$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/108a5562-eb3d-36ba-958f-40973f638928.roa File: 108a5562-eb3d-36ba-958f-40973f638928.roa (raw, json) Hash identifier: 0Z67IVjoBb9GdRATZj4kHhhojC4TuAth/hhcGvcuXaM= Subject key identifier: 9F:2E:63:19:91:BD:59:58:31:1B:78:C3:23:07:DF:D7:2A:07:05:B7 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285848E2D11FC6E257EDD2CB09F180 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/108a5562-eb3d-36ba-958f-40973f638928.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 3456 IP address blocks: 204.235.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:1f:c6:e2:57:ed:d2:cb:09:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=ed4053d3-2f4e-48bc-9bcf-e28c606b3bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:02:51:38:53:43:40:eb:49:01:11:be:4b:d1: 83:ad:3e:84:d5:59:a5:a9:26:68:91:a3:56:d1:1c: 64:32:8b:36:c9:fd:3f:19:50:90:7c:3c:70:22:a7: e0:65:08:a2:f7:e8:3c:8a:64:42:eb:ca:53:49:dc: 23:8c:6e:b5:09:7e:df:6e:f9:1b:56:a1:bd:4c:18: 5d:ac:f6:c9:82:0d:dd:31:6d:2b:8b:28:5c:94:d3: a9:6b:fd:19:e6:23:c6:b7:41:2b:eb:67:6b:c5:12: 41:64:9a:36:d1:67:5f:16:91:94:43:51:b1:bd:79: b0:92:27:98:86:88:dd:7d:07:b7:94:5f:bc:96:4e: 68:f2:a5:6f:92:b7:cf:30:2d:0a:63:b2:d3:21:b7: 48:3c:2d:45:37:d2:cf:d1:6c:df:c1:e5:29:a1:48: 04:39:e0:bf:ad:2a:63:f2:1e:28:59:12:cb:e8:4a: e8:c6:ec:f2:de:f9:82:95:ec:c7:17:90:e7:ad:52: d7:6a:a4:c0:c6:63:0a:ec:76:19:97:99:bc:35:a2: c1:da:38:18:1d:60:2e:78:5c:23:a2:98:61:54:11: 80:3a:a5:ef:18:37:eb:b0:41:43:93:4b:10:3a:fe: 21:1c:48:ff:5c:d9:45:c9:12:17:6d:a6:74:b8:e6: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2E:63:19:91:BD:59:58:31:1B:78:C3:23:07:DF:D7:2A:07:05:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/108a5562-eb3d-36ba-958f-40973f638928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 204.235.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ad:a4:19:14:af:40:96:de:a6:b8:fe:12:2e:59:9d:68:b9: 74:e0:74:22:a3:db:11:54:ba:e2:44:97:bf:3b:88:ef:0d:d5: 19:b1:a5:75:69:46:07:de:54:b6:a7:13:e3:8a:56:85:2c:23: 8f:dd:f9:0b:06:07:ac:ea:98:dc:af:ca:fb:f9:c6:b5:e0:51: 97:4c:ea:42:d6:38:ee:f0:c1:f1:32:12:66:b7:55:d6:4a:96: be:aa:59:3c:e6:a1:9b:3e:bb:8f:63:9e:df:b1:0e:b4:20:f3: ba:8a:19:c8:b7:75:bf:6d:05:10:a4:14:4a:ff:26:09:12:f6: 3a:a2:69:e1:00:f0:20:50:34:81:ee:4a:93:70:ed:03:fb:bf: da:95:b6:d2:be:f0:c9:8b:57:99:5f:4d:4b:64:b0:21:ab:ba: 0f:74:3e:ee:d0:f0:73:43:1b:c1:cc:46:b8:aa:74:3a:d4:fe: d2:f6:f6:98:6d:fb:58:5b:5d:4d:dc:ea:e2:19:96:6a:2b:be: 2b:c4:7e:e5:c5:03:0a:0a:fd:de:d8:fe:ec:85:3f:04:a8:6d: 2d:45:3f:c3:d3:64:4c:b0:2b:01:aa:e5:3c:f4:6e:f3:2f:31: 71:a4:2e:ef:6f:c3:5d:98:29:5a:1a:ff:6e:8d:5a:f6:7c:d1: 66:e9:f1:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0R/G4lft0ssJ8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZWQ0MDUzZDMtMmY0ZS00OGJjLTliY2YtZTI4YzYwNmIzYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gJROFNDQOtJARG+S9GDrT6E1VmlqSZokaNW 0RxkMos2yf0/GVCQfDxwIqfgZQii9+g8imRC68pTSdwjjG61CX7fbvkbVqG9TBhd rPbJgg3dMW0riyhclNOpa/0Z5iPGt0Er62drxRJBZJo20WdfFpGUQ1GxvXmwkieY hojdfQe3lF+8lk5o8qVvkrfPMC0KY7LTIbdIPC1FN9LP0WzfweUpoUgEOeC/rSpj 8h4oWRLL6Eroxuzy3vmClezHF5DnrVLXaqTAxmMK7HYZl5m8NaLB2jgYHWAueFwj ophhVBGAOqXvGDfrsEFDk0sQOv4hHEj/XNlFyRIXbaZ0uOaySwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8uYxmRvVlYMRt4wyMH39cqBwW3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMTA4YTU1NjItZWIzZC0z NmJhLTk1OGYtNDA5NzNmNjM4OTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzOt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADutpBkUr0CW3qa4/hIuWZ1ouXTgdCKj2xFUuuJEl787iO8N1RmxpXVp RgfeVLanE+OKVoUsI4/d+QsGB6zqmNyvyvv5xrXgUZdM6kLWOO7wwfEyEma3VdZK lr6qWTzmoZs+u49jnt+xDrQg87qKGci3db9tBRCkFEr/JgkS9jqiaeEA8CBQNIHu SpNw7QP7v9qVttK+8MmLV5lfTUtksCGrug90Pu7Q8HNDG8HMRriqdDrU/tL29pht +1hbXU3c6uIZlmorvivEfuXFAwoK/d7Y/uyFPwSobS1FP8PTZEywKwGq5Tz0bvMv MXGkLu9vw12YKVoa/26NWvZ80Wbp8ec= -----END CERTIFICATE-----Generated at Sun Apr 13 14:42:49 2025 by rpki-client