$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e32cc202-c503-3060-ab79-bb4f841233b4.roa File: e32cc202-c503-3060-ab79-bb4f841233b4.roa (raw, json) Hash identifier: wsE8S9D42Djd3o+iUqx3vdI7m9S5M6QZHLMXuXVQ9j8= Subject key identifier: 25:12:85:A2:C8:BE:32:8B:3E:73:FE:F7:AD:FF:A7:E1:CE:A5:EB:FB Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584891DB2D5B407CD2656083DA00 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e32cc202-c503-3060-ab79-bb4f841233b4.roa Signing time: Fri 17 Jan 2025 02:00:40 +0000 ROA not before: Fri 17 Jan 2025 02:00:40 +0000 ROA not after: Thu 17 Apr 2025 01:00:40 +0000 asID: 16509 IP address blocks: 199.66.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:db:2d:5b:40:7c:d2:65:60:83:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Jan 17 02:00:40 2025 GMT Not After : Apr 17 01:00:40 2025 GMT Subject: CN=3d0925b1-2664-4687-842a-57b58f67d91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d3:85:8e:57:18:62:1d:2f:4c:a7:5e:f9:ac: 4a:1b:7a:1d:34:75:5a:6d:47:e6:a7:67:12:e2:83: 52:91:d8:27:b1:9c:9b:62:a7:97:6e:ee:af:21:12: d8:8f:3c:c2:82:2b:da:c2:ca:1d:c9:3d:ae:06:9d: be:00:9c:e8:10:59:4c:cf:45:4e:12:cf:ef:44:1d: ab:57:39:48:17:9e:1f:14:60:5b:33:02:02:ef:a0: ff:2f:3d:3a:fb:4a:cb:8a:b5:c4:13:b9:9b:06:11: 71:66:d8:42:8e:51:30:2f:17:8f:36:e3:23:a8:0b: fb:a6:60:00:71:6f:3e:60:6e:2f:5b:60:7e:c7:fc: a9:01:71:bf:66:2f:3d:09:81:2d:ce:ee:1c:6e:d6: 36:f6:6d:df:c4:b8:a0:50:f3:8c:71:d3:03:a3:74: 71:83:fe:d5:92:b8:8e:16:77:a2:86:ac:7d:1f:f8: 4a:47:68:e4:a5:f5:d4:4b:7c:78:65:cb:cf:83:f9: 23:45:84:66:fb:8a:2f:47:c0:f3:96:eb:a2:8c:b3: 04:10:f0:72:e0:59:ec:00:36:5b:1b:4e:bf:f5:27: c3:f1:9b:9b:27:07:be:d7:26:a4:88:ca:af:17:ca: ab:45:79:ff:3b:60:61:43:2a:1c:e5:c7:03:3c:73: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:12:85:A2:C8:BE:32:8B:3E:73:FE:F7:AD:FF:A7:E1:CE:A5:EB:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e32cc202-c503-3060-ab79-bb4f841233b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e6:8a:11:5f:68:38:f5:00:5b:df:2f:7b:ea:f6:61:17:5d: 71:d7:44:21:b2:cc:4e:af:c1:0d:41:5b:a5:4a:49:c6:21:75: 58:60:3a:f3:d5:6e:3e:06:ac:1d:aa:69:6f:e2:c8:a6:72:06: 9b:6e:8a:6f:3e:c4:b9:be:53:02:7a:0f:98:00:51:7c:a0:10: ff:fa:ef:70:6f:cc:93:3b:3b:34:aa:71:cc:aa:d8:40:f2:15: 6d:df:73:c2:f7:0a:38:e9:3f:59:4b:03:42:ac:70:13:e1:b9: 25:ea:ef:c6:24:f1:33:54:f1:42:57:c4:c1:9e:d9:95:37:54: fd:ec:d6:af:2a:d6:34:b2:26:e1:b6:6a:37:6a:5d:6a:6e:00: 95:09:fd:7c:88:f1:08:21:de:06:dc:22:c8:66:30:00:da:77: 62:76:6c:63:55:60:6e:ec:1d:84:6a:bb:11:0d:e4:ae:2c:dd: c3:46:34:75:b1:cb:40:5c:7d:1e:67:78:25:8e:9c:c8:7e:61: c1:e4:ca:55:7e:61:a3:97:7f:6a:73:f2:aa:48:35:59:a1:fb: 97:cf:e7:14:0d:8d:91:96:59:a2:97:ce:02:06:a5:9f:74:79: 08:60:64:af:cc:08:08:40:ec:4f:c1:72:75:68:e1:26:46:e3: b8:8c:59:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiR2y1bQHzSZWCD2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk M2QwOTI1YjEtMjY2NC00Njg3LTg0MmEtNTdiNThmNjdkOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldOFjlcYYh0vTKde+axKG3odNHVabUfmp2cS 4oNSkdgnsZybYqeXbu6vIRLYjzzCgivawsodyT2uBp2+AJzoEFlMz0VOEs/vRB2r VzlIF54fFGBbMwIC76D/Lz06+0rLirXEE7mbBhFxZthCjlEwLxePNuMjqAv7pmAA cW8+YG4vW2B+x/ypAXG/Zi89CYEtzu4cbtY29m3fxLigUPOMcdMDo3Rxg/7VkriO Fneihqx9H/hKR2jkpfXUS3x4ZcvPg/kjRYRm+4ovR8DzluuijLMEEPBy4FnsADZb G06/9SfD8ZubJwe+1yakiMqvF8qrRXn/O2BhQyoc5ccDPHMY8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUShaLIvjKLPnP+963/p+HOpev7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvZTMyY2MyMDItYzUwMy0z MDYwLWFiNzktYmI0Zjg0MTIzM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7mihFfaDj1AFvfL3vq9mEXXXHXRCGyzE6vwQ1BW6VKScYhdVhgOvPV bj4GrB2qaW/iyKZyBptuim8+xLm+UwJ6D5gAUXygEP/673BvzJM7OzSqccyq2EDy FW3fc8L3CjjpP1lLA0KscBPhuSXq78Yk8TNU8UJXxMGe2ZU3VP3s1q8q1jSyJuG2 ajdqXWpuAJUJ/XyI8Qgh3gbcIshmMADad2J2bGNVYG7sHYRquxEN5K4s3cNGNHWx y0BcfR5neCWOnMh+YcHkylV+YaOXf2pz8qpINVmh+5fP5xQNjZGWWaKXzgIGpZ90 eQhgZK/MCAhA7E/BcnVo4SZG47iMWfM= -----END CERTIFICATE-----Generated at Fri Apr 4 20:13:38 2025 by rpki-client