$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/88284c80-4080-3740-a1d6-8df786cec5f4.roa File: 88284c80-4080-3740-a1d6-8df786cec5f4.roa (raw, json) Hash identifier: WVYtUza8OSJ83H6AfZ5l76AfmsDk84Lr6Wz5Z1JOKkc= Subject key identifier: D0:BF:32:43:B1:88:10:FB:33:16:DB:51:AA:E0:1A:95:06:54:03:E9 Certificate issuer: /CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Certificate serial: 010D0C9F43285848EC9681D1623DBDB24E0E2000 Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/88284c80-4080-3740-a1d6-8df786cec5f4.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 715 IP address blocks: 199.120.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:81:d1:62:3d:bd:b2:4e:0e:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=034cffe2-c68d-4cf4-a2f0-a57cf9a31152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:6e:2a:12:11:29:aa:be:9a:e3:04:d7:96: 6d:00:21:83:9c:cd:9f:19:b5:d1:73:b8:c4:88:4d: 41:d8:7e:a8:cb:6c:11:12:3f:82:86:cb:7d:95:cf: 3c:41:96:66:68:ae:6b:31:bd:89:06:49:cf:70:66: 3e:1a:d8:b0:8d:63:2b:23:73:8e:c2:eb:b4:84:01: c3:1a:8d:3a:8d:1a:69:cb:18:d0:e7:8e:70:be:52: 20:ef:41:e5:81:35:6c:40:7e:83:ae:31:ff:e0:2a: 3c:fb:94:70:ef:e3:b7:49:50:ae:a9:02:5c:6e:97: 31:31:8b:8d:32:82:21:2f:4a:2a:0e:b2:f6:8a:a6: 17:81:e2:0a:9b:64:6b:fc:44:c1:4d:fa:07:e2:91: 75:18:0f:c9:1f:ad:ee:68:53:6d:ff:f1:9e:04:36: 1f:f3:c8:93:b9:30:a4:ba:63:ae:ef:a9:0b:e8:70: 7d:31:98:fe:5f:86:9c:57:f2:b3:92:1a:6d:96:72: 8b:fc:93:b1:b1:3d:2d:f8:4d:ba:c4:0a:57:fc:6c: cf:80:35:e8:d3:37:86:fa:d8:e4:7a:83:e7:a9:33: 53:a1:55:5b:5a:d6:02:e9:bd:57:84:23:69:b4:c1: b8:21:52:5a:b5:05:de:97:12:58:d4:28:f9:67:86: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BF:32:43:B1:88:10:FB:33:16:DB:51:AA:E0:1A:95:06:54:03:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/88284c80-4080-3740-a1d6-8df786cec5f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl X509v3 Authority Key Identifier: keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer sbgp-ipAddrBlock: critical IPv4: 199.120.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:91:73:e6:76:d4:98:dc:23:17:08:99:1a:d3:34:39:a6:06: 3f:1d:cb:2f:28:c3:30:9e:7f:c4:56:09:61:3e:41:e4:ce:14: f5:1b:a7:53:c5:4a:ab:6b:82:5c:bb:56:14:af:77:f5:43:88: dd:ae:b9:0e:6f:1d:9e:d9:60:11:55:90:94:9a:d5:85:9f:02: 58:fa:b8:81:af:3b:ab:0e:48:97:d9:a5:10:f4:3e:af:ee:7e: c7:ac:3b:3a:ff:16:73:c2:c5:e5:d8:5b:80:4c:14:02:dc:f5: f7:41:67:7c:15:23:8b:68:fd:97:97:54:88:19:80:40:3b:81: bd:cf:32:6e:7d:47:11:37:fb:f4:43:0a:51:46:48:84:54:e9: ff:d6:c9:e4:43:0d:6c:30:e3:46:64:ba:c4:e7:25:00:4f:52: 2d:8d:62:35:27:fe:2e:a2:fc:68:4c:ff:d3:fc:bb:d9:cd:56: 78:4f:f7:fd:5c:4a:81:1e:fa:e6:72:5e:32:a8:21:23:66:ac: 80:58:7f:86:15:91:06:39:d8:18:28:27:73:3b:c6:61:2e:33: a4:0c:33:b2:c3:5c:2a:dc:2d:af:5b:66:d4:4f:99:34:90:62: f5:38:b6:89:f0:c4:bb:ff:1b:d5:27:04:f3:60:28:02:d6:5a: df:f6:fb:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsloHRYj29sk4OIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlMjBmYWUtMzkyYi00YjIyLWI0NzUtYzZkZmY3MTQy ZmE2MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MDM0Y2ZmZTItYzY4ZC00Y2Y0LWEyZjAtYTU3Y2Y5YTMxMTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI1uKhIRKaq+muME15ZtACGDnM2fGbXRc7jE iE1B2H6oy2wREj+Chst9lc88QZZmaK5rMb2JBknPcGY+GtiwjWMrI3OOwuu0hAHD Go06jRppyxjQ545wvlIg70HlgTVsQH6DrjH/4Co8+5Rw7+O3SVCuqQJcbpcxMYuN MoIhL0oqDrL2iqYXgeIKm2Rr/ETBTfoH4pF1GA/JH63uaFNt//GeBDYf88iTuTCk umOu76kL6HB9MZj+X4acV/KzkhptlnKL/JOxsT0t+E26xApX/GzPgDXo0zeG+tjk eoPnqTNToVVbWtYC6b1XhCNptMG4IVJatQXelxJY1Cj5Z4Y32QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC/MkOxiBD7MxbbUargGpUGVAPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2Uy MGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRmZjcxNDJmYTYvODgyODRjODAtNDA4MC0z NzQwLWExZDYtOGRmNzg2Y2VjNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTdlMjBmYWUtMzkyYi00YjIyLWI0 NzUtYzZkZmY3MTQyZmE2LzE3ZTIwZmFlLTM5MmItNGIyMi1iNDc1LWM2ZGZmNzE0 MmZhNi5jcmwwHwYDVR0jBBgwFoAUoZKM+VjaRQcioLzJduE97gj3ZmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2UyMGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRm ZjcxNDJmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3iNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSRc+Z21JjcIxcImRrTNDmmBj8dyy8owzCef8RWCWE+QeTOFPUbp1PF Sqtrgly7VhSvd/VDiN2uuQ5vHZ7ZYBFVkJSa1YWfAlj6uIGvO6sOSJfZpRD0Pq/u fsesOzr/FnPCxeXYW4BMFALc9fdBZ3wVI4to/ZeXVIgZgEA7gb3PMm59RxE3+/RD ClFGSIRU6f/WyeRDDWww40ZkusTnJQBPUi2NYjUn/i6i/GhM/9P8u9nNVnhP9/1c SoEe+uZyXjKoISNmrIBYf4YVkQY52BgoJ3M7xmEuM6QMM7LDXCrcLa9bZtRPmTSQ YvU4tonwxLv/G9UnBPNgKALWWt/2+0Q= -----END CERTIFICATE-----Generated at Sun Apr 6 11:00:02 2025 by rpki-client