$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa File: f851c4bc-a18d-3492-9e35-2d61175cac7b.roa (raw, json) Hash identifier: FoE4/fx/ekdSqRSKwayUZAXvEtndgfyNkbxYfuYNj7A= Subject key identifier: F3:73:45:9D:33:13:BC:0C:CA:88:61:48:A4:F0:9C:86:AD:B5:16:6A Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F43285848A1360E83B4515E941860F2C0 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 29909 IP address blocks: 216.157.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:0e:83:b4:51:5e:94:18:60:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=66d5193f-3b50-46fd-86be-aefa6f670879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:de:a7:fd:96:49:46:31:d7:a0:ae:be:00:25: c1:1d:89:7e:2b:01:f6:8a:cc:6a:09:8a:b6:29:48: 9a:37:0b:f9:f3:88:e2:05:7c:40:d0:c4:68:70:33: 71:5b:3b:46:17:0c:ba:cb:c8:b3:eb:8b:fb:29:7e: 18:b9:57:4a:ff:b3:47:45:f0:cf:b2:2f:58:28:72: 62:57:81:cb:03:ae:10:be:ef:de:04:88:72:3e:ca: da:87:91:b2:f5:e1:fd:58:fc:24:aa:e0:c6:04:24: 70:6a:3b:06:eb:53:a5:ed:e5:1b:66:cc:f8:17:bf: 7d:65:f1:a5:41:b4:8a:4f:24:c2:42:c6:ea:61:f6: 68:8d:9e:ce:61:80:aa:a9:81:8b:ef:b5:1c:c6:e4: c0:58:74:d8:a6:7f:04:c7:30:8e:1a:9c:71:ca:c2: 5e:40:bc:57:a1:6d:aa:ad:99:6d:6b:20:4b:8e:ee: 00:38:ea:b0:c3:80:20:19:5a:f0:ec:1b:1d:e8:af: ef:f3:d5:c1:25:25:82:33:d1:d9:95:26:51:38:7b: 3b:71:cb:1d:1a:ba:ce:83:94:1e:88:10:ba:a0:75: ea:b0:d2:8e:fd:55:56:a4:81:08:58:eb:a0:f7:af: 14:5b:c9:28:42:c1:a5:62:14:3c:ea:98:c3:43:35: 93:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:73:45:9D:33:13:BC:0C:CA:88:61:48:A4:F0:9C:86:AD:B5:16:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 216.157.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:44:9e:68:4c:a4:a7:c4:50:73:61:b2:4d:5e:7c:89:8e:8f: 35:e4:5b:ce:84:15:88:41:1c:ed:30:2d:54:36:eb:f9:6e:7e: 23:cb:69:d7:9e:17:02:84:0c:18:e9:d0:61:34:85:bc:77:9e: ae:2f:00:66:0b:d1:47:f3:a9:d2:00:d0:94:43:cc:a3:61:40: 13:41:c0:1a:31:b0:88:16:29:dc:47:52:35:7b:6d:53:9d:21: 6e:fd:89:d1:d5:46:c8:3a:87:59:3f:d4:32:17:d3:d3:c2:d9: 67:cd:9a:62:91:7d:eb:76:97:c5:b7:1f:21:ab:2f:6d:c0:1d: 05:e8:3d:90:06:81:0d:e7:cd:86:62:cf:5b:85:04:d9:cf:6c: 0a:d6:fc:68:fe:e7:95:d7:31:91:6f:d8:98:f4:95:10:63:dc: fd:9b:13:99:d1:75:7d:61:42:49:dc:b1:f2:da:5d:9a:ba:8b: b5:be:d6:79:17:1f:ca:98:fd:78:30:cb:52:3b:3f:71:5a:5d: 26:e3:38:a5:4b:8c:e9:70:ff:72:2f:03:59:d6:8e:b8:67:69: 50:02:57:86:72:69:93:68:da:83:f0:ba:01:0f:d4:63:d6:e9: 3b:fe:1d:59:3d:21:87:6f:43:40:f3:11:a0:a4:2f:15:6a:79: cd:68:84:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNg6DtFFelBhg8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NjZkNTE5M2YtM2I1MC00NmZkLTg2YmUtYWVmYTZmNjcwODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt6n/ZZJRjHXoK6+ACXBHYl+KwH2isxqCYq2 KUiaNwv584jiBXxA0MRocDNxWztGFwy6y8iz64v7KX4YuVdK/7NHRfDPsi9YKHJi V4HLA64Qvu/eBIhyPsrah5Gy9eH9WPwkquDGBCRwajsG61Ol7eUbZsz4F799ZfGl QbSKTyTCQsbqYfZojZ7OYYCqqYGL77UcxuTAWHTYpn8ExzCOGpxxysJeQLxXoW2q rZltayBLju4AOOqww4AgGVrw7Bsd6K/v89XBJSWCM9HZlSZROHs7ccsdGrrOg5Qe iBC6oHXqsNKO/VVWpIEIWOug968UW8koQsGlYhQ86pjDQzWT4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNzRZ0zE7wMyohhSKTwnIattRZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvZjg1MWM0YmMtYTE4ZC0z NDkyLTllMzUtMmQ2MTE3NWNhYzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2J2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlEnmhMpKfEUHNhsk1efImOjzXkW86EFYhBHO0wLVQ26/lufiPLadee FwKEDBjp0GE0hbx3nq4vAGYL0UfzqdIA0JRDzKNhQBNBwBoxsIgWKdxHUjV7bVOd IW79idHVRsg6h1k/1DIX09PC2WfNmmKRfet2l8W3HyGrL23AHQXoPZAGgQ3nzYZi z1uFBNnPbArW/Gj+55XXMZFv2Jj0lRBj3P2bE5nRdX1hQkncsfLaXZq6i7W+1nkX H8qY/Xgwy1I7P3FaXSbjOKVLjOlw/3IvA1nWjrhnaVACV4ZyaZNo2oPwugEP1GPW 6Tv+HVk9IYdvQ0DzEaCkLxVqec1ohC8= -----END CERTIFICATE-----Generated at Sun Feb 16 20:20:15 2025 by rpki-client