$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e02c53ca-011b-3920-8c42-11cd63c0df14.roa File: e02c53ca-011b-3920-8c42-11cd63c0df14.roa (raw, json) Hash identifier: fS1jR0qzpksKFPO/c2zwUOY3Lsfhv0kR7as2ZcpMqAk= Subject key identifier: 1F:AC:7B:9F:3E:B6:74:18:73:5E:0B:11:F2:A3:51:0A:62:2B:F1:95 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC60B2B6C8F081301106B80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e02c53ca-011b-3920-8c42-11cd63c0df14.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 15247 IP address blocks: 209.89.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:0b:2b:6c:8f:08:13:01:10:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=c0ad6e69-7ba4-483a-84f0-1b55524302f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e5:39:c6:3b:d8:5d:8c:08:63:cf:ac:b9:9d: 37:c8:31:c1:1c:c8:b9:31:07:18:20:05:5b:63:21: 5a:51:b3:da:70:cd:c5:da:49:d3:cb:72:f5:4c:61: c6:e6:13:e8:c8:16:69:bd:78:bf:5b:7a:b7:fe:2f: 3d:10:af:41:a5:39:a6:49:00:c5:bb:a4:87:d6:3f: f0:77:07:0b:7f:e7:24:d3:36:d6:a7:1f:e0:ed:af: 7d:11:2c:dc:63:4e:52:ce:74:00:b9:c5:14:16:ec: 05:86:4c:3d:1e:4e:e7:f8:1d:0d:4c:7e:1b:dc:c6: 05:23:a8:6e:c1:52:7c:a3:eb:01:f4:ab:85:3f:f8: 73:43:17:42:1e:91:f0:43:36:c6:88:18:72:ae:05: 97:f2:d3:bc:35:56:87:d2:19:45:7d:b3:6e:ba:f8: 68:99:66:14:20:e9:6b:4a:c4:9f:00:f2:33:b4:95: cf:22:e2:df:12:cf:39:73:2c:f5:1d:bc:11:63:f9: 24:23:e4:a4:b8:98:05:10:38:98:21:89:cf:6c:ca: ac:15:46:91:9e:45:ab:aa:4b:af:79:2a:10:b2:bc: d9:13:0a:69:7c:30:b6:f3:b5:fd:4a:1c:55:76:e2: aa:db:b1:96:09:46:ea:a7:be:f1:3a:d3:a0:33:3f: a3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AC:7B:9F:3E:B6:74:18:73:5E:0B:11:F2:A3:51:0A:62:2B:F1:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e02c53ca-011b-3920-8c42-11cd63c0df14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:25:c9:dc:21:88:dd:9b:cf:04:2c:a5:05:d7:5d:bc:1f:a1: 5e:fa:f3:cf:4e:6d:96:e6:ed:33:2b:81:da:e6:f4:5e:f4:60: 3f:4c:66:71:e9:ea:bd:98:a3:93:8f:3c:80:b7:43:2b:22:0d: 94:9b:20:5c:20:0a:54:0c:db:0f:46:f2:b4:3c:55:e1:b7:c9: 8c:6d:3c:b5:90:c3:cc:0d:a6:f3:42:53:94:14:5b:31:09:fe: 9c:fe:b7:65:b0:ca:26:8d:7e:1b:2e:77:b8:31:3c:27:4d:e5: 6e:63:36:6a:4b:3c:77:02:c7:89:50:b0:1b:40:df:bf:86:09: 01:45:79:8a:48:ad:73:f7:19:8b:2e:c6:0f:6d:31:0d:b5:2c: 7b:29:a5:25:f7:98:81:6b:32:53:56:8d:3b:2f:29:93:68:e2: 20:01:da:86:0c:71:86:29:4d:0b:22:74:e5:7a:d7:6d:ec:49: ba:54:32:2d:a4:be:9d:8f:c4:a0:8b:90:dc:34:f9:de:56:97: 11:f8:3f:0a:37:42:d9:b8:c3:6e:f7:cf:d4:8e:ee:5b:be:f9: c5:d8:ff:3d:ab:89:78:6c:b6:f6:05:f7:89:5c:21:db:31:d0: 81:42:59:c1:cf:26:55:44:03:79:5c:4c:05:06:e7:8e:73:16: 42:5a:66:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgsrbI8IEwEQa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YzBhZDZlNjktN2JhNC00ODNhLTg0ZjAtMWI1NTUyNDMwMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuU5xjvYXYwIY8+suZ03yDHBHMi5MQcYIAVb YyFaUbPacM3F2knTy3L1TGHG5hPoyBZpvXi/W3q3/i89EK9BpTmmSQDFu6SH1j/w dwcLf+ck0zbWpx/g7a99ESzcY05SznQAucUUFuwFhkw9Hk7n+B0NTH4b3MYFI6hu wVJ8o+sB9KuFP/hzQxdCHpHwQzbGiBhyrgWX8tO8NVaH0hlFfbNuuvhomWYUIOlr SsSfAPIztJXPIuLfEs85cyz1HbwRY/kkI+SkuJgFEDiYIYnPbMqsFUaRnkWrqkuv eSoQsrzZEwppfDC287X9ShxVduKq27GWCUbqp77xOtOgMz+jfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+se58+tnQYc14LEfKjUQpiK/GVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTAyYzUzY2EtMDExYi0z OTIwLThjNDItMTFjZDYzYzBkZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0VlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANglydwhiN2bzwQspQXXXbwfoV76889ObZbm7TMrgdrm9F70YD9MZnHp 6r2Yo5OPPIC3QysiDZSbIFwgClQM2w9G8rQ8VeG3yYxtPLWQw8wNpvNCU5QUWzEJ /pz+t2WwyiaNfhsud7gxPCdN5W5jNmpLPHcCx4lQsBtA37+GCQFFeYpIrXP3GYsu xg9tMQ21LHsppSX3mIFrMlNWjTsvKZNo4iAB2oYMcYYpTQsidOV6123sSbpUMi2k vp2PxKCLkNw0+d5WlxH4Pwo3Qtm4w273z9SO7lu++cXY/z2riXhstvYF94lcIdsx 0IFCWcHPJlVEA3lcTAUG545zFkJaZmM= -----END CERTIFICATE-----Generated at Wed Feb 19 20:42:36 2025 by rpki-client