$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bd96c39f-15d3-31f2-8cc3-bd4376acf220.roa File: bd96c39f-15d3-31f2-8cc3-bd4376acf220.roa (raw, json) Hash identifier: XdZlYDWtSt4v4jSG7JZfDCcZHZQMv3C1LFRA9h9j144= Subject key identifier: 5E:EF:00:03:7A:9E:3F:40:76:B4:84:15:58:AC:38:E6:8A:EA:7B:26 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848DEDFCD133D6DFB07D2261580 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bd96c39f-15d3-31f2-8cc3-bd4376acf220.roa Signing time: Thu 13 Feb 2025 16:07:16 +0000 ROA not before: Thu 13 Feb 2025 16:07:16 +0000 ROA not after: Wed 14 May 2025 15:07:16 +0000 asID: 998 IP address blocks: 68.182.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:df:cd:13:3d:6d:fb:07:d2:26:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 13 16:07:16 2025 GMT Not After : May 14 15:07:16 2025 GMT Subject: CN=de23f5cf-2ce9-4914-a177-deb07a15250d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:91:6c:40:1f:34:b7:26:fe:96:db:12:19: 88:87:ae:78:7a:d4:11:10:05:e8:7b:bb:3b:8e:d7: f9:d3:ed:2d:22:8c:7b:8d:a4:96:6c:24:89:b5:99: 7d:19:06:b3:bc:8a:57:92:72:4e:00:98:7d:1e:0e: 9f:8c:14:97:ae:6e:31:c9:fc:09:0e:99:eb:9b:e2: 32:90:73:ff:5a:28:91:5a:e7:cc:98:2a:c1:d9:f0: 55:4c:95:85:e9:79:ab:da:e1:23:af:81:81:16:51: cc:bb:1a:0e:00:9b:12:27:20:3d:be:4d:8d:1d:d5: 75:ac:fd:30:cd:9b:d0:8a:d7:fc:a0:80:28:67:23: 80:b3:3a:f5:f3:1c:a2:1d:56:1e:b3:e9:5e:b1:ce: 1f:76:37:f4:f6:42:f4:e2:ae:82:16:62:95:5c:0a: 0d:89:a3:1e:54:ab:8b:6c:03:d3:49:99:ea:c7:48: 9e:3b:63:c2:47:10:71:e5:4a:10:fc:31:a5:0c:61: 88:cf:b0:b1:25:0a:e2:96:4a:c2:81:ca:ea:41:79: e6:88:8c:95:c5:0d:10:98:99:94:3e:19:82:cf:cf: c7:a1:1e:77:76:2c:4f:34:3a:71:57:b5:cf:c5:ca: 04:44:6e:60:6b:3f:26:56:62:bc:23:cb:81:68:32: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EF:00:03:7A:9E:3F:40:76:B4:84:15:58:AC:38:E6:8A:EA:7B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bd96c39f-15d3-31f2-8cc3-bd4376acf220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:1e:76:45:d2:fc:8e:40:d1:33:f7:97:fa:9e:8e:49:55:8c: 1a:d2:ba:3a:3d:34:a7:01:f7:0b:9d:a6:44:98:d7:a1:83:08: c4:d7:08:90:6e:13:cf:b6:c5:df:e3:6c:d8:3a:ba:fc:f4:9d: d5:89:03:52:b1:83:41:23:f6:bd:e0:5c:23:56:d9:f8:18:5b: 78:05:ef:ed:3e:cd:0a:07:39:53:d5:b1:ea:ff:20:8d:a6:62: d5:64:17:d0:ae:eb:1d:50:d7:65:6d:4c:4c:c0:21:ad:36:a9: 8c:30:7e:42:81:be:92:87:6c:20:c8:8b:02:1a:1b:c7:e4:de: 25:53:93:7c:c6:77:6d:35:f2:b0:d7:d4:2c:de:be:0b:0b:8b: 2e:db:d3:e6:21:4c:f0:98:fb:68:49:25:ad:80:1b:7a:ca:ba: e8:e6:b8:1d:23:36:7c:a3:26:de:3f:01:44:52:85:c3:ea:79: 90:7a:78:a9:88:a3:14:f4:cb:30:17:77:f8:a0:15:68:db:f8: 2a:2e:27:fc:a2:2e:2f:7e:1b:ae:b0:36:94:43:23:98:6e:f2: d9:24:f1:63:35:3e:fd:c3:28:06:c4:0b:8d:77:33:af:31:77: 2a:a3:d2:56:73:56:23:65:ad:41:74:fb:af:54:c1:f4:6b:c5: 10:ec:90:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEje380TPW37B9ImFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIxMzE2MDcxNloXDTI1MDUxNDE1MDcxNlowLzEtMCsGA1UEAxMk ZGUyM2Y1Y2YtMmNlOS00OTE0LWExNzctZGViMDdhMTUyNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5yRbEAfNLcm/pbbEhmIh654etQREAXoe7s7 jtf50+0tIox7jaSWbCSJtZl9GQazvIpXknJOAJh9Hg6fjBSXrm4xyfwJDpnrm+Iy kHP/WiiRWufMmCrB2fBVTJWF6Xmr2uEjr4GBFlHMuxoOAJsSJyA9vk2NHdV1rP0w zZvQitf8oIAoZyOAszr18xyiHVYes+lesc4fdjf09kL04q6CFmKVXAoNiaMeVKuL bAPTSZnqx0ieO2PCRxBx5UoQ/DGlDGGIz7CxJQrilkrCgcrqQXnmiIyVxQ0QmJmU PhmCz8/HoR53dixPNDpxV7XPxcoERG5gaz8mVmK8I8uBaDJuhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7vAAN6nj9AdrSEFVisOOaK6nsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmQ5NmMzOWYtMTVkMy0z MWYyLThjYzMtYmQ0Mzc2YWNmMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRLZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcedkXS/I5A0TP3l/qejklVjBrSujo9NKcB9wudpkSY16GDCMTXCJBu E8+2xd/jbNg6uvz0ndWJA1Kxg0Ej9r3gXCNW2fgYW3gF7+0+zQoHOVPVser/II2m YtVkF9Cu6x1Q12VtTEzAIa02qYwwfkKBvpKHbCDIiwIaG8fk3iVTk3zGd2018rDX 1CzevgsLiy7b0+YhTPCY+2hJJa2AG3rKuujmuB0jNnyjJt4/AURShcPqeZB6eKmI oxT0yzAXd/igFWjb+CouJ/yiLi9+G66wNpRDI5hu8tkk8WM1Pv3DKAbEC413M68x dyqj0lZzViNlrUF0+69UwfRrxRDskDA= -----END CERTIFICATE-----Generated at Wed Feb 19 20:37:43 2025 by rpki-client