$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c5ddb776-a601-3f1f-8132-2290f1698755.roa File: c5ddb776-a601-3f1f-8132-2290f1698755.roa (raw, json) Hash identifier: 3qqFj17lGqtDHN2yDXPRp6cMyfIGVNFxi/47x7nkhGQ= Subject key identifier: AF:29:F9:84:20:BF:96:B3:33:51:27:55:22:1E:9C:00:C1:B0:2D:DA Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC61033FE383B60C05CB700 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c5ddb776-a601-3f1f-8132-2290f1698755.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 15247 IP address blocks: 207.194.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:10:33:fe:38:3b:60:c0:5c:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=1f418e09-ee64-4abc-a9d2-3ee2f24a789e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7a:16:72:0c:56:66:fa:69:e2:c9:60:72:70: bb:58:b6:2a:6e:6d:a8:4b:a7:3e:94:82:07:f6:76: a3:74:88:a0:82:04:0d:7e:12:d1:bb:e3:bb:dd:cd: 8e:76:61:0c:e7:33:de:fd:e1:27:da:66:67:d9:63: 58:a2:92:23:61:dd:7a:22:e8:7a:b0:33:ec:ca:ac: 00:f5:d6:69:a1:d6:fd:17:5a:73:6d:f9:48:51:b9: df:58:72:ce:7f:33:d3:97:64:4a:24:67:60:8d:03: e7:58:9f:94:88:1a:3f:93:f5:83:c2:f5:11:e7:6d: 5d:8c:6a:c9:df:09:7e:37:df:6b:3b:5e:ef:38:8f: 09:cd:4d:32:f5:67:c8:ee:fb:67:b6:18:7d:73:d1: dc:26:26:84:56:a3:82:2a:e3:02:73:8d:8d:3e:6d: 40:4a:73:83:94:58:fc:dc:64:36:ba:70:a8:5f:19: 21:b5:61:19:fd:fc:b7:ef:d2:f9:3a:bd:89:8b:77: 53:79:a7:29:0a:06:fc:82:e1:be:99:b2:8e:7b:2a: 4b:8d:78:68:1b:9a:a0:55:23:bd:69:69:f6:0e:ad: 1e:ac:2b:53:ed:57:dc:83:5c:3f:04:96:0e:b0:6d: 47:68:ae:f8:b0:db:7a:59:45:6d:d3:c6:d9:e9:a7: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:29:F9:84:20:BF:96:B3:33:51:27:55:22:1E:9C:00:C1:B0:2D:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c5ddb776-a601-3f1f-8132-2290f1698755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:58:74:d6:bd:4f:d2:4d:88:1a:f1:b1:e1:44:d6:1a:e8:6f: 29:f0:37:3a:d3:be:c0:d2:4c:eb:13:12:a9:14:b4:6b:6b:35: fe:da:b6:e0:ae:3c:1f:59:6e:3b:6e:de:ea:a8:9d:0a:a0:9b: 44:b4:89:2b:92:25:11:19:fa:d1:2a:7f:6f:77:fd:32:5a:9e: 80:f2:e9:71:04:25:6a:36:08:34:01:30:82:eb:fa:3e:b8:02: 6a:62:98:54:3e:c9:c6:7a:49:e8:1c:de:6a:96:a3:8f:51:14: 02:5c:52:05:6d:54:16:37:73:7a:47:4d:f0:bf:32:d1:9a:de: d4:e1:b8:13:5d:8d:1d:98:bf:37:f3:c7:50:1d:d5:62:c4:aa: cf:1c:f5:40:86:6c:a2:5f:22:dd:24:d7:b8:49:f6:60:a6:79: 80:5a:3f:b4:2d:f7:17:ce:38:2a:87:09:6f:e0:d3:43:25:f4: bc:6d:d9:8a:3d:87:a5:96:18:64:1a:93:71:23:b7:b1:2d:48: c6:14:f0:25:08:10:39:40:60:ca:41:10:c7:7c:e8:27:38:2d: 9a:42:6c:21:3a:43:04:3c:72:b1:38:ed:04:0d:cd:85:b8:70: 0a:9d:a9:b7:70:70:49:2c:e3:d4:f6:6d:57:17:8b:46:5d:0c: 69:47:4e:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhAz/jg7YMBctwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk MWY0MThlMDktZWU2NC00YWJjLWE5ZDItM2VlMmYyNGE3ODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnoWcgxWZvpp4slgcnC7WLYqbm2oS6c+lIIH 9najdIigggQNfhLRu+O73c2OdmEM5zPe/eEn2mZn2WNYopIjYd16Iuh6sDPsyqwA 9dZpodb9F1pzbflIUbnfWHLOfzPTl2RKJGdgjQPnWJ+UiBo/k/WDwvUR521djGrJ 3wl+N99rO17vOI8JzU0y9WfI7vtnthh9c9HcJiaEVqOCKuMCc42NPm1ASnODlFj8 3GQ2unCoXxkhtWEZ/fy379L5Or2Ji3dTeacpCgb8guG+mbKOeypLjXhoG5qgVSO9 aWn2Dq0erCtT7Vfcg1w/BJYOsG1HaK74sNt6WUVt08bZ6acSCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8p+YQgv5azM1EnVSIenADBsC3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzVkZGI3NzYtYTYwMS0z ZjFmLTgxMzItMjI5MGYxNjk4NzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8LQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNYdNa9T9JNiBrxseFE1hrobynwNzrTvsDSTOsTEqkUtGtrNf7atuCu PB9Zbjtu3uqonQqgm0S0iSuSJREZ+tEqf293/TJanoDy6XEEJWo2CDQBMILr+j64 AmpimFQ+ycZ6Segc3mqWo49RFAJcUgVtVBY3c3pHTfC/MtGa3tThuBNdjR2Yvzfz x1Ad1WLEqs8c9UCGbKJfIt0k17hJ9mCmeYBaP7Qt9xfOOCqHCW/g00Ml9Lxt2Yo9 h6WWGGQak3Ejt7EtSMYU8CUIEDlAYMpBEMd86Cc4LZpCbCE6QwQ8crE47QQNzYW4 cAqdqbdwcEks49T2bVcXi0ZdDGlHTug= -----END CERTIFICATE-----Generated at Wed Feb 19 20:45:54 2025 by rpki-client