$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/34e7c3c5-dba9-3060-bae7-762f860c9ff8.roa File: 34e7c3c5-dba9-3060-bae7-762f860c9ff8.roa (raw, json) Hash identifier: 5nuNBnLaAZgYydwLvyVO+PnaMGbOsUw+ezmvZwOp8dA= Subject key identifier: 53:BA:4A:EC:0C:E7:AB:26:94:8B:1E:EC:31:1E:3C:E0:6A:74:FB:DF Certificate issuer: /CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd Certificate serial: 010D0C9F43285848F65BEC5893BBFD92F95BB6C0 Authority key identifier: CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/34e7c3c5-dba9-3060-bae7-762f860c9ff8.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 203690 IP address blocks: 216.169.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ec:58:93:bb:fd:92:f9:5b:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=f31c244e-873c-48b3-8f98-6444d1143f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:85:01:3c:b9:0a:77:c9:33:bd:6d:8b:4a:ec: d7:04:8d:90:4e:85:62:93:94:73:e0:86:51:86:14: da:24:86:be:39:92:16:a7:3b:28:e8:7c:45:88:9c: e9:1e:53:3a:e7:d3:3f:4f:cf:ff:23:5a:42:ae:fb: 06:9f:ae:ab:33:c6:49:f5:ed:3c:8c:65:e9:c2:15: c9:ca:97:6e:a1:4c:dd:04:0e:15:d4:db:8e:97:e5: 68:19:39:3b:90:12:de:83:90:5f:aa:44:f6:66:8f: 5d:f7:79:2a:92:18:3d:4d:a0:31:6f:e4:d7:c0:51: ca:af:2a:33:71:d2:c8:87:42:a6:1d:8e:65:31:37: 29:7f:56:bc:bf:32:27:7b:56:fc:5a:47:9a:47:94: 7b:a2:c6:6b:9e:3b:77:e4:29:c0:f4:df:31:5c:da: 29:4d:1d:0e:66:fd:30:b5:80:bf:72:6d:6d:7f:db: fa:f6:fd:bb:17:bc:96:24:16:52:15:d8:22:88:e6: f6:57:65:99:57:be:1f:5b:da:8c:b4:81:de:3f:1a: 25:5f:bd:e6:a5:6b:a9:cc:f8:79:e8:15:ba:28:46: 7f:63:de:26:c8:df:12:56:9a:63:fb:9d:f6:3c:53: 76:1b:b0:fb:fc:69:88:fb:e6:5e:11:6b:04:a4:f0: 49:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BA:4A:EC:0C:E7:AB:26:94:8B:1E:EC:31:1E:3C:E0:6A:74:FB:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/34e7c3c5-dba9-3060-bae7-762f860c9ff8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl X509v3 Authority Key Identifier: keyid:CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer sbgp-ipAddrBlock: critical IPv4: 216.169.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a2:98:a1:f8:3f:eb:36:16:66:f7:20:aa:da:9b:f9:29:92: 4b:c8:4e:fc:ae:6f:02:e7:75:47:59:45:05:e4:db:1d:74:13: 88:a6:4c:83:6b:a6:d2:d6:11:5b:91:32:46:a6:32:37:a7:fd: c4:9d:8d:fc:6e:e4:1f:85:6b:41:b0:85:45:1b:3b:be:e8:ba: e1:7d:19:96:8c:37:0d:67:d9:3a:83:3b:c6:2e:e1:e7:ed:84: a2:e2:5d:36:6c:49:49:dd:5c:31:5b:aa:3e:a6:d6:63:4f:2b: 5b:af:f7:de:e2:f7:e6:e7:d4:c9:26:a7:58:67:c5:af:68:5a: a9:01:27:26:6b:ad:8b:2a:62:39:ca:a3:f1:0c:b7:1e:67:85: f7:0b:12:67:e4:24:4a:05:51:91:16:54:53:cc:9d:91:a1:80: a4:a4:ac:f3:96:71:07:90:5f:83:32:ec:6e:38:a2:cb:c6:eb: 32:99:52:5b:63:ec:45:4e:a4:06:a6:36:e7:a0:dc:a8:c1:84: 42:28:e5:16:57:4e:1b:1f:bc:7a:e1:a4:16:aa:78:0f:24:c3: 63:70:63:f4:ca:37:13:ae:e2:0e:b4:ff:cd:ac:4b:7a:25:d4: 7f:11:ca:32:74:56:f8:6b:2f:b5:cd:63:ec:ec:9d:ac:24:55: ba:b7:fe:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+xYk7v9kvlbtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI4NDc3NDctOGQ0Ni00ZGEyLWJiOWUtNGM3Mjg2MGU3 YmNkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZjMxYzI0NGUtODczYy00OGIzLThmOTgtNjQ0NGQxMTQzZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoUBPLkKd8kzvW2LSuzXBI2QToVik5Rz4IZR hhTaJIa+OZIWpzso6HxFiJzpHlM659M/T8//I1pCrvsGn66rM8ZJ9e08jGXpwhXJ ypduoUzdBA4V1NuOl+VoGTk7kBLeg5BfqkT2Zo9d93kqkhg9TaAxb+TXwFHKryoz cdLIh0KmHY5lMTcpf1a8vzIne1b8WkeaR5R7osZrnjt35CnA9N8xXNopTR0OZv0w tYC/cm1tf9v69v27F7yWJBZSFdgiiOb2V2WZV74fW9qMtIHePxolX73mpWupzPh5 6BW6KEZ/Y94myN8SVppj+532PFN2G7D7/GmI++ZeEWsEpPBJkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFO6SuwM56smlIse7DEePOBqdPvfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMjg0 Nzc0Ny04ZDQ2LTRkYTItYmI5ZS00YzcyODYwZTdiY2QvMzRlN2MzYzUtZGJhOS0z MDYwLWJhZTctNzYyZjg2MGM5ZmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTI4NDc3NDctOGQ0Ni00ZGEyLWJi OWUtNGM3Mjg2MGU3YmNkL2EyODQ3NzQ3LThkNDYtNGRhMi1iYjllLTRjNzI4NjBl N2JjZC5jcmwwHwYDVR0jBBgwFoAUzCE+WHT05+QXOfuLkf55uqkzjOwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMjg0Nzc0Ny04ZDQ2LTRkYTItYmI5ZS00Yzcy ODYwZTdiY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KmeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6imKH4P+s2Fmb3IKram/kpkkvITvyubwLndUdZRQXk2x10E4imTINr ptLWEVuRMkamMjen/cSdjfxu5B+Fa0GwhUUbO77ouuF9GZaMNw1n2TqDO8Yu4eft hKLiXTZsSUndXDFbqj6m1mNPK1uv997i9+bn1Mkmp1hnxa9oWqkBJyZrrYsqYjnK o/EMtx5nhfcLEmfkJEoFUZEWVFPMnZGhgKSkrPOWcQeQX4My7G44osvG6zKZUltj 7EVOpAamNueg3KjBhEIo5RZXThsfvHrhpBaqeA8kw2NwY/TKNxOu4g60/82sS3ol 1H8RyjJ0VvhrL7XNY+zsnawkVbq3/hw= -----END CERTIFICATE-----Generated at Fri Mar 14 11:29:12 2025 by rpki-client