$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/896b5e20-222b-3000-8ee0-be86aac797ce.roa File: 896b5e20-222b-3000-8ee0-be86aac797ce.roa (raw, json) Hash identifier: AQq9mrBAP1ojUMalNhsrUsgT4/ncnV0DE5VVQdEN8cQ= Subject key identifier: 32:66:22:46:0A:A9:79:0C:62:FC:2F:64:08:FE:5E:4E:06:83:36:D1 Certificate issuer: /CN=aed01dad-662c-4720-aaa5-ea3d024bad07 Certificate serial: 010D0C9F43285848BE862A047855A9BB5705ECE0 Authority key identifier: AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/896b5e20-222b-3000-8ee0-be86aac797ce.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 400583 IP address blocks: 207.174.124.0/22 maxlen: 24 2602:fb86::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:2a:04:78:55:a9:bb:57:05:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aed01dad-662c-4720-aaa5-ea3d024bad07 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=3a31392a-e9d5-4a3a-bfec-535df812123a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:66:fb:27:eb:ec:bd:ec:06:54:8a:50:0c:f4: 3f:53:84:cf:ec:04:87:a7:2e:b8:4d:95:b9:b7:b2: e1:17:d7:ca:64:7e:4a:d3:43:df:6b:9b:23:f5:ea: ea:32:c2:01:96:62:02:e1:2c:f0:a1:91:c8:5a:b3: bd:a2:af:87:92:78:54:9f:37:fb:e6:b2:9c:73:97: 9a:1b:a2:94:ec:b1:8b:0e:50:df:14:4f:37:a6:e0: a6:15:84:b0:4e:91:ab:8c:fb:f1:28:f6:01:e5:72: 90:36:d1:68:fb:55:92:c3:ef:3f:ee:ac:d9:33:da: b8:2c:e5:21:ee:08:3f:23:c3:2b:03:14:25:87:d6: fb:45:c5:e2:ee:70:4c:17:7e:73:96:0e:1e:7f:48: fe:4f:58:61:f1:8b:fe:a5:1e:04:29:3f:79:04:c2: 0a:3c:62:4b:5f:dd:e3:05:17:08:d5:67:26:26:ff: c8:3d:30:28:aa:6a:06:7d:3c:72:8a:36:e1:e0:93: 29:82:14:a5:12:4f:25:0e:b1:5e:21:88:15:3b:59: d9:ef:bf:2a:c4:14:6a:c2:53:30:44:4c:83:fe:6e: f6:8f:9b:1f:da:2b:37:13:5b:ba:f9:b5:12:2e:a1: 16:c2:45:a9:1b:35:7c:fb:e7:14:7f:e3:42:48:36: fc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:66:22:46:0A:A9:79:0C:62:FC:2F:64:08:FE:5E:4E:06:83:36:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/896b5e20-222b-3000-8ee0-be86aac797ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.crl X509v3 Authority Key Identifier: keyid:AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer sbgp-ipAddrBlock: critical IPv4: 207.174.124.0/22 IPv6: 2602:fb86::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:ff:10:62:ba:e4:87:f1:7f:4c:2b:16:54:aa:74:40:05:f2: 5c:bf:c9:45:00:d4:7f:98:9d:50:e6:8c:9a:cd:e6:a2:a2:69: 20:d3:48:46:14:4a:2c:64:a8:79:d3:50:b7:ae:6d:1a:5a:7e: 80:4f:f2:02:84:49:e2:88:9c:c4:57:d2:8d:a1:85:41:aa:33: d5:ff:ab:3f:fe:27:d3:86:0c:95:94:88:7e:1b:75:a7:2b:a6: 07:c8:ac:95:d2:00:80:e1:9c:0e:a2:b8:31:82:e0:b6:55:fc: 9a:90:af:98:ad:db:d6:95:b7:d8:4f:c4:18:5b:74:c1:bf:c9: 4f:be:d6:a3:ef:3d:47:53:90:e2:26:a7:6d:ad:96:97:11:9b: 87:d2:55:c9:33:c6:51:2e:2c:90:7a:12:99:50:f3:05:28:0b: 7b:2f:00:a4:a0:c9:d0:86:e1:6f:1f:1c:7a:8a:97:ba:71:f0: a6:a4:95:32:0b:9e:ed:1f:9b:65:e1:94:e6:0e:96:31:3d:ff: d3:e1:43:98:c3:a0:4f:13:44:c8:7f:49:97:4b:a4:6a:56:b9: 1e:d5:ff:1f:69:30:65:05:d5:a6:68:60:15:bb:58:85:de:f5: 75:f7:2d:9a:fc:a2:83:d7:65:31:c5:43:e2:e0:84:0b:18:83: 6d:23:99:9d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEi+hioEeFWpu1cF7OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWVkMDFkYWQtNjYyYy00NzIwLWFhYTUtZWEzZDAyNGJh ZDA3MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk M2EzMTM5MmEtZTlkNS00YTNhLWJmZWMtNTM1ZGY4MTIxMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmb7J+vsvewGVIpQDPQ/U4TP7ASHpy64TZW5 t7LhF9fKZH5K00Pfa5sj9erqMsIBlmIC4SzwoZHIWrO9oq+HknhUnzf75rKcc5ea G6KU7LGLDlDfFE83puCmFYSwTpGrjPvxKPYB5XKQNtFo+1WSw+8/7qzZM9q4LOUh 7gg/I8MrAxQlh9b7RcXi7nBMF35zlg4ef0j+T1hh8Yv+pR4EKT95BMIKPGJLX93j BRcI1WcmJv/IPTAoqmoGfTxyijbh4JMpghSlEk8lDrFeIYgVO1nZ778qxBRqwlMw REyD/m72j5sf2is3E1u6+bUSLqEWwkWpGzV8++cUf+NCSDb8qQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDJmIkYKqXkMYvwvZAj+Xk4GgzbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZWQw MWRhZC02NjJjLTQ3MjAtYWFhNS1lYTNkMDI0YmFkMDcvODk2YjVlMjAtMjIyYi0z MDAwLThlZTAtYmU4NmFhYzc5N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWVkMDFkYWQtNjYyYy00NzIwLWFh YTUtZWEzZDAyNGJhZDA3L2FlZDAxZGFkLTY2MmMtNDcyMC1hYWE1LWVhM2QwMjRi YWQwNy5jcmwwHwYDVR0jBBgwFoAUryjl9YLM4ZXjBjlUXHntx3ilxU4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZWQwMWRhZC02NjJjLTQ3MjAtYWFhNS1lYTNk MDI0YmFkMDcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCz658MA4E AgACMAgDBgQmAvuGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCv/xBiuuSH8X9MKxZUqnRABfJcv8lFANR/ mJ1Q5oyazeaiomkg00hGFEosZKh501C3rm0aWn6AT/IChEniiJzEV9KNoYVBqjPV /6s//ifThgyVlIh+G3WnK6YHyKyV0gCA4ZwOorgxguC2VfyakK+YrdvWlbfYT8QY W3TBv8lPvtaj7z1HU5DiJqdtrZaXEZuH0lXJM8ZRLiyQehKZUPMFKAt7LwCkoMnQ huFvHxx6ipe6cfCmpJUyC57tH5tl4ZTmDpYxPf/T4UOYw6BPE0TIf0mXS6RqVrke 1f8faTBlBdWmaGAVu1iF3vV19y2a/KKD12UxxUPi4IQLGINtI5md -----END CERTIFICATE-----Generated at Sat Apr 12 00:25:32 2025 by rpki-client