$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa File: 8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa (raw, json) Hash identifier: /JjIsLRu0njyh2YrDyucaq6SLM68PNIJEEiwMSkrcZ0= Subject key identifier: CE:AF:3A:51:AC:8E:93:BD:EC:87:68:1B:4F:9F:08:C3:DE:59:E7:1F Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285848E86660E6DF609BB8DA2A5D80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 3356 IP address blocks: 199.35.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:60:e6:df:60:9b:b8:da:2a:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=8e69b20e-953b-4227-b468-999d81736fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:61:fb:77:06:f0:22:8c:7b:ce:19:3f:93: c3:ed:24:ec:d7:9a:68:9f:e6:51:d1:f6:c6:e9:5d: 5d:5c:af:f1:29:63:36:97:ac:51:a6:97:28:45:05: f7:4d:51:f6:b9:67:15:3d:5e:be:3f:05:11:67:55: 09:5f:b7:47:5f:4a:30:ac:36:24:bc:a7:cb:4f:54: 97:3e:f1:6a:4a:4b:79:e1:7b:19:21:66:f3:a2:35: c7:82:8b:e4:a7:6e:53:22:31:8a:06:b2:b3:7b:06: f7:de:78:02:2a:63:a2:f4:0d:26:4a:0c:db:8b:d1: 38:24:bb:4f:2a:b3:a3:16:e7:5e:ff:f8:06:61:13: 33:1c:f4:20:a0:c4:da:15:bc:3c:17:40:80:32:85: e1:ba:79:2a:9d:00:8c:3d:de:b5:6e:eb:d1:bc:6b: 47:d6:ac:2c:c3:e6:bc:39:e3:74:40:04:7e:aa:9c: 14:a6:a5:75:7d:ec:cb:4b:9d:55:ec:81:b3:15:c5: 4c:d7:cd:c7:18:a6:a8:4a:56:f0:0f:2d:3f:6c:68: 59:16:66:db:51:2a:77:96:c6:29:bd:e0:48:25:d6: 71:12:1a:3a:77:5f:a3:5e:66:2f:a8:a6:b1:52:4d: 22:ef:d3:22:73:c9:07:ae:6e:be:2a:d0:56:b2:66: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AF:3A:51:AC:8E:93:BD:EC:87:68:1B:4F:9F:08:C3:DE:59:E7:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8b67b3c5-a1c4-33af-9d77-42349b4c66db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.35.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:1e:5b:32:54:47:23:91:28:45:98:08:4f:35:9b:b2:73:20: 5b:04:7e:e6:16:a8:d1:9a:c2:fa:f1:6b:de:c1:b3:ea:3a:c0: bc:ae:8f:07:81:3d:0e:19:b6:e8:27:5b:77:12:9f:eb:ce:98: 23:36:c3:86:45:1a:46:22:38:69:7c:47:63:83:ff:58:47:d8: 2f:f5:8c:17:bd:a4:85:70:a4:97:5f:fc:c4:68:4c:81:bb:19: 63:78:c7:76:97:dd:cf:5c:71:2c:b0:a2:7c:46:8d:6c:8a:20: 29:ef:34:9a:a3:ad:61:a2:ea:70:97:6f:78:25:65:14:21:33: e0:49:5a:b7:dd:52:ec:e9:83:65:72:99:5f:86:40:c0:fc:98: dd:68:df:d5:b5:df:9d:58:08:cf:f5:c0:65:52:28:f7:62:4a: ca:c9:2a:6c:5f:14:c1:f9:f1:fd:15:d7:c6:d5:3c:e6:91:96: f9:61:03:5b:fb:c3:78:8a:86:7c:95:a4:10:bb:79:ae:de:97: f6:e2:eb:59:7d:81:e9:96:8c:97:3e:93:6f:69:e3:57:f8:3e: 3e:9d:08:e6:6b:0d:c6:56:ee:89:62:f6:4e:d8:7c:ff:01:47: a3:b0:1c:ed:ca:77:6c:c9:4e:ef:3d:54:e5:33:2e:37:86:be: 7d:34:2b:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmDm32CbuNoqXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk OGU2OWIyMGUtOTUzYi00MjI3LWI0NjgtOTk5ZDgxNzM2ZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTdh+3cG8CKMe84ZP5PD7STs15pon+ZR0fbG 6V1dXK/xKWM2l6xRppcoRQX3TVH2uWcVPV6+PwURZ1UJX7dHX0owrDYkvKfLT1SX PvFqSkt54XsZIWbzojXHgovkp25TIjGKBrKzewb33ngCKmOi9A0mSgzbi9E4JLtP KrOjFude//gGYRMzHPQgoMTaFbw8F0CAMoXhunkqnQCMPd61buvRvGtH1qwsw+a8 OeN0QAR+qpwUpqV1fezLS51V7IGzFcVM183HGKaoSlbwDy0/bGhZFmbbUSp3lsYp veBIJdZxEho6d1+jXmYvqKaxUk0i79Mic8kHrm6+KtBWsmaAuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6vOlGsjpO97IdoG0+fCMPeWecfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGI2N2IzYzUtYTFjNC0z M2FmLTlkNzctNDIzNDliNGM2NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxyNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALseWzJURyORKEWYCE81m7JzIFsEfuYWqNGawvrxa97Bs+o6wLyujweB PQ4ZtugnW3cSn+vOmCM2w4ZFGkYiOGl8R2OD/1hH2C/1jBe9pIVwpJdf/MRoTIG7 GWN4x3aX3c9ccSywonxGjWyKICnvNJqjrWGi6nCXb3glZRQhM+BJWrfdUuzpg2Vy mV+GQMD8mN1o39W1351YCM/1wGVSKPdiSsrJKmxfFMH58f0V18bVPOaRlvlhA1v7 w3iKhnyVpBC7ea7el/bi61l9gemWjJc+k29p41f4Pj6dCOZrDcZW7oli9k7YfP8B R6OwHO3Kd2zJTu89VOUzLjeGvn00KwU= -----END CERTIFICATE-----Generated at Fri Mar 14 10:05:55 2025 by rpki-client