$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/f9a2b571-0f21-3cf0-9cc3-d9fa4b31ca86.roa File: f9a2b571-0f21-3cf0-9cc3-d9fa4b31ca86.roa (raw, json) Hash identifier: aYg5QqOY2+fDqRlKkeo/fc5/LBg/wDHwixHhzpy/3ZU= Subject key identifier: 57:D4:46:46:6E:BA:2C:33:B5:AF:33:72:8A:D7:E3:8C:82:70:B6:D3 Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Certificate serial: 010D0C9F43285848A830B0A0064636B25BE36E00 Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/f9a2b571-0f21-3cf0-9cc3-d9fa4b31ca86.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 15267 IP address blocks: 138.129.0.0/20 maxlen: 20 138.129.24.0/21 maxlen: 21 138.129.30.0/24 maxlen: 24 138.129.31.0/24 maxlen: 24 138.129.32.0/19 maxlen: 19 138.129.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b0:a0:06:46:36:b2:5b:e3:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=3f3ad182-d76b-4bc7-be2a-a2c6f9fc33fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:f9:76:62:b2:f1:96:20:a0:8c:ef:7d:d6: 05:b4:94:dc:12:ac:cc:92:6c:9b:ad:7b:35:07:60: 97:7d:ff:e9:56:c4:6f:d3:b8:20:45:bb:6a:bc:70: f7:23:f0:15:e5:ee:3c:07:ae:72:3a:2b:13:ba:ea: 98:90:70:01:43:af:5a:c1:1f:60:2b:6b:8e:25:e4: e4:af:47:7c:e7:3d:c2:ee:b2:fb:3f:0e:f4:8b:be: 2b:23:2b:a0:1f:3c:71:50:b9:2e:6e:94:89:5e:a7: 1f:e7:54:a9:9b:12:b7:21:18:6e:16:40:10:9c:9e: 4d:aa:8f:42:3b:4f:79:31:6a:57:b8:79:c1:e1:e0: 65:b1:46:73:4a:21:18:47:da:8e:ec:71:5e:9d:e7: 97:42:28:94:26:77:81:bb:91:e4:85:77:11:9b:03: 93:61:74:66:ef:07:06:35:b2:5c:42:ef:fa:1c:5c: e1:3e:82:ff:47:b7:63:e0:86:5c:59:58:78:97:fd: 87:07:8b:8b:30:d5:9b:5f:29:f2:fc:59:33:ba:9f: e2:03:f8:1f:f3:3b:d2:fe:51:93:cd:4b:1b:df:c6: f7:fb:4d:0a:c3:09:6b:94:43:8f:42:9c:14:dd:15: 36:8a:16:f6:09:79:06:fb:96:80:28:de:42:de:58: 80:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D4:46:46:6E:BA:2C:33:B5:AF:33:72:8A:D7:E3:8C:82:70:B6:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/f9a2b571-0f21-3cf0-9cc3-d9fa4b31ca86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl X509v3 Authority Key Identifier: keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer sbgp-ipAddrBlock: critical IPv4: 138.129.0.0/20 138.129.24.0-138.129.63.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:af:b8:30:cf:b2:b2:6d:dc:55:8c:b5:5a:63:cf:53:1b:c1: c3:b2:5d:39:27:22:7b:a4:9d:60:16:0d:da:5e:a5:bd:f5:25: cc:c3:e1:12:ae:cf:a5:e0:e7:2d:4e:d3:ac:d5:15:b5:f2:f0: 92:9b:aa:bb:0a:c2:e3:af:fd:e1:fc:45:a5:0b:6c:94:23:a4: a0:a8:9b:2b:86:f0:10:e6:f4:c0:85:ae:76:9a:a9:cd:d7:6d: 32:db:a0:0d:34:fc:32:ca:8c:c0:b5:b6:d4:b7:12:de:6b:54: 81:14:7e:3b:ef:4f:12:62:41:f2:6d:46:c9:34:7e:a2:49:43: 12:97:d8:e4:1a:11:b8:c8:44:ba:30:60:93:5b:20:6e:30:28: da:72:c5:ba:a9:a3:9a:ad:c2:8d:5e:d7:fe:ff:36:8a:a4:c5: 03:66:81:af:42:6b:dc:ab:b3:ca:08:bd:a0:d6:4e:a1:06:b1: e9:8b:91:e8:db:1c:c1:5b:34:d1:f0:bd:91:c5:d5:0e:55:d1: fe:94:79:1c:20:66:1a:dc:20:9c:4a:6c:e1:e6:47:bb:00:32: 5c:09:03:90:29:3c:2b:9f:31:f6:a4:6f:c8:bc:7f:3e:58:b2: 75:48:98:0c:d0:6a:24:18:0f:bb:06:3f:a8:15:db:23:dc:31: d6:c5:76:b3 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEioMLCgBkY2slvjbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx MzM4MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk M2YzYWQxODItZDc2Yi00YmM3LWJlMmEtYTJjNmY5ZmMzM2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubv5dmKy8ZYgoIzvfdYFtJTcEqzMkmybrXs1 B2CXff/pVsRv07ggRbtqvHD3I/AV5e48B65yOisTuuqYkHABQ69awR9gK2uOJeTk r0d85z3C7rL7Pw70i74rIyugHzxxULkubpSJXqcf51SpmxK3IRhuFkAQnJ5Nqo9C O095MWpXuHnB4eBlsUZzSiEYR9qO7HFeneeXQiiUJneBu5HkhXcRmwOTYXRm7wcG NbJcQu/6HFzhPoL/R7dj4IZcWVh4l/2HB4uLMNWbXyny/Fkzup/iA/gf8zvS/lGT zUsb38b3+00KwwlrlEOPQpwU3RU2ihb2CXkG+5aAKN5C3liAKQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFFfURkZuuiwzta8zcorX44yCcLbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvZjlhMmI1NzEtMGYyMS0z Y2YwLTljYzMtZDlmYTRiMzFjYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3 YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4 MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl MWExODEzMzguY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEioEAMAwD BAOKgRgDBAaKgQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAGK+4MM+ysm3cVYy1WmPPUxvBw7JdOScie6Sd YBYN2l6lvfUlzMPhEq7PpeDnLU7TrNUVtfLwkpuquwrC46/94fxFpQtslCOkoKib K4bwEOb0wIWudpqpzddtMtugDTT8MsqMwLW21LcS3mtUgRR+O+9PEmJB8m1GyTR+ oklDEpfY5BoRuMhEujBgk1sgbjAo2nLFuqmjmq3CjV7X/v82iqTFA2aBr0Jr3Kuz ygi9oNZOoQax6YuR6NscwVs00fC9kcXVDlXR/pR5HCBmGtwgnEps4eZHuwAyXAkD kCk8K58x9qRvyLx/PliydUiYDNBqJBgPuwY/qBXbI9wx1sV2sw== -----END CERTIFICATE-----Generated at Sun Feb 16 22:08:46 2025 by rpki-client