$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa File: 0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa (raw, json) Hash identifier: VrOmktBjct7qYfpPyzn0TUMqlVDcULAyDTfwsRw6ECA= Subject key identifier: 28:18:59:13:4D:4C:45:20:C7:26:63:56:0B:2F:E1:0B:CF:D2:78:03 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F432858486530411AB33C8DA89E568BE0 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 4922 IP address blocks: 70.32.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:41:1a:b3:3c:8d:a8:9e:56:8b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=ccaa01cd-5ccc-46a4-a1fc-0f48dc335f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:5e:fe:96:b4:c1:88:fa:c4:e1:1e:f9:50: 1b:3a:b8:1b:77:ca:7e:16:ac:b5:8e:d1:83:7e:87: 74:b6:e5:03:d9:b7:46:54:b7:98:7c:2d:4d:31:ff: 00:8c:45:30:bd:96:8c:dc:68:77:bb:d3:03:dc:5a: aa:41:fa:89:2f:d8:20:91:03:57:f3:1f:79:28:93: b0:f2:79:ea:1f:d6:9b:c3:ca:5f:94:41:3a:80:8d: 22:4c:03:e7:da:8d:30:8c:67:06:8e:c3:3f:8a:05: ce:b6:6a:4a:dc:59:29:90:5d:48:15:8f:24:29:8b: a8:8b:33:af:65:a7:46:17:80:59:19:98:59:43:c8: 77:f3:7a:91:2f:86:59:0a:dc:56:7b:c5:05:b3:7e: fc:11:b3:b8:9e:e7:f0:f6:d1:d1:e0:a8:3e:72:f1: 1f:86:0b:e7:82:c3:a1:06:67:02:b4:ad:99:4d:a8: 38:72:95:4b:11:99:e1:a8:80:f5:b3:50:70:4f:c9: 4b:d2:42:f0:69:06:4e:22:1d:5f:3d:2a:c6:ae:41: 91:c8:49:8f:37:f9:38:47:af:5e:78:5c:53:6b:a6: 4a:8d:36:8c:b6:8a:b9:31:78:9e:f6:a4:30:fb:dd: 69:ce:90:57:d2:40:0f:1c:82:41:c2:c7:f1:88:1b: 85:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:18:59:13:4D:4C:45:20:C7:26:63:56:0B:2F:E1:0B:CF:D2:78:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 70.32.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:69:5f:b2:67:e5:70:9f:a2:df:2a:d8:96:33:ed:96:2b:55: f6:11:d6:e2:7f:37:5a:12:51:ee:6d:62:c2:a1:40:18:ae:fc: 08:e1:01:2e:18:7c:e3:a7:e4:be:52:e6:07:3e:29:61:0e:15: aa:e9:96:8c:d8:92:db:9c:b1:7e:6a:f8:f9:5b:e0:06:62:52: 27:eb:dd:64:34:63:24:ff:ac:d2:1c:f5:27:6e:5c:3a:d7:c8: c6:92:3d:53:23:90:93:fc:2d:f1:8b:e6:27:e5:35:43:b3:0c: dc:09:73:85:b1:43:93:48:4f:69:03:92:ed:6e:c1:22:e1:b9: 07:68:94:8b:76:91:2d:31:ef:5b:73:fd:32:60:a0:a7:7a:82: e9:20:6c:ed:26:14:2d:f7:5b:97:1b:29:17:2d:b9:7e:1b:3a: ae:01:c4:fd:61:34:da:cd:c6:e6:38:7f:ba:4e:dc:39:e8:f8: 6d:d5:13:4d:59:b3:8c:c3:6b:65:32:00:9c:50:05:3b:28:72: 5f:d1:64:16:23:2e:e9:5c:21:44:79:a4:20:12:94:a8:ac:a4: 6f:5b:b0:8f:aa:6b:9b:30:a4:7b:63:14:ae:e4:5b:a4:77:93: 1f:95:22:76:56:58:aa:8d:ad:36:2b:af:e2:41:80:81:c8:57: 52:b6:27:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMEEaszyNqJ5Wi+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk Y2NhYTAxY2QtNWNjYy00NmE0LWExZmMtMGY0OGRjMzM1ZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfhe/pa0wYj6xOEe+VAbOrgbd8p+Fqy1jtGD fod0tuUD2bdGVLeYfC1NMf8AjEUwvZaM3Gh3u9MD3FqqQfqJL9ggkQNX8x95KJOw 8nnqH9abw8pflEE6gI0iTAPn2o0wjGcGjsM/igXOtmpK3FkpkF1IFY8kKYuoizOv ZadGF4BZGZhZQ8h383qRL4ZZCtxWe8UFs378EbO4nufw9tHR4Kg+cvEfhgvngsOh BmcCtK2ZTag4cpVLEZnhqID1s1BwT8lL0kLwaQZOIh1fPSrGrkGRyEmPN/k4R69e eFxTa6ZKjTaMtoq5MXie9qQw+91pzpBX0kAPHIJBwsfxiBuF+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgYWRNNTEUgxyZjVgsv4QvP0ngDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvMGMxYThlZTctY2Q5YS0z YTEwLWFiOWEtZGZjOTRkODkwNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNpX7Jn5XCfot8q2JYz7ZYrVfYR1uJ/N1oSUe5tYsKhQBiu/AjhAS4Y fOOn5L5S5gc+KWEOFarplozYktucsX5q+Plb4AZiUifr3WQ0YyT/rNIc9SduXDrX yMaSPVMjkJP8LfGL5iflNUOzDNwJc4WxQ5NIT2kDku1uwSLhuQdolIt2kS0x71tz /TJgoKd6gukgbO0mFC33W5cbKRctuX4bOq4BxP1hNNrNxuY4f7pO3Dno+G3VE01Z s4zDa2UyAJxQBTsocl/RZBYjLulcIUR5pCASlKispG9bsI+qa5swpHtjFK7kW6R3 kx+VInZWWKqNrTYrr+JBgIHIV1K2Jx8= -----END CERTIFICATE-----Generated at Sun Feb 16 20:26:28 2025 by rpki-client