$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35593a8c-97f2-3a98-82cd-f95a91c2d5e7.roa File: 35593a8c-97f2-3a98-82cd-f95a91c2d5e7.roa (raw, json) Hash identifier: SexPK4GTtQk1qNfurSxDFbee6AcqndT72kAmUrbrOCE= Subject key identifier: 74:EE:56:A9:2C:6A:0E:29:F0:00:54:70:3D:31:DA:D8:04:16:34:80 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848907602BDDED80656C711EE80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35593a8c-97f2-3a98-82cd-f95a91c2d5e7.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 397225 IP address blocks: 199.7.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:02:bd:de:d8:06:56:c7:11:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=14908dd4-0f89-42b5-8ea2-fe5e4bfa0900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0a:8d:c8:0b:12:d1:66:31:59:57:4b:6e:de: 4b:44:f8:4a:d3:bd:1c:e7:79:c2:00:48:76:60:23: e8:41:9e:3e:3e:35:e4:c7:55:b2:d7:8a:75:2a:75: 75:96:ec:69:b0:7c:87:4d:a3:99:96:fd:38:21:3c: d3:1e:d5:e3:37:9b:32:1d:13:5f:a2:3c:69:e8:39: 0a:62:ab:23:a5:c8:5c:28:05:84:52:30:aa:74:9d: b5:e1:6b:7a:0b:0f:05:86:d9:40:d3:88:44:4f:b6: 6a:30:13:ed:e0:06:58:44:11:37:b1:6d:fa:5b:a3: 00:cd:c1:96:89:3a:65:8f:3d:78:58:8c:ec:e8:bc: 19:33:72:72:d9:da:e7:4e:9e:07:88:d2:cc:08:94: 80:5f:78:c7:61:1c:fd:3a:82:14:f8:26:3b:59:b9: 3c:41:bd:6a:40:2f:2f:49:56:6e:8d:4e:11:18:1f: 02:fa:34:3e:f9:02:1d:14:5c:79:76:a3:db:62:c0: 77:79:0c:94:1f:ef:15:18:5d:e4:8e:d3:6f:47:e6: bd:23:1a:f6:67:24:9c:7c:26:48:54:af:ff:57:e2: 70:7f:ad:dd:17:8c:63:5d:8d:46:2d:7a:07:dc:c6: fe:72:f6:74:40:64:76:1d:81:ad:9b:1a:b5:6e:b3: a3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EE:56:A9:2C:6A:0E:29:F0:00:54:70:3D:31:DA:D8:04:16:34:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35593a8c-97f2-3a98-82cd-f95a91c2d5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a1:ea:b1:94:d6:17:69:ce:90:50:0b:4c:6f:b6:32:84:c5: fa:f1:f8:6c:b2:c4:b2:78:b8:81:8b:05:44:a0:d9:ad:ca:23: 67:3e:d8:0c:0d:d6:bf:ee:88:f8:ea:f7:01:21:eb:09:6b:27: 11:0c:a9:6a:15:b6:33:a8:90:b1:37:38:5f:06:fc:f0:00:42: c1:9e:d9:31:c4:88:fd:2b:b8:f7:e0:ff:2d:c0:97:67:6c:6e: 06:e4:0d:3f:3b:e0:2c:a2:4a:1f:5e:f3:f2:35:b4:5a:d1:1f: d8:7f:b0:c6:93:b7:bc:b8:98:5e:39:7e:97:f4:b6:22:38:3e: 85:10:a9:c8:a4:54:74:66:15:47:39:3d:3f:c1:0c:6b:a1:16: 35:f3:85:e4:d4:3f:dc:e8:51:e2:7a:90:10:3e:bf:01:0e:9e: df:d3:7a:e0:8e:a7:1a:90:c8:ff:7e:a0:eb:c2:16:17:80:92: c2:78:82:93:16:14:6e:7f:73:64:fe:20:40:02:91:e9:1a:41: a9:5e:9e:f1:00:74:a8:92:cf:78:13:7b:2c:a4:7f:14:91:e1: ce:4b:23:07:e1:2d:3d:7e:50:de:6c:d5:a1:96:f2:b1:c9:77: 93:db:cb:c0:3d:f2:33:65:af:53:2f:1c:26:4f:fe:d8:ef:14: 7a:27:c6:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgK93tgGVscR7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk MTQ5MDhkZDQtMGY4OS00MmI1LThlYTItZmU1ZTRiZmEwOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAqNyAsS0WYxWVdLbt5LRPhK070c53nCAEh2 YCPoQZ4+PjXkx1Wy14p1KnV1luxpsHyHTaOZlv04ITzTHtXjN5syHRNfojxp6DkK YqsjpchcKAWEUjCqdJ214Wt6Cw8FhtlA04hET7ZqMBPt4AZYRBE3sW36W6MAzcGW iTpljz14WIzs6LwZM3Jy2drnTp4HiNLMCJSAX3jHYRz9OoIU+CY7Wbk8Qb1qQC8v SVZujU4RGB8C+jQ++QIdFFx5dqPbYsB3eQyUH+8VGF3kjtNvR+a9Ixr2ZyScfCZI VK//V+Jwf63dF4xjXY1GLXoH3Mb+cvZ0QGR2HYGtmxq1brOjkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTuVqksag4p8ABUcD0x2tgEFjSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzU1OTNhOGMtOTdmMi0z YTk4LTgyY2QtZjk1YTkxYzJkNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByh6rGU1hdpzpBQC0xvtjKExfrx+GyyxLJ4uIGLBUSg2a3KI2c+2AwN 1r/uiPjq9wEh6wlrJxEMqWoVtjOokLE3OF8G/PAAQsGe2THEiP0ruPfg/y3Al2ds bgbkDT874CyiSh9e8/I1tFrRH9h/sMaTt7y4mF45fpf0tiI4PoUQqcikVHRmFUc5 PT/BDGuhFjXzheTUP9zoUeJ6kBA+vwEOnt/TeuCOpxqQyP9+oOvCFheAksJ4gpMW FG5/c2T+IEACkekaQalenvEAdKiSz3gTeyykfxSR4c5LIwfhLT1+UN5s1aGW8rHJ d5Pby8A98jNlr1MvHCZP/tjvFHonxtE= -----END CERTIFICATE-----Generated at Sun Apr 6 04:34:40 2025 by rpki-client