$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/689846f6-a462-3887-b8bf-6d4896883a3e.roa File: 689846f6-a462-3887-b8bf-6d4896883a3e.roa (raw, json) Hash identifier: 21F8YUs8AkIrOZGg29GcIu0KzHUDMlnxmYDKgR9nuvs= Subject key identifier: DD:13:50:DF:E4:FB:FC:1F:0B:2C:71:5F:21:8B:D0:18:89:C5:0F:A8 Certificate issuer: /CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162 Certificate serial: 010D0C9F43285848B1F721CC080FAA4714DCE690 Authority key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/689846f6-a462-3887-b8bf-6d4896883a3e.roa Signing time: Tue 28 Jan 2025 14:02:54 +0000 ROA not before: Tue 28 Jan 2025 14:02:54 +0000 ROA not after: Mon 28 Apr 2025 13:02:54 +0000 asID: 7018 IP address blocks: 199.69.0.0/16 maxlen: 16 199.70.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f7:21:cc:08:0f:aa:47:14:dc:e6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162 Validity Not Before: Jan 28 14:02:54 2025 GMT Not After : Apr 28 13:02:54 2025 GMT Subject: CN=a5b7e38f-84ec-4bf4-8eb6-b4845ab15f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:51:1d:52:c5:fd:5a:79:53:58:d0:f7:e3:81: 6c:17:aa:9b:d3:4d:16:04:a3:ee:30:b8:63:8b:e4: c7:dc:7d:dc:67:e8:d7:85:24:bd:4a:af:39:c0:d7: af:ab:ea:8a:85:29:a0:7e:be:84:fb:38:a2:d4:51: 94:6c:fb:8d:94:9a:7e:5d:63:5b:20:0f:c8:3a:f0: f8:26:17:64:32:aa:81:ba:58:85:7f:f5:51:b4:23: ff:8f:41:6d:c1:33:91:ab:a9:80:3b:dd:8d:64:d4: b9:41:3b:22:8e:4a:16:39:83:7e:45:d7:54:b8:67: ab:58:52:f8:8a:b3:4b:38:63:2e:f4:1f:9a:be:c6: dd:b8:8c:1b:cc:3c:8b:fb:dd:e9:5e:4d:ac:03:22: 6a:05:2f:71:3c:87:13:f9:9d:cf:df:cd:92:b6:f6: 69:30:fc:04:40:ff:04:17:43:47:e2:d7:50:21:d8: d3:da:5c:54:51:88:34:0c:c6:d4:83:cc:35:f2:ee: 23:26:a9:9a:7b:1e:d7:49:d1:ca:49:52:55:af:c6: 92:cc:50:9b:92:dd:70:d7:57:0b:bb:0e:61:b7:56: 3f:7d:5b:5b:21:15:b0:05:ba:0a:50:65:d0:31:80: 13:0f:b8:03:35:f8:d0:fa:cc:43:57:bc:c4:8b:84: 2c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:13:50:DF:E4:FB:FC:1F:0B:2C:71:5F:21:8B:D0:18:89:C5:0F:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/689846f6-a462-3887-b8bf-6d4896883a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl X509v3 Authority Key Identifier: keyid:FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer sbgp-ipAddrBlock: critical IPv4: 199.69.0.0-199.70.