$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa File: fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa (raw, json) Hash identifier: ZBX8MMDgHoEl9XpWX3HyYEZJUPdaLPbbPDxSKnkAeqo= Subject key identifier: 94:41:E7:39:09:6E:4F:D6:0D:20:99:4C:CD:69:A1:DE:AA:0A:36:6F Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F43285848705AFC2664F522776E141100 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa Signing time: Sun 05 Jan 2025 02:00:39 +0000 ROA not before: Sun 05 Jan 2025 02:00:39 +0000 ROA not after: Sat 05 Apr 2025 01:00:39 +0000 asID: 16509 IP address blocks: 199.66.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:70:5a:fc:26:64:f5:22:77:6e:14:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Jan 5 02:00:39 2025 GMT Not After : Apr 5 01:00:39 2025 GMT Subject: CN=92543d10-2027-45a0-82a4-92e2402f5958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:6a:b1:33:de:3f:f5:cc:73:db:cc:85:2c: 61:3f:9c:54:c1:dd:32:76:74:60:63:ea:2f:e2:16: 74:bd:32:07:87:52:d1:a8:5c:a1:b1:54:21:60:25: 7c:b9:ed:7e:e2:1e:61:91:a0:0d:47:99:41:45:5d: b6:f3:aa:3f:e2:d9:b0:59:15:49:38:a0:ae:fa:98: a0:43:7a:c3:1c:a3:b1:de:1e:97:60:cc:1c:33:0e: 39:bb:2a:8a:0a:0e:7a:ab:90:2c:45:e9:a2:4e:a7: 7d:2b:81:20:61:1f:b6:85:4d:a5:e5:2f:03:bd:fb: b2:d3:4e:cb:da:86:d8:eb:4d:f3:1a:c0:70:6b:70: 48:51:e8:b9:60:25:4a:65:a0:19:44:23:19:94:df: 01:90:30:42:12:dd:01:12:a0:30:f2:38:23:61:6a: 37:2f:0c:46:95:be:c0:9c:c2:ac:1d:e1:b3:04:bc: 39:3d:0d:48:79:cc:ce:97:02:9c:ad:45:b2:08:b4: 33:6d:4c:a0:43:9f:1b:58:78:75:47:89:fe:e1:f1: a3:fe:7d:ac:87:ca:5b:4b:7a:a8:c2:32:23:9a:3e: 59:6c:4d:4b:e6:44:0b:d1:2e:6f:07:00:b8:40:cc: 13:8b:9c:06:d0:7e:95:dd:e3:87:9d:cd:a2:19:a1: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:41:E7:39:09:6E:4F:D6:0D:20:99:4C:CD:69:A1:DE:AA:0A:36:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f5:bc:58:1b:19:fb:62:71:fc:ec:a3:ff:16:a3:7c:a1:a6: e4:b1:35:b3:4e:ce:fe:3f:65:03:b8:70:64:0f:f9:10:3f:2d: 70:19:51:f7:c3:e1:58:46:36:8d:86:31:22:d7:a9:5a:8c:3a: ac:5a:42:69:be:9c:a0:9b:65:4c:a6:e0:8c:64:0c:6f:55:25: 22:fe:ec:a6:a7:b0:5e:f9:c6:f1:ea:58:41:19:8c:d8:81:76: c7:c8:b0:fd:10:ac:d6:f4:d2:b1:bb:d7:be:7c:26:50:95:f6: 85:a4:72:f0:b1:2e:2e:68:bd:a8:fe:61:06:d9:5b:6a:08:19: 39:fd:f7:29:30:61:cd:0a:0b:ec:28:4c:05:d4:2f:6d:24:1a: 41:9f:01:6e:5f:61:14:24:67:0a:f1:51:ab:58:0d:c3:bd:41: 58:75:2b:d7:1b:37:7e:9d:07:0d:95:5e:3c:04:46:83:83:15: 94:d0:f4:7b:e3:5b:03:73:93:ce:d9:f1:34:1e:cb:61:4e:79: 4e:3a:f1:60:96:5d:1e:7c:60:67:71:14:3c:63:fa:9e:0d:db: b8:b0:71:9f:c6:54:4e:98:0e:58:76:77:d9:88:dc:3b:3d:c3: 95:4b:bc:db:94:91:f9:3c:96:38:a5:1d:ff:7c:33:f1:67:e3: e2:76:b5:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhwWvwmZPUid24UEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDEwNTAyMDAzOVoXDTI1MDQwNTAxMDAzOVowLzEtMCsGA1UEAxMk OTI1NDNkMTAtMjAyNy00NWEwLTgyYTQtOTJlMjQwMmY1OTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfxqsTPeP/XMc9vMhSxhP5xUwd0ydnRgY+ov 4hZ0vTIHh1LRqFyhsVQhYCV8ue1+4h5hkaANR5lBRV2286o/4tmwWRVJOKCu+pig Q3rDHKOx3h6XYMwcMw45uyqKCg56q5AsRemiTqd9K4EgYR+2hU2l5S8Dvfuy007L 2obY603zGsBwa3BIUei5YCVKZaAZRCMZlN8BkDBCEt0BEqAw8jgjYWo3LwxGlb7A nMKsHeGzBLw5PQ1IeczOlwKcrUWyCLQzbUygQ58bWHh1R4n+4fGj/n2sh8pbS3qo wjIjmj5ZbE1L5kQL0S5vBwC4QMwTi5wG0H6V3eOHnc2iGaHKdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRB5zkJbk/WDSCZTM1pod6qCjZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvZmUyNWYxZTctMDM3NS0z OWQ1LThiMzktMGM1ODRkZTBkOGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT1vFgbGfticfzso/8Wo3yhpuSxNbNOzv4/ZQO4cGQP+RA/LXAZUffD 4VhGNo2GMSLXqVqMOqxaQmm+nKCbZUym4IxkDG9VJSL+7KansF75xvHqWEEZjNiB dsfIsP0QrNb00rG71758JlCV9oWkcvCxLi5ovaj+YQbZW2oIGTn99ykwYc0KC+wo TAXUL20kGkGfAW5fYRQkZwrxUatYDcO9QVh1K9cbN36dBw2VXjwERoODFZTQ9Hvj WwNzk87Z8TQey2FOeU468WCWXR58YGdxFDxj+p4N27iwcZ/GVE6YDlh2d9mI3Ds9 w5VLvNuUkfk8ljilHf98M/Fn4+J2tQU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:07 2025 by rpki-client