$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/12ce9488-5f6c-3759-b31d-8e3c8d84b09f.roa File: 12ce9488-5f6c-3759-b31d-8e3c8d84b09f.roa (raw, json) Hash identifier: Pzj+aKa6XfBofxK2dHjxxbU3jqZo1bOb8IJsV/hdJYo= Subject key identifier: 8C:AC:DB:CF:00:5E:59:8C:FB:37:39:60:EA:95:8B:5C:1C:32:EA:E6 Certificate issuer: /CN=f229bba4-1d66-4a9f-8e40-159e94bdd015 Certificate serial: 010D0C9F43285848100A7E659D705DA73F74DE00 Authority key identifier: 56:41:D8:48:AC:B9:29:79:0A:18:8C:CD:74:E2:54:9C:3D:F5:86:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/12ce9488-5f6c-3759-b31d-8e3c8d84b09f.roa Signing time: Sun 01 Dec 2024 14:00:51 +0000 ROA not before: Sun 01 Dec 2024 14:00:51 +0000 ROA not after: Sat 01 Mar 2025 14:00:51 +0000 asID: 16509 IP address blocks: 206.198.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:0a:7e:65:9d:70:5d:a7:3f:74:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f229bba4-1d66-4a9f-8e40-159e94bdd015 Validity Not Before: Dec 1 14:00:51 2024 GMT Not After : Mar 1 14:00:51 2025 GMT Subject: CN=09209dd3-9778-458e-8b08-4205feb6e3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c7:8d:91:5c:ea:d6:36:38:d4:5c:fc:47:b9: b7:45:e0:7e:71:0b:bb:ac:95:e4:8b:84:a5:fa:93: 8d:ec:16:30:b6:58:70:c7:88:2c:83:5c:0a:ae:88: 3b:19:b2:ff:80:b8:d2:7a:e3:f8:f5:43:de:01:b6: 60:01:33:68:ca:ef:53:94:b0:b6:cd:fa:88:42:3d: 58:97:31:68:9a:39:4e:0a:49:2a:02:e3:0f:24:90: b0:59:f8:4b:97:c8:87:93:93:94:82:fc:60:8f:3f: 02:95:6f:7e:be:19:ba:b0:20:c9:15:cb:76:d7:7d: 89:df:90:63:d1:26:b5:02:6d:65:89:e3:dc:7a:6f: 3e:84:7d:5e:b8:d4:7b:5a:71:ef:54:32:92:cd:0a: 99:b1:47:ff:92:a7:5e:1b:29:53:46:76:b3:1e:b6: 58:94:8c:2e:2d:5a:e4:d3:67:4b:2e:a5:31:0d:13: 75:ef:34:77:44:04:92:97:8d:e5:9a:2b:53:95:84: 09:e8:83:d4:53:3e:07:86:30:0d:aa:ca:88:bf:cf: 79:f8:9d:dd:59:b1:3c:35:82:a8:4e:05:87:06:1d: cf:a1:76:9e:c2:c4:1b:a0:c7:ba:b3:9b:80:7b:bc: e1:04:74:48:9a:ef:d6:a1:92:4a:e4:bf:e1:4b:b1: 71:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AC:DB:CF:00:5E:59:8C:FB:37:39:60:EA:95:8B:5C:1C:32:EA:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/12ce9488-5f6c-3759-b31d-8e3c8d84b09f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.crl X509v3 Authority Key Identifier: keyid:56:41:D8:48:AC:B9:29:79:0A:18:8C:CD:74:E2:54:9C:3D:F5:86:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer sbgp-ipAddrBlock: critical IPv4: 206.198.