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:f7:f9:76:9b:36:d3:c4:3e:8d:63:42:ef:14:cd:f9:ac:bb: 0c:75:3a:eb:31:fb:5a:98:80:14:63:82:26:1c:fd:d9:f0:e0: ad:fb:04:e6:70:12:4c:12:57:8f:07:65:3e:91:c5:d1:9f:96: 0b:0f:3b:2e:33:37:9b:1c:3e:b0:86:c2:fa:17:2e:18:21:15: a5:42:18:42:ff:1d:d3:e6:b5:fb:29:e0:27:fd:44:5b:d0:a3: fd:8c:70:cb:ea:14:eb:67:60:44:5f:b5:a4:d6:47:94:76:0a: d5:16:30:47:ce:ee:34:02:2f:8e:34:c6:c7:04:15:e9:fe:e4: 0a:35:67:9d:8b:71:20:31:3c:cc:6c:ae:a7:40:5e:ea:70:a0: e6:2d:d5:eb:b5:1f:f7:b6:4f:96:dd:8b:45:b1:4b:94:74:fd: af:40:bb:13:b3:db:b8:f2:6b:a7:bb:d3:3f:b8:ce:d3:8f:ec: e1:88:e8:5c:76:f8:98:a4:1c:76:db:8f:48:3a:88:04:2d:0c: 76:89:d5:e2:45:25:6d:b1:2b:5f:f6:1c:26:7a:96:75:d6:44: 61:6a:2d:2f:0f:67:95:94:96:bb:ee:7d:f8:4c:ab:95:8f:20: ed:77:27:fb:03:42:e6:e5:da:bb:de:d5:85:a9:f8:c0:a5:4d: 0e:be:0d:92 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEix9yHMCA+qRxTc5pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkYWFiNWQtOGNjNC00YWQ4LWE3YzQtYTM2YzY0ODhk MTYyMB4XDTI1MDEyODE0MDI1NFoXDTI1MDQyODEzMDI1NFowLzEtMCsGA1UEAxMk YTViN2UzOGYtODRlYy00YmY0LThlYjYtYjQ4NDVhYjE1ZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVEdUsX9WnlTWND344FsF6qb000WBKPuMLhj i+TH3H3cZ+jXhSS9Sq85wNevq+qKhSmgfr6E+zii1FGUbPuNlJp+XWNbIA/IOvD4 JhdkMqqBuliFf/VRtCP/j0FtwTORq6mAO92NZNS5QTsijkoWOYN+RddUuGerWFL4 irNLOGMu9B+avsbduIwbzDyL+93pXk2sAyJqBS9xPIcT+Z3P382StvZpMPwEQP8E F0NH4tdQIdjT2lxUUYg0DMbUg8w18u4jJqmaex7XSdHKSVJVr8aSzFCbkt1w11cL uw5ht1Y/fVtbIRWwBboKUGXQMYATD7gDNfjQ+sxDV7zEi4QsdwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFN0TUN/k+/wfCyxxXyGL0BiJxQ+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmRh YWI1ZC04Y2M0LTRhZDgtYTdjNC1hMzZjNjQ4OGQxNjIvNjg5ODQ2ZjYtYTQ2Mi0z ODg3LWI4YmYtNmQ0ODk2ODgzYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWJkYWFiNWQtOGNjNC00YWQ4LWE3 YzQtYTM2YzY0ODhkMTYyLzFiZGFhYjVkLThjYzQtNGFkOC1hN2M0LWEzNmM2NDg4 ZDE2Mi5jcmwwHwYDVR0jBBgwFoAU/mUxLRIfo7qCgfXHsKzPHcvwB7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmRhYWI1ZC04Y2M0LTRhZDgtYTdjNC1hMzZj NjQ4OGQxNjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMMAoDAwDHRQMD AMdGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKz3+XabNtPEPo1jQu8Uzfmsuwx1Ousx+1qYgBRjgiYc/dnw 4K37BOZwEkwSV48HZT6RxdGflgsPOy4zN5scPrCGwvoXLhghFaVCGEL/HdPmtfsp 4Cf9RFvQo/2McMvqFOtnYERftaTWR5R2CtUWMEfO7jQCL440xscEFen+5Ao1Z52L cSAxPMxsrqdAXupwoOYt1eu1H/e2T5bdi0WxS5R0/a9AuxOz27jya6e70z+4ztOP 7OGI6Fx2+JikHHbbj0g6iAQtDHaJ1eJFJW2xK1/2HCZ6lnXWRGFqLS8PZ5WUlrvu ffhMq5WPIO13J/sDQubl2rve1YWp+MClTQ6+DZI= -----END CERTIFICATE-----Generated at Wed Feb 19 20:38:51 2025 by rpki-client