$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd4d2c84-efec-3994-9009-3e1e83a7eb42.roa File: fd4d2c84-efec-3994-9009-3e1e83a7eb42.roa (raw, json) Hash identifier: /stN0zYtG4RS/zO5AdN0bPWaLyDYbsYqj3tc6YZvWeY= Subject key identifier: 0E:04:4A:D4:97:B0:FA:BE:98:93:CB:A4:04:2D:DA:16:A3:FA:3A:97 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9964930F30019D8D72B7100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd4d2c84-efec-3994-9009-3e1e83a7eb42.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397222 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:49:30:f3:00:19:d8:d7:2b:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=33722ef0-b1ba-4bee-97f2-7a7bb98dc54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:07:3a:a9:5b:26:fd:b9:ec:b2:47:45:9d:8e: 26:db:3e:49:c5:3c:00:34:73:e8:e1:1a:ae:ca:5f: d8:29:eb:33:15:ee:1d:fd:4b:87:5a:12:86:6f:c0: c3:76:9c:38:71:74:4d:2b:59:80:fd:2d:e5:3e:b3: dd:e7:bf:84:d4:b1:a0:30:b0:af:14:cc:a1:a3:13: 24:df:40:04:10:9d:b5:31:48:e2:d1:a7:45:fd:97: 3b:a9:ce:af:e8:e8:8e:17:cc:b7:49:bc:62:8c:f0: 9c:da:1a:bd:89:c5:82:d3:e5:bc:4a:51:ca:a5:59: 85:82:e3:e9:5b:e6:cc:d5:4c:b5:26:ec:25:a4:b0: 44:c8:43:ab:34:93:a0:ae:7b:b0:46:01:d6:f7:42: 0a:6d:aa:60:da:80:b4:0b:d4:3b:53:18:9f:51:c0: 22:e7:c2:60:bb:1c:87:d7:cc:1f:3a:fd:13:bc:6a: a7:7a:1c:8d:91:73:fb:f8:0a:2f:5f:d3:51:10:d1: 55:96:52:10:dc:fb:86:6d:b5:5a:79:6b:00:b7:1e: 94:14:31:56:a7:98:81:b1:6f:b4:bd:d1:c4:ee:d9: ae:87:f4:4f:9d:f4:cb:7d:f4:2d:be:f3:9a:77:c0: 53:fa:39:02:f2:81:92:98:4f:f6:93:94:1e:96:47: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:04:4A:D4:97:B0:FA:BE:98:93:CB:A4:04:2D:DA:16:A3:FA:3A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd4d2c84-efec-3994-9009-3e1e83a7eb42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c0:9d:56:22:fd:45:1b:92:9c:f4:c4:54:09:35:56:b4:86: 66:3e:2d:59:77:6e:61:e1:3e:72:6c:79:c8:a2:1d:7d:e9:78: af:3d:14:66:0b:10:92:02:0a:22:52:60:64:e6:d5:bc:c1:ce: 74:91:65:e0:41:cb:88:7a:35:ef:44:8a:d4:79:ea:cb:5f:a6: a3:ae:44:5d:6c:78:34:4b:3b:30:af:36:27:5d:20:6b:9a:5d: b3:76:3f:b2:80:9f:2e:41:3a:40:1a:36:d3:46:31:4d:0f:56: 37:45:9c:ff:89:16:5e:1c:5f:4d:94:52:09:66:78:f5:81:d3: 83:54:b0:6d:06:8f:7b:92:e9:09:2a:fb:50:00:89:08:c0:ba: 9f:39:ac:39:c1:8e:8b:d5:2b:63:dd:53:a1:1a:93:7f:19:b5: 76:a5:84:f9:4f:1e:03:32:d5:dd:02:06:aa:21:4d:c1:f1:d8: 5a:37:ca:d6:92:36:eb:92:fb:28:e6:c7:d6:2e:76:93:f7:41: 45:64:2d:9d:d0:35:aa:53:2f:51:2a:1b:fc:9b:c7:f7:7f:9b: 08:c9:06:65:69:c1:e8:96:ba:19:3b:3b:b7:09:f1:ac:67:18: 96:3d:78:fe:ca:80:95:eb:2d:d6:c9:8e:c8:18:f4:58:07:25: be:fd:a3:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkkw8wAZ2NcrcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzM3MjJlZjAtYjFiYS00YmVlLTk3ZjItN2E3YmI5OGRjNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwc6qVsm/bnsskdFnY4m2z5JxTwANHPo4Rqu yl/YKeszFe4d/UuHWhKGb8DDdpw4cXRNK1mA/S3lPrPd57+E1LGgMLCvFMyhoxMk 30AEEJ21MUji0adF/Zc7qc6v6OiOF8y3SbxijPCc2hq9icWC0+W8SlHKpVmFguPp W+bM1Uy1JuwlpLBEyEOrNJOgrnuwRgHW90IKbapg2oC0C9Q7UxifUcAi58JguxyH 18wfOv0TvGqnehyNkXP7+AovX9NRENFVllIQ3PuGbbVaeWsAtx6UFDFWp5iBsW+0 vdHE7tmuh/RPnfTLffQtvvOad8BT+jkC8oGSmE/2k5QelkdurQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4EStSXsPq+mJPLpAQt2haj+jqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmQ0ZDJjODQtZWZlYy0z OTk0LTkwMDktM2UxZTgzYTdlYjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnAnVYi/UUbkpz0xFQJNVa0hmY+LVl3bmHhPnJseciiHX3peK89FGYL EJICCiJSYGTm1bzBznSRZeBBy4h6Ne9EitR56stfpqOuRF1seDRLOzCvNiddIGua XbN2P7KAny5BOkAaNtNGMU0PVjdFnP+JFl4cX02UUglmePWB04NUsG0Gj3uS6Qkq +1AAiQjAup85rDnBjovVK2PdU6Eak38ZtXalhPlPHgMy1d0CBqohTcHx2Fo3ytaS NuuS+yjmx9YudpP3QUVkLZ3QNapTL1EqG/ybx/d/mwjJBmVpweiWuhk7O7cJ8axn GJY9eP7KgJXrLdbJjsgY9FgHJb79o0Q= -----END CERTIFICATE-----Generated at Sun Apr 6 03:38:40 2025 by rpki-client