$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/cef450b8-6486-3a59-99db-d03ceb223b1b.roa File: cef450b8-6486-3a59-99db-d03ceb223b1b.roa (raw, json) Hash identifier: oVRGCF/J0tLKTOdNWbMnMnsoW3s1v/ygHRCh5Ki8fP8= Subject key identifier: 6F:A2:09:CF:5C:18:B1:E6:03:AA:A3:BA:41:6D:1B:0C:C1:0F:AC:2E Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858489075FF16BD37ACC39C51D540 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/cef450b8-6486-3a59-99db-d03ceb223b1b.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 13315 IP address blocks: 199.94.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:ff:16:bd:37:ac:c3:9c:51:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=fe4a8a0b-6e9b-4e38-9a19-d2fadec3ec0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:d0:2d:58:95:cd:0f:62:21:67:12:78:7d: 7a:d0:b0:73:c3:c6:67:b7:d8:56:3f:51:2b:7c:24: 65:d6:a8:ed:c7:e5:6f:6e:d6:4a:5c:6e:2f:11:d3: d1:e1:a5:7e:70:d0:80:d6:0b:4f:8b:2a:14:ca:09: c6:b9:51:5a:5e:eb:60:a8:3b:6d:27:13:c8:d7:37: 6c:77:fd:5f:4a:24:b4:1b:5a:f9:dc:a7:fc:ec:a0: ab:ba:c8:4f:16:03:4d:73:10:a6:79:b3:d2:33:67: d4:53:06:4d:6c:7a:92:91:c7:54:c2:9c:49:a9:b1: ad:69:cd:55:40:25:1a:3d:82:c8:b4:8a:ca:65:3c: 70:1e:54:34:c9:19:fa:b0:90:f7:58:9f:a8:6c:34: 5d:69:78:9c:79:e1:af:53:43:eb:a4:2e:06:45:6b: 04:22:09:a7:05:82:b1:ff:a9:4b:83:72:8a:d4:7b: d7:d4:70:17:d8:e0:03:9d:91:16:2c:57:9b:96:4f: c6:51:12:4c:02:f5:ff:2b:12:90:6c:eb:be:be:6b: 99:17:9d:4d:91:00:3d:8b:89:9c:17:6e:c2:22:45: 8f:20:8a:f6:17:5c:9f:cd:57:a6:17:5f:4d:b6:8f: 1e:45:c0:95:fa:b6:0e:e3:3d:9e:e2:27:cf:b5:7e: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A2:09:CF:5C:18:B1:E6:03:AA:A3:BA:41:6D:1B:0C:C1:0F:AC:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/cef450b8-6486-3a59-99db-d03ceb223b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.94.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:31:51:51:67:7e:58:3c:c0:ba:e2:c8:cb:42:90:9c:cc:f3: 47:29:a3:11:ed:d4:73:cf:46:5c:80:3a:d7:f2:fb:5b:c4:d1: 5d:41:ee:dd:94:0c:36:d1:40:8f:a6:bf:fc:6a:29:53:87:40: db:01:23:5c:e0:75:36:6c:6c:18:13:58:65:ce:30:f3:a2:3c: 32:1c:ab:95:7d:fc:c7:74:0a:62:51:c6:f0:5d:a9:51:d6:18: 3e:1a:c7:3d:95:ab:d4:68:c8:68:6d:a2:c7:80:82:2e:05:e9: 12:e3:8f:c0:18:96:97:33:7a:07:5b:02:e8:89:61:ef:87:d1: 6e:0f:fd:18:e2:22:b2:6c:ff:83:0a:82:d9:52:0d:a2:43:32: b2:63:bb:5f:70:c2:a3:10:24:00:ba:7c:46:1f:89:bd:d6:36: 45:a2:02:57:1a:81:0b:28:6f:d9:84:db:20:0a:6d:43:78:f6: 9a:5d:8e:c7:f0:75:51:79:63:ee:58:dc:87:12:e7:19:23:6e: e5:2b:0f:d0:31:4b:5e:d7:1a:0e:13:6d:b8:47:21:df:6a:dc: c1:c1:23:24:c0:26:a7:2c:9c:d6:ee:bb:ca:9d:db:b5:19:c2: 37:78:27:61:09:97:c0:70:25:f3:38:d9:7f:99:a9:0a:cd:7b: 1f:3e:9c:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdf8WvTesw5xR1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZmU0YThhMGItNmU5Yi00ZTM4LTlhMTktZDJmYWRlYzNlYzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp43QLViVzQ9iIWcSeH160LBzw8Znt9hWP1Er fCRl1qjtx+VvbtZKXG4vEdPR4aV+cNCA1gtPiyoUygnGuVFaXutgqDttJxPI1zds d/1fSiS0G1r53Kf87KCrushPFgNNcxCmebPSM2fUUwZNbHqSkcdUwpxJqbGtac1V QCUaPYLItIrKZTxwHlQ0yRn6sJD3WJ+obDRdaXiceeGvU0PrpC4GRWsEIgmnBYKx /6lLg3KK1HvX1HAX2OADnZEWLFeblk/GURJMAvX/KxKQbOu+vmuZF51NkQA9i4mc F27CIkWPIIr2F1yfzVemF19Nto8eRcCV+rYO4z2e4ifPtX5t5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+iCc9cGLHmA6qjukFtGwzBD6wuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvY2VmNDUwYjgtNjQ4Ni0z YTU5LTk5ZGItZDAzY2ViMjIzYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFx14AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQxUVFnflg8wLriyMtCkJzM80cpoxHt1HPPRlyAOtfy+1vE0V1B7t2U DDbRQI+mv/xqKVOHQNsBI1zgdTZsbBgTWGXOMPOiPDIcq5V9/Md0CmJRxvBdqVHW GD4axz2Vq9RoyGhtoseAgi4F6RLjj8AYlpczegdbAuiJYe+H0W4P/RjiIrJs/4MK gtlSDaJDMrJju19wwqMQJAC6fEYfib3WNkWiAlcagQsob9mE2yAKbUN49ppdjsfw dVF5Y+5Y3IcS5xkjbuUrD9AxS17XGg4TbbhHId9q3MHBIyTAJqcsnNbuu8qd27UZ wjd4J2EJl8BwJfM42X+ZqQrNex8+nJU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:01 2025 by rpki-client