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9f:df:9f:b0:22:3d:01:84:5b:6c:a5:08:82:b6:dc:32:44: fc:7e:19:d1:aa:68:6b:70:52:c2:6b:50:d9:59:b4:34:79:c0: be:df:51:18:6d:7d:81:57:5e:5e:bd:25:fd:0e:dd:8c:4b:11: 96:bf:92:b9:5c:cd:4a:95:b3:f3:9b:fd:72:d9:74:c8:82:cf: 8e:54:c3:4b:ac:be:25:b4:52:36:e3:a3:fa:89:9e:2e:c7:ff: fa:27:a6:cc:b4:63:65:11:a9:dc:88:13:50:86:14:d0:b0:8a: 5d:5c:f8:b5:1e:be:04:86:77:f9:20:d4:f2:47:63:0e:98:3a: aa:36:5e:b8:8e:81:4e:f8:a3:94:23:c4:27:da:7a:03:5f:d4: 1b:2e:e0:1e:74:da:c5:d3:a5:6e:c5:3c:7e:6d:48:b3:c0:d0: ee:28:bc:69:da:40:3e:30:07:c1:dd:31:6c:dc:f3:31:cb:35: 03:90:dd:bd:7b:ab:d5:ef:2d:36:c6:c8:b9:ed:54:16:33:44: f5:95:7a:34:b6:0c:e3:ff:5f:ea:08:4d:9c:3f:e8:ee:66:f0: 5a:d8:7d:48:d6:9b:b6:a8:2c:7a:7e:08:6b:3a:c7:d8:b8:f0: 8d:31:08:53:a7:09:f0:b2:8d:23:ab:6f:ec:0d:ae:0d:3f:2e: 66:75:cb:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCn5lnXBdpz903gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjIyOWJiYTQtMWQ2Ni00YTlmLThlNDAtMTU5ZTk0YmRk MDE1MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk MDkyMDlkZDMtOTc3OC00NThlLThiMDgtNDIwNWZlYjZlM2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8eNkVzq1jY41Fz8R7m3ReB+cQu7rJXki4Sl +pON7BYwtlhwx4gsg1wKrog7GbL/gLjSeuP49UPeAbZgATNoyu9TlLC2zfqIQj1Y lzFomjlOCkkqAuMPJJCwWfhLl8iHk5OUgvxgjz8ClW9+vhm6sCDJFct2132J35Bj 0Sa1Am1liePcem8+hH1euNR7WnHvVDKSzQqZsUf/kqdeGylTRnazHrZYlIwuLVrk 02dLLqUxDRN17zR3RASSl43lmitTlYQJ6IPUUz4HhjANqsqIv895+J3dWbE8NYKo TgWHBh3PoXaewsQboMe6s5uAe7zhBHRImu/WoZJK5L/hS7FxfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIys288AXlmM+zc5YOqVi1wcMurmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjI5 YmJhNC0xZDY2LTRhOWYtOGU0MC0xNTllOTRiZGQwMTUvMTJjZTk0ODgtNWY2Yy0z NzU5LWIzMWQtOGUzYzhkODRiMDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjIyOWJiYTQtMWQ2Ni00YTlmLThl NDAtMTU5ZTk0YmRkMDE1L2YyMjliYmE0LTFkNjYtNGE5Zi04ZTQwLTE1OWU5NGJk ZDAxNS5jcmwwHwYDVR0jBBgwFoAUVkHYSKy5KXkKGIzNdOJUnD31htkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjI5YmJhNC0xZDY2LTRhOWYtOGU0MC0xNTll OTRiZGQwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsYlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWf35+wIj0BhFtspQiCttwyRPx+GdGqaGtwUsJrUNlZtDR5wL7fURht fYFXXl69Jf0O3YxLEZa/krlczUqVs/Ob/XLZdMiCz45Uw0usviW0Ujbjo/qJni7H //onpsy0Y2URqdyIE1CGFNCwil1c+LUevgSGd/kg1PJHYw6YOqo2XriOgU74o5Qj xCfaegNf1Bsu4B502sXTpW7FPH5tSLPA0O4ovGnaQD4wB8HdMWzc8zHLNQOQ3b17 q9XvLTbGyLntVBYzRPWVejS2DOP/X+oITZw/6O5m8FrYfUjWm7aoLHp+CGs6x9i4 8I0xCFOnCfCyjSOrb+wNrg0/LmZ1y5A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:30 2025 by rpki-client