$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/3b9384bd-5385-384e-95c7-0cd9faa340a3.roa File: 3b9384bd-5385-384e-95c7-0cd9faa340a3.roa (raw, json) Hash identifier: eRqCC7JthFajJQjwJoBucbzp4I9Y9Gs7KtnjqgGUxcY= Subject key identifier: 1E:36:FB:BB:62:4C:FE:B4:77:FC:FA:22:A7:36:7E:E3:E5:5C:3D:82 Certificate issuer: /CN=d51196d1-75e6-431b-8514-1f946ae21089 Certificate serial: 010D0C9F43285848E59BC962BE22DBD77A6ABA00 Authority key identifier: B4:12:66:9F:66:09:97:D7:DF:43:A0:F6:F3:96:5D:F8:A3:DE:0D:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/3b9384bd-5385-384e-95c7-0cd9faa340a3.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 6140 IP address blocks: 107.161.208.0/20 maxlen: 20 2602:ffd3::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c9:62:be:22:db:d7:7a:6a:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d51196d1-75e6-431b-8514-1f946ae21089 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=7ed30d29-9b73-41c8-957e-277074b8c51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:94:e7:30:df:2d:db:94:5c:02:61:e1:5b: de:3c:5e:9b:68:30:4b:fe:ac:8c:ce:18:be:9f:b5: 86:ac:ec:a0:a2:a2:91:8a:74:7d:bc:a4:43:7c:23: dc:87:23:5c:6f:d0:6a:93:cc:e2:dd:e1:75:b8:e9: d8:58:b7:0e:65:b4:9a:f9:c6:34:4e:b2:ba:4c:ad: 34:49:ea:8e:9f:c3:46:5d:bf:51:d6:60:96:ed:a3: 1e:90:55:29:a3:0a:b6:94:21:5c:e6:43:c4:6e:99: 5f:5c:07:d2:1a:df:6a:ab:45:a9:49:ee:87:29:df: 2e:bc:22:a0:0a:7d:ae:07:f9:a6:fd:42:26:0b:b3: 3b:2e:ad:f6:37:0b:47:fe:6f:33:16:54:3e:f2:4b: 07:71:c1:19:59:1e:f6:5c:92:d7:9f:16:58:6d:67: 16:91:88:d3:c6:9c:ff:d2:e2:5b:06:27:31:3a:49: d2:86:2b:79:ad:5c:cc:96:00:76:62:e4:65:96:6d: 07:c6:17:23:0b:64:2b:29:eb:30:99:dd:c9:a4:42: eb:6c:ab:6b:ae:53:26:47:a3:17:b5:f4:e2:ac:90: ea:9b:8f:8f:97:70:c3:b9:a7:21:53:29:13:bb:a1: c9:42:c3:e0:3f:1f:b8:3e:df:65:16:47:09:93:63: e6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:36:FB:BB:62:4C:FE:B4:77:FC:FA:22:A7:36:7E:E3:E5:5C:3D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/3b9384bd-5385-384e-95c7-0cd9faa340a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.crl X509v3 Authority Key Identifier: keyid:B4:12:66:9F:66:09:97:D7:DF:43:A0:F6:F3:96:5D:F8:A3:DE:0D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089.cer sbgp-ipAddrBlock: critical IPv4: 107.161.208.0/20 IPv6: 2602:ffd3::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e0:56:73:5d:88:6a:ee:aa:da:93:f3:fe:61:3d:4a:ad:49: 5e:4a:bb:35:af:88:8f:9e:42:41:ef:0c:5f:be:d1:68:f5:0b: 