLzEtMCsGA1UEAxMk Njk3ZTljNTAtN2UyYy00OTQxLThjYWUtNWU5MDI0ODQ5MWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszWhErqA9V7aqz456iB40tUmE5J9qga4Pb4C 2USShcus/QtQ7yvjNFmxittGHCLQIPEqohyEY2DaQSNK8YoCklIfDQHE9PX3RcTj u7xRW1NQmvAQb1YlnHw18KMkISohsiIqVPZ7vRDfQIcnLWZ/Tj0pNDQNxkMxPaG0 XiIifZ8oGU4Ev6PrSaCWreKAaWOfz7sOOlSdaD/6LfnAlCJvsm7rTOUeRsz3qxsQ r9AxeQ9xKdEAhjmY587U28a9gLEhC5+UGokYi6D5CM1OE/kz2qN4SLP43Az6FZ7o XnkCqozG6j45u5jLEKqUGI2Ao6g+iP+I+L23hYoiKIJMoTF7jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQm4gG5qjD/+U8iigZgjFFiav5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zZDAy MmU0ZC1hMmVjLTRkMTQtOTM0Mi1hNTAzZWM2M2NhYzEvYzk3YTBhZDEtZGUzNy0z YmY1LTg5NTktYTVkNzYxZmQ0NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2QwMjJlNGQtYTJlYy00ZDE0LTkz NDItYTUwM2VjNjNjYWMxLzNkMDIyZTRkLWEyZWMtNGQxNC05MzQyLWE1MDNlYzYz Y2FjMS5jcmwwHwYDVR0jBBgwFoAUgHm9sfFWLm0kPO1+jBcQL6YwK8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zZDAyMmU0ZC1hMmVjLTRkMTQtOTM0Mi1hNTAz ZWM2M2NhYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzez8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG95MXCUzML+C6oAqx1lHyBAPw/xGj+IlRUc8wlDGFJU6DgTfL/ZUJN0 jH7AlZiJFY5e6P9gENzwWbPPTv/pJk87XPRqcDfwQ2ZbeAnnsUVjFn9eVTdSAzcL NcFfPHnhsRvsvSYh3d+ykYncWDzhOGMOqKw2ycwExfFxhl2/gqjglqtZMCJi9mAC 7JLn9luAGo56Hfez02ud/XFSypyBoN1wG/8XurgVRiHuMOQYRk7LfhgAnFSFzWSd 4TwaZ5wWY587bNr+tyvaNgedpXXIPQyuQh+amBxwp4vo5YUJysP6dpgEI5ouE3Id iSObPyV4SkaxQP4qLpp8pFvbzDi5aAs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:54 2025 by rpki-client