$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa File: 8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa (raw, json) Hash identifier: UfA2mZSiP613kl0lRRcCOEmpV0MTfyMbIQyKnRqX4fM= Subject key identifier: 2C:DB:8D:E3:A1:B5:D6:99:50:3C:5B:B4:01:84:12:1A:1F:CA:58:B5 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584807AA6F6B2A23317E0B5DA4E8 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa Signing time: Thu 28 Nov 2024 14:00:52 +0000 ROA not before: Thu 28 Nov 2024 14:00:52 +0000 ROA not after: Wed 26 Feb 2025 14:00:52 +0000 asID: 3356 IP address blocks: 199.35.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:07:aa:6f:6b:2a:23:31:7e:0b:5d:a4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Nov 28 14:00:52 2024 GMT Not After : Feb 26 14:00:52 2025 GMT Subject: CN=0d708ac0-7743-48eb-aefc-4cc0e991dfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:72:84:c7:78:6f:33:87:15:03:21:46:12:e1: ec:b6:e0:14:39:6c:d7:5f:b1:13:8d:84:58:94:3b: 1a:15:37:dc:b9:33:ee:cc:e2:9f:b0:ab:f6:09:90: a3:ab:ad:88:b6:dd:73:0c:27:08:40:a7:06:26:02: 83:fc:3e:eb:8b:ce:4e:e1:9b:81:07:71:77:35:67: e9:d8:5a:f3:0d:af:4f:42:53:17:08:3a:20:71:77: fb:63:31:45:9d:c4:47:74:8d:5c:06:97:60:df:4b: f6:2a:6e:66:8b:5f:74:29:84:f0:09:44:2c:79:74: 24:f2:a3:34:75:2a:9b:a5:92:1f:6d:21:38:35:ef: 69:1e:df:26:4f:94:35:95:4f:97:c6:8c:4f:02:af: 8e:a1:f5:59:e9:a9:2d:80:9c:af:cd:c0:10:f7:2a: 4b:1f:ba:34:d6:ab:90:d5:70:39:31:2e:c1:3c:0d: 39:c3:a3:51:cb:5b:de:13:b7:bd:0b:f3:4b:eb:6e: 26:d1:93:1a:8a:c4:e7:e2:54:fa:f3:e2:a8:ed:ef: 13:b8:72:24:95:a7:f4:4b:b1:bc:37:cf:b1:b6:84: 58:39:eb:e6:08:fe:b4:8e:a9:37:96:f4:a3:63:f7: fb:5a:02:11:44:e9:83:e3:c6:8b:ca:fd:6d:6a:30: 4c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DB:8D:E3:A1:B5:D6:99:50:3C:5B:B4:01:84:12:1A:1F:CA:58:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.35.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f0:57:b4:70:ca:11:f2:af:c0:78:e7:bc:e7:f0:1f:93:fe: 30:3e:4e:8e:32:a8:d2:7b:62:f8:40:4d:67:70:98:cf:15:5b: 68:0c:d9:aa:3b:fd:47:1a:d4:0b:cd:4d:13:f3:ca:71:80:1b: 52:44:33:33:f7:91:6a:8a:f6:af:fc:c4:9e:75:38:18:82:34: 79:02:e6:1e:03:9c:54:64:cc:54:f6:d8:66:c1:18:7e:04:f5: f0:05:60:b8:9c:2b:72:7a:d6:58:0e:c7:e8:f5:46:e8:e2:87: 4a:56:d7:e7:a7:0a:fc:23:25:c8:1b:6b:18:50:0b:1a:45:84: 23:5a:1d:f7:67:43:eb:e4:10:20:ad:16:72:95:46:8e:61:6f: d1:d5:b3:2a:8c:e6:08:27:36:e7:43:16:2e:8e:5f:ad:07:18: 16:d0:cc:35:9e:02:de:ec:a2:84:44:bc:98:76:5b:f1:a2:6b: ba:c4:26:2c:95:9d:fa:27:91:3d:63:f8:e4:76:df:e3:c9:77: 02:49:9d:cf:49:66:be:53:d9:d9:4b:6f:85:b1:70:74:7a:c2: cd:ee:93:c9:3e:ad:76:e3:7a:88:81:2d:90:71:8e:d7:06:23: 8e:67:53:88:ec:64:1f:1e:3b:87:1b:17:02:82:4f:ae:40:fd: d3:86:c4:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgHqm9rKiMxfgtdpOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTEyODE0MDA1MloXDTI1MDIyNjE0MDA1MlowLzEtMCsGA1UEAxMk MGQ3MDhhYzAtNzc0My00OGViLWFlZmMtNGNjMGU5OTFkZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXKEx3hvM4cVAyFGEuHstuAUOWzXX7ETjYRY lDsaFTfcuTPuzOKfsKv2CZCjq62Itt1zDCcIQKcGJgKD/D7ri85O4ZuBB3F3NWfp 2FrzDa9PQlMXCDogcXf7YzFFncRHdI1cBpdg30v2Km5mi190KYTwCUQseXQk8qM0 dSqbpZIfbSE4Ne9pHt8mT5Q1lU+XxoxPAq+OofVZ6aktgJyvzcAQ9ypLH7o01quQ 1XA5MS7BPA05w6NRy1veE7e9C/NL624m0ZMaisTn4lT68+Ko7e8TuHIklaf0S7G8 N8+xtoRYOevmCP60jqk3lvSjY/f7WgIRROmD48aLyv1tajBMLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzbjeOhtdaZUDxbtAGEEhofyli1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGI2N2IzYzUtYTFjNC0z M2FmLTlkNzctNDIzNDliNGM2NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxyNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPwV7RwyhHyr8B457zn8B+T/jA+To4yqNJ7YvhATWdwmM8VW2gM2ao7 /Uca1AvNTRPzynGAG1JEMzP3kWqK9q/8xJ51OBiCNHkC5h4DnFRkzFT22GbBGH4E 9fAFYLicK3J61lgOx+j1Rujih0pW1+enCvwjJcgbaxhQCxpFhCNaHfdnQ+vkECCt FnKVRo5hb9HVsyqM5ggnNudDFi6OX60HGBbQzDWeAt7sooREvJh2W/Gia7rEJiyV nfonkT1j+OR23+PJdwJJnc9JZr5T2dlLb4WxcHR6ws3uk8k+rXbjeoiBLZBxjtcG I45nU4jsZB8eO4cbFwKCT65A/dOGxDE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:26 2025 by rpki-client