$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/cd74ff64-d09a-3a40-9a53-36ada9c55940.roa File: cd74ff64-d09a-3a40-9a53-36ada9c55940.roa (raw, json) Hash identifier: 5MFyyLinPte8/Acs9UiMEnUexOlKoOhstZZKhARzT48= Subject key identifier: E8:F3:C1:DC:C2:E8:24:EB:C3:AC:D9:6F:D8:3B:F6:8C:51:96:A9:8C Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F43285848696067B803841551681B0080 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/cd74ff64-d09a-3a40-9a53-36ada9c55940.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 6453 IP address blocks: 209.58.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:67:b8:03:84:15:51:68:1b:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=8d7339eb-815d-4378-b1ba-f96a8beeee07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:e0:3c:3a:51:2c:e3:e1:b4:04:88:b0:0b: ab:9b:e5:00:37:bb:b3:ec:f4:03:52:b7:20:29:4d: 6f:df:f7:f4:46:98:35:fa:8f:31:67:02:a8:3c:c6: e0:d2:6a:a5:78:5a:68:44:e8:c1:fc:0f:c9:b9:4c: e5:42:40:fa:61:a0:c3:78:c6:01:3e:b4:62:7f:9e: 1c:b0:ea:e0:eb:0b:5c:29:f9:58:69:18:ff:53:5d: 7c:e7:98:db:97:a5:74:33:5e:e6:81:50:37:62:2e: 97:84:11:23:85:cd:f3:b8:f6:5c:fc:09:cc:0e:b6: ae:a9:a0:69:7c:75:d8:2b:ee:8b:bc:96:91:55:d4: bc:9b:8e:86:8b:2c:c9:c9:b6:bb:1e:77:fb:cf:30: 03:ca:0a:83:17:8a:0d:fd:b9:7e:3e:82:ae:fd:77: a7:6c:12:eb:ad:ee:3b:56:e2:9b:58:18:a2:92:a4: 34:b3:84:1d:ed:e8:5a:20:32:92:82:f2:0c:04:67: 0b:f3:89:02:c8:86:9d:7a:aa:03:64:fb:7c:c6:dd: 5b:7d:48:ca:24:82:38:c0:ab:77:e5:f7:00:34:7d: b0:72:c4:96:ab:3c:a1:3f:c4:aa:13:f2:82:dc:26: 35:86:ab:57:fd:b2:a4:fe:28:33:e3:e0:ee:78:7c: ca:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F3:C1:DC:C2:E8:24:EB:C3:AC:D9:6F:D8:3B:F6:8C:51:96:A9:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/cd74ff64-d09a-3a40-9a53-36ada9c55940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 209.58.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:4c:1f:25:d6:a1:d0:bc:25:ad:58:44:f9:99:59:fb:25:b4: ff:c1:d4:ae:24:d1:d7:86:a9:0e:f4:4a:a7:66:f9:ea:09:ad: 67:49:45:10:91:26:3c:3c:a5:0d:1e:3f:a6:ce:2a:0a:3f:33: fb:b7:80:e6:39:73:32:11:ef:b5:c9:18:eb:fd:e4:f9:64:0b: a5:b2:6a:71:38:54:82:35:d7:45:85:10:ae:46:0d:34:37:16: bc:bf:9c:69:66:a7:ea:cd:90:e8:3b:bd:94:59:eb:0e:f8:6e: 2a:f1:54:b5:09:cb:e3:b3:b8:88:82:3c:f5:83:76:ab:ae:10: 25:9a:03:20:44:55:0e:7a:c3:84:67:aa:37:b9:b7:ec:44:4c: 8d:71:89:32:a2:3a:89:8b:66:0f:8c:01:56:5b:4d:8f:42:d2: a6:f4:48:21:cf:01:de:a9:c6:d9:45:1e:7a:a5:3e:03:6e:c5: d4:ab:a9:a6:6c:e3:a0:8e:81:9f:43:0c:87:d1:48:1b:71:a5: 81:df:5c:8c:f2:b4:f9:d3:d5:30:86:1c:a9:96:38:3d:83:7e: 93:d1:55:db:de:65:6b:80:d0:6e:05:1e:7b:4f:13:7d:21:06: 24:b0:64:af:b1:fd:4c:3b:d7:25:7a:e8:db:6f:d5:40:a2:a6: a4:62:65:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYGe4A4QVUWgbAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk OGQ3MzM5ZWItODE1ZC00Mzc4LWIxYmEtZjk2YThiZWVlZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDPgPDpRLOPhtASIsAurm+UAN7uz7PQDUrcg KU1v3/f0Rpg1+o8xZwKoPMbg0mqleFpoROjB/A/JuUzlQkD6YaDDeMYBPrRif54c sOrg6wtcKflYaRj/U11855jbl6V0M17mgVA3Yi6XhBEjhc3zuPZc/AnMDrauqaBp fHXYK+6LvJaRVdS8m46GiyzJyba7Hnf7zzADygqDF4oN/bl+PoKu/XenbBLrre47 VuKbWBiikqQ0s4Qd7ehaIDKSgvIMBGcL84kCyIadeqoDZPt8xt1bfUjKJII4wKt3 5fcANH2wcsSWqzyhP8SqE/KC3CY1hqtX/bKk/igz4+DueHzK+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjzwdzC6CTrw6zZb9g79oxRlqmMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvY2Q3NGZmNjQtZDA5YS0z YTQwLTlhNTMtMzZhZGE5YzU1OTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0ToAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZMHyXWodC8Ja1YRPmZWfsltP/B1K4k0deGqQ70Sqdm+eoJrWdJRRCR Jjw8pQ0eP6bOKgo/M/u3gOY5czIR77XJGOv95PlkC6WyanE4VII110WFEK5GDTQ3 Fry/nGlmp+rNkOg7vZRZ6w74birxVLUJy+OzuIiCPPWDdquuECWaAyBEVQ56w4Rn qje5t+xETI1xiTKiOomLZg+MAVZbTY9C0qb0SCHPAd6pxtlFHnqlPgNuxdSrqaZs 46COgZ9DDIfRSBtxpYHfXIzytPnT1TCGHKmWOD2DfpPRVdveZWuA0G4FHntPE30h BiSwZK+x/Uw71yV66Ntv1UCipqRiZfo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:48 2025 by rpki-client