$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/131e157b-0c1a-371c-9978-88edce726378.roa File: 131e157b-0c1a-371c-9978-88edce726378.roa (raw, json) Hash identifier: 5zogIfv1r3ARuRty/hBPpJ+mJhclsMHzbXCobWpvSyM= Subject key identifier: 0C:37:F3:FA:3A:A4:50:87:DD:BA:72:0B:77:B0:8A:D9:49:CC:5F:5E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BBBB79EA00CE35D7F135EC80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/131e157b-0c1a-371c-9978-88edce726378.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 173.182.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:79:ea:00:ce:35:d7:f1:35:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=28b465f5-43cc-400d-ac0f-a59ce5f6b81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:59:9a:76:ac:14:1c:ab:c7:df:81:ab:af: 6f:f3:dc:da:7f:69:33:3d:cc:93:fc:af:e1:e4:f3: 98:30:4d:f6:2d:04:fd:f6:fd:56:bc:2f:f0:b9:20: 68:88:5c:89:71:d8:ed:5f:be:7e:00:e9:f7:49:6a: 03:24:c8:f7:7c:cb:df:ae:0b:95:a5:03:53:04:26: ef:ce:62:05:0a:11:35:1e:3f:80:c2:01:cf:94:ab: f2:57:f4:43:02:6c:04:cc:62:88:20:b3:41:86:1c: 8e:fd:9c:a7:3a:fd:1a:fe:e5:84:36:59:ad:34:71: cd:7f:2c:6e:e7:8d:6c:f3:c3:af:b3:ff:19:49:86: 31:3b:8a:f3:e8:72:60:ab:45:98:9f:00:a2:f6:14: 83:49:39:5b:ff:b6:3e:e1:83:0f:ae:27:95:f1:18: cd:87:82:b0:9c:f3:3e:18:eb:b5:02:51:74:87:08: 43:8e:d2:dc:f3:21:ab:10:76:c7:ed:e9:ae:1d:b5: 7d:38:02:fe:90:75:e7:4c:fd:41:02:52:3b:d1:92: cc:1d:0a:20:d4:cb:5a:7b:88:d1:87:7c:f8:d1:40: 8e:1d:d1:43:4b:b6:3a:f3:9e:37:84:39:01:79:91: ea:03:fa:24:48:da:cd:66:38:12:26:53:1e:ab:ac: 45:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:37:F3:FA:3A:A4:50:87:DD:BA:72:0B:77:B0:8A:D9:49:CC:5F:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/131e157b-0c1a-371c-9978-88edce726378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.182.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:06:5e:e9:f5:0f:af:1b:0e:d9:4a:9f:68:d5:64:af:7f:4a: ed:5f:c2:8a:e2:ab:c8:00:23:b3:07:9e:99:d5:2e:ba:43:cc: ea:bc:5e:a9:4d:2e:7a:80:ae:a1:63:c3:13:3d:c7:42:db:49: 40:c5:a5:c4:0b:7a:70:c6:ce:0b:a1:99:cd:8a:e9:28:58:7a: e9:b0:8e:96:13:73:a9:6a:78:e1:2c:a0:45:49:84:87:91:52: ab:06:7a:00:94:15:40:da:80:ab:1a:5d:84:cf:5b:20:9a:02: 73:55:a3:65:62:55:29:13:70:e9:46:29:0b:e9:14:78:29:2e: 2c:b6:28:5b:b8:cb:a0:73:e1:bf:4e:4a:98:91:23:3d:40:a2: a0:15:22:10:b4:d4:6e:84:fa:82:61:d4:a8:12:e6:ee:6b:9d: 5c:92:12:2b:f8:55:5a:21:a8:9a:66:24:30:97:fe:ec:1f:97: 69:74:32:bc:58:9d:7b:6e:4d:5e:ee:6e:83:10:64:9e:0a:c7: 84:73:47:91:a4:cd:2c:97:2c:fc:6d:c9:76:3a:3e:db:bd:ad: 40:c5:49:c9:a3:56:08:dd:a4:b5:ff:d6:41:a6:c1:ed:9b:18: 7a:a4:dd:17:6d:b3:31:3b:24:10:e2:ff:2c:1c:96:d1:e6:e9: a3:33:76:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3nqAM411/E17IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MjhiNDY1ZjUtNDNjYy00MDBkLWFjMGYtYTU5Y2U1ZjZiODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH5ZmnasFByrx9+Bq69v89zaf2kzPcyT/K/h 5POYME32LQT99v1WvC/wuSBoiFyJcdjtX75+AOn3SWoDJMj3fMvfrguVpQNTBCbv zmIFChE1Hj+AwgHPlKvyV/RDAmwEzGKIILNBhhyO/ZynOv0a/uWENlmtNHHNfyxu 541s88Ovs/8ZSYYxO4rz6HJgq0WYnwCi9hSDSTlb/7Y+4YMPrieV8RjNh4KwnPM+ GOu1AlF0hwhDjtLc8yGrEHbH7emuHbV9OAL+kHXnTP1BAlI70ZLMHQog1Mtae4jR h3z40UCOHdFDS7Y68543hDkBeZHqA/okSNrNZjgSJlMeq6xF9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAw38/o6pFCH3bpyC3ewitlJzF9eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTMxZTE1N2ItMGMxYS0z NzFjLTk5NzgtODhlZGNlNzI2Mzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUGXun1D68bDtlKn2jVZK9/Su1fworiq8gAI7MHnpnVLrpDzOq8XqlN LnqArqFjwxM9x0LbSUDFpcQLenDGzguhmc2K6ShYeumwjpYTc6lqeOEsoEVJhIeR UqsGegCUFUDagKsaXYTPWyCaAnNVo2ViVSkTcOlGKQvpFHgpLiy2KFu4y6Bz4b9O SpiRIz1AoqAVIhC01G6E+oJh1KgS5u5rnVySEiv4VVohqJpmJDCX/uwfl2l0MrxY nXtuTV7uboMQZJ4Kx4RzR5GkzSyXLPxtyXY6Ptu9rUDFScmjVgjdpLX/1kGmwe2b GHqk3RdtszE7JBDi/ywcltHm6aMzdtc= -----END CERTIFICATE-----Generated at Sun Feb 16 20:59:34 2025 by rpki-client