$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/ff3090a6-0365-3319-a5db-b97f2065e36d.roa File: ff3090a6-0365-3319-a5db-b97f2065e36d.roa (raw, json) Hash identifier: tepWwoypFgVuBkdlbFsm1/1HGf0TREoeFlFbZlaQhwo= Subject key identifier: 58:AC:DE:E1:8C:94:C2:5B:4B:0D:C6:31:34:B3:E0:EE:D9:51:56:11 Certificate issuer: /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8 Certificate serial: 010D0C9F43285848C150D2CF9E6F388AC5238700 Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/ff3090a6-0365-3319-a5db-b97f2065e36d.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 26677 IP address blocks: 172.99.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:d2:cf:9e:6f:38:8a:c5:23:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=775a33a6-5275-4a45-9e39-296832cf227d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7e:18:3a:0d:09:cd:b4:67:54:87:1c:ed:c7: b2:21:e0:db:b2:18:b4:1f:50:7b:87:5b:34:7c:75: cb:e8:1d:db:a4:5d:be:19:fc:a0:98:48:15:af:f0: 54:50:86:ae:dc:46:35:78:3b:32:44:2a:45:0e:d4: e5:fc:3c:ea:58:57:13:c6:2d:1d:8b:52:35:36:12: 30:2c:cf:6c:6f:23:a5:61:68:5f:11:1a:91:8c:fb: 67:cf:bb:dc:33:56:b2:9a:7e:9c:13:01:3c:ad:24: 3c:c2:e6:03:0b:b2:55:ce:c0:74:e6:32:38:05:1d: 53:b7:ac:d4:42:75:ae:28:32:ac:a9:f7:00:c3:94: bc:39:e6:d4:45:b4:d3:96:d7:d2:be:7f:06:59:dd: ad:74:02:f8:e7:68:ac:db:dd:1e:f3:7a:01:61:56: 15:f8:be:22:6c:76:bc:f9:e0:52:ff:43:b5:c7:33: 33:26:01:57:97:58:f2:68:b5:ae:8a:62:7b:be:4e: d3:54:45:c3:b4:85:4e:44:5b:7f:84:79:24:ac:ff: 43:61:aa:e5:53:f3:c5:8a:09:5e:67:c8:01:0e:cd: 93:09:3b:a0:64:92:a4:57:13:35:47:48:fa:92:c4: 75:60:40:4f:98:e4:62:c6:66:6e:fc:a8:f8:8d:4a: 4f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AC:DE:E1:8C:94:C2:5B:4B:0D:C6:31:34:B3:E0:EE:D9:51:56:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/ff3090a6-0365-3319-a5db-b97f2065e36d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl X509v3 Authority Key Identifier: keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer sbgp-ipAddrBlock: critical IPv4: 172.99.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:97:b3:6e:02:d2:f2:ef:53:36:06:b3:62:51:b6:83:be:31: bb:d1:18:6c:4c:59:33:0d:da:7f:5c:34:ce:bc:bd:61:87:52: 2c:ae:f7:86:fd:37:5b:0e:4c:c2:9f:23:45:cd:22:83:e5:73: c5:6b:36:4e:bb:7d:1e:08:de:aa:00:37:66:78:2e:ed:c5:06: 3f:fc:1d:c3:1c:b1:83:2e:d3:03:40:6d:d2:e6:f1:17:6d:a4: 9a:8c:e7:f1:a1:8b:c1:eb:fc:96:44:b6:08:bf:ea:f4:d6:74: df:e2:9b:07:05:96:6f:55:31:a5:d2:22:e9:d1:41:4a:0d:e4: 4d:a9:eb:09:35:9d:99:6d:5f:49:79:e4:6b:67:64:0e:6d:57: 32:ed:dc:fe:39:16:c5:fd:7f:b3:23:a6:33:52:4a:0f:94:d6: 0f:d2:a8:52:b1:7f:a7:32:a7:23:59:82:14:7b:6e:ef:b3:bb: 73:5a:22:f5:c9:11:ef:17:9f:39:8c:e7:26:e0:c8:31:4b:f2: f4:67:10:99:f0:7a:ea:02:00:f1:87:b3:97:38:e3:c1:b4:08: d8:9d:d0:e1:e2:88:f4:1e:87:51:3b:d3:5f:34:2d:ad:87:1a: b0:05:ad:e8:04:f0:4f:e2:81:42:a1:09:62:8b:95:2d:04:48: 19:87:28:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNLPnm84isUjhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkNmQ5YzItZDM4MC00ZjFmLThmNmMtZWJjMmU1MDNj NGE4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk Nzc1YTMzYTYtNTI3NS00YTQ1LTllMzktMjk2ODMyY2YyMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr34YOg0JzbRnVIcc7ceyIeDbshi0H1B7h1s0 fHXL6B3bpF2+GfygmEgVr/BUUIau3EY1eDsyRCpFDtTl/DzqWFcTxi0di1I1NhIw LM9sbyOlYWhfERqRjPtnz7vcM1aymn6cEwE8rSQ8wuYDC7JVzsB05jI4BR1Tt6zU QnWuKDKsqfcAw5S8OebURbTTltfSvn8GWd2tdAL452is290e83oBYVYV+L4ibHa8 +eBS/0O1xzMzJgFXl1jyaLWuimJ7vk7TVEXDtIVORFt/hHkkrP9DYarlU/PFigle Z8gBDs2TCTugZJKkVxM1R0j6ksR1YEBPmORixmZu/Kj4jUpPQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFis3uGMlMJbSw3GMTSz4O7ZUVYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2 ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMyZTUwM2M0YTgvZmYzMDkwYTYtMDM2NS0z MzE5LWE1ZGItYjk3ZjIwNjVlMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWFkNmQ5YzItZDM4MC00ZjFmLThm NmMtZWJjMmU1MDNjNGE4LzVhZDZkOWMyLWQzODAtNGYxZi04ZjZjLWViYzJlNTAz YzRhOC5jcmwwHwYDVR0jBBgwFoAUkp+5FQB62pVW0xWBc41CAhzKOocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMy ZTUwM2M0YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiXs24C0vLvUzYGs2JRtoO+MbvRGGxMWTMN2n9cNM68vWGHUiyu94b9 N1sOTMKfI0XNIoPlc8VrNk67fR4I3qoAN2Z4Lu3FBj/8HcMcsYMu0wNAbdLm8Rdt pJqM5/Ghi8Hr/JZEtgi/6vTWdN/imwcFlm9VMaXSIunRQUoN5E2p6wk1nZltX0l5 5GtnZA5tVzLt3P45FsX9f7MjpjNSSg+U1g/SqFKxf6cypyNZghR7bu+zu3NaIvXJ Ee8XnzmM5ybgyDFL8vRnEJnweuoCAPGHs5c448G0CNid0OHiiPQeh1E70180La2H GrAFregE8E/igUKhCWKLlS0ESBmHKLY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:23 2025 by rpki-client