$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa File: 43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa (raw, json) Hash identifier: Q+i9RcGItOWyML/3lE21fDh3+gtkLiLCbpfkyYAq6Gc= Subject key identifier: D3:05:4F:30:9B:DE:F9:DA:72:37:93:02:F1:04:AB:99:59:DA:0A:F6 Certificate issuer: /CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Certificate serial: 010D0C9F43285848A830A7E832343B06C12B21E0 Authority key identifier: 89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 11377 IP address blocks: 223.165.113.0/24 maxlen: 24 223.165.115.0/24 maxlen: 24 223.165.118.0/24 maxlen: 24 223.165.119.0/24 maxlen: 24 223.165.120.0/24 maxlen: 24 223.165.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:a7:e8:32:34:3b:06:c1:2b:21:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=48b2e19f-4d31-47ca-b7d3-549289939ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c0:e4:2b:19:77:dd:f8:84:d8:63:af:fb:18: 10:60:47:6a:b7:b8:ee:fe:bb:88:95:8c:46:b9:1e: 9c:4e:aa:84:2c:f8:fc:ca:93:35:1c:50:d0:95:c7: bf:1e:20:06:6e:15:64:d4:c0:3b:43:90:b2:9f:e3: f3:aa:f4:a5:06:50:e4:df:c6:5a:97:3b:07:39:c5: c6:c3:34:fe:25:6c:c9:6c:5e:07:7d:c3:6d:f5:b2: a9:6e:45:b3:bc:0d:64:d0:7d:82:bb:d6:e9:3d:8b: 5b:13:40:98:44:38:f0:c9:47:6a:21:08:3d:0b:1a: 2b:90:5b:1c:1a:64:d3:a0:b8:64:df:3a:6a:4d:70: a4:21:cd:6c:7c:b9:6b:7a:8f:6f:f5:d4:7a:8c:08: ff:6d:1a:14:0f:3f:93:ba:f0:16:42:e6:28:37:55: 30:12:2b:b7:36:e5:1c:2e:f7:d9:58:8f:c3:8e:7c: 39:27:f5:d5:da:d3:4e:83:1f:09:13:d1:42:4a:27: f1:2f:0c:22:92:c7:ff:4a:38:25:6e:18:b0:f9:0c: 4c:94:ec:55:fb:1c:49:1c:34:2c:3a:b4:39:23:32: 40:82:cd:5d:ff:be:35:d6:c4:54:02:f1:2d:51:61: 02:0d:49:b3:33:33:9e:14:ca:ae:b9:e9:b2:7e:f6: 68:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:05:4F:30:9B:DE:F9:DA:72:37:93:02:F1:04:AB:99:59:DA:0A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl X509v3 Authority Key Identifier: keyid:89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer sbgp-ipAddrBlock: critical IPv4: 223.165.113.0/24 223.165.115.0/24 223.165.118.0-223.165.121.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:52:b9:d2:5c:3b:1d:e5:dc:bb:49:6d:e0:18:11:1a:f0:2a: a5:d2:42:fa:fb:e7:3e:b2:df:3c:20:29:cf:d2:2a:2f:84:2b: be:7d:7e:f5:b1:14:c4:7a:66:3f:b0:f2:3b:13:2a:05:b3:4e: c1:76:bb:3f:df:36:f6:0a:01:8d:90:b7:22:4f:0e:0f:e4:c2: e4:3f:ba:36:a1:3c:7f:31:2d:00:ee:1e:ca:0e:c8:fb:b8:bd: fc:02:8c:2d:46:02:38:a9:23:38:12:92:f9:9f:3f:30:80:08: 04:b5:5b:d4:5a:cc:7f:ca:5d:78:90:ce:45:83:77:55:6c:ed: 9c:16:26:64:b3:1d:d1:1e:87:27:18:6b:f1:32:0b:48:ac:fd: 3f:fe:58:74:ea:6b:fa:f0:76:65:ee:93:d3:6a:5e:44:48:6c: f8:f0:34:af:54:bb:f5:a1:c0:6f:0c:09:f9:8d:4b:48:d7:52: cd:29:a4:d9:f7:db:0a:ab:39:e0:3d:d6:aa:86:14:25:ba:19: 95:35:e6:70:dd:e5:6d:03:b5:e4:81:6b:57:86:4b:60:f4:ee: da:99:19:fc:6f:17:1e:ce:0b:91:28:8c:f8:62:d1:20:5d:de: 87:ff:d0:1c:49:3b:fa:f3:1b:20:c6:4b:5e:86:70:bd:21:2b: 3f:da:2b:1b -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEioMKfoMjQ7BsErIeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExMWE4NWYtOGYzNy00YjU0LThmYTItZDZiYzA5Njcz NzExMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NDhiMmUxOWYtNGQzMS00N2NhLWI3ZDMtNTQ5Mjg5OTM5ZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcDkKxl33fiE2GOv+xgQYEdqt7ju/ruIlYxG uR6cTqqELPj8ypM1HFDQlce/HiAGbhVk1MA7Q5Cyn+PzqvSlBlDk38ZalzsHOcXG wzT+JWzJbF4HfcNt9bKpbkWzvA1k0H2Cu9bpPYtbE0CYRDjwyUdqIQg9CxorkFsc GmTToLhk3zpqTXCkIc1sfLlreo9v9dR6jAj/bRoUDz+TuvAWQuYoN1UwEiu3NuUc LvfZWI/Djnw5J/XV2tNOgx8JE9FCSifxLwwiksf/Sjglbhiw+QxMlOxV+xxJHDQs OrQ5IzJAgs1d/7411sRUAvEtUWECDUmzMzOeFMquuemyfvZo0QIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFNMFTzCb3vnacjeTAvEEq5lZ2gr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTEx YTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJjMDk2NzM3MTEvNDNlYjhhZmItNGVjMC0z YTdmLThjOWEtMmNhMmNiZmY0Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExMWE4NWYtOGYzNy00YjU0LThm YTItZDZiYzA5NjczNzExLzNhMTFhODVmLThmMzctNGI1NC04ZmEyLWQ2YmMwOTY3 MzcxMS5jcmwwHwYDVR0jBBgwFoAUifRWhZUJdMbMuDb4v/S192fb/zUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTExYTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJj MDk2NzM3MTEuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQA36VxAwQA 36VzMAwDBAHfpXYDBAHfpXgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADVK50lw7HeXcu0lt4BgRGvAqpdJC +vvnPrLfPCApz9IqL4Qrvn1+9bEUxHpmP7DyOxMqBbNOwXa7P9829goBjZC3Ik8O D+TC5D+6NqE8fzEtAO4eyg7I+7i9/AKMLUYCOKkjOBKS+Z8/MIAIBLVb1FrMf8pd eJDORYN3VWztnBYmZLMd0R6HJxhr8TILSKz9P/5YdOpr+vB2Ze6T02peREhs+PA0 r1S79aHAbwwJ+Y1LSNdSzSmk2ffbCqs54D3WqoYUJboZlTXmcN3lbQO15IFrV4ZL YPTu2pkZ/G8XHs4LkSiM+GLRIF3eh//QHEk7+vMbIMZLXoZwvSErP9orGw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:39 2025 by rpki-client