$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/54eab883-39fe-3183-a9f2-014900f1b617.roa File: 54eab883-39fe-3183-a9f2-014900f1b617.roa (raw, json) Hash identifier: HrbFdvhQteFORNcIwyIOsDSI/9dAaPGR0JrAQfDGZqs= Subject key identifier: 0A:E3:1B:A1:B3:93:14:61:9F:28:96:64:62:C0:59:03:E4:92:B9:85 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BBBB7C9E4D6757B628221480 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/54eab883-39fe-3183-a9f2-014900f1b617.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 209.202.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:7c:9e:4d:67:57:b6:28:22:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=cbefadc5-305a-4d26-8604-7e7dca09da40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:f8:e1:63:93:c9:26:87:aa:29:51:09:51:37: 85:dc:27:87:45:21:94:69:89:95:f5:18:a1:cb:3e: 63:bd:55:61:ba:20:9c:0a:ec:c9:fa:90:7f:5f:fd: 82:68:d0:f5:14:f4:aa:fc:fe:dc:cf:72:31:2e:59: 8a:73:04:4b:95:4d:83:f0:69:31:8c:1b:e7:c6:f3: 91:a8:77:9f:57:cd:22:21:7a:0d:96:51:0c:d3:41: 40:a1:99:40:5e:88:b1:76:10:1d:fe:36:0d:81:09: 54:fe:f2:90:81:22:5f:58:34:86:b9:03:de:54:5c: b5:42:71:0b:91:76:1d:49:90:2c:93:d8:b4:6c:e7: e0:64:e0:3d:47:db:89:87:bf:f1:33:95:c4:cb:20: 48:05:7d:17:48:26:d7:b9:c0:e1:13:62:63:2f:f3: fc:96:db:c9:9c:3a:a7:e6:6a:81:2c:74:62:a2:9e: f3:38:1f:03:52:f9:98:91:18:eb:65:1e:7d:77:99: a3:09:ea:2a:65:64:fc:22:09:30:6f:bb:b5:50:ae: 73:93:c5:b7:0e:a7:93:89:84:ba:c9:6f:aa:a2:be: 53:60:f6:6a:1c:59:79:e6:08:ad:6a:e8:f3:08:08: d2:c0:bc:66:18:8e:4c:bb:84:50:26:79:17:ec:89: 9f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E3:1B:A1:B3:93:14:61:9F:28:96:64:62:C0:59:03:E4:92:B9:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/54eab883-39fe-3183-a9f2-014900f1b617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.202.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6c:40:b4:1c:3b:a5:b2:5a:b6:6e:4b:5d:71:b8:5d:6e:8c: 7c:a4:92:be:e5:60:41:db:b1:56:ef:61:74:01:56:ce:70:f8: 5f:0b:77:be:64:a6:c2:6c:e0:91:03:a4:78:25:ce:18:d2:cc: 60:a8:6a:a6:b8:01:9c:e2:94:7e:02:69:d8:b9:b8:22:4a:74: 0a:54:21:46:06:a2:96:bc:09:6f:44:4e:f0:69:17:b0:d7:d1: a7:eb:93:9e:19:c5:f9:c6:55:df:96:90:e4:82:e6:d0:9f:6d: 29:37:b8:15:4c:42:9a:ca:d0:44:79:56:6b:13:d0:cd:01:be: fa:a4:4f:91:46:b3:27:90:b1:8f:c3:8e:b3:1c:e7:9c:8a:92: b9:68:d3:14:58:de:79:f7:42:e9:5b:97:3d:20:6c:d7:94:0c: 11:89:a4:34:1f:b9:8a:a4:e8:bc:3b:fe:cb:0e:83:6b:ee:9c: 3f:04:10:29:86:a9:0b:0a:a2:81:b3:6d:c3:c6:55:0b:72:64: 75:d0:cb:b5:86:de:f8:20:13:a9:33:84:67:b3:0a:a4:98:66: 43:e6:e2:63:93:74:f0:eb:f8:cc:cd:ab:f2:25:96:12:ba:71: e5:3a:02:dd:2c:49:6e:8d:57:b9:a0:7b:d6:c0:8f:97:e0:e4: 5f:1f:fa:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3yeTWdXtigiFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk Y2JlZmFkYzUtMzA1YS00ZDI2LTg2MDQtN2U3ZGNhMDlkYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+vjhY5PJJoeqKVEJUTeF3CeHRSGUaYmV9Rih yz5jvVVhuiCcCuzJ+pB/X/2CaND1FPSq/P7cz3IxLlmKcwRLlU2D8GkxjBvnxvOR qHefV80iIXoNllEM00FAoZlAXoixdhAd/jYNgQlU/vKQgSJfWDSGuQPeVFy1QnEL kXYdSZAsk9i0bOfgZOA9R9uJh7/xM5XEyyBIBX0XSCbXucDhE2JjL/P8ltvJnDqn 5mqBLHRiop7zOB8DUvmYkRjrZR59d5mjCeoqZWT8Igkwb7u1UK5zk8W3DqeTiYS6 yW+qor5TYPZqHFl55gitaujzCAjSwLxmGI5Mu4RQJnkX7ImfsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArjG6GzkxRhnyiWZGLAWQPkkrmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTRlYWI4ODMtMzlmZS0z MTgzLWE5ZjItMDE0OTAwZjFiNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0cpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlsQLQcO6WyWrZuS11xuF1ujHykkr7lYEHbsVbvYXQBVs5w+F8Ld75k psJs4JEDpHglzhjSzGCoaqa4AZzilH4Cadi5uCJKdApUIUYGopa8CW9ETvBpF7DX 0afrk54ZxfnGVd+WkOSC5tCfbSk3uBVMQprK0ER5VmsT0M0BvvqkT5FGsyeQsY/D jrMc55yKkrlo0xRY3nn3Qulblz0gbNeUDBGJpDQfuYqk6Lw7/ssOg2vunD8EECmG qQsKooGzbcPGVQtyZHXQy7WG3vggE6kzhGezCqSYZkPm4mOTdPDr+MzNq/IllhK6 ceU6At0sSW6NV7mge9bAj5fg5F8f+iI= -----END CERTIFICATE-----Generated at Sun Feb 16 20:56:33 2025 by rpki-client