$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa File: 488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa (raw, json) Hash identifier: SWKxB7h2qoiZCsRkRbiO8koexjSEIR0aDm36xJCS0ys= Subject key identifier: F0:5B:03:60:A1:73:E8:65:52:42:9B:64:10:EC:24:DB:3F:B0:79:DD Certificate issuer: /CN=86906b9d-26ff-4ce8-b900-62739db43657 Certificate serial: 010D0C9F43285848A29B4AACE9F4DD68E7137880 Authority key identifier: 5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 6653 IP address blocks: 204.10.124.0/22 maxlen: 24 204.16.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:4a:ac:e9:f4:dd:68:e7:13:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86906b9d-26ff-4ce8-b900-62739db43657 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=6a7aa028-d9e6-4368-92d2-624a503b15ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:62:43:36:f6:2a:52:8f:fb:32:d3:cb:ad:d0: 0a:2f:69:f8:5b:d1:7a:aa:20:37:ed:47:53:59:4a: b2:b0:9b:d1:b1:9c:27:83:36:74:35:66:de:87:09: a8:4c:40:a5:e7:14:08:32:54:62:bb:51:25:98:e2: 94:60:e6:29:17:30:6c:22:0b:df:43:06:3f:5b:cf: 5e:98:26:1e:2f:15:55:4c:88:db:51:79:4a:62:c2: 2c:f3:0a:19:14:77:36:04:a1:48:92:2c:09:f7:60: b8:b4:d4:a6:83:e5:49:1c:c4:b1:d1:2f:e7:15:f6: 16:19:89:c3:5e:39:66:cd:62:3b:3b:24:d4:cb:2a: 07:1b:4d:f4:7d:66:cf:b9:85:be:82:93:82:fd:a7: fc:95:3d:21:cd:73:87:fc:18:8a:fe:92:6c:59:7c: e4:96:a7:4e:a7:9c:c1:f9:ac:24:26:3b:50:cd:b0: 5b:55:d7:79:c6:e0:02:5b:40:8c:c8:9c:8d:90:c5: a3:b2:7d:d0:f6:22:87:bf:51:6a:bc:f7:0f:a6:40: 56:be:20:45:8b:f7:fd:85:24:76:76:eb:02:f6:b0: 54:db:59:92:95:b6:44:38:be:30:9d:2f:39:bf:cb: f4:32:90:5c:83:5a:70:da:c8:7c:40:bd:84:80:a0: 34:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5B:03:60:A1:73:E8:65:52:42:9B:64:10:EC:24:DB:3F:B0:79:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.crl X509v3 Authority Key Identifier: keyid:5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer sbgp-ipAddrBlock: critical IPv4: 204.10.124.0/22 204.16.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:69:f1:5d:46:bb:70:6a:42:8e:27:ba:28:ba:fe:7d:e0:fa: dc:c0:5a:f5:73:a7:4d:f0:ee:e7:d6:68:cb:6c:03:59:1b:c9: 2f:88:89:9c:72:1e:84:92:d9:6c:46:29:a1:fd:09:88:8f:6d: 47:42:7b:09:ab:4b:c5:76:04:bc:5c:01:d2:ff:a2:54:28:2a: 8d:69:f0:63:26:45:dc:e8:c3:b5:67:61:03:85:c8:64:8a:4d: 4d:2d:dc:5d:84:a9:e5:32:a9:d5:f2:2b:52:6d:ab:7a:ce:f6: d2:1e:9e:88:07:85:f3:25:2d:c0:33:3b:bb:39:f3:bb:e2:d1: 0d:87:2f:62:07:46:ee:92:02:df:4e:dd:6f:90:78:fc:70:cd: 99:e7:cc:6f:df:e6:aa:10:9a:2c:93:98:6b:a2:8c:3f:00:02: 6d:72:df:dc:1f:69:33:09:10:23:f4:9a:20:31:26:43:19:6d: a0:c5:31:b2:e0:05:48:73:62:c3:48:2b:ca:3c:af:70:65:88: f9:75:b4:f9:3a:14:21:b8:b9:a5:83:3a:24:0e:53:1c:ef:c1: a7:28:06:ad:3c:0b:ef:16:ed:b8:fc:02:66:81:ea:14:54:1b: 54:bc:01:fa:cf:1e:5a:1e:b2:21:5e:c2:3e:75:fa:f7:28:d5: 07:5b:87:05 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiim0qs6fTdaOcTeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY5MDZiOWQtMjZmZi00Y2U4LWI5MDAtNjI3MzlkYjQz NjU3MB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk NmE3YWEwMjgtZDllNi00MzY4LTkyZDItNjI0YTUwM2IxNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGJDNvYqUo/7MtPLrdAKL2n4W9F6qiA37UdT WUqysJvRsZwngzZ0NWbehwmoTECl5xQIMlRiu1ElmOKUYOYpFzBsIgvfQwY/W89e mCYeLxVVTIjbUXlKYsIs8woZFHc2BKFIkiwJ92C4tNSmg+VJHMSx0S/nFfYWGYnD XjlmzWI7OyTUyyoHG030fWbPuYW+gpOC/af8lT0hzXOH/BiK/pJsWXzklqdOp5zB +awkJjtQzbBbVdd5xuACW0CMyJyNkMWjsn3Q9iKHv1FqvPcPpkBWviBFi/f9hSR2 dusC9rBU21mSlbZEOL4wnS85v8v0MpBcg1pw2sh8QL2EgKA06wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPBbA2Chc+hlUkKbZBDsJNs/sHndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Njkw NmI5ZC0yNmZmLTRjZTgtYjkwMC02MjczOWRiNDM2NTcvNDg4ZDMyZjAtZGVkNS0z Y2U5LThlOGItNTBiY2NiNjVjNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODY5MDZiOWQtMjZmZi00Y2U4LWI5 MDAtNjI3MzlkYjQzNjU3Lzg2OTA2YjlkLTI2ZmYtNGNlOC1iOTAwLTYyNzM5ZGI0 MzY1Ny5jcmwwHwYDVR0jBBgwFoAUW5Tob1yTC1nwz5qsCXmVzu2WP6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NjkwNmI5ZC0yNmZmLTRjZTgtYjkwMC02Mjcz OWRiNDM2NTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCzAp8AwQC zBDgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFxp8V1Gu3BqQo4nuii6/n3g+tzAWvVzp03w7ufWaMtsA1kb yS+IiZxyHoSS2WxGKaH9CYiPbUdCewmrS8V2BLxcAdL/olQoKo1p8GMmRdzow7Vn YQOFyGSKTU0t3F2EqeUyqdXyK1Jtq3rO9tIenogHhfMlLcAzO7s587vi0Q2HL2IH Ru6SAt9O3W+QePxwzZnnzG/f5qoQmiyTmGuijD8AAm1y39wfaTMJECP0miAxJkMZ baDFMbLgBUhzYsNIK8o8r3BliPl1tPk6FCG4uaWDOiQOUxzvwacoBq08C+8W7bj8 AmaB6hRUG1S8AfrPHloesiFewj51+vco1QdbhwU= -----END CERTIFICATE-----Generated at Sun Feb 16 22:32:35 2025 by rpki-client