$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa File: a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa (raw, json) Hash identifier: TNqiYV2sKMMwdoJoiNJNKfj9oq47T5+axb3bUNeGqus= Subject key identifier: 74:A3:12:24:BF:54:9A:39:34:40:86:0C:9C:B6:A4:6A:94:F9:8A:2B Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584902EC03155AAE8E8DD7697880 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 399629 IP address blocks: 168.100.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:03:15:5a:ae:8e:8d:d7:69:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=0978acf6-c85d-4218-ba04-97d9a946bda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:17:e3:dd:c3:ed:d8:54:bf:03:1d:9c:42:8a: 18:76:d8:63:81:3d:9e:6d:e2:cc:ed:cd:10:a1:e4: 71:49:7c:9c:b9:3b:5a:14:fc:47:23:63:49:d3:98: d8:38:8f:96:b7:a7:8e:75:7f:79:85:e7:db:fd:53: ea:80:31:e7:41:53:92:21:6a:4c:62:14:ac:9a:ed: 9d:79:22:1d:17:1b:1a:65:f0:83:32:39:a6:6f:d6: a4:e4:1f:15:fa:37:ee:52:2d:0d:eb:fb:ad:ef:f3: f6:4b:42:14:c7:aa:08:b8:7e:77:86:15:4e:2b:7e: 74:d8:b3:a9:b8:a9:05:3f:c0:c8:8c:f4:ef:42:5e: fa:4b:17:f4:33:21:2b:87:9f:79:9b:8b:79:42:03: 69:53:34:d0:aa:1c:59:d9:3e:91:c9:f5:f7:78:5b: 95:b8:0f:6c:01:44:e6:be:ff:43:fb:d3:37:36:0f: 18:06:b9:24:b4:4c:84:de:a5:81:fe:31:a0:fd:91: dd:97:8f:db:75:2e:62:b7:e8:15:59:62:7c:f6:11: 72:a7:a4:58:0b:e7:68:51:19:f5:3f:92:8d:4b:fb: 86:c4:c7:b0:dc:f4:f7:d0:19:04:d4:c3:1f:8e:61: 34:b0:fb:53:71:4e:cc:c5:ca:52:c4:b3:5c:b6:45: 1f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A3:12:24:BF:54:9A:39:34:40:86:0C:9C:B6:A4:6A:94:F9:8A:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 168.100.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a0:6d:bb:b0:0d:34:39:47:d3:46:39:a2:a4:c4:67:ce:c5: b5:8e:e0:32:0a:8f:36:b2:17:b9:46:91:dd:2b:bb:2b:72:14: b5:0d:75:d5:e5:ec:23:2d:2d:8f:e4:20:af:7e:4f:a0:46:1c: 89:6d:d9:d1:90:7d:33:46:3b:15:3c:56:04:b0:a8:8c:19:8a: 47:a0:53:86:bc:5f:ac:2e:ed:86:f3:fe:6b:5d:4c:9e:ea:81: d8:e5:58:03:5e:4c:88:18:35:ab:70:6d:0c:a1:6b:b0:a9:50: 08:2d:07:fe:2f:9d:05:48:13:1b:72:9b:1e:32:73:d5:ef:53: 43:b1:0c:e4:49:47:d6:ad:e8:61:3f:32:82:eb:91:d3:1b:99: ad:ea:b9:01:23:ba:8f:23:c7:c7:7a:e5:c1:d8:89:d1:dd:24: b7:fd:87:8a:b5:5a:92:a6:95:df:54:cd:05:94:56:d2:9d:35: c8:bf:98:e7:84:32:9c:33:7c:f2:e8:56:b7:5b:19:8b:6a:63: 88:6f:87:21:61:fe:1a:91:fb:18:6d:c4:e2:8b:3b:cf:c6:76: a3:92:f1:db:ff:94:f1:16:8e:a5:65:da:0f:e8:8e:eb:f3:29: 4a:52:31:15:47:e3:a8:7e:64:7d:73:d7:1d:43:17:34:ff:f3: 70:f2:7c:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7AMVWq6OjddpeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MDk3OGFjZjYtYzg1ZC00MjE4LWJhMDQtOTdkOWE5NDZiZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRfj3cPt2FS/Ax2cQooYdthjgT2ebeLM7c0Q oeRxSXycuTtaFPxHI2NJ05jYOI+Wt6eOdX95hefb/VPqgDHnQVOSIWpMYhSsmu2d eSIdFxsaZfCDMjmmb9ak5B8V+jfuUi0N6/ut7/P2S0IUx6oIuH53hhVOK3502LOp uKkFP8DIjPTvQl76Sxf0MyErh595m4t5QgNpUzTQqhxZ2T6RyfX3eFuVuA9sAUTm vv9D+9M3Ng8YBrkktEyE3qWB/jGg/ZHdl4/bdS5it+gVWWJ89hFyp6RYC+doURn1 P5KNS/uGxMew3PT30BkE1MMfjmE0sPtTcU7MxcpSxLNctkUfTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSjEiS/VJo5NECGDJy2pGqU+YorMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYTNmODM3MzYtYTJmNC0z ZThiLWE2OTQtZTRlYjcyZDVjNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFugbbuwDTQ5R9NGOaKkxGfOxbWO4DIKjzayF7lGkd0ruytyFLUNddXl 7CMtLY/kIK9+T6BGHIlt2dGQfTNGOxU8VgSwqIwZikegU4a8X6wu7Ybz/mtdTJ7q gdjlWANeTIgYNatwbQyha7CpUAgtB/4vnQVIExtymx4yc9XvU0OxDORJR9at6GE/ MoLrkdMbma3quQEjuo8jx8d65cHYidHdJLf9h4q1WpKmld9UzQWUVtKdNci/mOeE MpwzfPLoVrdbGYtqY4hvhyFh/hqR+xhtxOKLO8/GdqOS8dv/lPEWjqVl2g/ojuvz KUpSMRVH46h+ZH1z1x1DFzT/83DyfC8= -----END CERTIFICATE-----Generated at Fri Mar 14 08:19:07 2025 by rpki-client