$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a75fa10-6d06-3ea4-b35f-413e2481dcfc.roa File: 8a75fa10-6d06-3ea4-b35f-413e2481dcfc.roa (raw, json) Hash identifier: SkmJddyz5ic6OxUM6n+8ne7d9NCJKQUMpp2grGqOFaw= Subject key identifier: E8:E8:4D:C4:22:6C:C9:93:D5:32:8D:AD:99:0B:E7:61:63:41:7D:65 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9964983E2DDDCFA8A7E2100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a75fa10-6d06-3ea4-b35f-413e2481dcfc.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397229 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:49:83:e2:dd:dc:fa:8a:7e:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=8f6e32d1-99f4-46b2-a525-6ba537902fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:01:b0:e0:7f:16:10:3a:00:50:47:c2:3c:f2: b4:ac:2a:b6:64:42:59:6d:54:3a:32:f4:1e:c7:9d: 8d:44:e3:6a:6f:75:c7:e9:06:f0:4a:56:a3:2c:5d: 35:e4:e4:e5:e6:65:fe:86:ca:bb:95:f8:2d:6f:1c: ce:df:82:32:75:58:5b:55:ad:6f:64:e4:9b:45:28: 32:9a:85:f8:5b:f1:7c:73:b7:c0:71:55:8f:12:11: a5:d4:20:50:91:12:f8:90:33:09:bf:5c:c3:b0:a7: 86:ed:0d:2e:12:00:84:18:94:b0:0b:ab:dd:0f:50: 43:ac:f6:6a:18:01:1d:bb:65:74:4a:25:27:6c:5e: fc:60:0f:b7:a5:10:74:86:b7:19:cb:37:64:bb:37: 84:5b:8d:11:51:22:d1:b1:41:dc:8a:b9:9a:85:30: c7:53:2a:47:6b:ec:37:46:a1:ea:c8:f0:db:82:3d: 1b:e6:c6:a7:fd:9d:07:a5:70:d3:d5:d2:a6:57:23: 0d:a6:6f:57:fc:b2:d4:e8:dc:58:63:3e:57:4a:0e: 3c:29:d5:78:fc:04:86:c7:67:88:b8:74:6c:54:30: d2:e2:62:60:40:3b:dc:f9:8b:4a:29:88:1f:e0:ad: 62:fc:9f:eb:4c:99:af:62:94:4c:78:1b:e0:a9:68: 33:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E8:4D:C4:22:6C:C9:93:D5:32:8D:AD:99:0B:E7:61:63:41:7D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a75fa10-6d06-3ea4-b35f-413e2481dcfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:aa:62:46:0c:35:7e:83:7c:2d:3d:3b:a5:e5:e9:e9:b4:5c: de:f6:12:10:d2:dc:32:0d:68:6c:d0:bc:f0:71:9f:da:91:5f: 46:7f:9c:82:e5:55:1f:47:ab:13:0f:ef:24:ee:ee:4a:9b:39: 32:a5:01:51:85:76:47:ad:44:c0:ef:79:be:20:af:6a:17:a7: cb:36:bd:e1:12:ad:11:c0:af:dc:bd:2c:ae:95:63:c4:f9:68: cc:e2:57:6d:77:f1:fa:25:05:22:5a:c7:22:10:10:9a:ce:90: 70:d8:05:84:c7:d3:66:cc:65:24:a3:73:95:87:b1:6f:6a:d2: 63:cc:4f:f8:e7:6e:1b:7c:57:69:07:da:92:ec:1f:d8:c2:6b: 6b:33:36:87:8d:a7:50:ad:13:38:b8:93:f6:f3:18:43:02:1c: ab:84:ba:8b:ca:db:7d:03:77:7c:86:a5:2c:4d:16:56:fb:5c: 1e:14:78:a4:4e:77:51:71:2a:bb:68:0f:6d:e0:bc:64:a7:73: 38:05:af:4b:ab:3f:ef:ed:2b:5e:6e:20:81:4a:95:b9:17:56: 0b:f4:ee:41:0b:72:1f:fe:7b:ce:39:d2:b3:ac:4f:37:17:04: 72:c6:ca:3a:29:fd:58:32:3f:bb:74:04:c6:ab:55:17:e2:7a: 4c:09:8a:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkmD4t3c+op+IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk OGY2ZTMyZDEtOTlmNC00NmIyLWE1MjUtNmJhNTM3OTAyZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngGw4H8WEDoAUEfCPPK0rCq2ZEJZbVQ6MvQe x52NRONqb3XH6QbwSlajLF015OTl5mX+hsq7lfgtbxzO34IydVhbVa1vZOSbRSgy moX4W/F8c7fAcVWPEhGl1CBQkRL4kDMJv1zDsKeG7Q0uEgCEGJSwC6vdD1BDrPZq GAEdu2V0SiUnbF78YA+3pRB0hrcZyzdkuzeEW40RUSLRsUHcirmahTDHUypHa+w3 RqHqyPDbgj0b5san/Z0HpXDT1dKmVyMNpm9X/LLU6NxYYz5XSg48KdV4/ASGx2eI uHRsVDDS4mJgQDvc+YtKKYgf4K1i/J/rTJmvYpRMeBvgqWgzAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjoTcQibMmT1TKNrZkL52FjQX1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGE3NWZhMTAtNmQwNi0z ZWE0LWIzNWYtNDEzZTI0ODFkY2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2qYkYMNX6DfC09O6Xl6em0XN72EhDS3DINaGzQvPBxn9qRX0Z/nILl VR9HqxMP7yTu7kqbOTKlAVGFdketRMDveb4gr2oXp8s2veESrRHAr9y9LK6VY8T5 aMziV2138folBSJaxyIQEJrOkHDYBYTH02bMZSSjc5WHsW9q0mPMT/jnbht8V2kH 2pLsH9jCa2szNoeNp1CtEzi4k/bzGEMCHKuEuovK230Dd3yGpSxNFlb7XB4UeKRO d1FxKrtoD23gvGSnczgFr0urP+/tK15uIIFKlbkXVgv07kELch/+e8450rOsTzcX BHLGyjop/VgyP7t0BMarVRfiekwJiqA= -----END CERTIFICATE-----Generated at Sat Apr 5 21:16:27 2025 by rpki-client