$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/bb784c6d-5d3c-3157-b5e7-1813958b46ce.roa File: bb784c6d-5d3c-3157-b5e7-1813958b46ce.roa (raw, json) Hash identifier: ASB0W1W4AadKLrNt90rSoz1m5UZPFNRq3do+Xx4HjGE= Subject key identifier: 97:2C:B4:0D:43:4F:B0:75:D6:12:5B:0C:0B:26:20:1A:60:5B:20:7C Certificate issuer: /CN=63fffcba-054d-4823-8758-62bf6dab2ffa Certificate serial: 010D0C9F43285848B1F630C8429AFE8B9700A1A0 Authority key identifier: 83:F7:70:45:78:5B:74:58:27:04:FC:3A:06:BB:7D:99:F4:1A:DE:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/bb784c6d-5d3c-3157-b5e7-1813958b46ce.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 394094 IP address blocks: 199.188.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:30:c8:42:9a:fe:8b:97:00:a1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63fffcba-054d-4823-8758-62bf6dab2ffa Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=e7433728-889d-4b67-9a68-b7d0716ecf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4a:02:53:66:e6:69:ca:55:45:f3:a9:98:31: 02:ba:51:6d:de:e6:49:aa:a9:8e:81:85:53:cc:d8: 5b:50:6a:25:63:76:a5:af:ac:1d:ff:25:c7:99:50: c4:7e:dd:7a:f0:49:52:f5:c9:a7:17:0a:a0:2e:cb: a4:f1:2d:44:f3:8d:fa:ea:1a:df:d2:a8:da:a0:fa: d8:3d:5f:87:72:f7:e7:b4:45:76:3a:d2:bd:a6:33: 46:97:85:53:02:d5:3c:03:bb:4a:39:fc:56:7e:bc: 56:eb:d0:37:fe:57:53:33:f7:68:8a:a0:95:5d:f3: c6:97:05:25:61:1e:84:ab:30:0d:5e:c4:53:21:60: 46:ed:ff:43:9f:12:1e:6b:b5:52:6f:34:f6:ad:a8: 66:47:7d:55:b7:68:e1:79:4b:a6:d7:17:0c:25:32: fe:ef:fe:d2:f2:99:07:f0:d1:f9:29:19:f2:6c:df: 5b:b0:65:c9:07:2a:cc:66:06:72:69:ed:ba:fb:21: ab:07:a8:c2:98:f0:c5:e1:a4:fa:25:9d:1d:96:60: 2a:e3:19:c1:cf:23:a8:95:ec:fc:06:76:cf:27:68: 66:18:63:d7:dd:b9:1a:9c:1b:3e:fa:81:db:6b:3b: 6e:d6:72:71:28:74:a2:d1:38:e8:a5:ed:ab:c6:6d: b1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2C:B4:0D:43:4F:B0:75:D6:12:5B:0C:0B:26:20:1A:60:5B:20:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/bb784c6d-5d3c-3157-b5e7-1813958b46ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.crl X509v3 Authority Key Identifier: keyid:83:F7:70:45:78:5B:74:58:27:04:FC:3A:06:BB:7D:99:F4:1A:DE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa.cer sbgp-ipAddrBlock: critical IPv4: 199.188.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:75:a9:95:23:71:97:21:6d:ba:4f:72:cd:7e:0c:a7:c8:9e: f5:ea:75:87:a6:f9:bd:94:53:06:c8:68:4e:16:22:aa:c9:0a: bb:41:19:7d:36:d3:ba:a4:aa:ab:e6:e7:c7:2c:d2:48:48:ab: 87:dd:eb:83:ce:1c:25:c6:1c:77:07:d2:f9:ef:82:6f:82:3f: e7:4c:88:b2:61:fe:e4:d5:39:d8:89:d7:99:b9:c0:b4:f0:c7: 0f:9a:38:f7:2d:05:85:0e:a9:f7:22:89:6a:fa:0a:d8:c4:f4: dc:48:c3:0e:26:e3:0d:8c:1e:18:cc:a3:cd:37:dd:3c:d4:8e: 01:07:86:99:51:60:9d:f6:5b:ed:0d:4f:5e:72:2a:fa:9c:d3: 75:65:6d:68:79:8a:7a:6c:ab:ff:53:f9:21:e7:98:a9:5e:91: 6b:30:84:e1:4f:d3:45:31:e2:89:61:26:33:e9:02:6c:01:33: 23:cb:35:e4:d1:16:b7:fb:a9:42:1f:b7:e0:8a:a5:d3:e0:9b: 92:e4:0a:c8:f7:b8:c4:d5:0e:68:95:9f:4f:41:d4:53:fa:bc: 42:37:41:88:e4:03:af:3e:3f:8f:a9:66:5b:3d:5a:46:94:0e: 5d:2c:af:b9:23:48:e4:93:40:26:cf:40:6c:b0:97:77:19:e5: 89:b1:d7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9jDIQpr+i5cAoaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNmZmZjYmEtMDU0ZC00ODIzLTg3NTgtNjJiZjZkYWIy ZmZhMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk ZTc0MzM3MjgtODg5ZC00YjY3LTlhNjgtYjdkMDcxNmVjZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEoCU2bmacpVRfOpmDECulFt3uZJqqmOgYVT zNhbUGolY3alr6wd/yXHmVDEft168ElS9cmnFwqgLsuk8S1E84366hrf0qjaoPrY PV+HcvfntEV2OtK9pjNGl4VTAtU8A7tKOfxWfrxW69A3/ldTM/doiqCVXfPGlwUl YR6EqzANXsRTIWBG7f9DnxIea7VSbzT2rahmR31Vt2jheUum1xcMJTL+7/7S8pkH 8NH5KRnybN9bsGXJByrMZgZyae26+yGrB6jCmPDF4aT6JZ0dlmAq4xnBzyOolez8 BnbPJ2hmGGPX3bkanBs++oHbaztu1nJxKHSi0Tjope2rxm2xjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcstA1DT7B11hJbDAsmIBpgWyB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82M2Zm ZmNiYS0wNTRkLTQ4MjMtODc1OC02MmJmNmRhYjJmZmEvYmI3ODRjNmQtNWQzYy0z MTU3LWI1ZTctMTgxMzk1OGI0NmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjNmZmZjYmEtMDU0ZC00ODIzLTg3 NTgtNjJiZjZkYWIyZmZhLzYzZmZmY2JhLTA1NGQtNDgyMy04NzU4LTYyYmY2ZGFi MmZmYS5jcmwwHwYDVR0jBBgwFoAUg/dwRXhbdFgnBPw6Brt9mfQa3vMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82M2ZmZmNiYS0wNTRkLTQ4MjMtODc1OC02MmJm NmRhYjJmZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7yWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR1qZUjcZchbbpPcs1+DKfInvXqdYem+b2UUwbIaE4WIqrJCrtBGX02 07qkqqvm58cs0khIq4fd64POHCXGHHcH0vnvgm+CP+dMiLJh/uTVOdiJ15m5wLTw xw+aOPctBYUOqfciiWr6CtjE9NxIww4m4w2MHhjMo8033TzUjgEHhplRYJ32W+0N T15yKvqc03VlbWh5inpsq/9T+SHnmKlekWswhOFP00Ux4olhJjPpAmwBMyPLNeTR Frf7qUIft+CKpdPgm5LkCsj3uMTVDmiVn09B1FP6vEI3QYjkA68+P4+pZls9WkaU Dl0sr7kjSOSTQCbPQGywl3cZ5Ymx15Q= -----END CERTIFICATE-----Generated at Wed Apr 9 23:26:28 2025 by rpki-client