$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/e83ebf04-7de2-30d6-ac6a-07dbfc7fa00c.roa File: e83ebf04-7de2-30d6-ac6a-07dbfc7fa00c.roa (raw, json) Hash identifier: Thi7MwBzDNwH4HO9J+Mg5zRKTR0jtC/Y4/c2c3nZBbo= Subject key identifier: 0F:D5:33:44:83:E8:26:61:A5:A1:DD:53:7A:CA:CE:56:CF:91:47:17 Certificate issuer: /CN=5e580e37-3db1-41d1-ae09-7e84348caffd Certificate serial: 010D0C9F432858483B500A5CA8D3E0E3EC454800 Authority key identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/e83ebf04-7de2-30d6-ac6a-07dbfc7fa00c.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 17207 IP address blocks: 198.59.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:50:0a:5c:a8:d3:e0:e3:ec:45:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e580e37-3db1-41d1-ae09-7e84348caffd Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=f7f23132-fab9-441b-b053-68ee0a8fbb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:76:dd:c9:ce:b6:20:35:71:58:63:3a:05:3d: 2d:91:46:4d:36:8d:ca:3f:a3:fb:b3:d4:8e:24:79: 26:72:ca:29:f3:86:65:de:3a:74:fa:4d:ad:c5:d3: 34:69:ff:c9:ed:ab:ef:e6:26:5e:b5:26:c8:50:a0: c3:ac:c3:e9:f8:0f:4a:11:96:be:78:4c:c8:5b:c6: db:9c:4c:2b:7a:98:27:7c:51:63:6f:bd:2a:db:12: 3b:56:d9:b6:a4:38:2d:d8:17:7e:49:0d:04:e4:3d: 22:8d:fd:86:95:d3:48:9a:97:ac:28:07:9d:c1:84: 29:ae:94:aa:22:f0:bc:dc:3c:43:1b:f5:73:57:32: 06:24:35:1d:71:86:ac:93:ec:20:a7:7a:47:ca:9e: b2:f6:dc:ec:42:98:6d:77:39:4f:e4:86:a2:4c:20: 72:27:7c:65:2a:f6:57:86:02:22:61:23:a4:ff:f1: 4e:2f:86:43:64:da:c5:2c:33:9b:f0:25:54:a2:17: cb:69:17:86:30:5c:ac:3f:0b:9c:64:4b:1b:a8:12: 2a:35:b6:d2:f3:00:ea:58:6e:73:54:0d:05:17:b6: 4f:c6:71:8b:6e:ba:73:69:84:2f:9b:95:34:d6:78: c9:89:cd:f5:c0:0c:fb:b8:55:f5:06:56:29:ff:48: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D5:33:44:83:E8:26:61:A5:A1:DD:53:7A:CA:CE:56:CF:91:47:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/e83ebf04-7de2-30d6-ac6a-07dbfc7fa00c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl X509v3 Authority Key Identifier: keyid:FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer sbgp-ipAddrBlock: critical IPv4: 198.59.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:0c:3a:f8:76:84:21:de:19:8c:6f:4c:d6:36:53:ad:f3:f2: 5c:f6:14:4c:dc:ea:a0:8f:f1:28:d0:69:19:7b:71:5c:fb:db: be:0b:c0:ef:cc:c0:3e:77:33:39:6f:15:bf:a0:3c:71:ac:74: e6:0d:ee:b3:65:7b:05:5d:06:10:47:bd:f5:1e:db:b8:dd:7d: 8b:93:8b:62:bd:84:cc:a0:21:6f:3c:b3:53:83:d9:35:c2:03: f6:36:13:2b:c9:6c:33:92:d7:64:98:c5:fd:f5:d7:a7:74:31: 49:aa:01:ce:d9:ea:95:29:a6:a4:59:f0:15:90:1d:6b:13:34: 93:0d:ae:41:fc:8f:8c:ba:53:01:a6:05:ba:8b:87:2b:ff:d9: 78:ab:81:ac:fd:56:7a:61:31:59:40:79:21:0f:c6:a5:37:40: 10:dc:17:79:2e:e2:ce:35:a1:3f:1c:00:90:e0:0f:1f:36:c9: f5:a1:e5:36:5b:60:5e:86:d5:6f:f6:e0:78:5b:e1:30:fb:14: 71:2a:3b:87:48:62:a3:5d:f0:1f:0b:99:6a:8a:69:ff:d0:66: f7:59:18:f2:a8:f2:ea:f1:cf:31:3d:fa:ab:5c:91:7a:9c:70: 3b:98:6f:99:8a:46:cf:e4:7a:eb:b5:7d:30:ef:59:3b:ef:59: 13:74:fd:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UApcqNPg4+xFSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU1ODBlMzctM2RiMS00MWQxLWFlMDktN2U4NDM0OGNh ZmZkMB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk ZjdmMjMxMzItZmFiOS00NDFiLWIwNTMtNjhlZTBhOGZiYjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnbdyc62IDVxWGM6BT0tkUZNNo3KP6P7s9SO JHkmcsop84Zl3jp0+k2txdM0af/J7avv5iZetSbIUKDDrMPp+A9KEZa+eEzIW8bb nEwrepgnfFFjb70q2xI7Vtm2pDgt2Bd+SQ0E5D0ijf2GldNImpesKAedwYQprpSq IvC83DxDG/VzVzIGJDUdcYask+wgp3pHyp6y9tzsQphtdzlP5IaiTCByJ3xlKvZX hgIiYSOk//FOL4ZDZNrFLDOb8CVUohfLaReGMFysPwucZEsbqBIqNbbS8wDqWG5z VA0FF7ZPxnGLbrpzaYQvm5U01njJic31wAz7uFX1BlYp/0houQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/VM0SD6CZhpaHdU3rKzlbPkUcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZTU4 MGUzNy0zZGIxLTQxZDEtYWUwOS03ZTg0MzQ4Y2FmZmQvZTgzZWJmMDQtN2RlMi0z MGQ2LWFjNmEtMDdkYmZjN2ZhMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWU1ODBlMzctM2RiMS00MWQxLWFl MDktN2U4NDM0OGNhZmZkLzVlNTgwZTM3LTNkYjEtNDFkMS1hZTA5LTdlODQzNDhj YWZmZC5jcmwwHwYDVR0jBBgwFoAU/b7HR9PNGy3n92RgnwNBlGpLmE8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZTU4MGUzNy0zZGIxLTQxZDEtYWUwOS03ZTg0 MzQ4Y2FmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8MOvh2hCHeGYxvTNY2U63z8lz2FEzc6qCP8SjQaRl7cVz7274LwO/M wD53MzlvFb+gPHGsdOYN7rNlewVdBhBHvfUe27jdfYuTi2K9hMygIW88s1OD2TXC A/Y2EyvJbDOS12SYxf3116d0MUmqAc7Z6pUppqRZ8BWQHWsTNJMNrkH8j4y6UwGm BbqLhyv/2Xirgaz9VnphMVlAeSEPxqU3QBDcF3ku4s41oT8cAJDgDx82yfWh5TZb YF6G1W/24Hhb4TD7FHEqO4dIYqNd8B8LmWqKaf/QZvdZGPKo8urxzzE9+qtckXqc cDuYb5mKRs/keuu1fTDvWTvvWRN0/a0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:57 2025 by rpki-client