$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/78268fec-2d74-3b2d-b220-eb20428f1a7a.roa File: 78268fec-2d74-3b2d-b220-eb20428f1a7a.roa (raw, json) Hash identifier: xgmch4DK/odBgzFd+UJbhAwcdB5+zvU4Sy2TWD+tcCI= Subject key identifier: 30:74:6B:3D:1B:42:BE:5C:91:48:1F:B7:DB:4D:00:4F:5A:56:7A:87 Certificate issuer: /CN=3ce5ae55-06df-4120-8c12-2f433ba85d4e Certificate serial: 010D0C9F432858489BA0AEBB2780846E2B8C0D48 Authority key identifier: 85:74:1E:A9:02:9B:74:DC:DC:6B:9A:67:89:1A:E7:5A:F3:32:32:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/78268fec-2d74-3b2d-b220-eb20428f1a7a.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 167.88.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/3ce5ae55-06df-4120-8c12-2f433ba85d4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/3ce5ae55-06df-4120-8c12-2f433ba85d4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:ae:bb:27:80:84:6e:2b:8c:0d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ce5ae55-06df-4120-8c12-2f433ba85d4e Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=5d101f88-ff3b-428d-9100-e4d1bd05d765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8c:62:8c:70:8f:e6:c0:ca:58:7a:cd:45:b6: 4f:98:d1:74:d9:fa:d7:28:22:41:53:61:dd:19:84: bc:ae:a5:a5:c8:eb:4a:19:4b:8b:5b:7d:d0:9a:cc: 07:0a:f6:a9:e5:8d:72:6d:46:fd:18:ca:5a:88:5c: e8:fa:d3:a4:96:20:3a:6d:e0:6a:d1:95:ca:94:5e: 8a:8a:98:cc:52:b9:a1:32:bd:30:32:fc:04:1c:70: ee:6a:75:50:2d:9a:4b:48:6b:14:d9:3e:48:d0:e5: ca:d0:e4:12:e8:e7:5d:7c:28:af:cc:14:5b:72:23: cb:03:1f:d3:8c:80:27:a9:42:4a:1e:5b:27:16:60: e4:ab:bd:5e:35:a5:16:88:27:28:d8:99:5f:50:88: 52:42:32:b2:4f:ef:13:33:50:b7:92:3b:1b:4d:5d: a2:b8:7d:1b:d1:91:0f:37:20:9f:21:5d:8b:2d:2a: 1b:45:a4:04:7e:a7:12:a7:10:2c:a3:e2:03:f3:2a: 9e:ee:89:00:47:81:eb:ad:77:bb:c3:5b:c6:96:6e: 36:82:37:5e:7c:eb:38:51:d6:2c:12:4d:03:73:52: d2:ba:12:a2:38:b5:5a:b5:45:3e:f7:da:a8:f3:2c: 3e:52:26:8a:a3:6d:17:cd:c9:db:ac:60:dc:43:b9: 30:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:74:6B:3D:1B:42:BE:5C:91:48:1F:B7:DB:4D:00:4F:5A:56:7A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/78268fec-2d74-3b2d-b220-eb20428f1a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/3ce5ae55-06df-4120-8c12-2f433ba85d4e.crl X509v3 Authority Key Identifier: keyid:85:74:1E:A9:02:9B:74:DC:DC:6B:9A:67:89:1A:E7:5A:F3:32:32:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer sbgp-ipAddrBlock: critical IPv4: 167.88.