59:98:8a:44:0a:6d:eb:18:87:d1:1e:b3:0f:69:75:fc:02:62: 44:70:0c:b1:83:57:cc:85:b6:37:01:15:0f:e8:17:c8:60:05: 00:79:eb:e5:e2:7f:c3:cc:9c:2c:e1:42:c5:e7:1e:12:43:64: d9:45:ec:d7:7f:e5:da:b0:92:96:0a:3a:97:c2:65:17:c5:d9: 52:75:77:fa:a5:fd:13:ae:bd:70:67:ba:7f:54:ae:f7:a5:5f: 08:b0:b6:11:8c:4b:a9:e3:0d:e0:53:14:ca:3c:6b:83:a0:f7: ce:e9:40:4d:26:f3:f4:8e:fc:fc:f5:c6:c9:5c:e0:e9:d7:09: 32:4b:0b:69:6b:65:66:45:26:be:0d:75:a7:2b:2a:f4:de:3c: 44:a5:1e:21:23:a3:4d:60:28:ec:50:47:aa:c4:54:cd:49:1d: 78:cd:9a:4f:e9:8b:79:61:00:70:6f:e4:0e:cf:1c:80:50:05: ec:8d:3f:f2:ad:3d:42:23:55:2b:28:63:8d:19:b3:72:7b:00: fe:9b:b1:73:0f:9a:6b:01:d9:3a:a7:ca:25:63:08:ef:ac:09: 39:4e:f7:77 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEjlm8liviLb13pqugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUxMTk2ZDEtNzVlNi00MzFiLTg1MTQtMWY5NDZhZTIx MDg5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk N2VkMzBkMjktOWI3My00MWM4LTk1N2UtMjc3MDc0YjhjNTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWOU5zDfLduUXAJh4VvePF6baDBL/qyMzhi+ n7WGrOygoqKRinR9vKRDfCPchyNcb9Bqk8zi3eF1uOnYWLcOZbSa+cY0TrK6TK00 SeqOn8NGXb9R1mCW7aMekFUpowq2lCFc5kPEbplfXAfSGt9qq0WpSe6HKd8uvCKg Cn2uB/mm/UImC7M7Lq32NwtH/m8zFlQ+8ksHccEZWR72XJLXnxZYbWcWkYjTxpz/ 0uJbBicxOknShit5rVzMlgB2YuRllm0HxhcjC2QrKeswmd3JpELrbKtrrlMmR6MX tfTirJDqm4+Pl3DDuachUykTu6HJQsPgPx+4Pt9lFkcJk2Pm9QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFB42+7tiTP60d/z6Iqc2fuPlXD2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTEx OTZkMS03NWU2LTQzMWItODUxNC0xZjk0NmFlMjEwODkvM2I5Mzg0YmQtNTM4NS0z ODRlLTk1YzctMGNkOWZhYTM0MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUxMTk2ZDEtNzVlNi00MzFiLTg1 MTQtMWY5NDZhZTIxMDg5L2Q1MTE5NmQxLTc1ZTYtNDMxYi04NTE0LTFmOTQ2YWUy MTA4OS5jcmwwHwYDVR0jBBgwFoAUtBJmn2YJl9ffQ6D285Zd+KPeDbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTExOTZkMS03NWU2LTQzMWItODUxNC0xZjk0 NmFlMjEwODkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEa6HQMA4E AgACMAgDBgQmAv/TADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJ4FZzXYhq7qrak/P+YT1KrUleSrs1r4iP nkJB7wxfvtFo9QtZmIpECm3rGIfRHrMPaXX8AmJEcAyxg1fMhbY3ARUP6BfIYAUA eevl4n/DzJws4ULF5x4SQ2TZRezXf+XasJKWCjqXwmUXxdlSdXf6pf0Trr1wZ7p/ VK73pV8IsLYRjEup4w3gUxTKPGuDoPfO6UBNJvP0jvz89cbJXODp1wkySwtpa2Vm RSa+DXWnKyr03jxEpR4hI6NNYCjsUEeqxFTNSR14zZpP6Yt5YQBwb+QOzxyAUAXs jT/yrT1CI1UrKGONGbNyewD+m7FzD5prAdk6p8olYwjvrAk5Tvd3 -----END CERTIFICATE-----Generated at Sun Apr 6 12:00:27 2025 by rpki-client