$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/255da6c4-4198-39cc-8ba5-d6d941950364.roa File: 255da6c4-4198-39cc-8ba5-d6d941950364.roa (raw, json) Hash identifier: dlojge3tDuyWNh2RTWg8lvddW9dj+dPJrYeZzrgsK48= Subject key identifier: 6B:19:C3:ED:CA:A6:79:B2:96:57:23:49:E1:C7:7D:16:CE:08:BC:B5 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285848E2D13B0848C6BCC8C1361680 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/255da6c4-4198-39cc-8ba5-d6d941950364.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 11351 IP address blocks: 65.185.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:3b:08:48:c6:bc:c8:c1:36:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=7c57943d-7eb2-4c46-ac81-94602f81992a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:aa:67:95:83:43:30:58:e4:f8:bc:9c:ef: b5:be:c6:14:4b:7c:45:32:67:ab:15:98:e6:67:a0: f1:88:6b:b6:30:9f:82:08:8d:98:15:c3:cd:05:4f: d1:c3:80:5c:d8:ed:21:fb:87:27:3a:d5:86:7a:1d: c8:ed:e6:db:ca:8f:a5:53:ea:7b:05:f3:88:e0:06: 6c:4e:66:ca:10:90:0f:73:ba:15:5a:83:42:ea:eb: 36:d3:ab:92:31:85:9a:86:06:34:6e:8e:d9:ae:20: 25:c1:e1:31:e5:89:42:cd:56:0c:d1:15:f6:7b:5c: bb:21:5c:3f:00:85:17:46:61:b9:b3:9b:52:e8:50: 03:88:da:a9:d1:68:73:e8:b0:45:3d:de:16:dd:ae: 09:f0:9f:d4:6c:ac:d4:99:5e:b7:00:1c:00:9d:dd: 74:c7:1c:81:e1:c7:bd:ca:67:9c:69:0b:dc:0c:c2: e3:a1:80:19:e0:1f:19:e0:6d:92:e8:3e:58:8f:af: 9a:98:84:94:b5:12:bb:2d:43:49:07:11:cf:c3:ba: e7:e0:aa:52:5c:27:2a:2c:c6:ea:dd:45:09:56:1e: 21:96:91:55:67:86:81:76:02:d2:b5:77:ec:76:2c: 57:2b:d3:49:44:e2:bd:b8:cc:f2:b1:9b:d6:cd:7b: 9a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:19:C3:ED:CA:A6:79:B2:96:57:23:49:E1:C7:7D:16:CE:08:BC:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/255da6c4-4198-39cc-8ba5-d6d941950364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 65.185.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d3:0e:f1:d0:c5:05:bf:e1:f7:af:3e:80:e8:5e:8c:18:d8: 9a:c8:9e:a4:23:6a:68:a8:e0:9a:50:9d:ef:22:ad:77:68:1a: a0:f9:3d:47:0f:ce:de:39:d9:2a:3f:d0:81:96:33:fe:92:f7: 21:45:82:50:f5:84:ae:de:b2:6d:ba:63:84:67:c4:67:59:d9: a1:81:27:92:0b:d5:44:70:50:6c:84:41:d3:de:eb:ad:0d:f1: 40:87:96:cd:80:13:af:7b:0d:0d:f7:ea:24:7c:d3:20:87:6c: cc:de:32:11:fb:c3:dd:71:e2:f2:61:77:bc:34:47:82:65:0b: 54:1b:bc:cc:d9:1c:9d:bd:fd:cd:c5:e0:eb:a7:66:18:bd:8e: 15:6c:52:44:f3:78:44:7f:c0:b7:78:01:02:2d:07:30:8a:ce: 46:22:1a:e4:0d:c6:45:ab:ba:91:04:ae:af:81:fa:fd:64:b0: 1b:00:56:0f:2d:79:70:d1:f1:d2:37:f4:4d:85:8c:9e:c1:14: 5f:d2:73:08:e8:49:b4:eb:b0:49:52:e0:03:41:4c:c6:aa:e2: b9:43:2e:18:a1:9e:9e:cf:48:ba:20:df:9b:f9:71:e4:64:c4: af:e6:bc:4e:e6:8e:80:fb:a7:b9:98:8d:f4:2a:e4:f7:57:c3: 98:de:e0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0TsISMa8yME2FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk N2M1Nzk0M2QtN2ViMi00YzQ2LWFjODEtOTQ2MDJmODE5OTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRuqZ5WDQzBY5Pi8nO+1vsYUS3xFMmerFZjm Z6DxiGu2MJ+CCI2YFcPNBU/Rw4Bc2O0h+4cnOtWGeh3I7ebbyo+lU+p7BfOI4AZs TmbKEJAPc7oVWoNC6us206uSMYWahgY0bo7ZriAlweEx5YlCzVYM0RX2e1y7IVw/ AIUXRmG5s5tS6FADiNqp0Whz6LBFPd4W3a4J8J/UbKzUmV63ABwAnd10xxyB4ce9 ymecaQvcDMLjoYAZ4B8Z4G2S6D5Yj6+amISUtRK7LUNJBxHPw7rn4KpSXCcqLMbq 3UUJVh4hlpFVZ4aBdgLStXfsdixXK9NJROK9uMzysZvWzXuaGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsZw+3KpnmyllcjSeHHfRbOCLy1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMjU1ZGE2YzQtNDE5OC0z OWNjLThiYTUtZDZkOTQxOTUwMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQbn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADTDvHQxQW/4fevPoDoXowY2JrInqQjamio4JpQne8irXdoGqD5PUcP zt452So/0IGWM/6S9yFFglD1hK7esm26Y4RnxGdZ2aGBJ5IL1URwUGyEQdPe660N 8UCHls2AE697DQ336iR80yCHbMzeMhH7w91x4vJhd7w0R4JlC1QbvMzZHJ29/c3F 4OunZhi9jhVsUkTzeER/wLd4AQItBzCKzkYiGuQNxkWrupEErq+B+v1ksBsAVg8t eXDR8dI39E2FjJ7BFF/ScwjoSbTrsElS4ANBTMaq4rlDLhihnp7PSLog35v5ceRk xK/mvE7mjoD7p7mYjfQq5PdXw5je4CE= -----END CERTIFICATE-----Generated at Sun Apr 6 20:51:31 2025 by rpki-client