$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/691f3636-56c7-3ed0-8691-8fa05976b484.roa File: 691f3636-56c7-3ed0-8691-8fa05976b484.roa (raw, json) Hash identifier: axCHLpOjHureC96XfuIdJeDwlJFKq40cMeZS/kqXMR8= Subject key identifier: FE:73:4F:C9:8F:89:68:3D:45:5C:80:79:00:EF:21:7B:88:7D:65:AC Certificate issuer: /CN=47af085d-4107-4581-aabf-ee9ca34b1b68 Certificate serial: 010D0C9F432858490881616FF67F595E5767D700 Authority key identifier: 00:1C:A0:17:D6:3C:7A:11:91:17:4F:37:39:8C:97:C3:85:48:B8:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/691f3636-56c7-3ed0-8691-8fa05976b484.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 16796 IP address blocks: 192.34.70.0/24 maxlen: 32 198.163.144.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/47af085d-4107-4581-aabf-ee9ca34b1b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/47af085d-4107-4581-aabf-ee9ca34b1b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:61:6f:f6:7f:59:5e:57:67:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47af085d-4107-4581-aabf-ee9ca34b1b68 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=d32a069f-04cb-48b5-acfc-9779fc0c8e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1e:b5:24:6c:40:2a:bf:88:f9:cd:e2:e5:7d: 47:bd:23:1c:8d:e8:fd:2b:43:65:04:e3:40:8d:2f: 90:0c:83:67:38:1a:1a:25:66:8d:6a:41:d0:2b:2a: ca:7a:5d:61:c2:fd:8c:8e:6b:57:eb:3b:e8:e0:94: 76:0e:00:aa:34:8f:e4:7d:c2:05:12:1e:6a:61:6d: 17:67:88:b5:16:29:67:aa:da:3a:5c:43:1b:e7:f3: d8:e1:bd:69:32:b9:cf:de:e5:45:d5:af:74:ba:ff: f9:e5:fe:8f:91:3b:aa:e7:0e:23:7d:40:25:9c:39: ee:37:65:d7:f2:c3:38:51:78:27:13:74:65:4c:39: 1d:cc:b4:8d:5f:4c:11:8a:b4:6e:f4:0f:38:f9:da: 83:10:ae:cc:cf:23:54:9c:d3:44:7e:83:7e:aa:14: 5f:18:cc:58:50:bb:37:12:66:f7:f1:b8:60:88:09: 16:63:b5:66:2b:51:31:eb:0e:81:3e:23:cb:1a:31: 83:3b:f4:cf:eb:74:04:1f:ce:1f:99:15:a8:ef:ce: c0:39:60:b0:b6:fe:41:72:2f:8b:29:07:c4:b0:15: 18:5a:15:14:8a:76:2a:48:2d:71:06:4f:a3:53:b6: 7f:28:a6:b9:bd:14:3e:5a:13:a0:21:82:c5:9a:07: 4c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:73:4F:C9:8F:89:68:3D:45:5C:80:79:00:EF:21:7B:88:7D:65:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/691f3636-56c7-3ed0-8691-8fa05976b484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68/47af085d-4107-4581-aabf-ee9ca34b1b68.crl X509v3 Authority Key Identifier: keyid:00:1C:A0:17:D6:3C:7A:11:91:17:4F:37:39:8C:97:C3:85:48:B8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47af085d-4107-4581-aabf-ee9ca34b1b68.cer sbgp-ipAddrBlock: critical IPv4: 192.34.70.0/24 198.163.