$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa File: 6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa (raw, json) Hash identifier: 6HnmjCkjt3ok6ZKBMtQk9CdGkr6C+F2vVz6zVJ27YNI= Subject key identifier: BE:A4:BB:23:26:78:C4:5D:9B:C6:3D:0A:0C:A9:8F:D6:CE:EC:57:39 Certificate issuer: /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Certificate serial: 010D0C9F4328584827C536BB15AA94747BC46280 Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 399808 IP address blocks: 64.29.128.0/24 maxlen: 24 2607:f3a0:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:36:bb:15:aa:94:74:7b:c4:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=db538d70-d700-44f6-9a21-a9f03317ce69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fc:52:74:eb:fe:5d:51:45:b1:6b:a9:b2:78: 7c:a3:3c:d8:fe:97:e8:ed:5e:30:c8:76:4a:f9:d5: 1c:19:ee:81:db:2b:d8:48:f1:94:93:c6:98:9e:da: cd:2e:a6:d9:5a:7e:d2:f7:3f:75:8e:66:52:f1:0d: 03:1d:8e:37:5e:c1:19:1d:ea:b0:23:2b:36:1a:d9: fc:98:74:fb:fe:52:45:5a:00:a5:0f:3c:4c:7b:44: cb:2c:9a:c2:07:48:ac:8f:22:bc:4e:65:c3:11:95: 24:13:90:ff:19:25:03:eb:52:d7:05:44:43:85:f8: b5:e1:82:95:a2:38:6c:85:2e:c5:b7:a8:a1:64:ba: 45:f3:c4:8a:d1:2b:b5:7c:5c:ce:3f:5b:d8:6b:f4: 03:15:32:ef:07:c6:32:e4:0d:0e:ac:dd:0a:7e:0e: f5:30:bf:d2:9b:a1:bd:f9:cf:ed:55:c9:0a:ab:41: 2b:84:b1:17:c1:eb:33:39:e0:e3:da:e5:74:a4:f5: f1:ad:b4:a6:c3:76:7b:25:c5:97:3b:60:7f:dc:8e: 62:9a:8f:1e:85:bc:8f:49:bb:42:0c:b0:95:ba:b2: 3f:24:ee:15:26:8b:63:09:09:6f:1b:83:ba:cd:92: 62:f2:cf:0a:16:6a:56:5f:10:e0:20:ef:38:4b:87: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A4:BB:23:26:78:C4:5D:9B:C6:3D:0A:0C:A9:8F:D6:CE:EC:57:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl X509v3 Authority Key Identifier: keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer sbgp-ipAddrBlock: critical IPv4: 64.29.128.0/24 IPv6: 2607:f3a0:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:0a:d5:d2:74:3c:82:74:a6:82:09:52:b6:1d:07:78:f6:5a: 63:e5:9e:c5:05:82:31:c7:54:20:1b:f9:8c:82:88:88:88:7e: a4:6c:1c:c0:d6:b5:70:f8:a0:e5:42:8b:f5:02:25:ff:e1:0f: d5:05:fe:34:e3:08:dc:a4:62:ab:a8:9f:11:b6:96:65:64:59: 07:d9:ba:25:60:cb:cf:fd:e6:72:87:17:5c:7a:32:63:06:f4: 05:db:2d:87:99:f1:ad:94:e1:56:ee:18:94:3a:67:33:cd:66: 58:dc:6c:92:44:10:d1:97:67:1a:c5:19:5e:14:58:44:a4:56: 47:26:fa:03:b9:97:8e:81:9f:06:ea:7f:50:67:77:6a:82:66: 8f:79:e7:16:5b:91:7a:40:55:56:03:2f:a5:39:d4:dc:30:8e: 77:45:9f:2b:7c:a6:28:30:b0:c2:43:ae:61:60:f6:86:e8:ea: 83:29:a4:8a:2f:de:ab:e3:0b:43:f2:80:68:5f:65:40:2e:42: 12:d5:22:2c:ff:d5:78:9f:86:d0:2c:68:58:43:c3:bd:0d:36: 30:f4:d3:21:79:05:54:7c:25:2c:6f:01:e9:e1:72:85:26:3d: 83:f5:85:a8:34:75:56:a5:28:c1:a2:36:3e:6a:b7:7f:b1:28: da:7a:04:9a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEgnxTa7FaqUdHvEYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0 YjczMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk ZGI1MzhkNzAtZDcwMC00NGY2LTlhMjEtYTlmMDMzMTdjZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/xSdOv+XVFFsWupsnh8ozzY/pfo7V4wyHZK +dUcGe6B2yvYSPGUk8aYntrNLqbZWn7S9z91jmZS8Q0DHY43XsEZHeqwIys2Gtn8 mHT7/lJFWgClDzxMe0TLLJrCB0isjyK8TmXDEZUkE5D/GSUD61LXBURDhfi14YKV ojhshS7Ft6ihZLpF88SK0Su1fFzOP1vYa/QDFTLvB8Yy5A0OrN0Kfg71ML/Sm6G9 +c/tVckKq0ErhLEXweszOeDj2uV0pPXxrbSmw3Z7JcWXO2B/3I5imo8ehbyPSbtC DLCVurI/JO4VJotjCQlvG4O6zZJi8s8KFmpWXxDgIO84S4e6/wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFL6kuyMmeMRdm8Y9Cgypj9bO7Fc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3 MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvNmJhYWVkNmItMjFmNC0z OGU0LTk1YzItMmE1NGIxNTViMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODVmNzM1YjYtMGFlMi00YzJhLTgy NmItN2U4YjEyNmE0YjczLzg1ZjczNWI2LTBhZTItNGMyYS04MjZiLTdlOGIxMjZh NGI3My5jcmwwHwYDVR0jBBgwFoAUg5odAfvJBkOReL6k09QXpHyUm9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThi MTI2YTRiNzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQB2AMA8E AgACMAkDBwAmB/OgoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFArV0nQ8gnSmgglSth0HePZaY+WexQWC McdUIBv5jIKIiIh+pGwcwNa1cPig5UKL9QIl/+EP1QX+NOMI3KRiq6ifEbaWZWRZ B9m6JWDLz/3mcocXXHoyYwb0Bdsth5nxrZThVu4YlDpnM81mWNxskkQQ0ZdnGsUZ XhRYRKRWRyb6A7mXjoGfBup/UGd3aoJmj3nnFluRekBVVgMvpTnU3DCOd0WfK3ym KDCwwkOuYWD2hujqgymkii/eq+MLQ/KAaF9lQC5CEtUiLP/VeJ+G0CxoWEPDvQ02 MPTTIXkFVHwlLG8B6eFyhSY9g/WFqDR1VqUowaI2Pmq3f7Eo2noEmg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:49 2025 by rpki-client