$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e06c3740-5674-3b27-b98c-7cbd73aa1d68.roa File: e06c3740-5674-3b27-b98c-7cbd73aa1d68.roa (raw, json) Hash identifier: 1cq+vGg4LHarx7XiAnV2/n0gESQiut1UeJBkPqOaY48= Subject key identifier: E4:4C:D0:52:3D:83:4C:02:2A:C7:5F:41:8E:F0:C6:E2:32:01:51:58 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584883E5C479AC32A1CB91082579 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e06c3740-5674-3b27-b98c-7cbd73aa1d68.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 32764 IP address blocks: 199.66.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:c4:79:ac:32:a1:cb:91:08:25:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=01b863e0-8162-4605-b606-d5ec9a3a9ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:97:27:23:49:00:bc:27:b9:8d:6e:f1:f6:3b: f1:a5:88:b3:42:59:9e:22:c1:4b:6c:6f:cd:d8:11: 4a:23:53:64:65:02:67:4f:93:e9:90:fe:07:07:cc: 3a:d6:95:09:9e:d9:55:46:2d:40:cd:13:ec:6d:3b: 85:79:9d:2a:0a:4a:17:40:3a:19:c3:39:cc:cb:da: d4:c7:ce:f9:76:da:ee:7d:0f:79:96:78:1f:93:d2: 94:b3:d7:71:47:70:01:2a:65:12:a2:95:b5:a5:3c: bc:fa:e2:e3:c6:68:a1:06:28:b8:55:60:86:87:45: c5:d0:6d:86:cd:3b:d8:48:20:7f:f0:07:dc:31:02: 8d:fe:ad:53:54:34:c8:32:a9:8c:5d:16:59:0d:a4: 11:79:f2:0a:c2:69:07:e2:21:d2:63:4e:84:44:74: c9:ac:c9:21:c2:4c:ce:47:9d:d4:88:6d:c2:ab:55: a1:b7:ce:b5:d5:45:9a:84:77:ee:55:20:a7:b3:13: 72:f3:b5:7f:50:e2:2f:95:28:50:26:0a:2f:57:68: 93:de:a4:ee:ce:81:23:54:b2:82:cd:16:b7:00:67: 72:c0:44:3a:28:f3:e0:aa:03:14:0e:6f:5b:b3:22: bd:63:4a:31:6b:14:79:74:e5:2f:d5:12:b5:a4:72: 53:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4C:D0:52:3D:83:4C:02:2A:C7:5F:41:8E:F0:C6:E2:32:01:51:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e06c3740-5674-3b27-b98c-7cbd73aa1d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b4:8e:be:40:2f:f8:12:f3:9d:69:b7:18:d5:1c:c1:b2:99: 7a:4c:2c:7e:d6:71:81:24:d8:58:74:45:e2:2a:d7:8e:97:fa: e4:62:12:b2:43:10:7c:42:9d:08:a7:4c:f3:5a:b7:b2:90:9c: 83:c4:04:d3:48:21:99:09:fe:44:12:9e:81:f2:ac:8d:3d:0f: 66:88:08:d1:80:84:2e:9c:14:93:f3:53:e0:e4:ca:c7:6d:83: 22:bf:52:4d:b3:22:8e:31:d3:b9:32:ed:50:36:d0:10:30:7a: 77:5e:3a:77:16:9c:22:f6:27:5c:3c:10:8f:06:77:b1:98:91: 4c:2c:7a:5d:29:5f:13:f2:6f:e1:96:9c:52:78:ba:94:a1:0f: ab:dd:31:04:fa:ed:28:14:1d:22:0f:5a:ba:73:87:cc:c3:f7: 63:d2:4b:26:18:26:63:35:78:d1:78:bb:e5:f0:a1:75:72:fd: f3:19:ac:c1:73:46:9c:1c:7d:d8:e0:f7:f3:a3:56:0d:eb:3c: 61:bd:3a:38:7c:d2:6e:17:e1:e8:41:95:6c:89:bd:14:ad:c5: 33:5f:f4:61:09:d6:14:53:19:20:92:db:6e:d0:fc:82:d2:bb: dd:1c:ee:c6:52:e4:12:a0:2c:a1:30:d4:d1:47:02:05:01:15: 39:d9:2b:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5cR5rDKhy5EIJXkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk MDFiODYzZTAtODE2Mi00NjA1LWI2MDYtZDVlYzlhM2E5ZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JcnI0kAvCe5jW7x9jvxpYizQlmeIsFLbG/N 2BFKI1NkZQJnT5PpkP4HB8w61pUJntlVRi1AzRPsbTuFeZ0qCkoXQDoZwznMy9rU x875dtrufQ95lngfk9KUs9dxR3ABKmUSopW1pTy8+uLjxmihBii4VWCGh0XF0G2G zTvYSCB/8AfcMQKN/q1TVDTIMqmMXRZZDaQRefIKwmkH4iHSY06ERHTJrMkhwkzO R53UiG3Cq1Wht8611UWahHfuVSCnsxNy87V/UOIvlShQJgovV2iT3qTuzoEjVLKC zRa3AGdywEQ6KPPgqgMUDm9bsyK9Y0oxaxR5dOUv1RK1pHJT/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORM0FI9g0wCKsdfQY7wxuIyAVFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvZTA2YzM3NDAtNTY3NC0z YjI3LWI5OGMtN2NiZDczYWExZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa0jr5AL/gS851ptxjVHMGymXpMLH7WcYEk2Fh0ReIq146X+uRiErJD EHxCnQinTPNat7KQnIPEBNNIIZkJ/kQSnoHyrI09D2aICNGAhC6cFJPzU+Dkysdt gyK/Uk2zIo4x07ky7VA20BAwendeOncWnCL2J1w8EI8Gd7GYkUwsel0pXxPyb+GW nFJ4upShD6vdMQT67SgUHSIPWrpzh8zD92PSSyYYJmM1eNF4u+XwoXVy/fMZrMFz Rpwcfdjg9/OjVg3rPGG9Ojh80m4X4ehBlWyJvRStxTNf9GEJ1hRTGSCS227Q/ILS u90c7sZS5BKgLKEw1NFHAgUBFTnZK2c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:37 2025 by rpki-client