$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baba0dac-331b-3027-9ddc-06e0a9f9e1c4.roa File: baba0dac-331b-3027-9ddc-06e0a9f9e1c4.roa (raw, json) Hash identifier: hXnGHXwbHWJdSUwpQFvMi1lJFrEOqJpO0we1ZFtdhCc= Subject key identifier: 28:C4:FA:F2:54:4C:65:B3:5A:DB:07:02:64:B2:06:A2:F9:C4:CF:84 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B1F629AE9909C845DB2F1000 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baba0dac-331b-3027-9ddc-06e0a9f9e1c4.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 3356 IP address blocks: 75.156.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:29:ae:99:09:c8:45:db:2f:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=8d747804-54ae-4769-9c8b-eed266ae1e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cf:af:d9:1a:dd:70:73:00:38:1f:ae:a4:2f: 37:dc:c4:0a:4d:68:1a:95:77:78:b9:3e:a1:d9:36: fe:15:84:bf:c5:a8:0d:33:30:4c:08:61:50:0c:5b: b7:1b:a4:46:87:be:dc:01:85:bd:9d:9f:77:ed:da: ef:b3:5a:a6:df:4c:7e:81:05:a4:1f:db:6f:4a:24: 42:0f:18:8e:eb:53:e0:92:1e:40:5f:bc:06:15:85: 2c:71:2d:92:d0:ae:2e:04:bc:c9:59:e9:0d:e1:79: 84:10:c5:1b:6c:a6:fa:32:0d:85:17:2d:8a:9f:8f: 06:76:63:51:3f:69:36:b8:73:44:36:fd:36:b8:5a: 2a:a8:f9:45:c1:8d:10:fc:cc:96:60:7d:89:59:dd: 53:2a:56:1b:53:a7:f3:38:17:ab:07:7f:bd:03:e2: f7:7c:df:ba:d9:95:cc:24:77:c5:b2:a6:ff:d2:45: bf:48:11:8f:69:0e:32:42:84:80:60:e4:a1:a8:10: aa:9c:b4:52:f5:5e:ec:03:4f:de:cc:57:a7:9d:69: a3:02:ba:07:8e:e4:47:39:85:d6:e4:6a:d5:55:ed: 5f:00:10:b7:3e:77:c3:0c:a4:6e:38:3a:58:05:da: 9d:9a:5a:91:28:57:f0:c7:36:87:3f:53:01:bd:4d: 3d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C4:FA:F2:54:4C:65:B3:5A:DB:07:02:64:B2:06:A2:F9:C4:CF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baba0dac-331b-3027-9ddc-06e0a9f9e1c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 75.156.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:20:85:3c:bd:26:9d:53:c5:3f:74:31:42:37:ac:2a:c7:7f: 54:ef:0f:fe:76:a9:1f:8a:1c:fe:88:bc:d4:bc:27:30:67:ff: f2:12:8f:31:19:dd:de:b5:39:6a:6a:e0:ec:25:b3:8d:9a:12: 82:97:36:83:52:8c:43:a9:bc:a9:3f:a1:7e:0a:fc:9c:86:d6: c4:7d:e3:97:93:05:14:fc:16:6e:49:09:f4:94:1f:52:52:1b: 4d:21:a1:63:5d:93:02:a2:80:65:4a:8e:91:9b:23:e2:56:02: 26:55:e6:74:d5:c6:e0:56:a1:1f:42:ff:76:e5:15:25:59:d2: e8:7d:41:e4:92:ec:a2:ec:46:67:c3:d1:74:52:04:a5:ff:9a: 38:a2:d1:5b:ea:09:f5:fd:ee:07:a3:02:d1:6b:c1:09:e4:12: db:fc:a1:2c:5c:86:11:03:27:84:08:f8:9a:b6:70:7d:b1:0e: 41:3f:62:ac:f6:f1:23:50:9c:32:22:36:51:9b:98:f4:2b:90: 96:10:90:4b:69:b4:4b:e7:fd:97:00:cf:a7:79:aa:46:71:ae: f0:94:71:c6:d7:a8:30:e1:d8:68:ae:aa:76:f8:42:97:ed:10: 46:11:be:99:f0:6f:07:fb:69:2f:39:ea:0b:50:ba:e5:18:e7: a0:7f:0c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9imumQnIRdsvEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk OGQ3NDc4MDQtNTRhZS00NzY5LTljOGItZWVkMjY2YWUxZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s+v2RrdcHMAOB+upC833MQKTWgalXd4uT6h 2Tb+FYS/xagNMzBMCGFQDFu3G6RGh77cAYW9nZ937drvs1qm30x+gQWkH9tvSiRC DxiO61Pgkh5AX7wGFYUscS2S0K4uBLzJWekN4XmEEMUbbKb6Mg2FFy2Kn48GdmNR P2k2uHNENv02uFoqqPlFwY0Q/MyWYH2JWd1TKlYbU6fzOBerB3+9A+L3fN+62ZXM JHfFsqb/0kW/SBGPaQ4yQoSAYOShqBCqnLRS9V7sA0/ezFennWmjAroHjuRHOYXW 5GrVVe1fABC3PnfDDKRuODpYBdqdmlqRKFfwxzaHP1MBvU09PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjE+vJUTGWzWtsHAmSyBqL5xM+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmFiYTBkYWMtMzMxYi0z MDI3LTlkZGMtMDZlMGE5ZjllMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS5zzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgghTy9Jp1TxT90MUI3rCrHf1TvD/52qR+KHP6IvNS8JzBn//ISjzEZ 3d61OWpq4Owls42aEoKXNoNSjEOpvKk/oX4K/JyG1sR945eTBRT8Fm5JCfSUH1JS G00hoWNdkwKigGVKjpGbI+JWAiZV5nTVxuBWoR9C/3blFSVZ0uh9QeSS7KLsRmfD 0XRSBKX/mjii0VvqCfX97gejAtFrwQnkEtv8oSxchhEDJ4QI+Jq2cH2xDkE/Yqz2 8SNQnDIiNlGbmPQrkJYQkEtptEvn/ZcAz6d5qkZxrvCUccbXqDDh2Giuqnb4Qpft EEYRvpnwbwf7aS856gtQuuUY56B/DAI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:42 2025 by rpki-client