$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa File: 14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa (raw, json) Hash identifier: T83PZasqbSAQuVK0+mH0n4gGpBKyqHuMl/fN0oxNLkE= Subject key identifier: 7C:04:BE:27:26:00:E2:57:0C:DF:C2:F7:43:E1:B7:E4:24:70:F8:D4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B7CD014DD3BF0295FAE5FC80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa Signing time: Thu 30 Jan 2025 16:12:53 +0000 ROA not before: Thu 30 Jan 2025 16:12:53 +0000 ROA not after: Wed 30 Apr 2025 15:12:53 +0000 asID: 54004 IP address blocks: 68.182.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:cd:01:4d:d3:bf:02:95:fa:e5:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 16:12:53 2025 GMT Not After : Apr 30 15:12:53 2025 GMT Subject: CN=ca8eae82-a6fa-4eda-aa59-61e8727ebd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:55:0f:96:95:b2:ed:c4:f6:2d:09:f2:37: 9b:65:a6:a9:5a:5f:01:16:e6:6a:f0:31:87:1a:57: 0b:6b:31:f6:a0:47:34:ae:a2:08:66:1f:d8:fa:c4: f6:ee:45:23:17:2f:9c:2b:4f:11:48:d0:5b:4e:64: ec:45:70:e9:51:07:b1:41:98:d4:d1:d2:e9:0c:09: c8:8e:8c:d5:0a:09:e7:e6:db:dd:9f:cd:db:36:a7: 09:5b:66:bb:45:43:cb:d9:da:87:91:ff:53:dc:74: 35:55:e0:d4:4a:5a:f7:39:8f:dd:17:7c:82:69:31: b7:10:b0:19:ef:f1:3a:62:18:13:27:74:ba:11:69: 0c:12:ae:6f:e9:89:9e:d9:d0:6f:40:e5:7a:31:32: b2:69:93:72:7d:00:d2:e7:a9:48:31:6c:e8:ac:ab: 30:27:4d:9a:73:27:33:01:bb:47:40:43:0c:cb:7c: 60:fc:9e:3d:e8:dd:b4:cb:0d:04:e2:f7:2c:2a:8d: 47:2f:a1:d1:60:a8:aa:4a:a4:af:22:8f:c9:ab:c9: 14:bf:8b:06:b6:ce:32:af:35:1c:29:f2:13:75:62: 08:d8:60:94:a5:91:20:6e:34:b2:e2:30:8d:e8:c2: 75:92:f6:70:9d:ff:8c:52:54:3b:f3:9a:d6:eb:f1: 1e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:04:BE:27:26:00:E2:57:0C:DF:C2:F7:43:E1:B7:E4:24:70:F8:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:7d:f4:e1:73:08:c9:64:da:b4:f3:0e:02:29:77:4f:2b:94: a8:8b:61:1e:86:57:99:37:8b:85:60:ac:0b:1b:8e:9a:6f:01: cb:de:42:5c:24:3b:13:4c:4c:d0:dc:94:9b:7e:fe:21:7d:3d: 40:fe:0d:92:64:15:96:8e:ad:f9:dc:ca:d1:94:65:a3:8f:6d: 07:b0:32:22:fb:a1:53:24:be:15:aa:8f:d7:ef:91:cd:4f:37: 92:2e:e6:0a:8c:47:ad:91:c6:62:db:6f:31:50:9c:cc:c9:2d: 51:69:f3:c4:22:00:52:c5:5f:14:74:1d:43:f7:5b:85:1c:c9: 65:15:96:f6:94:c0:9f:4b:ef:06:43:9f:45:d8:ce:f0:c8:b1: 0a:8f:b5:0f:8c:60:29:cd:98:c3:68:2c:03:7e:cf:cb:e0:04: 79:bc:40:9c:35:c7:c2:b6:ee:43:16:fe:07:bc:ee:63:d9:33: 7d:81:88:f8:21:2b:d9:db:21:42:69:d5:17:64:cf:d9:83:77: e1:4e:8b:69:32:47:e3:33:37:12:80:63:84:bf:d3:68:33:40: ae:46:54:05:6a:bd:ce:ee:7e:c1:d7:c0:1e:b9:de:1e:33:94: 05:44:f0:2f:89:68:92:14:0d:98:04:5b:d1:59:8e:af:8a:8e: d3:f6:ec:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3zQFN078Clfrl/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMDE2MTI1M1oXDTI1MDQzMDE1MTI1M1owLzEtMCsGA1UEAxMk Y2E4ZWFlODItYTZmYS00ZWRhLWFhNTktNjFlODcyN2ViZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnotVD5aVsu3E9i0J8jebZaapWl8BFuZq8DGH GlcLazH2oEc0rqIIZh/Y+sT27kUjFy+cK08RSNBbTmTsRXDpUQexQZjU0dLpDAnI jozVCgnn5tvdn83bNqcJW2a7RUPL2dqHkf9T3HQ1VeDUSlr3OY/dF3yCaTG3ELAZ 7/E6YhgTJ3S6EWkMEq5v6Yme2dBvQOV6MTKyaZNyfQDS56lIMWzorKswJ02acycz AbtHQEMMy3xg/J496N20yw0E4vcsKo1HL6HRYKiqSqSvIo/Jq8kUv4sGts4yrzUc KfITdWII2GCUpZEgbjSy4jCN6MJ1kvZwnf+MUlQ785rW6/EeZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwEvicmAOJXDN/C90Pht+QkcPjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTRlMDIwYTYtOGRlOS0z YjhhLTg3ZjItMTdhOWRiMWFhYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRLbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKx99OFzCMlk2rTzDgIpd08rlKiLYR6GV5k3i4VgrAsbjppvAcveQlwk OxNMTNDclJt+/iF9PUD+DZJkFZaOrfncytGUZaOPbQewMiL7oVMkvhWqj9fvkc1P N5Iu5gqMR62RxmLbbzFQnMzJLVFp88QiAFLFXxR0HUP3W4UcyWUVlvaUwJ9L7wZD n0XYzvDIsQqPtQ+MYCnNmMNoLAN+z8vgBHm8QJw1x8K27kMW/ge87mPZM32BiPgh K9nbIUJp1Rdkz9mDd+FOi2kyR+MzNxKAY4S/02gzQK5GVAVqvc7ufsHXwB653h4z lAVE8C+JaJIUDZgEW9FZjq+KjtP27O8= -----END CERTIFICATE-----Generated at Wed Feb 19 20:39:21 2025 by rpki-client