$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad6667d5-0061-3d62-88b5-8f97fe98a193.roa File: ad6667d5-0061-3d62-88b5-8f97fe98a193.roa (raw, json) Hash identifier: DMVMX9BfDCZMQlQU0r9BXY12XbFrnW1qkOmGiXGUgCU= Subject key identifier: 9C:E1:E5:7B:A6:55:82:69:A6:E7:B9:82:10:CC:44:4F:B5:78:60:48 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9964A282612E33A2BF36B00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad6667d5-0061-3d62-88b5-8f97fe98a193.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397240 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:4a:28:26:12:e3:3a:2b:f3:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=e64c0ff6-6abe-4293-9ce4-6b26d209576b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:87:12:76:f9:40:7c:cc:15:4a:a3:e1:2f:eb: c7:df:49:7f:b1:9f:45:94:0b:63:85:a9:f9:c2:7d: cb:23:2d:55:68:0a:79:ae:bf:21:74:79:00:ab:fd: 4a:b2:3e:2d:dd:e5:53:da:a2:cd:b1:f9:28:cb:d5: 41:da:19:68:44:86:dc:2b:bb:8d:86:e6:25:89:f7: 8e:cf:9b:9c:39:8e:7e:17:15:a3:cd:6d:64:b5:10: 4c:b8:a9:74:72:ec:b7:5e:67:88:66:35:d8:11:1d: 69:9a:c0:b0:59:c9:59:0c:a4:83:20:9b:35:52:21: f0:8b:2e:41:6a:a4:63:2c:7f:5b:f5:07:e2:13:94: da:c3:78:aa:9e:7e:76:a7:9a:22:06:f8:6f:1b:eb: 7e:59:f5:78:a7:60:a2:56:3b:89:99:b6:70:4d:b8: 67:18:d9:9b:3d:2c:97:b9:2f:82:13:70:bc:ab:15: 51:b0:3f:2f:6a:a7:8e:7f:c0:c1:7e:a3:29:5a:3b: 9e:58:2e:8e:d4:d6:94:21:c1:16:b9:85:ce:f8:3d: 7f:e6:d6:c5:93:4e:13:2e:a1:d6:7a:2a:a0:54:bf: ce:87:31:04:a6:4e:c3:10:de:da:6c:2c:09:4e:2f: 1e:f6:a8:84:6c:f4:4a:c8:2d:0f:4f:61:37:33:75: 99:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E1:E5:7B:A6:55:82:69:A6:E7:B9:82:10:CC:44:4F:B5:78:60:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad6667d5-0061-3d62-88b5-8f97fe98a193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:bb:2a:8e:e4:58:38:05:dd:11:e4:24:2e:51:26:29:56:9a: f8:ab:c6:f4:01:f3:fb:66:6f:7f:07:ca:50:aa:37:63:a3:1d: a2:14:45:28:54:9b:70:b8:3e:00:e6:00:ed:89:6d:f2:57:72: 8c:57:8a:0f:16:ce:71:ef:eb:50:45:d4:9a:21:15:6d:8a:92: 9c:a4:b3:fa:f0:8c:1e:36:00:cf:54:1a:00:73:fe:aa:f5:5d: 90:95:55:35:0a:00:4f:36:6d:2c:f9:cb:02:6f:66:3c:e2:f1: 3c:4e:a6:a2:87:16:4c:1b:df:57:e8:50:69:95:3c:b5:07:95: 59:a7:5d:2a:a1:4c:88:32:d8:f5:d9:b9:3a:96:37:fa:f0:97: 4e:13:71:58:c5:0f:ef:c0:f4:96:07:20:00:e6:a4:b7:90:a9: c2:f0:f8:4b:99:3b:cc:7d:a9:1f:15:23:c8:20:ee:7a:33:9c: 26:6f:05:60:61:62:27:07:d6:5c:d3:c2:c4:26:78:1f:31:b6: b4:5a:10:87:1d:61:ca:21:ed:ea:b3:bc:cb:24:43:d5:2a:9d: 5b:3a:70:f2:9a:c9:e1:d1:cc:7b:88:9f:8f:72:42:6b:91:32: 8f:0a:05:36:e0:29:d6:49:9c:61:0a:b4:a5:0e:04:77:2b:85: 3d:1b:c0:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkooJhLjOivzawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTY0YzBmZjYtNmFiZS00MjkzLTljZTQtNmIyNmQyMDk1NzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIcSdvlAfMwVSqPhL+vH30l/sZ9FlAtjhan5 wn3LIy1VaAp5rr8hdHkAq/1Ksj4t3eVT2qLNsfkoy9VB2hloRIbcK7uNhuYlifeO z5ucOY5+FxWjzW1ktRBMuKl0cuy3XmeIZjXYER1pmsCwWclZDKSDIJs1UiHwiy5B aqRjLH9b9QfiE5Taw3iqnn52p5oiBvhvG+t+WfV4p2CiVjuJmbZwTbhnGNmbPSyX uS+CE3C8qxVRsD8vaqeOf8DBfqMpWjueWC6O1NaUIcEWuYXO+D1/5tbFk04TLqHW eiqgVL/OhzEEpk7DEN7abCwJTi8e9qiEbPRKyC0PT2E3M3WZoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzh5XumVYJppue5ghDMRE+1eGBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWQ2NjY3ZDUtMDA2MS0z ZDYyLTg4YjUtOGY5N2ZlOThhMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe7Ko7kWDgF3RHkJC5RJilWmvirxvQB8/tmb38HylCqN2OjHaIURShU m3C4PgDmAO2JbfJXcoxXig8WznHv61BF1JohFW2Kkpyks/rwjB42AM9UGgBz/qr1 XZCVVTUKAE82bSz5ywJvZjzi8TxOpqKHFkwb31foUGmVPLUHlVmnXSqhTIgy2PXZ uTqWN/rwl04TcVjFD+/A9JYHIADmpLeQqcLw+EuZO8x9qR8VI8gg7noznCZvBWBh YicH1lzTwsQmeB8xtrRaEIcdYcoh7eqzvMskQ9UqnVs6cPKayeHRzHuIn49yQmuR Mo8KBTbgKdZJnGEKtKUOBHcrhT0bwJo= -----END CERTIFICATE-----Generated at Sun Apr 6 07:17:41 2025 by rpki-client