$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/bfd3961a-a871-3f89-902e-5f5403f87c57.roa File: bfd3961a-a871-3f89-902e-5f5403f87c57.roa (raw, json) Hash identifier: NCHSoT6sFPECroONfo7G08tRXPIxTLCYaL1XRi7iKXw= Subject key identifier: 46:5B:3D:9F:93:AC:5F:F2:60:6A:08:C4:9D:F3:31:63:C5:E2:68:F5 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584867FAE4F7DA7FBB6C1BD24500 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/bfd3961a-a871-3f89-902e-5f5403f87c57.roa Signing time: Thu 02 Jan 2025 02:00:39 +0000 ROA not before: Thu 02 Jan 2025 02:00:39 +0000 ROA not after: Wed 02 Apr 2025 01:00:39 +0000 asID: 393878 IP address blocks: 64.18.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:fa:e4:f7:da:7f:bb:6c:1b:d2:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Jan 2 02:00:39 2025 GMT Not After : Apr 2 01:00:39 2025 GMT Subject: CN=94b824ce-28eb-4c43-98d8-88857acebe12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c9:24:39:83:85:38:0e:39:61:8e:ff:a8:eb: 5f:ce:8a:e4:4d:5b:d3:90:7c:fa:b6:5f:9c:4c:68: 17:b4:48:cc:83:aa:d5:c4:bc:44:be:9d:fb:50:1f: 00:ae:4e:fc:19:05:b4:dc:61:1a:17:86:6c:df:3c: 57:43:68:64:ae:33:e6:ae:fa:f8:16:6b:1c:be:c0: a8:96:92:b5:47:1c:18:60:c6:40:ea:5e:60:4b:bf: ff:40:b8:c6:69:29:48:3e:b5:d1:31:ba:e1:fb:e4: 11:87:97:18:2c:3d:cf:44:22:d2:de:2e:61:5f:fc: d6:33:30:a7:95:a1:f5:90:cb:0a:f0:cc:f0:d6:2e: 65:43:d1:e7:2b:6f:6b:9f:bf:6e:f6:97:db:f8:c0: 75:9f:19:8c:3c:4d:6f:23:b2:8a:09:39:03:fe:c6: 45:24:78:20:2f:20:9a:48:7a:c1:0c:b7:0d:88:6c: e4:43:a8:7c:08:07:38:07:9b:72:78:03:62:71:c7: 14:fd:95:2b:41:82:9d:fd:aa:12:1c:87:c8:76:be: 75:9f:b2:41:6e:08:3f:5c:8d:29:19:cd:55:a1:23: 66:7e:0d:fa:1e:cb:6e:f8:e1:75:f4:5c:9b:7a:5b: 4e:23:7e:a5:82:f8:f8:c7:93:2b:71:9a:ce:85:15: c0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5B:3D:9F:93:AC:5F:F2:60:6A:08:C4:9D:F3:31:63:C5:E2:68:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/bfd3961a-a871-3f89-902e-5f5403f87c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 64.18.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:49:e6:4d:ba:f1:07:a2:1d:c8:cc:e7:87:aa:3d:a7:8c:d6: 9e:4b:30:41:de:14:e0:2b:d4:9f:dc:07:d1:74:e0:c1:65:f3: 01:ae:0b:04:67:69:ea:71:83:7a:45:21:d4:3d:8a:f1:e1:f3: 75:21:5c:2c:5d:41:79:d4:d5:00:de:92:0a:03:16:2b:e0:12: c2:eb:07:ae:a8:28:80:ad:a2:8e:f2:14:2c:30:49:30:e5:bb: 9b:3c:62:f5:75:39:b3:36:88:b7:e8:58:e9:57:4c:f1:c4:fa: 41:6c:c4:c3:78:51:0a:e9:3a:7b:80:ff:68:c5:c6:92:7d:46: a6:74:5d:1e:26:cf:7f:f7:f3:64:e6:b5:91:e4:0a:f2:21:07: 8c:40:85:9e:08:70:6e:df:b7:6d:35:ac:4e:d8:22:50:ff:2b: 89:1a:f3:dc:b3:e7:f6:4d:99:11:dc:f5:16:5c:36:e3:6d:ab: a9:fe:1b:8b:20:bd:d3:3e:07:43:17:9b:7b:38:e4:7b:c2:37: 0e:11:78:81:03:a3:db:7a:1b:3f:d3:76:a2:9e:83:92:b5:92: f0:ab:ab:8a:a7:31:9e:fc:ad:a7:6a:d0:98:7b:aa:02:1d:f5: d5:8a:fc:07:07:b4:3f:b8:f3:af:32:ec:fb:d6:35:8f:42:e4: 0c:1c:57:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhn+uT32n+7bBvSRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDEwMjAyMDAzOVoXDTI1MDQwMjAxMDAzOVowLzEtMCsGA1UEAxMk OTRiODI0Y2UtMjhlYi00YzQzLTk4ZDgtODg4NTdhY2ViZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgckkOYOFOA45YY7/qOtfzorkTVvTkHz6tl+c TGgXtEjMg6rVxLxEvp37UB8Ark78GQW03GEaF4Zs3zxXQ2hkrjPmrvr4FmscvsCo lpK1RxwYYMZA6l5gS7//QLjGaSlIPrXRMbrh++QRh5cYLD3PRCLS3i5hX/zWMzCn laH1kMsK8Mzw1i5lQ9HnK29rn79u9pfb+MB1nxmMPE1vI7KKCTkD/sZFJHggLyCa SHrBDLcNiGzkQ6h8CAc4B5tyeANicccU/ZUrQYKd/aoSHIfIdr51n7JBbgg/XI0p Gc1VoSNmfg36Hstu+OF19FybeltOI36lgvj4x5MrcZrOhRXAjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZbPZ+TrF/yYGoIxJ3zMWPF4mj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvYmZkMzk2MWEtYTg3MS0z Zjg5LTkwMmUtNWY1NDAzZjg3YzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQBKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBJ5k268QeiHcjM54eqPaeM1p5LMEHeFOAr1J/cB9F04MFl8wGuCwRn aepxg3pFIdQ9ivHh83UhXCxdQXnU1QDekgoDFivgEsLrB66oKICtoo7yFCwwSTDl u5s8YvV1ObM2iLfoWOlXTPHE+kFsxMN4UQrpOnuA/2jFxpJ9RqZ0XR4mz3/382Tm tZHkCvIhB4xAhZ4IcG7ft201rE7YIlD/K4ka89yz5/ZNmRHc9RZcNuNtq6n+G4sg vdM+B0MXm3s45HvCNw4ReIEDo9t6Gz/TdqKeg5K1kvCrq4qnMZ78radq0Jh7qgId 9dWK/AcHtD+4868y7PvWNY9C5AwcV0U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:06 2025 by rpki-client