$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1cde9f88-4622-3f2e-a68e-368995e83427.roa File: 1cde9f88-4622-3f2e-a68e-368995e83427.roa (raw, json) Hash identifier: XaP2VHsvMRB6m1BLwkpUGGoYrsDUr8KHXvAYq5Ab6L8= Subject key identifier: 4F:C2:42:B5:40:94:53:1E:16:4F:6A:6E:8C:30:41:66:3B:81:19:D8 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F43285848C9B0DD5AEAE900223149FB00 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1cde9f88-4622-3f2e-a68e-368995e83427.roa Signing time: Thu 06 Feb 2025 02:00:39 +0000 ROA not before: Thu 06 Feb 2025 02:00:39 +0000 ROA not after: Wed 07 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 192.67.137.0/24 maxlen: 24 192.67.138.0/23 maxlen: 24 192.67.140.0/22 maxlen: 24 192.67.145.0/24 maxlen: 24 192.67.146.0/23 maxlen: 24 192.67.148.0/22 maxlen: 24 192.67.153.0/24 maxlen: 24 192.67.154.0/23 maxlen: 24 198.55.32.0/21 maxlen: 24 198.55.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:b0:dd:5a:ea:e9:00:22:31:49:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Feb 6 02:00:39 2025 GMT Not After : May 7 01:00:39 2025 GMT Subject: CN=683dc47d-d1a4-47a4-9d50-a688a8712b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:4e:dc:36:66:49:94:7f:70:66:28:91:53: a5:23:a3:01:f4:80:5f:e3:8b:bb:fb:2b:3a:19:0f: 82:92:3a:38:b3:d9:33:81:92:50:fb:fd:ac:2b:bc: ca:24:4b:3a:1e:4d:36:f5:15:7d:c9:d3:df:6b:33: e0:66:dd:9f:1c:7a:00:4b:26:9a:05:ca:57:4b:c5: 12:4f:87:5d:00:52:81:fe:31:65:b7:7d:24:ce:c0: 3d:78:2c:03:29:23:27:fb:1c:73:f4:f1:a1:84:c1: a9:15:5f:19:d1:07:3e:99:28:18:65:73:54:67:96: 05:db:9e:4c:ca:2d:64:63:42:8b:df:59:b5:a4:fa: c6:fc:af:5d:41:17:98:52:34:35:76:e7:14:9e:9b: 6e:da:bd:79:c5:42:c4:33:e8:34:1d:85:56:ac:0d: e7:3e:98:34:17:3f:4b:af:cc:d1:11:5b:c1:f6:91: 34:7c:b1:aa:a7:2e:d9:f5:a1:a7:1b:6c:2c:8e:ad: a7:98:73:ec:ac:73:7d:38:28:d8:cf:7b:a9:dc:ce: 0e:af:d3:c7:bf:63:7d:70:0a:bd:61:be:78:ce:89: df:41:38:40:a6:d5:3a:33:fb:2f:91:84:ff:f1:a1: 56:9e:d2:b0:5b:a7:55:bb:c0:87:2c:d2:e7:93:99: cb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C2:42:B5:40:94:53:1E:16:4F:6A:6E:8C:30:41:66:3B:81:19:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1cde9f88-4622-3f2e-a68e-368995e83427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 192.67.137.0-192.67.143.255 192.67.145.0-192.67.151.255 192.67.153.0-192.67.155.255 198.55.32.0-198.55.41.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a2:5c:03:7f:1d:62:4d:79:26:21:c9:a9:a0:a6:57:88:f2: e0:f2:ea:38:7d:cb:b2:f6:e1:e1:b3:19:10:74:d8:9c:91:b3: 90:8f:43:b1:1f:09:c5:a3:32:4b:34:74:31:76:3e:b0:97:18: 21:fd:04:99:1d:51:cb:c9:0f:1f:a7:0a:ae:e5:04:7e:88:30: 4d:62:42:76:06:b5:2e:d7:02:17:d4:77:48:a2:71:d8:ba:56: fd:85:bc:10:9b:ba:f1:43:24:4a:10:37:c5:3b:3e:18:0a:53: c6:e6:f1:44:5e:c4:60:55:6f:c6:64:17:f2:5b:35:de:db:7c: 3d:a6:9f:50:07:0b:eb:ff:a7:8c:6d:c2:f3:78:4e:04:f6:37: 50:71:ef:84:68:c7:6b:42:84:e1:77:ac:ed:25:0d:92:e7:ca: ae:f2:e1:19:cf:43:a4:b5:3d:fe:83:86:2b:ba:1a:8b:b4:b4: 35:5d:a0:b5:68:6a:8c:47:23:b2:12:07:c2:e3:b6:5a:7b:c2: fe:9e:b2:43:1c:ea:0d:a9:8a:c2:43:b2:0c:b8:8f:e6:55:69: 85:0f:18:78:30:e2:d2:1e:7f:32:e7:18:9e:eb:6a:2e:b6:e6: ba:8c:5d:30:d3:ad:7a:37:ad:5f:0c:54:86:a9:4c:b5:d7:47: 20:8d:b3:52 -----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWEjJsN1a6ukAIjFJ+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk NjgzZGM0N2QtZDFhNC00N2E0LTlkNTAtYTY4OGE4NzEyYjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0tO3DZmSZR/cGYokVOlI6MB9IBf44u7+ys6 GQ+Ckjo4s9kzgZJQ+/2sK7zKJEs6Hk029RV9ydPfazPgZt2fHHoASyaaBcpXS8US T4ddAFKB/jFlt30kzsA9eCwDKSMn+xxz9PGhhMGpFV8Z0Qc+mSgYZXNUZ5YF255M yi1kY0KL31m1pPrG/K9dQReYUjQ1ducUnptu2r15xULEM+g0HYVWrA3nPpg0Fz9L r8zREVvB9pE0fLGqpy7Z9aGnG2wsjq2nmHPsrHN9OCjYz3up3M4Or9PHv2N9cAq9 Yb54zonfQThAptU6M/svkYT/8aFWntKwW6dVu8CHLNLnk5nLgQIDAQABo4IDhzCC A4MwHQYDVR0OBBYEFE/CQrVAlFMeFk9qbowwQWY7gRnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvMWNkZTlmODgtNDYyMi0z ZjJlLWE2OGUtMzY4OTk1ZTgzNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBADAQ4kD BATAQ4AwDAMEAMBDkQMEA8BDkDAMAwQAwEOZAwQCwEOYMAwDBAXGNyADBAHGNygw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAN6JcA38dYk15JiHJqaCmV4jy4PLqOH3Lsvbh4bMZEHTYnJGzkI9D sR8JxaMySzR0MXY+sJcYIf0EmR1Ry8kPH6cKruUEfogwTWJCdga1LtcCF9R3SKJx 2LpW/YW8EJu68UMkShA3xTs+GApTxubxRF7EYFVvxmQX8ls13tt8PaafUAcL6/+n jG3C83hOBPY3UHHvhGjHa0KE4Xes7SUNkufKrvLhGc9DpLU9/oOGK7oai7S0NV2g tWhqjEcjshIHwuO2WnvC/p6yQxzqDamKwkOyDLiP5lVphQ8YeDDi0h5/MucYnutq LrbmuoxdMNOtejetXwxUhqlMtddHII2zUg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:11 2025 by rpki-client