$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e4c912e9-eb26-3e14-9517-4d02c07e315f.roa File: e4c912e9-eb26-3e14-9517-4d02c07e315f.roa (raw, json) Hash identifier: /uAxTLEq4V2oxmLJ8lGXuPmD/QsnNg12xssekNkEXnk= Subject key identifier: B1:4B:59:7B:07:86:50:74:6B:53:26:40:4C:83:C3:28:1A:58:3D:F2 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F432858484515867E5E5964DAC70EB780 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e4c912e9-eb26-3e14-9517-4d02c07e315f.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 14061 IP address blocks: 198.199.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:86:7e:5e:59:64:da:c7:0e:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=f22ef5b6-a3bb-404d-8ac0-2311e11905c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:06:9d:92:80:ba:f0:5c:1d:5f:d3:b9:c0:15: 66:f3:85:6e:80:10:ec:99:b5:67:36:51:40:77:57: 1e:23:98:84:cd:e8:e7:a5:98:56:38:50:0b:c0:33: 65:c5:d5:8b:be:e1:c7:33:12:55:4c:20:34:8a:92: c2:33:36:c0:f8:cf:e3:9e:96:92:ed:41:0a:2c:52: 68:c8:5f:73:c7:05:b4:ed:dc:21:f8:c1:be:e4:02: d7:76:b8:f9:39:7a:f8:f6:cf:4e:9e:64:9f:f0:41: d6:f6:34:04:c8:91:cb:67:e3:27:9a:1b:27:1b:fa: f4:7a:dc:40:d0:d1:21:82:2c:68:c5:b1:3d:f7:02: 4e:a2:9c:1c:83:e7:29:c5:6a:79:e2:38:31:30:bf: 2a:d4:32:14:30:6c:14:76:e9:39:8d:bc:b3:7f:40: 89:85:a7:fa:9e:8c:52:b7:9a:e2:8f:4a:d2:a2:e4: 22:ae:94:e3:70:c2:bd:6d:95:42:25:42:54:a6:37: 50:0c:b5:ce:17:79:73:20:3e:f4:25:f1:f9:0d:41: d0:4e:2d:3b:fe:85:a5:14:5a:d5:2d:1f:54:23:ca: b0:54:56:bd:81:d4:3d:14:9b:26:1a:78:15:3b:f4: fe:80:dd:97:d6:10:49:1c:cd:78:90:3c:a0:e4:60: 67:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4B:59:7B:07:86:50:74:6B:53:26:40:4C:83:C3:28:1A:58:3D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e4c912e9-eb26-3e14-9517-4d02c07e315f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 198.199.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:4b:01:6c:31:af:3d:66:0c:17:96:48:ff:c9:3e:69:2c:e5: a7:65:52:95:b4:c7:26:74:03:a2:96:08:43:7e:4b:0a:97:57: ab:af:c5:e8:54:05:15:89:d3:95:65:77:67:eb:13:d3:0b:4c: 08:77:34:b6:b9:ff:63:3f:18:94:58:85:e2:1f:01:b9:70:76: 73:1e:c2:50:3d:42:50:3d:c0:22:51:8e:b4:bf:47:a4:1c:dd: aa:ac:b4:56:08:56:af:c5:1c:f8:7f:ce:0b:f2:19:50:c9:8b: 8b:a3:13:3c:c8:9c:65:81:35:ab:e4:c4:6e:4c:22:d4:0b:92: 87:94:ff:30:3d:9a:74:3d:a9:42:34:44:b7:d5:e6:aa:72:b0: 5d:fb:63:93:04:0b:1a:7f:c8:5a:6d:1b:9f:1e:18:c7:e8:f8: 27:12:31:18:80:48:51:db:58:9a:1b:b5:90:27:4e:ed:fd:c3: 20:1b:2f:8a:cf:d6:dc:ff:0c:ee:f8:00:71:05:bb:ac:b3:00: c9:c2:0e:5d:27:7e:98:5b:f9:e7:df:7c:f3:48:47:26:b0:de: 8c:8d:59:71:99:29:b1:f8:b9:2a:36:f4:01:d5:b5:76:27:19: 20:21:aa:db:66:04:4e:57:5c:d4:47:93:f1:83:50:f7:80:8b: d4:07:36:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFYZ+Xllk2scOt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk ZjIyZWY1YjYtYTNiYi00MDRkLThhYzAtMjMxMWUxMTkwNWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAadkoC68FwdX9O5wBVm84VugBDsmbVnNlFA d1ceI5iEzejnpZhWOFALwDNlxdWLvuHHMxJVTCA0ipLCMzbA+M/jnpaS7UEKLFJo yF9zxwW07dwh+MG+5ALXdrj5OXr49s9OnmSf8EHW9jQEyJHLZ+MnmhsnG/r0etxA 0NEhgixoxbE99wJOopwcg+cpxWp54jgxML8q1DIUMGwUduk5jbyzf0CJhaf6noxS t5rij0rSouQirpTjcMK9bZVCJUJUpjdQDLXOF3lzID70JfH5DUHQTi07/oWlFFrV LR9UI8qwVFa9gdQ9FJsmGngVO/T+gN2X1hBJHM14kDyg5GBnKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFLWXsHhlB0a1MmQEyDwygaWD3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZTRjOTEyZTktZWIyNi0z ZTE0LTk1MTctNGQwMmMwN2UzMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxsdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlLAWwxrz1mDBeWSP/JPmks5adlUpW0xyZ0A6KWCEN+SwqXV6uvxehU BRWJ05Vld2frE9MLTAh3NLa5/2M/GJRYheIfAblwdnMewlA9QlA9wCJRjrS/R6Qc 3aqstFYIVq/FHPh/zgvyGVDJi4ujEzzInGWBNavkxG5MItQLkoeU/zA9mnQ9qUI0 RLfV5qpysF37Y5MECxp/yFptG58eGMfo+CcSMRiASFHbWJobtZAnTu39wyAbL4rP 1tz/DO74AHEFu6yzAMnCDl0nfphb+efffPNIRyaw3oyNWXGZKbH4uSo29AHVtXYn GSAhqttmBE5XXNRHk/GDUPeAi9QHNgE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:53 2025 by rpki-client