$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b608ddea-454c-361a-8b45-9275215542e8.roa File: b608ddea-454c-361a-8b45-9275215542e8.roa (raw, json) Hash identifier: qcc8l6Nc+K4l0D1ifHFS9+uPEwBNOXevRkrsND0EMeo= Subject key identifier: E7:0A:77:01:49:AF:9D:6D:69:F8:70:7B:19:04:DC:2C:8A:FD:FC:DF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BBBB79F9BBB7B6BC049BDA40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b608ddea-454c-361a-8b45-9275215542e8.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 173.182.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:79:f9:bb:b7:b6:bc:04:9b:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=3a9f20e5-4868-4448-b8f6-c48a6c2bcad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bb:37:4a:94:57:50:de:22:14:3f:da:ad:06: f3:85:5d:f8:5d:7f:6b:ef:57:e4:a1:3a:05:c9:bd: 35:8f:cc:d0:8f:f4:b6:ef:29:42:be:3d:54:af:84: b1:b9:e1:93:7c:94:d6:28:1b:fa:63:21:7c:41:48: 22:95:fb:42:b1:7e:5c:34:93:ca:6c:bd:51:2e:e1: 39:6a:38:c4:4d:5d:14:02:cb:df:31:b5:5e:15:e3: d4:6c:d4:4d:78:38:87:2b:53:08:3f:a7:59:08:aa: ca:e8:ae:60:bc:d6:ac:07:d4:ca:32:50:ce:a6:9e: 42:33:1a:61:f1:54:56:58:d1:16:58:ab:7d:62:4f: 82:90:d3:7b:29:e8:fd:59:b3:a4:ab:f3:5b:31:99: 67:e1:2b:5e:6a:ad:07:85:c9:a6:66:0c:06:7d:34: f4:d8:68:aa:d7:71:22:e9:a6:a9:75:f9:3a:f9:26: 88:cd:66:85:7a:26:17:78:d1:6e:ff:c3:a1:c8:9b: ad:19:a0:6b:bf:71:cc:0a:dd:57:e5:5b:3f:83:4d: 14:51:b4:be:d1:17:24:fd:d1:c0:e9:ac:7f:08:f8: c3:3b:de:d7:0e:6c:5e:84:62:0c:5e:7f:d4:0d:33: 4c:3b:d4:ab:e3:b1:b9:a1:8d:fa:8f:9d:f3:88:7c: c8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0A:77:01:49:AF:9D:6D:69:F8:70:7B:19:04:DC:2C:8A:FD:FC:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b608ddea-454c-361a-8b45-9275215542e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.182.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:29:e2:1b:b6:2f:b6:12:fb:39:8a:bb:16:d2:7e:f3:54:fc: 96:fb:30:f4:99:76:23:29:1d:3e:34:ee:83:53:a9:04:78:69: 4d:1e:6a:12:96:aa:0e:5c:1a:88:43:48:ec:26:a3:45:b5:cf: 1d:f2:05:2c:68:0c:4c:b4:7e:9d:94:06:28:42:e8:c0:24:96: 77:dd:33:8c:48:ab:3d:00:fb:af:7b:5d:4e:54:0f:85:a5:9d: 25:66:b1:65:35:c8:00:c0:66:22:f0:fc:bd:c4:75:5b:a4:27: a1:15:5b:00:98:08:04:30:31:32:ad:3b:70:50:87:90:54:1d: 2f:72:7d:f3:77:c3:82:2a:c8:09:84:d4:c9:a2:24:7b:76:78: 2b:5e:5d:8e:83:2b:3a:07:bb:45:34:7b:31:82:31:df:40:44: c4:75:99:05:1c:a2:10:0a:95:08:77:b8:3f:ae:fa:8b:b1:80: df:57:c0:99:bd:aa:fd:67:89:d5:d5:4e:71:ba:ee:fa:eb:a0: 00:a6:61:5a:48:c6:ab:5b:f7:38:5f:57:ae:12:d9:72:ee:77: 04:35:a4:83:bc:8c:8e:a8:39:ab:0f:47:c3:ef:ca:e7:cd:2c: f3:1f:ae:12:ff:45:57:84:d0:5c:f2:70:ed:9c:a5:e8:c2:86: 39:a3:d0:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3n5u7e2vASb2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk M2E5ZjIwZTUtNDg2OC00NDQ4LWI4ZjYtYzQ4YTZjMmJjYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLs3SpRXUN4iFD/arQbzhV34XX9r71fkoToF yb01j8zQj/S27ylCvj1Ur4SxueGTfJTWKBv6YyF8QUgilftCsX5cNJPKbL1RLuE5 ajjETV0UAsvfMbVeFePUbNRNeDiHK1MIP6dZCKrK6K5gvNasB9TKMlDOpp5CMxph 8VRWWNEWWKt9Yk+CkNN7Kej9WbOkq/NbMZln4Steaq0HhcmmZgwGfTT02Giq13Ei 6aapdfk6+SaIzWaFeiYXeNFu/8OhyJutGaBrv3HMCt1X5Vs/g00UUbS+0Rck/dHA 6ax/CPjDO97XDmxehGIMXn/UDTNMO9Sr47G5oY36j53ziHzI8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcKdwFJr51tafhwexkE3CyK/fzfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjYwOGRkZWEtNDU0Yy0z NjFhLThiNDUtOTI3NTIxNTU0MmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8p4hu2L7YS+zmKuxbSfvNU/Jb7MPSZdiMpHT407oNTqQR4aU0eahKW qg5cGohDSOwmo0W1zx3yBSxoDEy0fp2UBihC6MAklnfdM4xIqz0A+697XU5UD4Wl nSVmsWU1yADAZiLw/L3EdVukJ6EVWwCYCAQwMTKtO3BQh5BUHS9yffN3w4IqyAmE 1MmiJHt2eCteXY6DKzoHu0U0ezGCMd9ARMR1mQUcohAKlQh3uD+u+ouxgN9XwJm9 qv1nidXVTnG67vrroACmYVpIxqtb9zhfV64S2XLudwQ1pIO8jI6oOasPR8PvyufN LPMfrhL/RVeE0FzycO2cpejChjmj0Pg= -----END CERTIFICATE-----Generated at Sun Feb 16 20:54:00 2025 by rpki-client