$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/257bba9c-737b-32f8-afa2-28d7618d1067.roa File: 257bba9c-737b-32f8-afa2-28d7618d1067.roa (raw, json) Hash identifier: ysLiiLz7LmvyqMHNat0KDf1dU4wbGAKe+u9xGP5vYkk= Subject key identifier: 1C:83:A3:DB:6C:DB:07:A7:84:88:CE:AA:CA:F8:20:33:B5:D2:C3:CA Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285848854B544BBBEA01CC0DBB1F80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/257bba9c-737b-32f8-afa2-28d7618d1067.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 54994 IP address blocks: 168.235.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:54:4b:bb:ea:01:cc:0d:bb:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=d5d83255-d0af-44c8-9941-b08c99b22058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5d:a6:ce:74:f3:77:f9:8e:69:37:93:22:8a: 6b:64:98:d7:91:b7:1e:0b:d2:87:83:b3:b6:a4:e4: b6:7e:42:03:01:cb:c6:e9:90:5f:34:da:1d:e3:17: d9:c5:d6:0d:1b:27:a5:61:9d:01:c1:49:2d:41:20: 7a:fc:41:a0:1f:47:3a:39:47:c2:26:68:34:86:06: 6b:9a:0e:f6:22:ae:6a:10:b5:d0:46:3c:27:99:65: f4:c2:4d:ba:22:46:de:d8:dc:48:f8:d6:48:19:ad: 51:79:d8:a3:0e:91:86:72:6a:40:10:1b:e3:ab:1b: 01:56:b6:e0:e4:29:74:c4:ec:47:4d:1b:5b:cc:2b: ac:3b:8b:3a:16:04:2f:1c:50:dc:f0:b6:4c:6f:2a: c4:4c:fc:a6:21:1a:6b:c4:b7:0c:9d:4c:0f:5f:c2: 4c:c7:3d:b1:9b:00:ca:38:f5:ff:85:06:86:f6:7d: c7:54:c9:63:73:b6:e8:81:c8:17:04:e5:dd:16:35: 42:75:45:a1:ee:0e:25:90:06:44:00:26:bc:ce:a1: a3:8d:5e:be:f2:83:d9:df:92:12:7b:a6:ff:ac:9b: e7:43:bb:e4:ba:be:c2:60:b3:2a:c1:9d:3e:7c:9e: 64:59:44:3a:a3:df:04:79:11:10:6d:dd:22:8f:f3: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:83:A3:DB:6C:DB:07:A7:84:88:CE:AA:CA:F8:20:33:B5:D2:C3:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/257bba9c-737b-32f8-afa2-28d7618d1067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 168.235.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:9c:cf:4c:52:03:30:c7:63:bb:74:01:72:ef:b5:7f:a3:e3: c7:55:43:6c:b1:13:5c:78:b1:2a:88:23:32:cd:bf:4d:26:43: 53:6f:2c:16:b0:b5:4e:54:c3:ea:ee:aa:f1:be:42:4e:0e:33: 13:9e:f1:fe:53:b3:e2:4b:32:e0:ba:9c:20:df:84:cc:21:d4: 36:66:17:2b:66:f5:b3:66:46:e1:5a:27:10:aa:7b:a0:dd:bb: 38:f6:c8:81:9e:ea:c5:78:91:43:4b:45:ef:2f:b2:8d:d5:18: 7d:cd:02:f6:ce:f1:f3:f0:8a:56:53:0f:35:d2:37:a4:c0:67: cb:f3:bf:ba:cd:42:0a:4e:86:da:5c:cd:8d:a5:0e:62:4e:b7: 22:0d:ff:45:be:d2:c1:c2:b6:c2:02:c9:c2:aa:36:91:56:21: cb:a9:8c:4e:cf:01:e3:d8:3d:26:a0:2a:ec:79:f0:eb:43:ad: e1:77:06:46:0f:32:21:2b:09:c2:ad:10:82:94:98:b0:5a:31: 59:6a:15:fe:b3:b2:65:a8:46:76:e5:9c:b3:8a:33:fd:cd:0c: 14:1c:40:b9:11:5c:5b:47:6c:18:51:9a:03:37:0a:e3:9a:42: c4:52:ea:8e:7f:bf:24:c7:3e:19:aa:59:a3:0f:b8:60:48:1d: d4:f5:7f:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS1RLu+oBzA27H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk ZDVkODMyNTUtZDBhZi00NGM4LTk5NDEtYjA4Yzk5YjIyMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F2mznTzd/mOaTeTIoprZJjXkbceC9KHg7O2 pOS2fkIDAcvG6ZBfNNod4xfZxdYNGyelYZ0BwUktQSB6/EGgH0c6OUfCJmg0hgZr mg72Iq5qELXQRjwnmWX0wk26Ikbe2NxI+NZIGa1RedijDpGGcmpAEBvjqxsBVrbg 5Cl0xOxHTRtbzCusO4s6FgQvHFDc8LZMbyrETPymIRprxLcMnUwPX8JMxz2xmwDK OPX/hQaG9n3HVMljc7bogcgXBOXdFjVCdUWh7g4lkAZEACa8zqGjjV6+8oPZ35IS e6b/rJvnQ7vkur7CYLMqwZ0+fJ5kWUQ6o98EeREQbd0ij/PsTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByDo9ts2wenhIjOqsr4IDO10sPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjU3YmJhOWMtNzM3Yi0z MmY4LWFmYTItMjhkNzYxOGQxMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACcz0xSAzDHY7t0AXLvtX+j48dVQ2yxE1x4sSqIIzLNv00mQ1NvLBaw tU5Uw+ruqvG+Qk4OMxOe8f5Ts+JLMuC6nCDfhMwh1DZmFytm9bNmRuFaJxCqe6Dd uzj2yIGe6sV4kUNLRe8vso3VGH3NAvbO8fPwilZTDzXSN6TAZ8vzv7rNQgpOhtpc zY2lDmJOtyIN/0W+0sHCtsICycKqNpFWIcupjE7PAePYPSagKux58OtDreF3BkYP MiErCcKtEIKUmLBaMVlqFf6zsmWoRnblnLOKM/3NDBQcQLkRXFtHbBhRmgM3CuOa QsRS6o5/vyTHPhmqWaMPuGBIHdT1f5w= -----END CERTIFICATE-----Generated at Sun Feb 16 20:47:47 2025 by rpki-client