$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47306951-0aab-380f-84d2-7a9c11e67870.roa File: 47306951-0aab-380f-84d2-7a9c11e67870.roa (raw, json) Hash identifier: cgwzeQnn0NiTKPetV46Cjf+bSHu4GMYC1P8Zza1pmL0= Subject key identifier: C6:9F:21:0A:D3:99:C5:89:A4:83:6C:BC:31:42:6C:96:0D:B8:E2:A8 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858489075FC5BF36F2C734308FA60 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47306951-0aab-380f-84d2-7a9c11e67870.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 1742 IP address blocks: 199.94.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:fc:5b:f3:6f:2c:73:43:08:fa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=71848c8f-2f0e-4054-9199-fe60bf79f4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:04:ca:11:65:08:9f:2e:1a:83:49:5a:a2:3f: be:d6:e5:a4:67:35:7d:d5:49:f1:82:81:94:db:f0: d7:98:55:cc:7c:ff:8f:72:6a:b4:b9:a2:cf:a9:6a: 33:c0:b8:6d:70:ff:f3:ee:c9:d9:22:3d:c9:b0:f1: a6:5c:fd:25:43:ad:32:8d:86:26:53:48:3c:ec:bc: 3d:1a:31:a0:5e:20:10:33:4e:31:6d:d9:bd:c4:2e: 15:ba:35:84:9b:7a:36:c1:40:d8:99:15:d6:88:23: 0d:89:74:ef:ae:79:bc:0f:c3:42:7f:25:d6:0d:49: 1a:75:69:79:2f:76:d9:8a:ec:e0:4d:86:33:3d:98: 4b:5f:56:2f:46:38:a5:4b:a6:00:65:30:b9:09:30: 45:ef:4f:7c:6c:61:30:39:5c:ae:cc:32:3b:c5:8b: c0:82:78:3a:bd:2f:d6:11:33:3e:8d:27:82:ee:16: 67:a9:89:c7:66:9c:fb:a8:68:a3:74:fa:bb:80:06: 1e:fa:75:4c:91:05:d2:54:a0:2f:f5:21:5b:b2:6e: 3f:c9:2a:5b:4f:ab:5b:90:dc:e2:0c:57:5a:ad:f7: 01:c4:9c:1b:a3:dd:ee:0c:a5:23:e8:07:ef:6d:b8: d1:8f:4e:dc:6f:fe:9c:bc:ec:e0:02:3e:ca:32:7b: f0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9F:21:0A:D3:99:C5:89:A4:83:6C:BC:31:42:6C:96:0D:B8:E2:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47306951-0aab-380f-84d2-7a9c11e67870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.94.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ea:5e:c8:1d:35:2f:d4:da:4e:82:6e:47:de:de:71:d0:91: d4:31:50:13:d7:69:30:68:4f:b9:0c:68:da:1f:93:39:32:b3: 49:f5:e6:91:80:44:17:50:5a:82:54:2d:05:82:f0:9c:d7:d3: df:54:82:b6:07:0a:f1:e4:1d:e5:13:b1:01:41:1a:73:97:46: 15:2f:91:59:cb:36:e0:a6:01:d8:a7:05:c8:9c:ef:0e:0c:0f: 87:5b:5e:32:58:55:46:c0:1d:8f:2d:48:29:f8:79:a1:75:27: 2a:6c:a6:26:46:73:ea:bd:40:ce:3a:9a:e2:b4:76:74:6a:a1: 76:a6:31:e9:30:b3:e2:bc:69:5c:a5:e7:29:4d:98:42:86:c9: 4f:d1:45:57:ac:c0:a0:20:75:01:76:19:43:fb:32:77:dd:9e: e0:63:f0:d7:b9:8b:b4:2d:c8:c6:c5:90:5d:f3:53:41:9e:0a: f0:ef:47:64:80:03:60:26:92:f8:e5:e8:11:f6:f8:ec:55:3d: 6c:f1:7c:44:b1:9b:30:d6:b0:6c:84:0a:a3:f1:bd:e8:d9:00: 67:fe:83:98:af:bf:26:18:0f:91:e4:41:23:23:f9:8f:9d:a5: f3:00:a5:3b:74:af:b6:f0:4a:13:44:c7:fe:76:27:f5:a5:3a: 92:0e:5c:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfxb828sc0MI+mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk NzE4NDhjOGYtMmYwZS00MDU0LTkxOTktZmU2MGJmNzlmNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwTKEWUIny4ag0laoj++1uWkZzV91UnxgoGU 2/DXmFXMfP+Pcmq0uaLPqWozwLhtcP/z7snZIj3JsPGmXP0lQ60yjYYmU0g87Lw9 GjGgXiAQM04xbdm9xC4VujWEm3o2wUDYmRXWiCMNiXTvrnm8D8NCfyXWDUkadWl5 L3bZiuzgTYYzPZhLX1YvRjilS6YAZTC5CTBF7098bGEwOVyuzDI7xYvAgng6vS/W ETM+jSeC7hZnqYnHZpz7qGijdPq7gAYe+nVMkQXSVKAv9SFbsm4/ySpbT6tbkNzi DFdarfcBxJwbo93uDKUj6AfvbbjRj07cb/6cvOzgAj7KMnvwxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMafIQrTmcWJpINsvDFCbJYNuOKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDczMDY5NTEtMGFhYi0z ODBmLTg0ZDItN2E5YzExZTY3ODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFx14AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnqXsgdNS/U2k6Cbkfe3nHQkdQxUBPXaTBoT7kMaNofkzkys0n15pGA RBdQWoJULQWC8JzX099UgrYHCvHkHeUTsQFBGnOXRhUvkVnLNuCmAdinBcic7w4M D4dbXjJYVUbAHY8tSCn4eaF1JypspiZGc+q9QM46muK0dnRqoXamMekws+K8aVyl 5ylNmEKGyU/RRVeswKAgdQF2GUP7MnfdnuBj8Ne5i7QtyMbFkF3zU0GeCvDvR2SA A2Amkvjl6BH2+OxVPWzxfESxmzDWsGyECqPxvejZAGf+g5ivvyYYD5HkQSMj+Y+d pfMApTt0r7bwShNEx/52J/WlOpIOXFA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:06:04 2025 by rpki-client