$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b24a13b-7699-3314-9e8c-cc84700890eb.roa File: 3b24a13b-7699-3314-9e8c-cc84700890eb.roa (raw, json) Hash identifier: 7k8gL8EYRZcvG55hPGQld4a84ff1TuKMgWTEQFwKzGI= Subject key identifier: F5:3D:A8:51:8F:D3:08:7C:5D:93:DD:83:F9:B1:E6:EE:0C:14:9B:7B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC60A64FBDF61963DF132C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b24a13b-7699-3314-9e8c-cc84700890eb.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 19905 IP address blocks: 208.181.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:0a:64:fb:df:61:96:3d:f1:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=4f9dae51-0a3f-4787-9234-24f2fb85fcc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:36:d0:c9:c2:32:b9:7e:61:3a:fa:41:8b: a9:1e:00:ff:3c:94:fa:28:e3:04:99:e5:30:bb:27: 39:d0:60:e4:97:4d:93:fb:33:a8:49:2b:36:54:1d: 2b:d0:a8:bc:2d:c2:0b:02:90:74:04:92:84:ce:dc: 26:e1:f0:90:fb:61:9e:9f:19:bf:9d:d7:87:2d:8c: 0c:bd:b8:8d:98:63:30:24:66:a6:e4:7a:50:06:b9: db:d8:e7:16:18:6f:8d:e3:18:7a:66:6d:34:9d:06: 5c:9c:c0:0f:88:38:72:10:d9:75:e5:f9:a2:58:a3: 8c:e9:93:a2:99:02:ca:79:80:31:44:64:9f:b0:c6: 42:5f:b6:22:57:4e:dd:e3:34:cf:25:a9:82:df:24: 6a:d8:9d:8b:05:28:38:6b:e2:63:b1:26:d6:d7:28: 73:5e:a6:51:1f:b0:9d:d8:23:21:24:ce:aa:96:18: 73:f1:d9:70:4a:c1:05:5d:bb:e1:d3:de:54:8a:24: 35:3b:3a:4e:e0:af:d8:98:ba:1d:25:c7:ac:ae:36: af:55:db:d1:ba:d7:78:52:75:44:79:fb:69:28:d9: ac:37:60:d5:e4:a3:26:3f:c0:96:a9:bb:a4:a1:35: b3:0f:12:aa:25:cf:b5:bd:0b:4f:52:a4:79:0f:cb: e9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3D:A8:51:8F:D3:08:7C:5D:93:DD:83:F9:B1:E6:EE:0C:14:9B:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b24a13b-7699-3314-9e8c-cc84700890eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f5:95:cd:31:ea:8e:2e:ca:5c:6d:fc:2f:dc:0a:ac:47:1f:3b: cb:96:21:76:c2:57:73:4c:b8:b1:95:52:c4:1d:a3:51:8b:78: e9:f4:f9:3d:15:b6:8f:d1:a3:f5:30:a7:20:09:dc:e5:4f:62: 78:bb:1c:c2:37:14:1b:54:43:e9:72:b0:08:24:64:c0:33:34: b2:61:af:a0:6e:c3:39:33:f3:cb:6c:ab:6d:b0:8f:21:5f:ed: 25:8a:5e:e3:88:93:4a:e1:96:f7:fd:fa:5d:d9:cb:1e:b3:9d: 90:a8:18:4b:41:e6:6c:c5:82:f7:8f:d9:a9:23:74:24:5a:32: 17:b8:54:24:64:9e:03:74:96:a9:b0:6a:72:a3:84:4f:e6:31: aa:cd:28:ec:db:e8:8e:57:eb:b4:d9:c9:2c:69:29:91:26:eb: 29:89:92:93:7c:5e:ed:36:e0:da:8a:27:db:00:0d:95:94:6d: 93:34:5c:0b:b5:40:36:15:21:ff:d5:78:bb:98:ca:d9:82:2b: e6:4d:f4:a2:95:ff:8f:a9:57:a5:05:55:62:63:f9:56:39:32: 7b:6f:50:63:b1:30:82:da:27:21:37:aa:39:1b:da:3b:cc:06: 36:ca:da:96:e0:90:eb:57:d2:41:b8:9f:21:30:0e:32:47:69: 8a:31:0e:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgpk+99hlj3xMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk NGY5ZGFlNTEtMGEzZi00Nzg3LTkyMzQtMjRmMmZiODVmY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllM20MnCMrl+YTr6QYupHgD/PJT6KOMEmeUw uyc50GDkl02T+zOoSSs2VB0r0Ki8LcILApB0BJKEztwm4fCQ+2Genxm/ndeHLYwM vbiNmGMwJGam5HpQBrnb2OcWGG+N4xh6Zm00nQZcnMAPiDhyENl15fmiWKOM6ZOi mQLKeYAxRGSfsMZCX7YiV07d4zTPJamC3yRq2J2LBSg4a+JjsSbW1yhzXqZRH7Cd 2CMhJM6qlhhz8dlwSsEFXbvh095UiiQ1OzpO4K/YmLodJcesrjavVdvRutd4UnVE eftpKNmsN2DV5KMmP8CWqbukoTWzDxKqJc+1vQtPUqR5D8vpNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPU9qFGP0wh8XZPdg/mx5u4MFJt7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2IyNGExM2ItNzY5OS0z MzE0LTllOGMtY2M4NDcwMDg5MGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0LVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPWVzTHqji7KXG38L9wKrEcfO8uWIXbCV3NMuLGVUsQdo1GLeOn0+T0V to/Ro/UwpyAJ3OVPYni7HMI3FBtUQ+lysAgkZMAzNLJhr6Buwzkz88tsq22wjyFf 7SWKXuOIk0rhlvf9+l3Zyx6znZCoGEtB5mzFgveP2akjdCRaMhe4VCRkngN0lqmw anKjhE/mMarNKOzb6I5X67TZySxpKZEm6ymJkpN8Xu024NqKJ9sADZWUbZM0XAu1 QDYVIf/VeLuYytmCK+ZN9KKV/4+pV6UFVWJj+VY5MntvUGOxMILaJyE3qjkb2jvM BjbK2pbgkOtX0kG4nyEwDjJHaYoxDmY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:17 2025 by rpki-client