$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6bf53ba7-ccc1-3e5b-80a1-2e87f47de35a.roa File: 6bf53ba7-ccc1-3e5b-80a1-2e87f47de35a.roa (raw, json) Hash identifier: XUK6fnicd2n1rY3xeh+A919fIh1SO4onHNM+U8797Qs= Subject key identifier: A9:1F:A2:A6:9F:B6:3D:E5:8B:20:BF:5E:8E:24:BE:5D:EA:08:47:38 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848626590EB1A4A1BD56B8F60C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6bf53ba7-ccc1-3e5b-80a1-2e87f47de35a.roa Signing time: Tue 31 Dec 2024 02:00:40 +0000 ROA not before: Tue 31 Dec 2024 02:00:40 +0000 ROA not after: Mon 31 Mar 2025 01:00:40 +0000 asID: 852 IP address blocks: 173.182.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:62:65:90:eb:1a:4a:1b:d5:6b:8f:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Dec 31 02:00:40 2024 GMT Not After : Mar 31 01:00:40 2025 GMT Subject: CN=9856ef97-e990-47a8-8d33-944026bf44d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f0:2b:a1:19:5d:45:96:26:2b:3b:7d:b1:35: 51:f9:5e:c8:89:db:bc:6b:aa:70:bd:7f:7d:38:da: 33:cd:dc:02:3b:63:59:88:ed:73:86:f1:cd:08:60: b6:84:08:36:39:f9:ca:25:74:59:00:f3:60:b4:cf: 8d:07:8c:08:f6:09:4d:31:b1:01:04:df:f9:51:e5: ec:b1:75:1e:5b:6e:2e:a6:96:35:a6:3c:23:9b:55: 99:ee:58:10:95:22:e5:9e:28:69:6b:df:8f:b7:0a: 03:f8:09:d3:21:ac:87:99:56:f6:ab:3e:f3:d9:56: fb:14:1f:ac:bc:d0:29:3b:88:1b:79:ce:c2:87:c4: 31:f8:25:b2:fd:36:2b:77:b3:5f:8b:27:01:2f:07: fe:b2:35:80:df:83:f2:3e:35:a6:6c:08:f9:f4:40: 3b:87:1e:e1:68:df:a7:dc:29:5c:d5:7d:a0:ed:1e: 78:ab:d3:1a:bf:78:c1:73:c5:94:2e:e1:62:bf:31: 7a:73:35:90:f4:06:f2:58:bf:56:d8:c1:46:cb:52: 30:34:c5:b4:c1:a1:d3:db:3f:da:af:b7:d9:ac:3e: 8b:16:fa:f3:36:83:f9:e5:b4:e3:12:75:89:cc:57: 33:72:54:ae:0d:c6:e4:b6:9a:32:e4:ee:f6:11:23: 35:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1F:A2:A6:9F:B6:3D:E5:8B:20:BF:5E:8E:24:BE:5D:EA:08:47:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6bf53ba7-ccc1-3e5b-80a1-2e87f47de35a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.182.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:96:f9:6f:78:95:f2:68:72:6e:4d:c8:a8:eb:05:da:60:47: 55:47:64:ea:4d:bf:fb:d2:e2:35:7f:5e:ca:c2:70:7f:d7:8f: ba:35:20:00:ed:d9:1c:47:26:85:25:ef:c7:e4:02:c0:74:95: 2b:41:2d:81:97:1e:96:c8:a8:e4:8e:02:07:45:0c:93:9f:61: 37:01:25:d0:36:ba:8b:7f:d9:36:1d:d4:db:96:37:0a:1e:af: 88:ee:db:0d:33:ac:fc:84:9e:da:c8:9c:e1:d3:26:98:51:15: f7:80:08:d5:44:d9:b9:a6:0e:ed:a4:d2:ed:99:fa:86:a2:31: 82:5d:83:24:c1:22:6a:e5:50:fc:35:6e:90:2b:b5:d5:d7:5a: 42:a7:89:2c:ea:ee:fe:49:a8:5f:88:ed:4a:3a:a1:29:f7:7c: 24:9d:b8:6b:63:68:f1:35:b4:69:50:0d:0b:4f:21:dc:36:9d: 51:0a:33:58:e8:8f:5e:1f:17:05:7b:7b:a2:1f:85:f2:42:9f: bc:55:49:8d:e8:3d:95:bb:35:94:c4:e8:2f:81:34:f4:30:41: 9e:82:9d:a9:bb:17:e0:51:3f:10:f3:23:13:d2:d7:a5:b2:92: 20:8e:b6:33:e7:f3:d7:bc:9d:cd:02:f0:e3:be:3a:3f:20:60: 0f:98:76:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhiZZDrGkob1WuPYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTIzMTAyMDA0MFoXDTI1MDMzMTAxMDA0MFowLzEtMCsGA1UEAxMk OTg1NmVmOTctZTk5MC00N2E4LThkMzMtOTQ0MDI2YmY0NGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivAroRldRZYmKzt9sTVR+V7Iidu8a6pwvX99 ONozzdwCO2NZiO1zhvHNCGC2hAg2OfnKJXRZAPNgtM+NB4wI9glNMbEBBN/5UeXs sXUeW24uppY1pjwjm1WZ7lgQlSLlnihpa9+PtwoD+AnTIayHmVb2qz7z2Vb7FB+s vNApO4gbec7Ch8Qx+CWy/TYrd7NfiycBLwf+sjWA34PyPjWmbAj59EA7hx7haN+n 3Clc1X2g7R54q9Mav3jBc8WULuFivzF6czWQ9AbyWL9W2MFGy1IwNMW0waHT2z/a r7fZrD6LFvrzNoP55bTjEnWJzFczclSuDcbktpoy5O72ESM1gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkfoqaftj3liyC/Xo4kvl3qCEc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNmJmNTNiYTctY2NjMS0z ZTViLTgwYTEtMmU4N2Y0N2RlMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+W+W94lfJocm5NyKjrBdpgR1VHZOpNv/vS4jV/XsrCcH/Xj7o1IADt 2RxHJoUl78fkAsB0lStBLYGXHpbIqOSOAgdFDJOfYTcBJdA2uot/2TYd1NuWNwoe r4ju2w0zrPyEntrInOHTJphRFfeACNVE2bmmDu2k0u2Z+oaiMYJdgyTBImrlUPw1 bpArtdXXWkKniSzq7v5JqF+I7Uo6oSn3fCSduGtjaPE1tGlQDQtPIdw2nVEKM1jo j14fFwV7e6IfhfJCn7xVSY3oPZW7NZTE6C+BNPQwQZ6Cnam7F+BRPxDzIxPS16Wy kiCOtjPn89e8nc0C8OO+Oj8gYA+YdvM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:43:40 2025 by rpki-client