$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/cc735ba9-adb4-37f3-88e2-2c562bc2c9db.roa File: cc735ba9-adb4-37f3-88e2-2c562bc2c9db.roa (raw, json) Hash identifier: FYqqL7nFN2/hJL3lfRdqufxUOpn9H7YP7Eryw4OUFj0= Subject key identifier: 7F:C6:74:B6:EE:51:D7:20:D4:8C:16:FA:4F:82:4F:A0:A1:F6:95:FC Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584871C06AD1CBEA9E72790C3080 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/cc735ba9-adb4-37f3-88e2-2c562bc2c9db.roa Signing time: Sun 05 Jan 2025 14:00:52 +0000 ROA not before: Sun 05 Jan 2025 14:00:52 +0000 ROA not after: Sat 05 Apr 2025 13:00:52 +0000 asID: 395092 IP address blocks: 146.71.80.0/22 maxlen: 24 199.87.210.0/23 maxlen: 24 208.123.118.0/23 maxlen: 24 2607:a680:1::/48 maxlen: 48 2607:a680:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:71:c0:6a:d1:cb:ea:9e:72:79:0c:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Jan 5 14:00:52 2025 GMT Not After : Apr 5 13:00:52 2025 GMT Subject: CN=f5f583e3-4c43-4445-bcc7-96799a0146be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:ed:58:f2:ef:53:6d:16:14:ab:e5:3e:21: f5:4e:1e:f4:3e:e1:5c:68:f5:ae:63:69:36:86:e3: 71:36:84:3c:c4:55:83:21:15:de:80:28:31:b1:d5: 9f:14:71:9e:37:a0:05:b9:cf:97:98:51:aa:e4:aa: 46:7f:5b:42:e6:cc:95:78:b0:ef:94:13:83:76:f6: 87:5a:ea:de:71:5b:de:78:c3:d4:10:bd:17:88:a5: 0e:13:5d:75:01:d5:d9:86:9d:d3:4d:3d:63:1e:aa: a6:e4:de:73:c9:e5:d0:a8:c7:40:2c:52:34:11:75: f4:8a:41:9d:46:30:d3:22:60:a5:0b:d0:d8:18:69: 97:8a:d8:cd:9f:3e:a0:71:f3:b6:d3:c0:81:12:95: 7c:04:6e:87:65:de:42:a0:84:60:39:73:39:5a:c0: 4c:cb:e3:2d:c6:06:53:e3:35:2a:6c:8a:d4:bd:9d: 0f:f4:bd:7f:41:0c:11:b1:e1:5b:62:35:4e:3c:20: b9:4a:fa:77:24:d1:7a:43:f7:21:1e:0d:7b:53:68: 26:bd:98:ea:61:d8:2b:fa:7a:6d:eb:c3:69:b2:00: c3:e0:45:da:32:54:61:5f:c5:e4:8c:91:7a:db:06: 7b:30:d7:a5:49:5c:47:35:d5:51:f1:1e:7e:2d:f5: 1f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C6:74:B6:EE:51:D7:20:D4:8C:16:FA:4F:82:4F:A0:A1:F6:95:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/cc735ba9-adb4-37f3-88e2-2c562bc2c9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 146.71.80.0/22 199.87.210.0/23 208.123.118.0/23 IPv6: 2607:a680:1::/48 2607:a680:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:14:33:2d:f8:78:34:be:c0:48:49:8b:ef:43:9c:ea:38:68: 07:0b:12:00:3c:ac:f0:0a:b1:b0:94:c5:b3:60:22:0a:88:3e: b9:af:89:a0:b6:ce:d5:d4:dc:c7:c3:ae:9b:b2:2a:a7:af:11: c1:26:b7:cf:82:ca:c7:33:2a:20:5d:ef:fe:f5:54:5b:32:48: 8b:4c:56:91:c4:5f:35:b4:5b:b6:62:eb:19:4f:ae:4c:67:98: d1:97:3b:44:6e:4a:ed:44:ee:6a:72:a0:38:81:3d:20:88:14: db:4e:07:64:98:2f:81:f2:df:b4:c4:6e:52:d3:96:ea:ab:ef: 6b:52:b7:90:a8:99:e2:aa:b5:1e:96:72:97:02:5b:df:13:1e: 94:b5:e6:ef:83:35:c9:94:16:a3:5c:b3:d3:14:43:68:2a:28: 35:a6:cd:71:77:61:6f:2b:ca:66:d2:0d:6b:ce:e2:7b:74:84: dd:84:73:82:e6:18:21:37:fa:0a:18:70:f6:85:0f:cf:78:78: 51:7d:49:1f:c5:b5:44:65:49:8c:76:6d:b2:97:aa:83:16:da: 7d:62:04:54:b1:cb:66:d4:29:31:b6:ae:52:cc:7c:60:d2:05: 96:67:3b:93:bb:af:a2:7d:50:c0:ef:9a:29:7b:cb:38:93:b6: b4:34:51:ca -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEhxwGrRy+qecnkMMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjVmNTgzZTMtNGM0My00NDQ1LWJjYzctOTY3OTlhMDE0NmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3DtWPLvU20WFKvlPiH1Th70PuFcaPWuY2k2 huNxNoQ8xFWDIRXegCgxsdWfFHGeN6AFuc+XmFGq5KpGf1tC5syVeLDvlBODdvaH WurecVveeMPUEL0XiKUOE111AdXZhp3TTT1jHqqm5N5zyeXQqMdALFI0EXX0ikGd RjDTImClC9DYGGmXitjNnz6gcfO208CBEpV8BG6HZd5CoIRgOXM5WsBMy+MtxgZT 4zUqbIrUvZ0P9L1/QQwRseFbYjVOPCC5Svp3JNF6Q/chHg17U2gmvZjqYdgr+npt 68NpsgDD4EXaMlRhX8XkjJF62wZ7MNelSVxHNdVR8R5+LfUf9wIDAQABo4IDezCC A3cwHQYDVR0OBBYEFH/GdLbuUdcg1IwW+k+CT6Ch9pX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvY2M3MzViYTktYWRiNC0z N2YzLTg4ZTItMmM1NjJiYzJjOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQCkkdQAwQB x1fSAwQB0Ht2MBgEAgACMBIDBwAmB6aAAAEDBwAmB6aAAAgwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJhQz Lfh4NL7ASEmL70Oc6jhoBwsSADys8AqxsJTFs2AiCog+ua+JoLbO1dTcx8Oum7Iq p68RwSa3z4LKxzMqIF3v/vVUWzJIi0xWkcRfNbRbtmLrGU+uTGeY0Zc7RG5K7UTu anKgOIE9IIgU204HZJgvgfLftMRuUtOW6qvva1K3kKiZ4qq1HpZylwJb3xMelLXm 74M1yZQWo1yz0xRDaCooNabNcXdhbyvKZtINa87ie3SE3YRzguYYITf6Chhw9oUP z3h4UX1JH8W1RGVJjHZtspeqgxbafWIEVLHLZtQpMbauUsx8YNIFlmc7k7uvon1Q wO+aKXvLOJO2tDRRyg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:29 2025 by rpki-client