$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/0d519aad-61ef-3c40-81b7-0d8eb879746d.roa File: 0d519aad-61ef-3c40-81b7-0d8eb879746d.roa (raw, json) Hash identifier: hDz2ikRuqjY5SaIWff7TI8JzzO20ApAVOmCRN5MnH24= Subject key identifier: FD:EF:83:F7:52:CF:74:B9:00:83:49:89:B4:28:A0:FB:7F:B2:EE:E9 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F432858489E6B6CE5BF7BA8550DFD4600 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/0d519aad-61ef-3c40-81b7-0d8eb879746d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 32764 IP address blocks: 199.66.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6c:e5:bf:7b:a8:55:0d:fd:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=a69b1e0a-1e31-499e-b543-68fad104c27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f9:44:a7:68:56:32:a4:b9:1c:20:0a:a6:89: 40:95:64:68:5c:59:ad:65:3d:ed:80:07:b5:dc:9b: ae:79:b1:99:e4:92:8b:23:68:6f:8c:4f:8c:21:ba: 44:62:f6:65:64:f9:39:a6:b4:a6:ac:bc:2a:d5:97: 05:09:bb:c5:cc:43:69:34:4b:84:51:4c:10:71:17: 07:f2:b1:6f:34:bc:84:16:25:2d:4f:9e:84:f9:31: b0:c2:c6:c8:e0:fe:f9:22:87:85:f9:77:28:47:b7: 6d:ad:f8:0c:d6:b8:4b:ad:8a:59:49:34:8f:2d:7d: bb:f7:8d:5e:84:f5:6c:cd:90:8f:87:33:0f:ef:eb: 13:db:07:46:30:a9:0b:10:4e:7b:d2:c8:5f:47:63: c2:41:25:56:b5:c4:47:f8:ae:8c:25:a8:ee:f2:7e: 4a:95:81:af:d0:57:a1:87:68:d7:55:b7:41:4b:f0: c3:70:f1:c0:34:9a:ce:39:a4:e7:14:37:a5:31:5d: a7:0c:0e:0c:52:1b:cb:62:ec:b7:93:aa:c3:b5:83: a6:45:a1:ad:7f:47:24:05:0a:6e:c2:34:c1:88:be: 0b:99:c3:a0:41:92:59:09:2b:a2:88:bb:c1:0a:fc: af:bc:b6:e2:a7:c3:de:92:0b:57:7b:64:6c:cc:17: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EF:83:F7:52:CF:74:B9:00:83:49:89:B4:28:A0:FB:7F:B2:EE:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/0d519aad-61ef-3c40-81b7-0d8eb879746d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:af:b2:27:b9:48:d9:cb:4f:08:a4:c5:1c:85:77:ac:3a:cc: 35:70:04:16:9e:22:6a:65:a5:68:47:e5:e6:a0:42:0e:30:7a: d6:45:99:24:01:f4:cf:5a:7d:46:d1:a1:27:38:b7:dd:0d:1f: a2:9b:61:81:ea:f9:80:88:1f:57:fb:10:67:01:47:f5:34:a9: 8a:6b:5f:72:ff:0c:23:94:1b:bd:af:c4:ae:c4:86:25:6d:27: 95:d0:61:3b:78:69:07:ce:de:25:dd:2b:4a:3b:78:5d:67:84: b1:f1:42:26:8d:e6:2f:78:b8:fd:a0:ec:04:57:29:57:1a:18: 6c:1e:63:29:00:81:bd:e9:08:b9:c9:3d:fe:db:63:7d:66:2c: 63:94:b7:98:76:98:94:10:65:f0:c7:ae:a0:cc:72:04:46:76: d5:1d:dc:02:b8:a8:55:b7:2b:96:26:d8:4b:0b:3c:67:16:75: 3e:2f:a8:d5:38:18:ae:52:7a:75:ef:2b:3f:c9:b1:d2:65:9c: 28:77:cb:ef:fc:09:0c:dd:3a:10:83:97:58:68:90:5d:49:b2: 15:4c:f1:84:dd:27:d5:78:38:18:51:3e:2c:d1:38:4f:e2:30: 32:ee:cb:bb:c2:74:c2:98:e4:2e:50:5c:12:07:bc:9d:d1:b4: 8f:f2:0f:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2zlv3uoVQ39RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YTY5YjFlMGEtMWUzMS00OTllLWI1NDMtNjhmYWQxMDRjMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiflEp2hWMqS5HCAKpolAlWRoXFmtZT3tgAe1 3JuuebGZ5JKLI2hvjE+MIbpEYvZlZPk5prSmrLwq1ZcFCbvFzENpNEuEUUwQcRcH 8rFvNLyEFiUtT56E+TGwwsbI4P75IoeF+XcoR7dtrfgM1rhLrYpZSTSPLX27941e hPVszZCPhzMP7+sT2wdGMKkLEE570shfR2PCQSVWtcRH+K6MJaju8n5KlYGv0Feh h2jXVbdBS/DDcPHANJrOOaTnFDelMV2nDA4MUhvLYuy3k6rDtYOmRaGtf0ckBQpu wjTBiL4LmcOgQZJZCSuiiLvBCvyvvLbip8PekgtXe2RszBd5yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3vg/dSz3S5AINJibQooPt/su7pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvMGQ1MTlhYWQtNjFlZi0z YzQwLTgxYjctMGQ4ZWI4Nzk3NDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECvsie5SNnLTwikxRyFd6w6zDVwBBaeImplpWhH5eagQg4wetZFmSQB 9M9afUbRoSc4t90NH6KbYYHq+YCIH1f7EGcBR/U0qYprX3L/DCOUG72vxK7EhiVt J5XQYTt4aQfO3iXdK0o7eF1nhLHxQiaN5i94uP2g7ARXKVcaGGweYykAgb3pCLnJ Pf7bY31mLGOUt5h2mJQQZfDHrqDMcgRGdtUd3AK4qFW3K5Ym2EsLPGcWdT4vqNU4 GK5SenXvKz/JsdJlnCh3y+/8CQzdOhCDl1hokF1JshVM8YTdJ9V4OBhRPizROE/i MDLuy7vCdMKY5C5QXBIHvJ3RtI/yD4Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:51 2025 by rpki-client