$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfb0982a-41c3-3e04-a214-27f23f1ed8e7.roa File: dfb0982a-41c3-3e04-a214-27f23f1ed8e7.roa (raw, json) Hash identifier: WAjfhgi97Jl0T73kQCVuesLVVarbxBDzTnsp3NoYAbk= Subject key identifier: C1:75:E0:73:3C:A3:86:90:03:51:2D:91:B8:D5:6A:22:A0:83:D4:5B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A996495423BD2501D3E27DD4 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfb0982a-41c3-3e04-a214-27f23f1ed8e7.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397225 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:49:54:23:bd:25:01:d3:e2:7d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=2a60b580-2d9c-4606-8c88-f7f053a03b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:df:32:80:bd:5d:74:83:eb:72:e2:11:f0:62: 10:82:7b:e3:c2:ee:47:6a:57:61:3b:c8:2e:d6:2e: 4c:e0:94:40:f1:bb:37:ed:5a:50:b7:5c:34:00:c8: 30:f1:19:43:76:f9:c8:43:6b:18:0a:18:2f:db:7f: 6b:27:f0:93:b0:89:03:f8:a9:84:ee:39:7f:88:fd: bb:ce:15:9b:75:31:f5:c8:67:3d:dd:f8:7f:c8:f5: 57:2d:8f:27:1a:11:77:42:39:e0:af:f9:bf:96:c0: c2:b3:b6:50:41:06:c1:dc:17:aa:6c:dd:fa:c6:66: 78:69:fe:a9:6c:69:b3:d0:ea:d3:87:97:8a:fa:01: 04:0d:2a:68:b8:43:27:49:9c:bc:ae:b1:68:3c:e9: db:6a:a0:54:7b:b5:a9:36:2c:df:d2:94:5a:0a:0b: 3f:83:5b:ce:cb:4c:68:10:a3:25:f1:c6:35:69:20: 59:72:e3:31:51:a2:56:37:1c:04:2e:4d:64:f8:1b: 23:13:f3:8c:29:a9:16:37:c4:46:60:2d:de:eb:2a: 0b:e9:b6:c0:96:f3:e5:e0:72:1e:5a:eb:e0:32:29: 2f:08:d3:20:c2:49:42:fc:64:5c:2b:7f:9e:43:6a: 73:a2:27:e8:be:ba:f6:21:f2:e3:e7:fb:03:b8:fe: 64:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:75:E0:73:3C:A3:86:90:03:51:2D:91:B8:D5:6A:22:A0:83:D4:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfb0982a-41c3-3e04-a214-27f23f1ed8e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c0:60:9d:c0:8d:c1:9a:30:8d:38:2a:76:4e:63:79:c9:15: a8:44:ed:47:cc:0a:74:42:d8:cc:c8:b0:42:72:03:53:7d:d9: c3:b3:6a:2a:a8:ca:97:51:2d:82:8b:17:a3:10:66:7f:d8:0a: 5a:7d:1a:9e:5e:aa:67:00:6d:04:6c:02:23:88:b8:70:7b:0c: 48:ac:7d:1b:33:fe:19:59:b2:44:34:10:19:b5:d9:da:ad:52: 6f:9e:82:76:65:67:92:68:79:32:42:36:37:90:ea:1d:97:38: 55:ca:f6:bb:98:4b:e2:10:65:ef:ab:e0:dc:54:82:66:39:f6: 79:09:43:7a:23:7f:e9:30:0a:17:0e:10:d5:1e:4c:b6:53:de: 3f:d1:97:9d:89:bc:d1:63:97:0d:05:7f:36:44:4f:f3:03:03: b4:b9:d2:33:85:dd:d2:e6:97:c5:fd:bd:72:35:9c:eb:fd:21: 27:ec:e4:98:61:f6:f4:b4:f6:40:8d:63:5b:b2:4a:58:f7:1e: 51:4f:4f:11:74:c0:66:57:27:36:12:b3:b0:c1:48:f2:43:5f: 66:9a:82:cb:ef:1e:17:fc:94:db:71:4e:0c:b9:54:e9:4d:bb: b5:c0:7f:c3:a3:fd:45:29:95:49:cf:b0:ce:df:d1:ef:15:86: 68:e9:86:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplklUI70lAdPifdQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmE2MGI1ODAtMmQ5Yy00NjA2LThjODgtZjdmMDUzYTAzYjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd8ygL1ddIPrcuIR8GIQgnvjwu5HaldhO8gu 1i5M4JRA8bs37VpQt1w0AMgw8RlDdvnIQ2sYChgv239rJ/CTsIkD+KmE7jl/iP27 zhWbdTH1yGc93fh/yPVXLY8nGhF3Qjngr/m/lsDCs7ZQQQbB3BeqbN36xmZ4af6p bGmz0OrTh5eK+gEEDSpouEMnSZy8rrFoPOnbaqBUe7WpNizf0pRaCgs/g1vOy0xo EKMl8cY1aSBZcuMxUaJWNxwELk1k+BsjE/OMKakWN8RGYC3e6yoL6bbAlvPl4HIe WuvgMikvCNMgwklC/GRcK3+eQ2pzoifovrr2IfLj5/sDuP5k/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF14HM8o4aQA1EtkbjVaiKgg9RbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGZiMDk4MmEtNDFjMy0z ZTA0LWEyMTQtMjdmMjNmMWVkOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDAYJ3AjcGaMI04KnZOY3nJFahE7UfMCnRC2MzIsEJyA1N92cOzaiqo ypdRLYKLF6MQZn/YClp9Gp5eqmcAbQRsAiOIuHB7DEisfRsz/hlZskQ0EBm12dqt Um+egnZlZ5JoeTJCNjeQ6h2XOFXK9ruYS+IQZe+r4NxUgmY59nkJQ3ojf+kwChcO ENUeTLZT3j/Rl52JvNFjlw0FfzZET/MDA7S50jOF3dLml8X9vXI1nOv9ISfs5Jhh 9vS09kCNY1uySlj3HlFPTxF0wGZXJzYSs7DBSPJDX2aagsvvHhf8lNtxTgy5VOlN u7XAf8Oj/UUplUnPsM7f0e8Vhmjphsg= -----END CERTIFICATE-----Generated at Tue Apr 8 23:38:49 2025 by rpki-client