$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6bf2b9a4-3ddc-3a38-afed-f2a517d47b25.roa File: 6bf2b9a4-3ddc-3a38-afed-f2a517d47b25.roa (raw, json) Hash identifier: sJZplindkt9NED5X+gtY99VoNnWeuw+0DQswaPUetCk= Subject key identifier: E0:34:A5:04:49:7B:68:E1:ED:14:04:25:D2:B4:20:95:22:C4:DF:87 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584854701E8446F711C4785F6600 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6bf2b9a4-3ddc-3a38-afed-f2a517d47b25.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 198949 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:1e:84:46:f7:11:c4:78:5f:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=b3e07002-cdcf-4728-9001-0036380563ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:38:97:00:48:82:0a:04:17:38:af:bf:98: 40:e4:29:b3:55:bb:f5:0c:c2:32:9d:49:91:78:66: 6d:25:fa:89:05:fd:25:8c:91:43:10:4d:d2:8e:9a: 9a:9c:ff:c0:d0:da:83:ce:8f:af:06:22:b0:4b:76: c3:26:1c:57:c4:1d:bc:a6:07:40:0f:d9:9c:ff:d4: 58:48:87:80:a9:2e:51:c0:b4:da:e7:33:71:5a:ca: 18:c8:d6:5a:d9:58:16:b1:1e:88:42:ba:b9:cd:fd: 6c:82:cc:ba:0b:35:84:7b:65:79:a1:9b:50:e5:65: ea:ef:f1:2d:5b:ad:8b:19:e6:21:e1:70:75:fc:ed: 01:f0:b3:40:8b:30:61:4c:c3:9c:eb:fc:e5:10:29: 0f:b8:d0:8d:39:85:5b:54:7b:17:11:2b:59:fd:bb: 47:44:c7:91:0e:a4:f4:d9:d8:77:d7:1c:d3:d0:e2: bf:98:77:95:f1:8f:71:a3:c8:b5:a0:8b:33:33:1c: ca:3e:bb:7b:ad:a0:4a:56:44:1a:a3:5c:0e:59:d7: d1:d7:a9:08:46:ef:7f:2b:61:ea:4b:a0:fa:bf:30: 0f:2a:65:6a:1f:93:9f:16:e2:2d:cf:25:88:93:3c: 7b:07:b7:54:dc:fa:31:a2:91:35:62:38:0c:7d:af: 6f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:34:A5:04:49:7B:68:E1:ED:14:04:25:D2:B4:20:95:22:C4:DF:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6bf2b9a4-3ddc-3a38-afed-f2a517d47b25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:31:9f:9e:fb:2b:6f:4a:34:6e:6a:bd:22:ea:28:00:8b:eb: d6:e9:e5:09:d3:04:dd:cd:bc:a8:bc:0c:5f:6c:dd:ed:ad:13: 89:db:c4:f2:1e:a3:f4:2e:8e:e1:4d:e9:1b:98:cb:af:26:1d: 0e:da:9b:ac:6d:d2:a5:1e:3b:3a:5d:d9:6a:e1:ef:0a:e2:fb: 35:bb:ae:b0:b2:b7:60:dd:0a:b2:a7:ed:5d:21:b8:24:ae:12: 8c:78:7d:92:6e:fa:62:c0:72:dc:8d:cf:31:4e:39:58:0c:4d: e8:4b:f4:81:fa:94:99:73:92:eb:23:13:6e:45:05:59:d4:50: 86:84:b2:ce:bc:bf:17:f0:51:0b:40:84:92:3e:59:c4:16:86: 5f:b9:ef:cd:c6:8b:79:f4:47:cd:95:91:ec:b5:ae:24:b0:fc: ba:71:5b:cf:06:59:62:34:3f:29:12:dd:d4:33:03:8c:a8:9e: eb:dc:2d:71:b4:ab:ab:ed:61:b5:52:de:7e:44:7d:20:d1:13: a6:e8:f6:f1:ee:46:eb:ff:79:69:ad:80:77:f3:f2:45:62:2a: 93:74:b9:78:37:00:53:e4:18:32:20:26:0d:39:66:89:51:a0: 34:7a:b7:1d:65:b9:e4:50:df:06:f5:c9:eb:59:2c:d0:46:67: 1c:4d:11:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcB6ERvcRxHhfZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk YjNlMDcwMDItY2RjZi00NzI4LTkwMDEtMDAzNjM4MDU2M2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+o4lwBIggoEFzivv5hA5CmzVbv1DMIynUmR eGZtJfqJBf0ljJFDEE3SjpqanP/A0NqDzo+vBiKwS3bDJhxXxB28pgdAD9mc/9RY SIeAqS5RwLTa5zNxWsoYyNZa2VgWsR6IQrq5zf1sgsy6CzWEe2V5oZtQ5WXq7/Et W62LGeYh4XB1/O0B8LNAizBhTMOc6/zlECkPuNCNOYVbVHsXEStZ/btHRMeRDqT0 2dh31xzT0OK/mHeV8Y9xo8i1oIszMxzKPrt7raBKVkQao1wOWdfR16kIRu9/K2Hq S6D6vzAPKmVqH5OfFuItzyWIkzx7B7dU3PoxopE1YjgMfa9vUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA0pQRJe2jh7RQEJdK0IJUixN+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNmJmMmI5YTQtM2RkYy0z YTM4LWFmZWQtZjJhNTE3ZDQ3YjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkxn577K29KNG5qvSLqKACL69bp5QnTBN3NvKi8DF9s3e2tE4nbxPIe o/QujuFN6RuYy68mHQ7am6xt0qUeOzpd2Wrh7wri+zW7rrCyt2DdCrKn7V0huCSu Eox4fZJu+mLActyNzzFOOVgMTehL9IH6lJlzkusjE25FBVnUUIaEss68vxfwUQtA hJI+WcQWhl+5783Gi3n0R82Vkey1riSw/LpxW88GWWI0PykS3dQzA4yonuvcLXG0 q6vtYbVS3n5EfSDRE6bo9vHuRuv/eWmtgHfz8kViKpN0uXg3AFPkGDIgJg05ZolR oDR6tx1lueRQ3wb1yetZLNBGZxxNETE= -----END CERTIFICATE-----Generated at Fri Mar 14 13:21:31 2025 by rpki-client