$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa File: 0ff3813d-a425-3f1f-a715-aacfa0108453.roa (raw, json) Hash identifier: v1HsGsxshuDF/lHHCNuoEKByk1s2JDv3Q/rO+qEtXmE= Subject key identifier: 5D:22:6B:57:E6:45:91:2F:49:FC:FE:36:A1:90:23:CB:46:8C:94:B9 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584875F05625515C26FCDCF87470 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa Signing time: Tue 07 Jan 2025 02:00:39 +0000 ROA not before: Tue 07 Jan 2025 02:00:39 +0000 ROA not after: Mon 07 Apr 2025 01:00:39 +0000 asID: 4540 IP address blocks: 170.89.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:f0:56:25:51:5c:26:fc:dc:f8:74:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jan 7 02:00:39 2025 GMT Not After : Apr 7 01:00:39 2025 GMT Subject: CN=4d40fc2b-d40c-40b6-b499-25f80428c418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c2:a4:35:0b:90:7e:f8:87:e7:62:bb:31:ee: 34:7d:88:ea:34:11:ce:63:7b:ff:cd:6b:b9:66:46: 11:bb:ab:03:02:fe:ed:06:46:e7:03:44:96:da:50: 2c:40:bf:d8:22:bf:fa:d7:7e:e8:81:58:93:06:ec: 3c:80:8e:1d:8a:3b:94:91:02:f7:a2:88:70:3b:3f: b5:7f:b3:c4:77:9e:ab:36:7d:e2:f2:43:3d:0c:8c: b1:ad:5f:54:2b:0f:a7:14:0e:e7:b0:49:aa:9c:0b: b7:22:f3:bf:0b:1a:58:0a:95:b8:8a:a6:b2:d9:45: 01:ff:a0:bf:e1:9e:3f:e9:e5:dd:62:70:51:83:23: 2c:00:98:7b:2d:74:7b:f1:cf:e8:a5:e3:ae:01:f4: f4:69:ac:c4:e6:03:c7:72:53:4b:d6:73:a8:23:18: 84:dc:7a:b3:49:86:8e:23:65:06:7e:b0:bb:3a:93: fc:c3:20:34:4b:c2:6c:5f:e5:0d:3c:07:d2:de:23: fa:36:b8:03:a8:47:dd:d0:47:be:f9:4a:7c:81:ec: 98:58:2d:87:e2:86:e6:ab:c3:c5:55:28:2c:ed:14: 10:b8:75:86:3e:88:5c:4c:ce:5d:c3:d6:50:4c:d4: 59:12:95:89:5c:d3:ff:6b:5e:cc:ba:65:ce:fe:61: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:22:6B:57:E6:45:91:2F:49:FC:FE:36:A1:90:23:CB:46:8C:94:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:80:a5:af:35:25:7e:28:3d:77:6b:b0:ec:9b:1f:c2:e8:19: 6b:5f:72:84:74:89:aa:7a:42:a9:73:9c:b5:a2:c8:11:40:ae: 82:b5:ad:14:4a:86:fc:98:c0:17:4f:d5:16:b9:b1:64:19:91: 0e:2f:ae:7f:c3:ec:ca:ac:4d:7f:89:ea:e0:5b:e8:26:c7:e5: c1:66:22:9b:68:34:89:b1:9f:ae:6e:cf:98:bb:3b:9a:7a:1e: d3:2a:40:0e:57:fc:c4:4b:c7:2b:e4:ce:1c:dd:fe:25:23:23: 2d:77:c7:c1:08:6e:41:6e:67:ca:98:12:00:98:15:bd:f3:17: 6b:ec:38:a3:ec:5c:f0:80:05:0a:81:8d:a8:b9:ca:fd:ad:b2: 94:4a:5d:7b:b7:53:c9:ad:20:f6:9e:58:70:f0:21:ab:07:18: ea:a8:b7:ac:65:e3:82:9a:e8:56:37:b4:a3:89:b9:a0:6d:70: 28:86:5f:c8:df:e2:0b:fc:2e:c6:14:fc:51:3e:0a:c4:aa:cb: c6:69:e8:44:b9:89:3c:ca:7e:60:10:4a:3d:0d:2d:29:fb:94: ab:6b:02:b0:b2:3a:4f:6b:58:c2:98:72:e2:b0:66:8a:8a:95: 4d:0f:88:e7:4c:f6:f0:db:48:77:7c:c7:ef:2f:c3:2c:87:f6: 75:cb:85:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh18FYlUVwm/Nz4dHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDEwNzAyMDAzOVoXDTI1MDQwNzAxMDAzOVowLzEtMCsGA1UEAxMk NGQ0MGZjMmItZDQwYy00MGI2LWI0OTktMjVmODA0MjhjNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMKkNQuQfviH52K7Me40fYjqNBHOY3v/zWu5 ZkYRu6sDAv7tBkbnA0SW2lAsQL/YIr/6137ogViTBuw8gI4dijuUkQL3oohwOz+1 f7PEd56rNn3i8kM9DIyxrV9UKw+nFA7nsEmqnAu3IvO/CxpYCpW4iqay2UUB/6C/ 4Z4/6eXdYnBRgyMsAJh7LXR78c/opeOuAfT0aazE5gPHclNL1nOoIxiE3HqzSYaO I2UGfrC7OpP8wyA0S8JsX+UNPAfS3iP6NrgDqEfd0Ee++Up8geyYWC2H4obmq8PF VSgs7RQQuHWGPohcTM5dw9ZQTNRZEpWJXNP/a17MumXO/mHKcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0ia1fmRZEvSfz+NqGQI8tGjJS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMGZmMzgxM2QtYTQyNS0z ZjFmLWE3MTUtYWFjZmEwMTA4NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWApa81JX4oPXdrsOybH8LoGWtfcoR0iap6QqlznLWiyBFAroK1rRRK hvyYwBdP1Ra5sWQZkQ4vrn/D7MqsTX+J6uBb6CbH5cFmIptoNImxn65uz5i7O5p6 HtMqQA5X/MRLxyvkzhzd/iUjIy13x8EIbkFuZ8qYEgCYFb3zF2vsOKPsXPCABQqB jai5yv2tspRKXXu3U8mtIPaeWHDwIasHGOqot6xl44Ka6FY3tKOJuaBtcCiGX8jf 4gv8LsYU/FE+CsSqy8Zp6ES5iTzKfmAQSj0NLSn7lKtrArCyOk9rWMKYcuKwZoqK lU0PiOdM9vDbSHd8x+8vwyyH9nXLhYw= -----END CERTIFICATE-----Generated at Sun Feb 16 20:26:33 2025 by rpki-client