$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa File: 0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa (raw, json) Hash identifier: GUwBWAtHZbq6Vcb7nkv3m4SkUDJxDIc1xsQwUxvmeN4= Subject key identifier: 22:15:7B:10:6A:F0:B1:96:77:6D:BA:66:C1:76:02:2E:29:54:B6:88 Certificate issuer: /CN=4d2714ea-5618-446b-8e12-7743856af6e6 Certificate serial: 010D0C9F432858489075FDB434891B6D99F54DC0 Authority key identifier: 52:62:7A:BD:AB:0D:51:ED:FF:6C:BA:7E:2E:37:25:6D:76:40:C3:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 174 IP address blocks: 199.67.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:fd:b4:34:89:1b:6d:99:f5:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2714ea-5618-446b-8e12-7743856af6e6 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=0cf394da-15e9-466f-8add-14795e49cd41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d6:ea:86:ae:79:99:61:4e:e9:95:29:c9:dd: be:80:2e:8e:a5:de:29:88:42:e6:a3:14:98:bf:91: 44:e3:85:ed:49:24:7d:60:f2:98:51:b3:18:b0:d5: 9d:10:fe:49:58:30:4a:9a:60:cc:b0:32:c6:8e:c7: 88:5a:62:62:42:d6:69:33:57:0e:90:ea:22:28:14: 3e:69:22:12:e5:11:5c:b4:9c:62:3f:42:1a:3c:67: 87:e5:6b:4a:08:11:47:d9:f7:0c:e2:22:4d:57:61: 61:d7:63:f5:2e:0f:14:b7:ef:c9:99:33:cb:04:be: 63:b7:ab:a7:4d:02:9c:78:6c:ba:12:ef:76:66:aa: 66:05:17:39:be:60:b3:ae:c4:cc:95:e5:cd:f5:b3: ad:39:bc:7d:cb:0a:fa:b4:1a:da:1a:5a:40:12:34: 3b:d8:79:27:43:de:75:02:87:58:fb:48:dd:e0:2e: d1:5b:17:91:65:13:11:19:3f:f7:7c:56:d4:f9:23: f2:62:8a:b4:7b:23:0c:45:3d:bf:3a:61:66:67:55: ed:4b:d5:70:3d:22:c4:4f:ae:d3:30:48:75:35:86: 0c:48:77:33:6a:96:96:75:f1:b5:7c:05:d9:ff:93: 2a:b3:1b:48:20:30:6a:6a:92:c3:53:0e:fe:91:70: 71:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:15:7B:10:6A:F0:B1:96:77:6D:BA:66:C1:76:02:2E:29:54:B6:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.crl X509v3 Authority Key Identifier: keyid:52:62:7A:BD:AB:0D:51:ED:FF:6C:BA:7E:2E:37:25:6D:76:40:C3:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer sbgp-ipAddrBlock: critical IPv4: 199.67.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c7:37:7e:17:ff:42:24:3a:21:8f:18:3b:1c:13:c8:70:5d: 8f:14:64:1d:a7:73:4a:e1:51:55:d2:e7:db:b1:10:52:32:f4: ac:3a:6c:2a:11:01:65:b4:22:b6:5f:50:fb:16:5c:af:40:3a: 70:94:56:ae:9e:13:43:a4:76:79:71:0d:b7:5b:a6:4f:7c:d0: 62:bc:18:19:87:db:67:62:83:ec:c7:a9:c8:bf:a7:55:d9:4f: 68:08:0b:ec:ec:5e:a0:b2:23:c3:eb:cf:66:ad:d3:f4:9d:21: d5:6d:2e:6b:5f:37:0f:4b:82:2e:4f:42:70:97:b9:4f:27:bf: b6:d7:b1:66:fe:59:a0:01:0b:49:f9:5a:c6:3e:7a:99:0b:2d: 5d:62:80:eb:63:af:65:0f:4f:1d:44:b5:0f:d7:c9:f0:ce:02: e1:11:ca:e7:3e:68:67:cd:f1:54:ff:b2:b1:70:41:5c:52:84: 3e:49:4c:09:46:7c:31:2f:9f:7a:52:d5:9f:74:8a:12:30:97: ea:b6:fb:e6:ab:d8:b4:29:74:fd:79:3c:e5:e3:46:1c:e3:33: 4a:19:14:05:03:fd:78:c3:49:7e:a1:40:2d:ce:fd:4a:9e:7b: fd:84:5a:45:31:ae:d7:45:07:8b:42:d0:40:b6:e6:ff:fe:78: 34:83:15:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdf20NIkbbZn1TcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyNzE0ZWEtNTYxOC00NDZiLThlMTItNzc0Mzg1NmFm NmU2MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk MGNmMzk0ZGEtMTVlOS00NjZmLThhZGQtMTQ3OTVlNDljZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNbqhq55mWFO6ZUpyd2+gC6Opd4piELmoxSY v5FE44XtSSR9YPKYUbMYsNWdEP5JWDBKmmDMsDLGjseIWmJiQtZpM1cOkOoiKBQ+ aSIS5RFctJxiP0IaPGeH5WtKCBFH2fcM4iJNV2Fh12P1Lg8Ut+/JmTPLBL5jt6un TQKceGy6Eu92ZqpmBRc5vmCzrsTMleXN9bOtObx9ywr6tBraGlpAEjQ72HknQ951 AodY+0jd4C7RWxeRZRMRGT/3fFbU+SPyYoq0eyMMRT2/OmFmZ1XtS9VwPSLET67T MEh1NYYMSHczapaWdfG1fAXZ/5MqsxtIIDBqapLDUw7+kXBxaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIVexBq8LGWd226ZsF2Ai4pVLaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDI3 MTRlYS01NjE4LTQ0NmItOGUxMi03NzQzODU2YWY2ZTYvMGIyY2I5Y2MtYWE5Ni0z NWMxLWI1NTAtNmE0NzdlNmVmOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQyNzE0ZWEtNTYxOC00NDZiLThl MTItNzc0Mzg1NmFmNmU2LzRkMjcxNGVhLTU2MTgtNDQ2Yi04ZTEyLTc3NDM4NTZh ZjZlNi5jcmwwHwYDVR0jBBgwFoAUUmJ6vasNUe3/bLp+LjclbXZAwwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDI3MTRlYS01NjE4LTQ0NmItOGUxMi03NzQz ODU2YWY2ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFx0NgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHHN34X/0IkOiGPGDscE8hwXY8UZB2nc0rhUVXS59uxEFIy9Kw6bCoR AWW0IrZfUPsWXK9AOnCUVq6eE0OkdnlxDbdbpk980GK8GBmH22dig+zHqci/p1XZ T2gIC+zsXqCyI8Prz2at0/SdIdVtLmtfNw9Lgi5PQnCXuU8nv7bXsWb+WaABC0n5 WsY+epkLLV1igOtjr2UPTx1EtQ/XyfDOAuERyuc+aGfN8VT/srFwQVxShD5JTAlG fDEvn3pS1Z90ihIwl+q2++ar2LQpdP15POXjRhzjM0oZFAUD/XjDSX6hQC3O/Uqe e/2EWkUxrtdFB4tC0EC25v/+eDSDFXI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:39 2025 by rpki-client