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b4:8d:d0:6a:ad:20:d0:69:f1:dc:18:15:3c:22:c5:b0:be: b7:f5:1e:1e:69:58:cc:08:f3:3d:a1:db:18:b8:68:d3:94:c9: 15:5d:87:42:36:49:61:40:98:20:55:30:c6:c8:a1:c6:a2:9d: 30:02:f1:4a:81:2a:86:57:54:c8:6b:56:7f:f5:7d:1d:b8:4d: f1:ce:ce:18:35:6a:5f:27:5e:ba:90:88:32:31:4e:8d:ab:7c: f7:fe:b6:7d:02:99:0d:21:b5:d9:b6:a3:17:03:80:54:16:ac: 0e:0e:49:3d:03:c6:79:37:0e:01:8b:0d:d3:0f:37:45:9e:b1: ce:1d:ff:82:a1:4c:bb:b7:41:85:89:b4:c2:d8:5f:8e:77:7f: b0:f7:31:68:57:e4:13:9d:52:2a:24:24:fa:ab:6c:a4:e0:31: 02:76:81:8f:74:56:7c:79:f9:52:d1:2e:0b:53:e3:13:3d:e6: 72:fe:0f:b0:55:3c:c6:78:57:82:26:91:ed:20:ab:5f:7b:cb: b9:d0:2c:2e:44:d5:a3:91:bc:d2:b4:1a:84:9f:a3:6f:f0:c8: 78:67:5e:a8:30:0d:42:34:14:cb:48:83:3f:5c:16:4d:55:77: 48:c5:c9:4c:b1:51:30:09:c9:28:31:04:9b:e5:5a:3d:95:c7: 71:b5:98:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboK67J4CEbiuMDUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NlNWFlNTUtMDZkZi00MTIwLThjMTItMmY0MzNiYTg1 ZDRlMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk NWQxMDFmODgtZmYzYi00MjhkLTkxMDAtZTRkMWJkMDVkNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4xijHCP5sDKWHrNRbZPmNF02frXKCJBU2Hd GYS8rqWlyOtKGUuLW33QmswHCvap5Y1ybUb9GMpaiFzo+tOkliA6beBq0ZXKlF6K ipjMUrmhMr0wMvwEHHDuanVQLZpLSGsU2T5I0OXK0OQS6OddfCivzBRbciPLAx/T jIAnqUJKHlsnFmDkq71eNaUWiCco2JlfUIhSQjKyT+8TM1C3kjsbTV2iuH0b0ZEP NyCfIV2LLSobRaQEfqcSpxAso+ID8yqe7okAR4HrrXe7w1vGlm42gjdefOs4UdYs Ek0Dc1LSuhKiOLVatUU+99qo8yw+UiaKo20XzcnbrGDcQ7kwkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDB0az0bQr5ckUgft9tNAE9aVnqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zY2U1 YWU1NS0wNmRmLTQxMjAtOGMxMi0yZjQzM2JhODVkNGUvNzgyNjhmZWMtMmQ3NC0z YjJkLWIyMjAtZWIyMDQyOGYxYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2NlNWFlNTUtMDZkZi00MTIwLThj MTItMmY0MzNiYTg1ZDRlLzNjZTVhZTU1LTA2ZGYtNDEyMC04YzEyLTJmNDMzYmE4 NWQ0ZS5jcmwwHwYDVR0jBBgwFoAUhXQeqQKbdNzca5pniRrnWvMyMggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zY2U1YWU1NS0wNmRmLTQxMjAtOGMxMi0yZjQz M2JhODVkNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1g6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO0jdBqrSDQafHcGBU8IsWwvrf1Hh5pWMwI8z2h2xi4aNOUyRVdh0I2 SWFAmCBVMMbIocainTAC8UqBKoZXVMhrVn/1fR24TfHOzhg1al8nXrqQiDIxTo2r fPf+tn0CmQ0htdm2oxcDgFQWrA4OST0Dxnk3DgGLDdMPN0Wesc4d/4KhTLu3QYWJ tMLYX453f7D3MWhX5BOdUiokJPqrbKTgMQJ2gY90Vnx5+VLRLgtT4xM95nL+D7BV PMZ4V4Imke0gq197y7nQLC5E1aORvNK0GoSfo2/wyHhnXqgwDUI0FMtIgz9cFk1V d0jFyUyxUTAJySgxBJvlWj2Vx3G1mNg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:11 2025 by rpki-client