$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/90af776b-daa9-38f0-a471-4f3184e7b9db.roa File: 90af776b-daa9-38f0-a471-4f3184e7b9db.roa (raw, json) Hash identifier: P57Cok9cTQu9tyUF8xMrMxNZEZKEZi4ooL+bDVAC1TU= Subject key identifier: 4D:8C:AA:F7:6D:3A:B1:58:73:E7:EB:68:32:C3:66:48:D0:27:A1:FE Certificate issuer: /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba Certificate serial: 010D0C9F43285848960B53F7F5CF8F31155DA4B0 Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/90af776b-daa9-38f0-a471-4f3184e7b9db.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 395117 IP address blocks: 47.19.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:53:f7:f5:cf:8f:31:15:5d:a4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=bbba706d-84b7-4c9b-bbf2-c4b1c2a1bb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c1:63:6a:40:bf:63:e0:c7:06:86:5e:28:70: 2d:fe:28:dc:00:f6:77:11:f2:98:73:76:ff:8c:88: e5:ba:6e:d8:4e:6d:ce:8f:b4:34:60:22:40:57:ba: ab:f4:93:8d:03:3c:96:5c:6b:87:bd:3d:89:23:5b: a0:f8:7f:e0:d2:93:95:44:e3:4b:3e:47:0a:06:78: c0:b1:cf:d0:6c:73:8e:71:5e:c5:d6:aa:06:1b:33: 68:5e:8e:88:05:e8:26:8d:87:a8:94:59:51:0a:06: 53:6b:64:3d:80:22:95:d4:50:06:0e:20:88:c6:aa: ee:2c:03:a5:a0:92:13:99:6b:5b:26:f2:d7:fd:75: 03:87:12:a5:e3:26:3f:86:f4:24:0e:61:3e:53:c5: 2d:03:a3:a1:b2:ae:3f:d7:c1:5d:a1:d7:fb:33:64: b6:f3:46:00:fb:a9:84:6d:a2:ca:13:1e:42:5b:60: 3f:c1:08:97:7c:12:11:e8:64:c3:a9:85:31:8b:ec: 5e:e6:c6:f0:63:8b:c8:cb:db:26:61:2c:6f:dd:78: 9e:8f:e0:2a:7c:d4:f9:8c:6f:58:b6:29:22:88:f6: ab:80:68:91:90:24:f2:e5:1b:8e:9b:1c:2b:ed:96: 79:83:be:f1:ba:10:b9:23:dc:20:08:ad:3c:0c:bd: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8C:AA:F7:6D:3A:B1:58:73:E7:EB:68:32:C3:66:48:D0:27:A1:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/90af776b-daa9-38f0-a471-4f3184e7b9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl X509v3 Authority Key Identifier: keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer sbgp-ipAddrBlock: critical IPv4: 47.19.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b1:49:d5:81:ea:27:18:ab:80:de:66:ae:ff:78:66:24:24: 90:3b:a1:3f:b8:b8:0a:f3:64:32:75:4a:c2:56:c7:4f:bd:e2: 18:71:00:75:04:25:a3:9d:fe:45:32:bc:dc:44:d0:c7:71:58: 7a:ac:b1:96:87:dc:1b:4e:6e:ee:f2:9b:5e:d2:ce:e1:87:06: 57:a3:c6:c2:8e:c0:68:fe:98:9a:ef:ee:2c:cc:34:20:43:17: 67:85:d4:8e:40:13:71:e3:6e:ad:f1:60:d7:36:fd:b2:2a:5f: d4:ee:10:b7:b9:59:c8:33:17:d8:9c:a2:1b:ed:62:a7:4b:ce: 11:08:81:b8:18:4e:8d:3b:84:dc:54:36:59:f9:f5:21:32:11: d0:e9:22:b6:ae:3e:eb:27:2c:79:ba:f7:d1:04:dd:7b:e4:f1: a2:16:a4:28:6d:6e:d2:92:d5:bd:5c:05:6c:b2:ca:ff:08:5d: f1:23:7e:2d:3b:e2:c0:4e:8f:35:06:60:21:fe:11:f5:38:42: 4a:2c:c7:04:61:9d:3b:62:55:ef:bf:6a:06:58:0c:c5:82:6d: 16:71:f0:07:9d:75:90:92:c1:3c:26:bb:82:94:e0:b9:73:70: 8a:83:4e:1f:66:7c:88:8c:52:47:02:cc:9c:71:5b:6b:cb:b0: d3:de:c4:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1P39c+PMRVdpLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU0NmIzZWUtMWYxMS00NTI1LTg1NzYtZjIzOGExOWZi N2JhMB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk YmJiYTcwNmQtODRiNy00YzliLWJiZjItYzRiMWMyYTFiYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcFjakC/Y+DHBoZeKHAt/ijcAPZ3EfKYc3b/ jIjlum7YTm3Oj7Q0YCJAV7qr9JONAzyWXGuHvT2JI1ug+H/g0pOVRONLPkcKBnjA sc/QbHOOcV7F1qoGGzNoXo6IBegmjYeolFlRCgZTa2Q9gCKV1FAGDiCIxqruLAOl oJITmWtbJvLX/XUDhxKl4yY/hvQkDmE+U8UtA6Ohsq4/18Fdodf7M2S280YA+6mE baLKEx5CW2A/wQiXfBIR6GTDqYUxi+xe5sbwY4vIy9smYSxv3Xiej+AqfNT5jG9Y tikiiPargGiRkCTy5RuOmxwr7ZZ5g77xuhC5I9wgCK08DL12xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2MqvdtOrFYc+fraDLDZkjQJ6H+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2 YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4YTE5ZmI3YmEvOTBhZjc3NmItZGFhOS0z OGYwLWE0NzEtNGYzMTg0ZTdiOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDU0NmIzZWUtMWYxMS00NTI1LTg1 NzYtZjIzOGExOWZiN2JhLzA1NDZiM2VlLTFmMTEtNDUyNS04NTc2LWYyMzhhMTlm YjdiYS5jcmwwHwYDVR0jBBgwFoAUS2BVW9iQXvtZnH3Rgkxp+tbjJ2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4 YTE5ZmI3YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALxMTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGxSdWB6icYq4DeZq7/eGYkJJA7oT+4uArzZDJ1SsJWx0+94hhxAHUE JaOd/kUyvNxE0MdxWHqssZaH3BtObu7ym17SzuGHBlejxsKOwGj+mJrv7izMNCBD F2eF1I5AE3Hjbq3xYNc2/bIqX9TuELe5WcgzF9icohvtYqdLzhEIgbgYTo07hNxU Nln59SEyEdDpIrauPusnLHm699EE3Xvk8aIWpChtbtKS1b1cBWyyyv8IXfEjfi07 4sBOjzUGYCH+EfU4QkosxwRhnTtiVe+/agZYDMWCbRZx8AeddZCSwTwmu4KU4Llz cIqDTh9mfIiMUkcCzJxxW2vLsNPexBw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:06 2025 by rpki-client