$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/69c85a7e-5c7c-3cbc-8360-f4b315370081.roa File: 69c85a7e-5c7c-3cbc-8360-f4b315370081.roa (raw, json) Hash identifier: VjYrdCV3nfusAXW2Mhed3loQAq4ktsYU3ayaO97Jdb0= Subject key identifier: F6:5D:DD:C8:D9:83:4E:66:6B:02:8E:CF:08:62:2C:EC:6B:12:AF:05 Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584863CB06DF5668178317AE9CA0 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/69c85a7e-5c7c-3cbc-8360-f4b315370081.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 198949 IP address blocks: 192.236.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:06:df:56:68:17:83:17:ae:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=70d165a8-e0bb-491e-a478-f5aa58a62b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:78:64:1a:eb:52:91:51:e5:a8:45:da:ce:a2: fe:c9:a3:e9:e6:61:ff:6a:2e:e3:f0:a2:19:e3:2f: 2e:5c:fa:de:97:72:f3:aa:7e:e3:a0:86:3a:7e:a7: 99:a2:66:34:50:96:fb:71:5e:10:e4:57:67:3f:17: 78:6a:83:b1:1c:f5:f1:32:15:60:44:a8:85:0c:65: 12:ac:da:d6:a6:4c:9a:91:03:14:e9:b1:02:f5:ab: 6e:f9:d3:5d:be:f2:d1:18:e5:90:91:42:cb:ae:34: 6f:ea:c7:57:3c:0e:6d:2f:f9:76:1c:cc:2c:77:44: 78:89:08:7b:a0:2e:96:7a:52:ca:f7:03:13:93:f9: 4f:48:fa:c0:5c:87:3b:b5:ea:34:85:7b:eb:b9:b8: b0:1f:b2:7e:22:65:a8:2c:72:45:91:e5:91:2f:61: d2:07:95:b4:bd:6a:50:c3:a8:df:5e:d6:43:89:63: 32:6d:6a:6e:76:dd:eb:3b:fd:05:94:d7:cb:c7:c5: 2f:ab:0b:1b:d9:10:16:31:e0:f6:14:03:a4:5f:48: d8:3f:28:5c:ae:ae:8e:d0:ef:25:4c:b6:4f:4b:5c: ae:59:e1:75:ac:84:10:b6:6f:45:92:0b:b1:4d:a3: 21:e3:e9:d3:3a:f0:4f:1f:3b:98:44:10:d0:04:ac: 00:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5D:DD:C8:D9:83:4E:66:6B:02:8E:CF:08:62:2C:EC:6B:12:AF:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/69c85a7e-5c7c-3cbc-8360-f4b315370081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 192.236.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8f:66:b7:68:dd:68:63:e2:14:e6:16:35:4b:12:1d:da:65: e7:c7:87:c7:34:8d:63:43:83:c1:9a:63:ea:94:86:11:d2:d9: 90:8a:6d:89:56:1c:6d:1a:ae:9b:e1:e8:29:83:38:39:ad:e3: 7c:a8:99:c5:69:52:e5:b2:e9:47:fd:2e:b5:e3:4c:bd:4c:a6: 5d:c4:71:9d:22:61:19:23:a1:92:b3:ce:c2:23:da:55:2b:98: bf:15:e7:76:08:c0:79:23:47:e2:55:c4:a0:22:28:5b:64:46: 02:22:16:42:51:ae:38:fe:3d:b6:df:69:4d:07:26:aa:ba:e5: 15:08:15:66:3a:3a:4a:89:4b:cf:07:cf:d4:39:cf:74:37:a1: fd:e3:cc:1a:06:d2:9a:53:8e:a7:f4:d8:03:d3:70:a7:32:d1: be:8e:c2:8e:2c:19:1d:4e:62:ab:6f:26:ef:2b:d4:43:df:2c: 3f:0e:26:d9:af:f4:46:45:f2:a3:eb:00:2f:c5:ca:e6:a9:6f: c5:b9:c9:5b:22:f8:4b:81:49:15:91:99:89:a3:ab:51:77:88: 9f:56:b3:f8:e7:ce:39:6b:58:27:8e:b1:a6:cb:b1:d7:b2:f1: 8e:74:2c:2b:46:25:22:4c:ed:0d:55:a9:ba:64:a9:51:e7:c6: c9:43:27:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjywbfVmgXgxeunKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk NzBkMTY1YTgtZTBiYi00OTFlLWE0NzgtZjVhYTU4YTYyYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HhkGutSkVHlqEXazqL+yaPp5mH/ai7j8KIZ 4y8uXPrel3Lzqn7joIY6fqeZomY0UJb7cV4Q5FdnPxd4aoOxHPXxMhVgRKiFDGUS rNrWpkyakQMU6bEC9atu+dNdvvLRGOWQkULLrjRv6sdXPA5tL/l2HMwsd0R4iQh7 oC6WelLK9wMTk/lPSPrAXIc7teo0hXvrubiwH7J+ImWoLHJFkeWRL2HSB5W0vWpQ w6jfXtZDiWMybWpudt3rO/0FlNfLx8Uvqwsb2RAWMeD2FAOkX0jYPyhcrq6O0O8l TLZPS1yuWeF1rIQQtm9FkguxTaMh4+nTOvBPHzuYRBDQBKwAhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZd3cjZg05mawKOzwhiLOxrEq8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvNjljODVhN2UtNWM3Yy0z Y2JjLTgzNjAtZjRiMzE1MzcwMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwOwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSPZrdo3Whj4hTmFjVLEh3aZefHh8c0jWNDg8GaY+qUhhHS2ZCKbYlW HG0arpvh6CmDODmt43yomcVpUuWy6Uf9LrXjTL1Mpl3EcZ0iYRkjoZKzzsIj2lUr mL8V53YIwHkjR+JVxKAiKFtkRgIiFkJRrjj+PbbfaU0HJqq65RUIFWY6OkqJS88H z9Q5z3Q3of3jzBoG0ppTjqf02APTcKcy0b6Owo4sGR1OYqtvJu8r1EPfLD8OJtmv 9EZF8qPrAC/Fyuapb8W5yVsi+EuBSRWRmYmjq1F3iJ9Ws/jnzjlrWCeOsabLsdey 8Y50LCtGJSJM7Q1VqbpkqVHnxslDJyI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:32 2025 by rpki-client