$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/6a7168dc-bbc2-35d6-be1b-4425c171e598.roa File: 6a7168dc-bbc2-35d6-be1b-4425c171e598.roa (raw, json) Hash identifier: e1JfYJs1eikkBkOTNJyOcGJTfCKDkB0wF8JwvdjtSMY= Subject key identifier: A2:61:F7:73:44:42:49:9B:12:FF:4A:D3:BF:3D:CF:EC:A7:56:DA:C0 Certificate issuer: /CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Certificate serial: 010D0C9F43285848A29B4B1A6F6A905E1B610100 Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/6a7168dc-bbc2-35d6-be1b-4425c171e598.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 13347 IP address blocks: 209.166.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:4b:1a:6f:6a:90:5e:1b:61:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=7d23f5c2-47dd-460b-b243-bf1ac3dab709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a2:0f:3c:e5:04:98:50:dd:be:fe:a5:1a:54: 70:62:a7:97:8f:33:cb:49:1a:0c:74:79:01:a0:f8: d1:d8:bb:a0:a9:3f:96:93:3c:96:4b:62:47:26:e5: 8a:52:7c:b1:5b:d0:4f:36:11:47:be:39:dc:2c:0c: e8:30:1b:c8:72:5c:83:a9:3e:c4:e0:58:f2:e2:9b: 41:22:f4:fa:97:17:6d:fd:b4:dd:d2:88:7a:71:40: a3:0c:ce:38:ba:04:52:fc:13:07:0d:ad:2a:80:a5: 3a:f8:17:e5:3f:ce:06:6c:c8:d5:87:04:ce:a3:eb: 12:a7:46:29:68:d1:11:55:30:e5:23:14:1d:06:4f: f1:7e:11:4c:9c:5f:1e:70:93:45:60:3a:c3:8c:a3: 75:76:ac:11:67:1d:38:b8:b3:50:3f:c0:f0:07:3c: f4:04:7b:1a:ac:af:30:eb:70:4e:92:de:65:d4:0e: fc:c2:7b:7b:ef:5a:13:08:db:b8:9f:68:a5:a2:83: 37:00:e0:af:ba:a3:ba:4a:3d:99:ec:df:19:ec:c0: 2c:1c:75:88:15:41:d9:19:6b:61:b7:96:1d:73:ba: 1c:fd:0c:24:5b:18:87:76:a0:8d:1c:c8:eb:a3:e3: 94:1c:a8:b6:e0:2f:c3:df:84:16:46:79:ec:40:fe: 9e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:61:F7:73:44:42:49:9B:12:FF:4A:D3:BF:3D:CF:EC:A7:56:DA:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/6a7168dc-bbc2-35d6-be1b-4425c171e598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl X509v3 Authority Key Identifier: keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer sbgp-ipAddrBlock: critical IPv4: 209.166.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:87:53:28:eb:58:98:b1:d4:9e:d5:3b:02:ed:1c:1b:17:cf: a8:3c:93:0a:fb:a5:ec:58:9f:c0:7c:52:f5:49:5e:9b:dd:72: 1e:09:12:4e:a5:9b:e3:cc:e6:7d:5e:7d:cf:fa:e0:1b:97:a6: e1:a1:17:d6:c1:ff:b3:49:b3:58:7f:76:a9:d9:10:be:f9:33: 80:c6:aa:f9:5e:b0:81:f3:c8:b9:99:b2:22:a8:88:75:f4:30: 65:97:0b:ae:d4:a0:8a:7d:e4:f7:85:1a:f6:fe:9c:21:7c:b8: b1:a5:b8:28:46:5f:69:5b:3d:eb:53:da:0e:5d:f3:57:96:94: d1:e6:91:38:49:f1:2f:c1:49:c9:a3:42:9b:37:91:e9:af:07: d3:f6:43:52:7f:85:6f:db:43:b7:3c:e8:3d:c9:3c:82:58:45: b6:4c:c5:03:6a:58:32:37:79:4d:e5:e9:24:36:e4:45:a5:69: 2c:11:1e:50:30:cd:7a:9d:88:bc:da:b8:8b:68:49:06:b1:8c: aa:4a:ad:8b:ab:01:37:74:c5:63:c3:f6:2f:e0:c5:69:ac:bd: 7e:8e:05:1b:31:c9:a3:b4:5a:1d:45:1b:91:e0:eb:40:dc:d2: 79:e9:89:8d:5c:da:40:e8:68:26:82:3c:40:b2:ac:54:74:67: 41:16:dc:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim0sab2qQXhthAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGExYmRhMzAtNTA0NS00ZGVkLWJmNDctN2ZkMDNhNTk0 MDkyMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk N2QyM2Y1YzItNDdkZC00NjBiLWIyNDMtYmYxYWMzZGFiNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKIPPOUEmFDdvv6lGlRwYqeXjzPLSRoMdHkB oPjR2LugqT+WkzyWS2JHJuWKUnyxW9BPNhFHvjncLAzoMBvIclyDqT7E4Fjy4ptB IvT6lxdt/bTd0oh6cUCjDM44ugRS/BMHDa0qgKU6+BflP84GbMjVhwTOo+sSp0Yp aNERVTDlIxQdBk/xfhFMnF8ecJNFYDrDjKN1dqwRZx04uLNQP8DwBzz0BHsarK8w 63BOkt5l1A78wnt771oTCNu4n2ilooM3AOCvuqO6Sj2Z7N8Z7MAsHHWIFUHZGWth t5Ydc7oc/QwkWxiHdqCNHMjro+OUHKi24C/D34QWRnnsQP6eTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJh93NEQkmbEv9K0789z+ynVtrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YTFi ZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQwM2E1OTQwOTIvNmE3MTY4ZGMtYmJjMi0z NWQ2LWJlMWItNDQyNWMxNzFlNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGExYmRhMzAtNTA0NS00ZGVkLWJm NDctN2ZkMDNhNTk0MDkyLzRhMWJkYTMwLTUwNDUtNGRlZC1iZjQ3LTdmZDAzYTU5 NDA5Mi5jcmwwHwYDVR0jBBgwFoAUg9WJsYZCUYnHW+3xTeETLIiJodYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YTFiZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQw M2E1OTQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0abAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALuHUyjrWJix1J7VOwLtHBsXz6g8kwr7pexYn8B8UvVJXpvdch4JEk6l m+PM5n1efc/64BuXpuGhF9bB/7NJs1h/dqnZEL75M4DGqvlesIHzyLmZsiKoiHX0 MGWXC67UoIp95PeFGvb+nCF8uLGluChGX2lbPetT2g5d81eWlNHmkThJ8S/BScmj Qps3kemvB9P2Q1J/hW/bQ7c86D3JPIJYRbZMxQNqWDI3eU3l6SQ25EWlaSwRHlAw zXqdiLzauItoSQaxjKpKrYurATd0xWPD9i/gxWmsvX6OBRsxyaO0Wh1FG5Hg60Dc 0nnpiY1c2kDoaCaCPECyrFR0Z0EW3JI= -----END CERTIFICATE-----Generated at Thu Apr 10 02:01:56 2025 by rpki-client