$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b4edabba-54d1-305d-87bd-c0b3b787d147.roa File: b4edabba-54d1-305d-87bd-c0b3b787d147.roa (raw, json) Hash identifier: oqkK2719VK+wfGxvvrkM276QLu6jMFLpKyBps9SOgBc= Subject key identifier: B1:62:7D:64:3B:3D:60:19:04:9F:28:D4:E0:82:A5:D6:0B:D1:3C:80 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858489E4978898CF585E186E3F640 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b4edabba-54d1-305d-87bd-c0b3b787d147.roa Signing time: Tue 21 Jan 2025 12:52:38 +0000 ROA not before: Tue 21 Jan 2025 12:52:38 +0000 ROA not after: Mon 21 Apr 2025 11:52:38 +0000 asID: 40509 IP address blocks: 169.155.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:49:78:89:8c:f5:85:e1:86:e3:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jan 21 12:52:38 2025 GMT Not After : Apr 21 11:52:38 2025 GMT Subject: CN=eff631cc-0d31-460d-ba9d-cfba8093c54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:ed:e8:6b:00:40:c0:27:6b:82:c2:a3:c6: d5:ba:a1:dc:ef:a0:2c:6c:e2:6c:4f:9b:81:d7:c1: c7:56:b6:e4:25:4c:44:4b:8b:ec:99:2e:47:a2:97: df:b5:81:73:d6:eb:5a:a4:b5:65:ca:9d:fc:e7:86: 48:17:e3:4b:00:a3:80:90:9a:f1:10:e5:0b:5f:53: 3b:7c:7f:88:f5:cd:bf:ef:2b:da:f8:1d:28:22:6d: 50:ec:99:eb:8a:bd:82:13:62:29:06:fa:6f:37:cf: d8:d0:f3:0e:a2:98:94:f4:83:2c:2f:ba:4a:16:3d: 0a:7a:03:0a:70:68:65:c4:cb:42:bb:98:61:f7:cc: 88:ff:27:af:9d:e9:bf:ea:3e:c6:48:23:41:d1:86: db:8c:e8:cb:af:0f:cb:4e:54:ab:e9:24:6d:94:a9: 0a:dd:fb:95:3d:82:4f:24:f4:f5:31:3a:0b:6c:ff: 3b:01:a3:40:84:e4:18:dc:c1:88:70:b3:57:4f:50: 5c:b0:5b:0f:6f:0c:49:69:46:bd:39:5a:bb:63:9a: 41:9d:fe:27:03:1f:e6:4b:39:b9:65:5f:65:a9:fb: bf:2a:e5:53:25:7e:8c:f0:82:f6:dc:84:18:42:98: 9e:a4:84:fb:74:e5:ec:b0:fa:ba:7e:7e:7d:58:2e: 0a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:62:7D:64:3B:3D:60:19:04:9F:28:D4:E0:82:A5:D6:0B:D1:3C:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b4edabba-54d1-305d-87bd-c0b3b787d147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 169.155.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:2d:dc:b3:60:ca:88:1f:f7:ba:7e:45:5c:73:61:bb:34:d5: 1e:4c:e1:72:3b:ad:a0:e8:b8:20:aa:c6:69:c4:cd:7f:2c:88: a1:53:2f:23:6b:c9:60:34:ff:b8:5a:fe:8c:fb:91:b5:6f:e9: 66:a0:81:5d:81:f2:0b:9e:b8:0f:54:c6:59:39:fd:3e:b3:86: 2a:c3:45:83:b0:28:60:a5:9a:58:21:4a:34:a4:16:35:dd:fb: 8e:b6:15:3f:74:58:16:ff:f4:21:d1:f8:f6:f9:b0:58:db:51: 15:d3:91:ee:73:e2:36:e2:7a:7a:67:67:1d:ae:51:15:75:53: 74:16:16:35:ce:69:40:2b:8a:fd:8f:40:b1:c6:94:13:0e:19: 53:b3:3c:91:97:8d:d1:be:c8:84:78:eb:8b:1d:7b:cb:ba:97: fe:33:18:a2:68:ad:5c:a8:cd:b4:3c:7a:26:4f:11:da:1b:b2: b8:59:a1:0b:7a:c3:6c:dc:8d:57:75:6d:71:79:d8:c9:67:88: 2a:15:90:52:e6:9e:3c:81:53:fd:64:22:ac:a0:6a:2a:03:fb: 3d:44:01:68:8f:48:04:dd:a1:20:bb:73:84:5a:ad:8f:5c:d1: b5:f0:94:34:b2:08:cf:79:a7:5f:26:65:55:2f:aa:76:d8:18: 0d:a6:21:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEieSXiJjPWF4Ybj9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDEyMTEyNTIzOFoXDTI1MDQyMTExNTIzOFowLzEtMCsGA1UEAxMk ZWZmNjMxY2MtMGQzMS00NjBkLWJhOWQtY2ZiYTgwOTNjNTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX3t6GsAQMAna4LCo8bVuqHc76AsbOJsT5uB 18HHVrbkJUxES4vsmS5HopfftYFz1utapLVlyp3854ZIF+NLAKOAkJrxEOULX1M7 fH+I9c2/7yva+B0oIm1Q7Jnrir2CE2IpBvpvN8/Y0PMOopiU9IMsL7pKFj0KegMK cGhlxMtCu5hh98yI/yevnem/6j7GSCNB0YbbjOjLrw/LTlSr6SRtlKkK3fuVPYJP JPT1MToLbP87AaNAhOQY3MGIcLNXT1BcsFsPbwxJaUa9OVq7Y5pBnf4nAx/mSzm5 ZV9lqfu/KuVTJX6M8IL23IQYQpiepIT7dOXssPq6fn59WC4KywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFifWQ7PWAZBJ8o1OCCpdYL0TyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvYjRlZGFiYmEtNTRkMS0z MDVkLTg3YmQtYzBiM2I3ODdkMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqZswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEt3LNgyogf97p+RVxzYbs01R5M4XI7raDouCCqxmnEzX8siKFTLyNr yWA0/7ha/oz7kbVv6WaggV2B8gueuA9Uxlk5/T6zhirDRYOwKGClmlghSjSkFjXd +462FT90WBb/9CHR+Pb5sFjbURXTke5z4jbienpnZx2uURV1U3QWFjXOaUAriv2P QLHGlBMOGVOzPJGXjdG+yIR464sde8u6l/4zGKJorVyozbQ8eiZPEdobsrhZoQt6 w2zcjVd1bXF52MlniCoVkFLmnjyBU/1kIqygaioD+z1EAWiPSATdoSC7c4RarY9c 0bXwlDSyCM95p18mZVUvqnbYGA2mIa8= -----END CERTIFICATE-----Generated at Sun Feb 2 15:46:01 2025 by rpki-client