$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa File: 8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa (raw, json) Hash identifier: Tgv9XVzyWTgTeQWptdvoLK58sZk6kv1W89VeDeHc1L0= Subject key identifier: 7E:44:F2:6B:13:ED:D4:23:48:17:DD:19:38:2C:20:E9:D9:BE:AC:B2 Certificate issuer: /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Certificate serial: 010D0C9F43285848E59BC284AF049C8B23064E60 Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 6327 IP address blocks: 24.244.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c2:84:af:04:9c:8b:23:06:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=0587aa41-685a-4407-9c66-cbf2560fbf0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:6c:c3:6d:16:46:c9:19:83:6d:dd:b8:1b: 1a:6f:36:da:e1:d9:d0:bb:af:a7:92:34:8e:c6:7b: 10:b1:cb:be:77:0d:8a:01:22:a0:eb:e0:78:04:7e: 99:1b:1e:35:c5:78:85:bd:c2:4a:58:e7:02:cd:66: 81:86:06:79:de:e6:4b:81:01:b0:af:a1:80:38:be: 1a:96:b2:e3:54:4e:30:ff:0f:6a:bc:0c:2f:73:20: 82:9c:60:ce:30:e8:c2:3c:16:fd:51:1b:bb:2c:2c: 24:94:d9:ef:32:d9:0c:cd:81:3a:a8:ca:52:65:b3: 61:a5:31:5c:47:e0:51:68:39:7e:be:5a:b3:c6:92: 8a:c5:e5:00:12:ec:b5:dc:fd:ae:c0:8a:fc:ea:5c: a7:a6:6d:f2:0f:27:c8:cd:ab:6b:54:ee:f2:e4:d2: f0:c4:9d:5e:f3:8e:79:ac:cd:e5:17:ad:ea:00:5f: 1c:ad:a6:76:d4:2e:94:d7:57:fb:36:e9:95:c2:c9: ad:a0:87:2b:2e:1c:b2:0b:1d:8c:2c:76:59:52:d8: e3:55:30:e7:ad:5e:95:13:d2:43:21:e3:a4:ed:54: 0c:d5:9c:88:52:e8:a9:ab:d4:e4:bb:be:3b:5b:b7: 2d:b6:62:a0:75:b4:99:03:ef:ea:12:1d:7c:e2:24: 9b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:44:F2:6B:13:ED:D4:23:48:17:DD:19:38:2C:20:E9:D9:BE:AC:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl X509v3 Authority Key Identifier: keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer sbgp-ipAddrBlock: critical IPv4: 24.244.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:9c:1f:1f:b0:a4:45:99:91:d8:c5:cd:82:de:e0:13:b0:23: 54:ff:ca:d8:36:e6:00:b7:4a:01:55:ad:6b:82:cc:80:5d:cd: 26:ab:78:99:2a:c6:5e:f5:0a:3d:44:69:40:c1:0f:de:2f:f2: d3:df:88:7e:18:27:d1:f6:fe:5c:b3:73:f5:cf:4c:5a:10:40: b5:0b:0f:25:af:fc:09:0c:93:7b:de:33:f9:f4:7b:28:18:e5: 51:dc:1c:04:08:d4:5a:00:be:63:8d:74:b4:7a:d6:ce:84:14: e5:fe:a8:99:ef:84:18:f8:99:de:21:15:41:bd:25:0f:29:c2: bf:d4:9a:20:5a:9f:91:d7:c4:29:5b:8a:56:4a:52:79:70:1a: b1:b4:99:4c:3c:44:3f:00:73:75:25:3b:65:3c:d9:a9:dc:74: be:01:ec:58:32:30:b0:3a:81:04:02:0c:8a:43:e4:55:7f:2a: 4d:69:3c:aa:f4:93:63:89:8a:1c:e7:bf:19:5a:bc:b8:3a:77: 08:0d:8c:eb:aa:23:3d:37:94:de:9d:b9:ea:5c:bf:d2:81:a1: 0c:17:8a:f6:9a:f6:ad:b5:51:9b:69:dd:b4:2a:c7:ef:9c:0a: 91:71:38:b2:01:67:e3:88:72:56:c2:f1:45:bc:e4:a0:de:79: ba:cd:a3:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8KErwSciyMGTmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmOWEzZmMtM2E4Yy00N2U0LTkxZmEtZDc4MDhiMDZh ZTg1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MDU4N2FhNDEtNjg1YS00NDA3LTljNjYtY2JmMjU2MGZiZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I9sw20WRskZg23duBsabzba4dnQu6+nkjSO xnsQscu+dw2KASKg6+B4BH6ZGx41xXiFvcJKWOcCzWaBhgZ53uZLgQGwr6GAOL4a lrLjVE4w/w9qvAwvcyCCnGDOMOjCPBb9URu7LCwklNnvMtkMzYE6qMpSZbNhpTFc R+BRaDl+vlqzxpKKxeUAEuy13P2uwIr86lynpm3yDyfIzatrVO7y5NLwxJ1e8455 rM3lF63qAF8craZ21C6U11f7NumVwsmtoIcrLhyyCx2MLHZZUtjjVTDnrV6VE9JD IeOk7VQM1ZyIUuipq9Tku747W7cttmKgdbSZA+/qEh184iSb8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5E8msT7dQjSBfdGTgsIOnZvqyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5 YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgwOGIwNmFlODUvODk1NmQyZDMtMWU3MC0z MjJiLWJmNGItMWY2ODQ1YmRmZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFmOWEzZmMtM2E4Yy00N2U0LTkx ZmEtZDc4MDhiMDZhZTg1L2FhZjlhM2ZjLTNhOGMtNDdlNC05MWZhLWQ3ODA4YjA2 YWU4NS5jcmwwHwYDVR0jBBgwFoAUdg0UkffgTh768ACPZCs6jJ4PzkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgw OGIwNmFlODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGPQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+cHx+wpEWZkdjFzYLe4BOwI1T/ytg25gC3SgFVrWuCzIBdzSareJkq xl71Cj1EaUDBD94v8tPfiH4YJ9H2/lyzc/XPTFoQQLULDyWv/AkMk3veM/n0eygY 5VHcHAQI1FoAvmONdLR61s6EFOX+qJnvhBj4md4hFUG9JQ8pwr/UmiBan5HXxClb ilZKUnlwGrG0mUw8RD8Ac3UlO2U82ancdL4B7FgyMLA6gQQCDIpD5FV/Kk1pPKr0 k2OJihznvxlavLg6dwgNjOuqIz03lN6duepcv9KBoQwXivaa9q21UZtp3bQqx++c CpFxOLIBZ+OIclbC8UW85KDeebrNo3Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:48 2025 by rpki-client