$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa File: 8011e5b3-48f4-34a8-9932-e07529862633.roa (raw, json) Hash identifier: BLLl/Yeb7F8B7sEdiTL6h6a7/zo8N3kFFhr9pYwtVsI= Subject key identifier: 34:73:8F:9E:30:EC:1D:B3:BC:A8:18:AD:8F:01:70:24:FE:84:D5:55 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584898D6093D283A9AB96BD9F810 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 138.32.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:09:3d:28:3a:9a:b9:6b:d9:f8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=0dbfd24a-34df-43a5-9418-d1468244dd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:ad:95:66:db:5f:d0:4d:d8:ef:12:3d:0f: 4b:7f:d9:8b:16:4b:9b:f8:4f:6a:32:2f:2d:66:81: 70:c4:29:b1:22:1c:d0:ad:8c:b6:a9:35:5c:1f:56: 66:97:69:96:e6:44:5c:c4:62:eb:41:d6:86:08:b2: 7c:55:31:f6:33:f6:4e:0c:a8:14:81:5d:d3:44:99: b1:91:91:81:ed:01:f7:e2:55:94:41:c6:e9:c6:a5: 7e:b7:61:e0:94:8f:44:cf:59:54:fe:19:ce:aa:d6: c8:e7:c1:a5:3b:aa:8f:61:49:ab:52:43:74:49:d8: ce:b2:70:be:42:87:f5:81:1d:e3:81:d9:28:f2:2f: 5e:cc:57:f9:e5:75:94:c7:9a:d5:48:2a:86:cc:06: d5:88:af:af:86:1f:31:b8:02:00:12:6e:07:e8:fe: 53:aa:f6:e3:3d:70:8b:af:58:75:bf:18:2b:d7:eb: 7f:a7:64:a3:59:56:8d:aa:62:45:94:61:60:5c:e2: d5:8c:a9:ba:d6:fc:8d:6e:31:9c:93:70:88:48:be: 19:36:8c:81:7c:0e:15:df:75:32:02:a7:4d:06:0b: b9:6b:b6:b2:22:d2:86:bc:ff:c0:b1:36:d2:85:c1: 91:5b:5a:4a:56:67:0e:c8:91:f9:2c:70:4e:02:b0: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:73:8F:9E:30:EC:1D:B3:BC:A8:18:AD:8F:01:70:24:FE:84:D5:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:70:ff:e1:f1:ee:72:e6:64:2c:9d:64:87:a0:58:e4:7a:24: dc:e8:7d:93:59:15:50:2e:16:78:43:f1:c3:3b:70:ce:0e:52: b1:cc:a1:04:3c:7f:38:86:ca:99:55:85:fa:18:2d:3c:d2:14: 1b:64:ef:2c:51:82:54:cf:f5:3a:e8:83:2c:5f:28:e6:4a:68: a1:7a:6f:ec:38:8c:71:bc:24:6c:46:7a:e4:63:6a:92:73:ba: 30:af:d1:b7:47:9f:06:7d:92:aa:8b:e3:3e:df:5d:f9:5b:f9: b8:11:b5:2e:95:52:8e:64:f1:f2:dc:c1:46:6c:b5:34:49:8f: 31:a6:65:61:8e:a8:30:28:37:90:46:3b:a7:fa:c4:16:3c:56: 67:3a:c4:84:d4:f2:b2:42:72:2e:b5:8a:22:68:d7:34:e5:97: 0c:ea:3c:3e:5f:b9:9c:49:6a:ef:28:02:7d:b1:ec:bc:71:04: 81:43:e4:b2:f6:bd:5f:ac:15:c2:3c:18:ee:c5:5d:cd:2f:1d: 00:7f:9b:67:2b:d1:48:15:df:c3:ff:12:68:7c:5a:22:a2:84: 1b:00:6b:70:b4:9d:19:0e:fc:99:1f:1e:36:fc:cc:77:e4:fb: 57:63:4f:7f:eb:e2:26:b3:37:10:59:42:6c:cb:1b:bb:ab:f2: 68:6c:e9:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gk9KDqauWvZ+BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk MGRiZmQyNGEtMzRkZi00M2E1LTk0MTgtZDE0NjgyNDRkZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5qtlWbbX9BN2O8SPQ9Lf9mLFkub+E9qMi8t ZoFwxCmxIhzQrYy2qTVcH1Zml2mW5kRcxGLrQdaGCLJ8VTH2M/ZODKgUgV3TRJmx kZGB7QH34lWUQcbpxqV+t2HglI9Ez1lU/hnOqtbI58GlO6qPYUmrUkN0SdjOsnC+ Qof1gR3jgdko8i9ezFf55XWUx5rVSCqGzAbViK+vhh8xuAIAEm4H6P5TqvbjPXCL r1h1vxgr1+t/p2SjWVaNqmJFlGFgXOLVjKm61vyNbjGck3CISL4ZNoyBfA4V33Uy AqdNBgu5a7ayItKGvP/AsTbShcGRW1pKVmcOyJH5LHBOArDqNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRzj54w7B2zvKgYrY8BcCT+hNVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvODAxMWU1YjMtNDhmNC0z NGE4LTk5MzItZTA3NTI5ODYyNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpw/+Hx7nLmZCydZIegWOR6JNzofZNZFVAuFnhD8cM7cM4OUrHMoQQ8 fziGyplVhfoYLTzSFBtk7yxRglTP9TrogyxfKOZKaKF6b+w4jHG8JGxGeuRjapJz ujCv0bdHnwZ9kqqL4z7fXflb+bgRtS6VUo5k8fLcwUZstTRJjzGmZWGOqDAoN5BG O6f6xBY8Vmc6xITU8rJCci61iiJo1zTllwzqPD5fuZxJau8oAn2x7LxxBIFD5LL2 vV+sFcI8GO7FXc0vHQB/m2cr0UgV38P/Emh8WiKihBsAa3C0nRkO/JkfHjb8zHfk +1djT3/r4iazNxBZQmzLG7ur8mhs6UQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:10 2025 by rpki-client