$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/9c7e4530-1b8c-3a91-ab2b-40b08ec65cab.roa File: 9c7e4530-1b8c-3a91-ab2b-40b08ec65cab.roa (raw, json) Hash identifier: PcuIUmMNha6ThQRNcoop22XRIXlmwVWntrRp/EU30Z4= Subject key identifier: 0D:68:6C:05:1D:85:04:38:F8:AA:6D:34:69:A6:0D:5C:83:F8:06:CF Certificate issuer: /CN=ee24f36d-faae-4b96-97ad-782fa99ddc29 Certificate serial: 010D0C9F4328584869605C7E5495B82406013000 Authority key identifier: 1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/9c7e4530-1b8c-3a91-ab2b-40b08ec65cab.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 40703 IP address blocks: 168.161.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:5c:7e:54:95:b8:24:06:01:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee24f36d-faae-4b96-97ad-782fa99ddc29 Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=fce84c59-9101-422c-9ac7-8e80b9a756a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:00:34:e7:0c:0b:d9:9f:58:21:2b:0f:3f:e0: fa:bf:7b:8c:78:9b:4f:f4:f8:8f:eb:e7:7d:44:33: ea:e1:d5:48:7e:e3:14:05:e1:51:f8:e3:ab:72:7e: 1f:18:ef:e9:59:85:f2:7e:6d:f9:b3:23:e7:eb:ba: ff:15:d8:cb:d9:e6:2d:c3:86:bf:35:85:10:b0:cf: 7c:8a:15:b2:c4:5f:f0:71:f0:a2:3d:13:e4:c5:21: 7b:b4:9b:dd:ce:77:19:7d:d1:4c:23:ea:87:81:f8: 65:42:d3:58:9c:a6:19:83:2d:f3:af:95:94:21:f6: 55:2e:11:75:f5:93:1e:d3:ae:1b:fb:e2:18:57:69: 0e:16:16:9f:a3:d8:1a:3f:f7:f9:51:3e:8b:61:76: 32:79:39:e6:d5:ae:bb:b3:59:f9:17:8d:05:06:6f: 8b:7e:49:2e:d5:78:ad:91:9a:57:6d:fe:f0:d8:f3: 3e:ad:84:87:b6:ab:ad:a8:4b:ea:87:b6:fe:ed:13: f0:11:85:ed:5b:ff:3d:ca:01:10:54:05:fd:6f:4d: 33:ee:7e:ad:be:c0:1e:0f:0e:a2:ce:bb:e7:9e:64: 66:70:20:15:36:fa:92:ca:0d:69:33:ba:04:b5:f9: 1c:2f:54:75:50:72:8c:84:46:33:3f:bb:97:7e:58: c2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:68:6C:05:1D:85:04:38:F8:AA:6D:34:69:A6:0D:5C:83:F8:06:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/9c7e4530-1b8c-3a91-ab2b-40b08ec65cab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.crl X509v3 Authority Key Identifier: keyid:1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer sbgp-ipAddrBlock: critical IPv4: 168.161.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d5:b7:e0:ca:2c:56:e9:a4:e3:8a:da:8c:cd:b4:ae:48:20: cc:98:34:96:b0:87:ce:17:b7:39:1d:c3:3f:8f:5f:36:35:d4: fb:b0:02:50:1a:33:d9:69:0d:bc:34:14:29:41:3a:98:41:92: d0:a9:5e:15:f1:d3:19:06:bb:4a:40:fb:b7:23:02:af:bd:a5: 1a:49:d6:46:04:c9:77:41:0c:7d:15:a9:c2:f7:03:ca:f9:84: 27:a7:50:93:60:a2:0d:63:d8:44:03:18:15:5b:37:67:bb:a5: b9:1a:61:ac:9f:7c:af:88:de:df:b1:e2:97:f6:40:42:5c:79: d5:98:6f:48:41:67:2e:b5:30:27:fc:f9:16:4a:cb:b8:83:c9: 28:e8:4b:f4:ac:48:82:3d:65:f1:99:5f:f0:7e:87:73:6f:63: ea:c0:62:4c:83:71:19:b3:2b:74:1b:77:aa:63:5b:2f:70:f0: b0:33:b5:03:1e:61:f2:0a:3d:02:e3:3e:76:46:56:a5:03:b1: c0:c1:1a:9f:2e:a8:97:f2:5f:72:51:a3:57:e6:43:43:c4:d6: e9:f3:b1:bd:ee:06:36:71:12:34:01:3c:46:ac:5c:3b:ab:be: f1:ae:76:a6:44:87:79:e9:a0:95:03:b0:21:ee:e7:9b:31:2c: ca:8d:33:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYFx+VJW4JAYBMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWUyNGYzNmQtZmFhZS00Yjk2LTk3YWQtNzgyZmE5OWRk YzI5MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZmNlODRjNTktOTEwMS00MjJjLTlhYzctOGU4MGI5YTc1NmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgA05wwL2Z9YISsPP+D6v3uMeJtP9PiP6+d9 RDPq4dVIfuMUBeFR+OOrcn4fGO/pWYXyfm35syPn67r/FdjL2eYtw4a/NYUQsM98 ihWyxF/wcfCiPRPkxSF7tJvdzncZfdFMI+qHgfhlQtNYnKYZgy3zr5WUIfZVLhF1 9ZMe064b++IYV2kOFhafo9gaP/f5UT6LYXYyeTnm1a67s1n5F40FBm+Lfkku1Xit kZpXbf7w2PM+rYSHtqutqEvqh7b+7RPwEYXtW/89ygEQVAX9b00z7n6tvsAeDw6i zrvnnmRmcCAVNvqSyg1pM7oEtfkcL1R1UHKMhEYzP7uXfljCFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1obAUdhQQ4+KptNGmmDVyD+AbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZTI0 ZjM2ZC1mYWFlLTRiOTYtOTdhZC03ODJmYTk5ZGRjMjkvOWM3ZTQ1MzAtMWI4Yy0z YTkxLWFiMmItNDBiMDhlYzY1Y2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWUyNGYzNmQtZmFhZS00Yjk2LTk3 YWQtNzgyZmE5OWRkYzI5L2VlMjRmMzZkLWZhYWUtNGI5Ni05N2FkLTc4MmZhOTlk ZGMyOS5jcmwwHwYDVR0jBBgwFoAUHhjAUjJdwDdP3UaHVTiGwCeQ/qgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZTI0ZjM2ZC1mYWFlLTRiOTYtOTdhZC03ODJm YTk5ZGRjMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqKFqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvVt+DKLFbppOOK2ozNtK5IIMyYNJawh84Xtzkdwz+PXzY11PuwAlAa M9lpDbw0FClBOphBktCpXhXx0xkGu0pA+7cjAq+9pRpJ1kYEyXdBDH0VqcL3A8r5 hCenUJNgog1j2EQDGBVbN2e7pbkaYayffK+I3t+x4pf2QEJcedWYb0hBZy61MCf8 +RZKy7iDySjoS/SsSII9ZfGZX/B+h3NvY+rAYkyDcRmzK3Qbd6pjWy9w8LAztQMe YfIKPQLjPnZGVqUDscDBGp8uqJfyX3JRo1fmQ0PE1unzsb3uBjZxEjQBPEasXDur vvGudqZEh3npoJUDsCHu55sxLMqNM3A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:14 2025 by rpki-client