$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd45ca8a-8c32-3a61-a849-9a7b21349463.roa File: fd45ca8a-8c32-3a61-a849-9a7b21349463.roa (raw, json) Hash identifier: MhgmG9jV5W1DyrpfgPIyrdZOzQiSnwvFmL5/6Ho/FgE= Subject key identifier: 3D:05:22:BA:48:84:A2:F0:FF:19:D6:F7:F5:08:51:67:FC:C0:A0:AF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBBB6467D4C5CF7401A280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd45ca8a-8c32-3a61-a849-9a7b21349463.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 107.167.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:bb:64:67:d4:c5:cf:74:01:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=3979f55d-ae77-419c-87c0-4acf8eede6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b4:3b:f9:32:fa:bb:bf:e1:94:3c:b9:5d:80: 96:fe:ee:f1:d5:05:b2:72:36:ca:40:23:43:04:81: c8:25:e3:ee:2e:c4:0f:20:5c:eb:b0:bc:52:de:99: 3e:e7:88:74:d2:b1:62:4c:db:d9:42:69:f2:85:4b: 64:c2:7e:23:c5:89:44:cb:5f:c6:75:66:b0:9c:04: 9b:f4:ca:08:28:2d:b2:be:9d:d6:44:16:23:14:a1: d3:93:78:68:64:44:ed:ab:9b:d8:ad:08:e7:66:65: 01:0a:b2:3c:e0:45:b9:57:29:c1:37:f4:70:de:80: 29:36:52:4c:9c:97:35:78:42:25:8d:d7:88:39:d3: 98:44:b4:4b:7a:6e:3f:b4:66:e9:92:3d:83:0a:93: 95:8a:d6:cf:2b:7c:87:4b:28:5c:5d:af:ab:3b:0d: c2:19:ae:44:08:b3:be:bf:f8:96:99:08:3b:37:99: 56:f4:45:a7:8e:ff:84:cd:ee:e1:7c:82:90:6c:af: ed:7f:3b:f8:6d:8d:86:38:08:ca:21:44:3e:10:a0: 75:21:34:d6:61:cb:e2:87:d2:ab:d5:e3:3c:ed:b0: 39:80:b4:f7:21:4d:a0:0b:2b:f5:b1:c8:9a:8b:08: 65:c9:a0:60:6d:8f:9f:73:1a:57:68:7d:5c:4c:49: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:05:22:BA:48:84:A2:F0:FF:19:D6:F7:F5:08:51:67:FC:C0:A0:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd45ca8a-8c32-3a61-a849-9a7b21349463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 107.167.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f4:41:23:7b:35:af:de:37:82:09:d2:9c:1b:9f:4a:5a:23: 52:95:96:b7:3e:8b:65:57:6e:0a:c1:2f:ef:62:88:6b:8c:0e: ed:81:d3:0e:d0:5c:ce:bb:9e:1b:01:15:84:4d:1d:6d:fd:8a: 5d:1b:ed:00:df:a9:a6:ca:b2:90:b4:fa:4e:a6:84:c9:a7:f8: f7:4c:57:c5:6c:ec:28:df:ee:66:70:1d:85:7e:9d:2b:d2:10: c4:19:36:6a:72:e2:2b:bc:3b:04:51:9b:ca:e8:0d:6e:f3:fd: c4:25:4e:44:9f:12:7a:c8:e0:ed:ac:be:ca:f5:67:7f:1d:46: 99:b0:3e:cc:01:b6:3e:9f:e4:cb:08:81:22:3e:14:9a:56:56: 09:c2:76:2a:d9:e4:5d:92:3e:48:b1:b5:e0:86:36:b9:83:f4: 5e:83:ae:fa:4e:2f:5e:bf:d1:03:2b:d9:5b:6a:df:8a:d2:51: 68:bc:fa:07:50:f7:db:85:d3:6c:eb:58:57:bb:a2:b0:bd:d5: 9b:d5:5b:da:fd:23:d7:c2:2a:0e:83:94:73:32:36:66:60:aa: 6e:13:68:26:6d:2f:63:de:c0:dd:52:d1:06:d9:06:32:16:7a: 35:b6:52:bb:c5:e1:97:29:42:62:be:1d:f8:07:51:d6:9d:42: bf:6e:82:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67tkZ9TFz3QBooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk Mzk3OWY1NWQtYWU3Ny00MTljLTg3YzAtNGFjZjhlZWRlNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLQ7+TL6u7/hlDy5XYCW/u7x1QWycjbKQCND BIHIJePuLsQPIFzrsLxS3pk+54h00rFiTNvZQmnyhUtkwn4jxYlEy1/GdWawnASb 9MoIKC2yvp3WRBYjFKHTk3hoZETtq5vYrQjnZmUBCrI84EW5VynBN/Rw3oApNlJM nJc1eEIljdeIOdOYRLRLem4/tGbpkj2DCpOVitbPK3yHSyhcXa+rOw3CGa5ECLO+ v/iWmQg7N5lW9EWnjv+Eze7hfIKQbK/tfzv4bY2GOAjKIUQ+EKB1ITTWYcvih9Kr 1eM87bA5gLT3IU2gCyv1sciaiwhlyaBgbY+fcxpXaH1cTEm+mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0FIrpIhKLw/xnW9/UIUWf8wKCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmQ0NWNhOGEtOGMzMi0z YTYxLWE4NDktOWE3YjIxMzQ5NDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6esMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj0QSN7Na/eN4IJ0pwbn0paI1KVlrc+i2VXbgrBL+9iiGuMDu2B0w7Q XM67nhsBFYRNHW39il0b7QDfqabKspC0+k6mhMmn+PdMV8Vs7Cjf7mZwHYV+nSvS EMQZNmpy4iu8OwRRm8roDW7z/cQlTkSfEnrI4O2svsr1Z38dRpmwPswBtj6f5MsI gSI+FJpWVgnCdirZ5F2SPkixteCGNrmD9F6DrvpOL16/0QMr2Vtq34rSUWi8+gdQ 99uF02zrWFe7orC91ZvVW9r9I9fCKg6DlHMyNmZgqm4TaCZtL2PewN1S0QbZBjIW ejW2UrvF4ZcpQmK+HfgHUdadQr9ugrk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:37 2025 by rpki-client