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c7:4b:d8:c8:55:a7:5d:4e:6e:ce:01:00:6d:5a:6e:06:68: 6e:d3:9f:da:9a:39:e7:6a:0b:5d:35:e1:a4:a8:18:70:0d:f4: 02:01:17:f8:17:85:e2:e2:89:e3:59:c6:c1:8f:1b:a1:ab:5d: 30:9d:f9:62:4c:bc:99:32:0e:84:3a:5b:3b:0b:76:47:c0:07: e6:d9:4d:9b:ef:7b:b4:ca:fd:d6:cf:a8:7c:e1:98:f7:60:ea: 1b:55:bf:1f:65:8b:60:e2:d6:94:d7:ba:6e:12:4c:23:30:09: bd:e9:ae:e3:cb:2e:8c:21:a8:7b:1c:fd:fd:aa:b5:fd:8e:da: 7a:c8:13:64:c2:ac:9e:90:e6:04:87:2b:c4:cf:b3:c7:84:fe: 57:3d:83:ef:a8:de:b0:6f:1c:73:2c:8b:49:0b:36:b4:48:d0: 60:39:73:98:be:ef:bb:47:d4:3e:bd:33:6e:47:39:d7:e1:d1: 75:4b:75:ec:bf:9f:07:b8:32:32:d2:f7:1f:3a:0d:de:df:94: b0:ff:bb:cf:f1:4b:83:62:56:a4:ef:a0:03:e4:5b:81:4d:e9: 9f:a6:1d:9b:4d:99:c5:97:8b:f3:5a:bf:c7:6e:76:13:73:35: a9:bb:98:c3:a8:88:4a:bc:21:34:91:9d:4d:fe:86:aa:93:5e: 09:92:80:ac -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkIgWFv9n9ZXldn1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhZjA4NWQtNDEwNy00NTgxLWFhYmYtZWU5Y2EzNGIx YjY4MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZDMyYTA2OWYtMDRjYi00OGI1LWFjZmMtOTc3OWZjMGM4ZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8h61JGxAKr+I+c3i5X1HvSMcjej9K0NlBONA jS+QDINnOBoaJWaNakHQKyrKel1hwv2MjmtX6zvo4JR2DgCqNI/kfcIFEh5qYW0X Z4i1Filnqto6XEMb5/PY4b1pMrnP3uVF1a90uv/55f6PkTuq5w4jfUAlnDnuN2XX 8sM4UXgnE3RlTDkdzLSNX0wRirRu9A84+dqDEK7MzyNUnNNEfoN+qhRfGMxYULs3 Emb38bhgiAkWY7VmK1Ex6w6BPiPLGjGDO/TP63QEH84fmRWo787AOWCwtv5Bci+L KQfEsBUYWhUUinYqSC1xBk+jU7Z/KKa5vRQ+WhOgIYLFmgdMJQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFP5zT8mPiWg9RVyAeQDvIXuIfWWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80N2Fm MDg1ZC00MTA3LTQ1ODEtYWFiZi1lZTljYTM0YjFiNjgvNjkxZjM2MzYtNTZjNy0z ZWQwLTg2OTEtOGZhMDU5NzZiNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDdhZjA4NWQtNDEwNy00NTgxLWFh YmYtZWU5Y2EzNGIxYjY4LzQ3YWYwODVkLTQxMDctNDU4MS1hYWJmLWVlOWNhMzRi MWI2OC5jcmwwHwYDVR0jBBgwFoAUABygF9Y8ehGRF083OYyXw4VIuKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80N2FmMDg1ZC00MTA3LTQ1ODEtYWFiZi1lZTlj YTM0YjFiNjguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCJGAwQD xqOQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGLHS9jIVaddTm7OAQBtWm4GaG7Tn9qaOedqC1014aSoGHAN 9AIBF/gXheLiieNZxsGPG6GrXTCd+WJMvJkyDoQ6WzsLdkfAB+bZTZvve7TK/dbP qHzhmPdg6htVvx9li2Di1pTXum4STCMwCb3pruPLLowhqHsc/f2qtf2O2nrIE2TC rJ6Q5gSHK8TPs8eE/lc9g++o3rBvHHMsi0kLNrRI0GA5c5i+77tH1D69M25HOdfh 0XVLdey/nwe4MjLS9x86Dd7flLD/u8/xS4NiVqTvoAPkW4FN6Z+mHZtNmcWXi/Na v8dudhNzNam7mMOoiEq8ITSRnU3+hqqTXgmSgKw= -----END CERTIFICATE-----Generated at Fri Mar 14 10:23:03 2025 by rpki-client