$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d8496ccc-cf35-371c-a177-85bc6f97f738.roa File: d8496ccc-cf35-371c-a177-85bc6f97f738.roa (raw, json) Hash identifier: RM+MQdEWPsvi5nmb9iFgCBvoaw7kiiyubzdLxLmL5GY= Subject key identifier: 9B:A3:23:6C:69:07:71:95:FA:75:E8:19:8A:48:C9:20:99:B9:3C:54 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F432858485035943896019154FE938A80 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d8496ccc-cf35-371c-a177-85bc6f97f738.roa Signing time: Tue 24 Dec 2024 13:39:31 +0000 ROA not before: Tue 24 Dec 2024 13:39:31 +0000 ROA not after: Mon 24 Mar 2025 12:39:31 +0000 asID: 397423 IP address blocks: 64.40.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:50:35:94:38:96:01:91:54:fe:93:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Dec 24 13:39:31 2024 GMT Not After : Mar 24 12:39:31 2025 GMT Subject: CN=80e2cc1c-ce26-4331-943e-e73109db17d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:3f:80:20:42:d5:49:31:df:49:b1:51:55: a4:32:23:ce:40:c0:94:7c:75:c0:17:4f:62:8f:b7: aa:13:1a:f5:3c:38:16:10:17:c9:a1:5e:bf:58:de: 0b:37:c0:bb:2f:75:c4:7b:39:a3:90:47:97:4b:a4: 11:86:19:36:26:08:b5:20:e7:58:ee:d4:67:1b:69: 67:04:58:07:73:8c:7f:50:ec:2b:d9:20:a2:34:65: f0:cf:4b:ac:1d:0b:d4:48:09:c5:99:20:53:61:3e: 81:65:38:1a:a9:9a:45:26:93:64:d4:72:a8:e9:c3: 1c:3c:f3:8d:1e:f1:4a:81:68:f4:b3:1b:d4:52:c0: c9:f1:b8:0b:0c:92:d4:e4:9c:d5:aa:4a:bf:9d:7c: 0e:84:bc:93:00:59:2b:64:2b:ee:dd:43:81:e1:04: f7:5b:42:b8:84:27:27:7e:d4:38:6c:ef:fd:ad:66: 41:b5:b4:ff:fd:94:f7:0e:14:c7:34:f8:01:4e:1c: b8:0d:69:39:1f:80:28:61:64:71:05:1c:01:f2:d7: 34:d6:7a:91:90:2c:ae:c0:10:8b:bd:04:e9:db:1f: 74:3f:83:7e:6b:2a:53:62:c4:bc:bf:a1:54:80:dc: 6e:db:60:5a:58:b0:f3:fa:88:f0:e2:db:22:53:63: 35:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A3:23:6C:69:07:71:95:FA:75:E8:19:8A:48:C9:20:99:B9:3C:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d8496ccc-cf35-371c-a177-85bc6f97f738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 64.40.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:3b:9f:e5:51:6a:26:2d:2a:f6:67:f4:ca:17:ef:82:67:96: 8c:da:de:78:e5:41:fc:16:45:dd:a5:47:c0:f9:e8:6b:a8:73: 81:b0:07:6e:cc:8f:e1:30:eb:3e:5b:60:82:61:79:b5:29:43: 69:49:fc:e8:9d:53:b0:b7:15:24:ed:a8:67:fb:0e:69:f7:cc: 1a:9a:73:20:c3:a2:9a:15:c7:2f:d5:69:2a:0b:7e:9d:cb:47: eb:e1:fe:ab:27:0f:61:3f:1a:07:38:c8:22:08:9f:8f:b7:dd: 37:08:a1:0a:7f:08:91:68:a4:88:61:d1:d9:7c:36:ae:55:25: a3:b6:10:2a:83:e6:e9:54:30:26:47:1e:2f:fd:b8:0a:1f:4e: a2:31:1f:e3:4d:36:c0:fa:2a:09:ff:b4:97:f0:ee:10:2d:37: 08:0e:4e:4d:87:d3:5a:e6:2e:bc:86:d2:06:fd:3c:1b:92:bc: b4:2e:d5:ae:e5:81:9f:72:74:3a:1b:8b:57:59:ea:9d:78:1f: 92:e6:92:55:4f:ff:c4:0e:2c:6f:5e:7d:04:c8:10:f9:e5:01: 84:b9:fe:f1:06:20:87:6a:81:66:7f:03:df:43:97:8f:9b:73: 5b:cd:48:d5:7d:44:85:d0:53:d8:c4:bc:bd:65:a0:36:9d:40: 59:33:49:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhQNZQ4lgGRVP6TioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI0MTIyNDEzMzkzMVoXDTI1MDMyNDEyMzkzMVowLzEtMCsGA1UEAxMk ODBlMmNjMWMtY2UyNi00MzMxLTk0M2UtZTczMTA5ZGIxN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7c/gCBC1Ukx30mxUVWkMiPOQMCUfHXAF09i j7eqExr1PDgWEBfJoV6/WN4LN8C7L3XEezmjkEeXS6QRhhk2Jgi1IOdY7tRnG2ln BFgHc4x/UOwr2SCiNGXwz0usHQvUSAnFmSBTYT6BZTgaqZpFJpNk1HKo6cMcPPON HvFKgWj0sxvUUsDJ8bgLDJLU5JzVqkq/nXwOhLyTAFkrZCvu3UOB4QT3W0K4hCcn ftQ4bO/9rWZBtbT//ZT3DhTHNPgBThy4DWk5H4AoYWRxBRwB8tc01nqRkCyuwBCL vQTp2x90P4N+aypTYsS8v6FUgNxu22BaWLDz+ojw4tsiU2M1iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJujI2xpB3GV+nXoGYpIySCZuTxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvZDg0OTZjY2MtY2YzNS0z NzFjLWExNzctODViYzZmOTdmNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY7n+VRaiYtKvZn9MoX74Jnloza3njlQfwWRd2lR8D56Guoc4GwB27M j+Ew6z5bYIJhebUpQ2lJ/OidU7C3FSTtqGf7Dmn3zBqacyDDopoVxy/VaSoLfp3L R+vh/qsnD2E/Ggc4yCIIn4+33TcIoQp/CJFopIhh0dl8Nq5VJaO2ECqD5ulUMCZH Hi/9uAofTqIxH+NNNsD6Kgn/tJfw7hAtNwgOTk2H01rmLryG0gb9PBuSvLQu1a7l gZ9ydDobi1dZ6p14H5LmklVP/8QOLG9efQTIEPnlAYS5/vEGIIdqgWZ/A99Dl4+b c1vNSNV9RIXQU9jEvL1loDadQFkzSRI= -----END CERTIFICATE-----Generated at Wed Feb 5 15:50:30 2025 by rpki-client