$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/10aaa60f-ffd9-340c-9d46-88664e1a56e9.roa File: 10aaa60f-ffd9-340c-9d46-88664e1a56e9.roa (raw, json) Hash identifier: h2gpb0G7d0KkRPCgBjFFoHZGu3/+d6FauEI96GHKv68= Subject key identifier: E5:0D:70:60:A3:2E:74:08:0F:F1:74:76:7B:F9:92:33:C3:94:71:C8 Certificate issuer: /CN=911afcc4-db22-4282-acca-e1e676a5ae20 Certificate serial: 010D0C9F4328584882808B37ADC446BC17591960 Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/10aaa60f-ffd9-340c-9d46-88664e1a56e9.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 69.7.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:8b:37:ad:c4:46:bc:17:59:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=afd3f8b7-20be-4cd7-b867-fd7987e475b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2b:d7:7e:9a:1f:e8:5d:10:88:db:40:44:74: 4c:5c:70:c5:f5:9a:87:58:2b:0c:04:26:e4:9c:c0: 4f:3e:b5:a1:2a:a5:40:d5:99:23:7d:ba:e0:4d:81: 08:01:ae:5b:2a:1f:a9:69:97:b0:8b:4e:bd:3b:53: dc:35:a3:ac:39:92:de:64:99:c5:39:32:02:02:25: 63:3d:4c:40:3f:94:19:97:27:2f:8a:a7:76:8d:f4: 12:89:4e:8e:ab:79:40:fb:0c:e2:36:46:26:d5:11: 36:60:4b:bf:1b:24:e9:ed:22:73:e7:4d:d9:9d:c6: ec:21:13:b8:2d:f6:24:fd:21:88:ba:7d:d0:9c:4a: 2c:4e:96:8f:90:25:af:5e:1a:86:93:07:01:ee:de: 06:a0:53:4d:62:c2:83:d6:59:86:26:65:3f:47:68: 64:41:b6:4d:17:5d:8f:7d:e3:ac:01:e9:f6:a2:a7: ca:57:ab:be:d5:f2:c6:84:e6:e3:c6:15:69:44:f1: c8:95:9a:3d:47:78:62:a5:45:b5:04:25:5a:cc:36: 89:0d:51:45:43:5a:e3:8f:a3:8d:06:e5:c5:ea:42: 6b:39:c1:3e:2b:e7:93:c2:05:3e:19:f4:83:2a:6d: 5e:66:98:ec:86:3d:c9:be:b2:cf:71:78:48:d0:7d: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0D:70:60:A3:2E:74:08:0F:F1:74:76:7B:F9:92:33:C3:94:71:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/10aaa60f-ffd9-340c-9d46-88664e1a56e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl X509v3 Authority Key Identifier: keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer sbgp-ipAddrBlock: critical IPv4: 69.7.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c9:4f:64:6e:1b:a1:40:ba:96:97:ac:1f:3a:b3:98:56:ca: a3:57:ee:64:52:37:1e:27:f8:8a:f1:8f:da:d7:c0:42:3f:65: a4:59:34:ab:4d:6f:e5:b0:14:83:bb:70:5e:78:50:15:85:aa: 05:86:36:9d:e8:ec:c6:d2:15:3e:79:88:be:fc:dd:27:81:51: 95:e3:9a:ae:25:e2:22:cb:29:bf:ba:78:6f:7f:bd:34:35:f1: fe:be:5b:f5:b3:f6:5a:20:75:e1:eb:c2:f4:3e:71:f9:bc:2d: 72:c6:e2:8b:15:e1:e8:78:33:5e:b7:53:f9:c7:f7:e5:cb:b5: c8:c1:e8:11:2c:9b:18:84:8d:d0:25:05:8b:3e:ed:67:53:7c: bf:0f:9e:17:a0:11:55:a3:f3:97:fe:a8:f1:6d:13:09:40:3c: a3:ec:d3:60:33:7c:7c:50:77:ce:7e:6e:d6:d2:e3:28:58:e7: c1:22:7d:be:2e:5e:a0:bd:34:5b:7e:8c:08:90:48:f7:84:66: e0:af:70:cf:be:8f:1a:e7:dc:4d:4e:52:83:95:45:63:ca:ef: 31:d0:1e:00:c7:af:40:96:b1:20:ec:ba:fe:19:95:d6:a2:19: a7:f4:ea:b3:27:28:45:80:17:a5:1c:be:3f:14:be:7c:4a:35: bc:f9:8a:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgIs3rcRGvBdZGWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTExYWZjYzQtZGIyMi00MjgyLWFjY2EtZTFlNjc2YTVh ZTIwMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk YWZkM2Y4YjctMjBiZS00Y2Q3LWI4NjctZmQ3OTg3ZTQ3NWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yvXfpof6F0QiNtARHRMXHDF9ZqHWCsMBCbk nMBPPrWhKqVA1ZkjfbrgTYEIAa5bKh+paZewi069O1PcNaOsOZLeZJnFOTICAiVj PUxAP5QZlycviqd2jfQSiU6Oq3lA+wziNkYm1RE2YEu/GyTp7SJz503ZncbsIRO4 LfYk/SGIun3QnEosTpaPkCWvXhqGkwcB7t4GoFNNYsKD1lmGJmU/R2hkQbZNF12P feOsAen2oqfKV6u+1fLGhObjxhVpRPHIlZo9R3hipUW1BCVazDaJDVFFQ1rjj6ON BuXF6kJrOcE+K+eTwgU+GfSDKm1eZpjshj3JvrLPcXhI0H1Q8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUNcGCjLnQID/F0dnv5kjPDlHHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85MTFh ZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2NzZhNWFlMjAvMTBhYWE2MGYtZmZkOS0z NDBjLTlkNDYtODg2NjRlMWE1NmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTExYWZjYzQtZGIyMi00MjgyLWFj Y2EtZTFlNjc2YTVhZTIwLzkxMWFmY2M0LWRiMjItNDI4Mi1hY2NhLWUxZTY3NmE1 YWUyMC5jcmwwHwYDVR0jBBgwFoAUaRq26D5nlEY54u/RTNXkdWk2kOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MTFhZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2 NzZhNWFlMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQeLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3JT2RuG6FAupaXrB86s5hWyqNX7mRSNx4n+Irxj9rXwEI/ZaRZNKtN b+WwFIO7cF54UBWFqgWGNp3o7MbSFT55iL783SeBUZXjmq4l4iLLKb+6eG9/vTQ1 8f6+W/Wz9logdeHrwvQ+cfm8LXLG4osV4eh4M163U/nH9+XLtcjB6BEsmxiEjdAl BYs+7WdTfL8PnhegEVWj85f+qPFtEwlAPKPs02AzfHxQd85+btbS4yhY58Eifb4u XqC9NFt+jAiQSPeEZuCvcM++jxrn3E1OUoOVRWPK7zHQHgDHr0CWsSDsuv4Zldai Gaf06rMnKEWAF6Ucvj8UvnxKNbz5isY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:29 2025 by rpki-client