$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa File: 420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa (raw, json) Hash identifier: buwzsqHfm9DAReQgu8ri0NSwr5WTRfpN0Me8mb+oQiE= Subject key identifier: E5:D1:B0:E5:C5:DF:BC:14:6D:2A:F9:12:C7:A8:12:86:89:79:57:07 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584898D609D8C8B399EBCFECE880 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 203 IP address blocks: 135.84.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:09:d8:c8:b3:99:eb:cf:ec:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=ef5de11f-89ef-4cd4-a3b0-7df512b2817a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a3:71:41:42:03:33:27:84:4f:b2:01:f0:d9: 82:5f:5d:d8:a5:77:71:05:83:5b:01:11:15:80:47: b4:57:7d:36:3c:fe:93:0e:83:66:7c:77:20:0a:db: a0:4d:0d:a9:93:87:4c:55:4a:09:17:db:46:c8:bc: cb:ee:78:1c:8b:81:dd:e7:f0:23:10:e7:ab:d2:bb: f7:36:4a:fb:ae:56:19:e9:1c:c1:fc:de:4c:ff:fc: 1c:93:24:65:80:6e:f1:fc:60:14:26:e3:19:6d:25: ef:f6:85:ac:8c:bf:c7:de:17:0e:6a:3a:55:49:9a: 76:9f:81:11:ed:74:7a:b8:99:06:aa:45:ad:7c:b6: e3:3b:ca:55:99:37:30:9b:bd:3a:db:bd:99:cf:1d: 61:1e:f4:98:03:cd:98:fb:0c:75:d1:a6:ea:c9:6a: 52:c3:b9:11:ad:08:1c:c1:83:a5:57:19:b1:fb:83: f9:02:29:70:47:e4:88:59:25:8e:51:5f:1e:05:d5: 52:59:e7:6d:68:e4:f2:9c:e3:18:3d:44:83:55:84: e7:64:66:5e:ce:d9:0a:c4:d5:78:dd:4c:cc:94:a2: 95:48:d2:41:11:ff:fa:00:bb:d3:d8:66:10:f9:cd: af:7c:96:f0:b1:19:44:df:8b:04:57:96:7d:96:4f: 03:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D1:B0:E5:C5:DF:BC:14:6D:2A:F9:12:C7:A8:12:86:89:79:57:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 135.84.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f5:3c:fa:6d:0d:cb:e6:f7:38:77:1b:dd:fc:a2:ff:74:33: f0:eb:20:8a:5a:66:1c:e3:4c:b2:80:6e:12:f7:9b:16:67:32: b0:8c:43:88:bc:3e:84:52:3c:8e:fb:69:c8:07:46:a3:8c:65: db:e7:36:f8:16:8a:5b:52:e3:91:83:bf:dd:b8:c2:4a:d3:1f: bd:d4:5b:4d:58:af:61:84:f8:e6:81:d2:b4:d9:66:c0:22:e8: 17:93:6b:cb:06:e5:3c:97:0c:48:33:8c:db:25:5b:0e:27:e9: 4b:fe:5f:6f:f0:62:58:7e:7e:d6:1d:09:1d:70:a3:81:20:89: f1:92:29:4c:c0:87:2d:f6:27:48:88:07:ba:7c:37:8c:04:04: b9:77:62:f7:95:d6:88:16:c1:e9:db:e4:19:85:e5:15:dc:16: ad:23:32:62:ca:03:f3:9b:5b:08:ae:91:22:7b:25:a0:3e:01: e6:49:03:e0:f7:7b:1d:66:4b:37:0a:6f:3a:e1:75:54:d5:34: c6:cf:21:3a:94:c2:a3:ba:32:2f:07:8a:8d:e5:25:69:7f:73: d8:cb:9f:e7:0b:8f:2b:f1:16:ca:56:94:45:bb:13:d7:83:0e: 26:cc:d6:e9:57:26:5d:9f:7c:cf:59:58:c7:67:e3:a9:c7:37: 23:6a:e4:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gnYyLOZ68/s6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZWY1ZGUxMWYtODllZi00Y2Q0LWEzYjAtN2RmNTEyYjI4MTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaNxQUIDMyeET7IB8NmCX13YpXdxBYNbAREV gEe0V302PP6TDoNmfHcgCtugTQ2pk4dMVUoJF9tGyLzL7ngci4Hd5/AjEOer0rv3 Nkr7rlYZ6RzB/N5M//wckyRlgG7x/GAUJuMZbSXv9oWsjL/H3hcOajpVSZp2n4ER 7XR6uJkGqkWtfLbjO8pVmTcwm706272Zzx1hHvSYA82Y+wx10abqyWpSw7kRrQgc wYOlVxmx+4P5AilwR+SIWSWOUV8eBdVSWedtaOTynOMYPUSDVYTnZGZeztkKxNV4 3UzMlKKVSNJBEf/6ALvT2GYQ+c2vfJbwsRlE34sEV5Z9lk8DxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXRsOXF37wUbSr5EseoEoaJeVcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvNDIwYzU5YzYtNzZmNS0z YTFmLWFkMzAtYWRlOTBmMzdjNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh1R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP1PPptDcvm9zh3G938ov90M/DrIIpaZhzjTLKAbhL3mxZnMrCMQ4i8 PoRSPI77acgHRqOMZdvnNvgWiltS45GDv924wkrTH73UW01Yr2GE+OaB0rTZZsAi 6BeTa8sG5TyXDEgzjNslWw4n6Uv+X2/wYlh+ftYdCR1wo4EgifGSKUzAhy32J0iI B7p8N4wEBLl3YveV1ogWwenb5BmF5RXcFq0jMmLKA/ObWwiukSJ7JaA+AeZJA+D3 ex1mSzcKbzrhdVTVNMbPITqUwqO6Mi8Hio3lJWl/c9jLn+cLjyvxFspWlEW7E9eD DibM1ulXJl2ffM9ZWMdn46nHNyNq5Ok= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:36 2025 by rpki-client