$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa File: 6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa (raw, json) Hash identifier: 7vSpYZUhhTzp6VuGmZBxgZTaiRMKvn7BEvMbET/w40k= Subject key identifier: 88:63:39:FD:E4:6A:48:9B:AE:02:DE:1C:D0:22:AD:78:AB:65:89:F9 Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Certificate serial: 010D0C9F4328584882808E38607B5DE7BC395960 Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 19551 IP address blocks: 199.83.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:8e:38:60:7b:5d:e7:bc:39:59:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=1fa52a9b-830d-4b7c-9720-61e269aac78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:45:c4:c0:c4:ee:bc:2a:9d:fb:95:78:e7: f7:dc:ae:a7:a2:42:d8:31:04:1f:17:0d:ae:f4:db: 83:dc:d6:ce:57:6e:89:51:04:30:7f:6c:3a:56:17: 49:ab:2e:55:1b:cc:04:09:1f:79:22:4c:0b:ce:7c: c6:b3:6e:a6:0f:92:f2:14:92:bb:0e:3b:43:e4:80: 3f:e2:81:88:88:41:79:f7:5e:fd:e2:e5:4f:8e:ab: 20:fd:53:3f:18:4a:16:7e:08:6b:7e:bc:11:97:af: aa:85:0b:51:b3:8e:2c:84:c4:4e:36:0d:d4:c6:2e: c9:48:fb:d2:27:5d:ed:65:87:88:5e:8d:24:28:f5: 0a:b2:6c:09:85:aa:58:a3:af:b0:d5:b5:23:ed:5e: 1f:58:c4:53:b9:b4:2e:ec:e2:b8:23:08:42:e9:6e: e3:66:b9:d7:80:36:a6:1e:6a:d1:3d:b9:7e:ef:4b: 2c:4c:2a:4f:ce:99:cb:90:47:23:f2:5a:f5:03:c6: 26:7d:43:8d:12:a2:bb:93:3c:9d:7e:2a:46:40:52: 06:0e:a6:f8:a8:fd:30:74:40:82:67:88:af:14:d9: 70:e9:48:9d:d4:59:57:db:16:58:68:51:26:9f:3a: 5b:f2:cd:7a:c2:b9:0f:70:fd:81:df:b5:bd:fb:ef: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:63:39:FD:E4:6A:48:9B:AE:02:DE:1C:D0:22:AD:78:AB:65:89:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl X509v3 Authority Key Identifier: keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer sbgp-ipAddrBlock: critical IPv4: 199.83.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:89:a2:7a:98:c7:b7:07:c6:a2:26:2d:08:71:0e:44:34:a6: 62:26:66:93:05:96:f5:1d:e7:82:c6:90:0b:36:80:12:25:2f: 28:82:ae:f8:cf:32:88:80:a3:73:9a:32:78:f1:73:9f:67:9f: bc:8d:1c:c7:4b:8c:f8:f2:7b:1b:8b:88:10:67:66:42:56:f2: dc:66:2b:a7:b7:df:f2:60:02:5e:9b:ab:5d:d0:1e:bf:7d:c3: 84:50:8b:18:b8:25:9e:9b:85:f2:7c:e4:4f:de:2c:58:49:d2: a4:78:4c:df:e9:0f:17:d7:14:fc:a1:c1:ee:cc:07:d8:ff:63: f2:4e:51:9a:0c:81:b6:ff:e8:62:0f:ed:7e:83:9c:fe:a5:89: ed:56:c3:ac:58:bb:71:e2:16:b4:a3:d2:72:2d:48:9f:3c:9a: 9e:7c:4c:5a:ec:13:a3:57:b6:28:f9:29:b2:df:5d:d4:e8:d9: ff:b1:a6:02:c5:f1:f0:b1:c4:de:05:3a:31:04:0f:c1:19:4b: 73:f1:fc:44:d2:2b:4e:38:c5:2b:7f:f5:75:6f:4b:fd:c6:a6: b7:b7:d2:00:3b:44:3c:bc:6a:8e:2c:d9:14:de:fe:ad:b7:17: ff:85:c8:08:34:54:0c:51:de:51:84:86:a9:92:e5:a2:8a:cd: aa:1b:8f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgI44YHtd57w5WWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj Yzc4MB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk MWZhNTJhOWItODMwZC00YjdjLTk3MjAtNjFlMjY5YWFjNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfFFxMDE7rwqnfuVeOf33K6nokLYMQQfFw2u 9NuD3NbOV26JUQQwf2w6VhdJqy5VG8wECR95IkwLznzGs26mD5LyFJK7DjtD5IA/ 4oGIiEF591794uVPjqsg/VM/GEoWfghrfrwRl6+qhQtRs44shMRONg3Uxi7JSPvS J13tZYeIXo0kKPUKsmwJhapYo6+w1bUj7V4fWMRTubQu7OK4IwhC6W7jZrnXgDam HmrRPbl+70ssTCpPzpnLkEcj8lr1A8YmfUONEqK7kzydfipGQFIGDqb4qP0wdECC Z4ivFNlw6Uid1FlX2xZYaFEmnzpb8s16wrkPcP2B37W9++8tpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhjOf3kakibrgLeHNAirXirZYn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvNmYxMmI2YjMtM2Y4OC0z YjVmLWEzNzktNmI2YzY1MWMwMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0 ZDZiY2NjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1OAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2JonqYx7cHxqImLQhxDkQ0pmImZpMFlvUd54LGkAs2gBIlLyiCrvjP MoiAo3OaMnjxc59nn7yNHMdLjPjyexuLiBBnZkJW8txmK6e33/JgAl6bq13QHr99 w4RQixi4JZ6bhfJ85E/eLFhJ0qR4TN/pDxfXFPyhwe7MB9j/Y/JOUZoMgbb/6GIP 7X6DnP6lie1Ww6xYu3HiFrSj0nItSJ88mp58TFrsE6NXtij5KbLfXdTo2f+xpgLF 8fCxxN4FOjEED8EZS3Px/ETSK044xSt/9XVvS/3Gpre30gA7RDy8ao4s2RTe/q23 F/+FyAg0VAxR3lGEhqmS5aKKzaobj3A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:54 2025 by rpki-client