$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/46b783d2-f5e8-3a65-a188-b1a1c7638a9a.roa File: 46b783d2-f5e8-3a65-a188-b1a1c7638a9a.roa (raw, json) Hash identifier: n4Lx5nJbbejd0z751jeedGghIYnQa130lnjcBgAD2mQ= Subject key identifier: E7:24:93:E8:74:28:3E:2D:DF:65:73:5F:8C:67:95:06:DC:5D:B0:F8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99648D073C7FB47589A0880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/46b783d2-f5e8-3a65-a188-b1a1c7638a9a.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397214 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:48:d0:73:c7:fb:47:58:9a:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=815247c5-5c5c-4c26-b775-27ff0be81bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:50:c7:c9:57:d6:ed:a7:0f:ab:1e:93:6d:de: 4c:6b:bd:a4:f7:66:d3:fd:5e:32:27:8c:df:a2:cf: 4e:e5:ad:8b:17:c9:f4:fd:3e:b7:aa:2c:1e:46:46: c0:b5:f2:31:21:02:24:7f:fa:84:a7:2d:da:57:95: 97:02:b3:42:f8:f9:d0:f5:9f:b4:8e:cc:0f:26:d2: 34:78:33:1f:58:da:fc:7d:88:b5:3a:f7:3a:35:f9: bf:1e:93:2c:1a:a6:19:a4:2b:83:d3:2e:70:54:2a: cc:a6:89:13:0e:08:87:e0:43:7c:a1:1e:e1:0f:3c: cb:7f:b1:4b:f4:ea:40:b3:4d:35:7e:b9:8c:48:b9: a7:fe:f2:fb:d9:f3:45:15:49:16:bb:a8:f5:25:3c: 11:fb:ea:82:67:8d:aa:a9:a6:8d:c9:07:71:d1:01: f2:cb:c5:52:d8:e0:d8:70:5c:d7:f0:09:e6:d0:4e: d1:47:4b:40:4c:35:0a:0a:f4:1b:3a:2b:b7:bd:28: 78:98:f4:02:89:4b:8c:3e:d4:95:54:cc:fb:bd:26: 41:c4:c5:a2:bf:f6:fb:d8:6f:53:a0:d5:c5:76:ef: 1d:c6:39:71:d6:99:6d:4e:cd:ed:84:a8:09:42:55: 26:4f:4e:5c:34:58:0a:42:bf:ce:0a:45:6e:86:c0: 21:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:24:93:E8:74:28:3E:2D:DF:65:73:5F:8C:67:95:06:DC:5D:B0:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/46b783d2-f5e8-3a65-a188-b1a1c7638a9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6b:e7:2c:64:d9:c0:de:1f:96:90:4c:0e:52:a6:cb:f9:18: 55:cc:fc:12:63:b6:e6:94:dc:94:09:a5:08:bc:2a:65:fc:47: 80:0a:ed:ec:03:aa:99:29:71:9d:c2:dd:44:69:15:e7:46:21: 8e:86:5b:5e:f2:6d:e2:62:d1:3e:6f:46:7b:1e:e9:6c:9f:47: e3:9c:31:78:5a:fa:7d:84:88:fb:94:70:c2:11:82:41:d1:93: e1:5e:8c:8b:28:df:8e:8e:9e:1c:e0:0d:3b:f5:2c:a2:de:1f: c7:31:9e:42:6f:86:6b:92:05:82:70:5c:94:2d:c9:61:62:fd: d4:6f:48:e0:29:9b:2d:04:99:54:54:55:a1:25:96:f7:f6:ff: b6:23:6c:0e:15:f9:40:a9:12:98:18:61:a3:22:fb:ce:8a:83: 35:00:04:29:21:9f:40:23:9f:0c:4b:24:e4:d0:aa:67:62:54: 0b:f1:65:e1:58:6d:7f:0a:a0:4c:90:ee:84:36:99:62:fa:54: f0:6a:00:a2:82:9a:65:82:e0:c4:bc:49:48:82:04:ea:1e:d3: 70:ac:22:60:70:69:14:85:c2:24:fe:c7:5b:28:34:eb:5d:d6: a1:6b:dd:17:35:01:05:23:7a:de:fe:30:c8:cf:38:80:44:5f: f8:62:aa:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkjQc8f7R1iaCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODE1MjQ3YzUtNWM1Yy00YzI2LWI3NzUtMjdmZjBiZTgxYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFDHyVfW7acPqx6Tbd5Ma72k92bT/V4yJ4zf os9O5a2LF8n0/T63qiweRkbAtfIxIQIkf/qEpy3aV5WXArNC+PnQ9Z+0jswPJtI0 eDMfWNr8fYi1Ovc6Nfm/HpMsGqYZpCuD0y5wVCrMpokTDgiH4EN8oR7hDzzLf7FL 9OpAs001frmMSLmn/vL72fNFFUkWu6j1JTwR++qCZ42qqaaNyQdx0QHyy8VS2ODY cFzX8Anm0E7RR0tATDUKCvQbOiu3vSh4mPQCiUuMPtSVVMz7vSZBxMWiv/b72G9T oNXFdu8dxjlx1pltTs3thKgJQlUmT05cNFgKQr/OCkVuhsAhVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOckk+h0KD4t32VzX4xnlQbcXbD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDZiNzgzZDItZjVlOC0z YTY1LWExODgtYjFhMWM3NjM4YTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJr5yxk2cDeH5aQTA5Spsv5GFXM/BJjtuaU3JQJpQi8KmX8R4AK7ewD qpkpcZ3C3URpFedGIY6GW17ybeJi0T5vRnse6WyfR+OcMXha+n2EiPuUcMIRgkHR k+FejIso346OnhzgDTv1LKLeH8cxnkJvhmuSBYJwXJQtyWFi/dRvSOApmy0EmVRU VaEllvf2/7YjbA4V+UCpEpgYYaMi+86KgzUABCkhn0AjnwxLJOTQqmdiVAvxZeFY bX8KoEyQ7oQ2mWL6VPBqAKKCmmWC4MS8SUiCBOoe03CsImBwaRSFwiT+x1soNOtd 1qFr3Rc1AQUjet7+MMjPOIBEX/hiqlg= -----END CERTIFICATE-----Generated at Mon Apr 7 13:07:00 2025 by rpki-client