$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f92fd4da-d6b2-3c83-a2c3-04b7a18df189.roa File: f92fd4da-d6b2-3c83-a2c3-04b7a18df189.roa (raw, json) Hash identifier: oOTOQOkEQHV9UndCCdUKo102Hcih80oi1Ojk/Poi1l0= Subject key identifier: 4C:74:2A:C7:00:20:4A:13:59:47:5A:8D:DA:FF:B2:EA:61:4A:30:D1 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F432858483B4FFF6D42F4406D3BD71B80 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f92fd4da-d6b2-3c83-a2c3-04b7a18df189.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 396982 IP address blocks: 199.65.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:4f:ff:6d:42:f4:40:6d:3b:d7:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=fa4d3c5d-85a2-4318-97e6-0554a9401254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:21:9e:de:60:d6:66:20:7a:b5:c5:7c:e6:28: d1:6f:87:89:0f:2f:ea:cf:68:8b:b8:6b:45:de:7b: 54:71:58:99:5c:79:db:55:44:d6:b0:10:e7:bd:a6: 40:69:b9:53:53:b0:08:e3:8e:1b:22:a2:ae:32:10: d4:7f:02:5b:b2:8c:92:4e:11:65:f9:29:32:2d:62: 3f:c7:91:21:4f:e9:ed:82:23:f8:9b:3a:c8:ef:43: ff:d4:9e:2a:04:21:18:67:a1:51:2c:9c:02:d4:67: 0c:8c:b3:5f:2a:d3:c6:75:a1:ab:0e:ea:c0:a6:af: 6d:aa:df:80:35:31:15:fd:31:71:ed:6b:30:60:27: 78:13:24:08:45:8c:f5:f4:7b:34:d4:16:00:cc:c5: 1d:73:8b:10:68:aa:02:0d:f9:32:7c:71:db:9e:fa: 4c:ae:ea:e3:ec:a0:76:a0:01:74:2c:04:dd:45:04: 3e:b0:16:78:43:df:af:c9:61:fd:bb:de:eb:ca:d3: 65:36:b1:3f:00:11:57:02:48:04:1d:95:bc:32:66: 4f:a6:22:3f:94:cc:1e:42:aa:c0:a5:16:14:cf:e8: fb:f8:96:6b:06:23:c0:34:d2:07:1e:cc:e2:74:9c: 5f:b5:26:87:be:c3:0c:8f:dd:d8:17:45:fb:3d:a7: 21:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:74:2A:C7:00:20:4A:13:59:47:5A:8D:DA:FF:B2:EA:61:4A:30:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f92fd4da-d6b2-3c83-a2c3-04b7a18df189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:e5:44:9c:eb:64:33:62:f3:29:f9:5f:0a:77:d7:a1:19:68: 5f:87:28:96:60:97:6e:fe:61:19:d4:86:62:7a:9c:6f:ef:93: 18:12:86:e0:9a:93:f3:37:de:4e:03:4d:fb:e9:cd:06:27:c0: 02:96:8d:24:0a:f3:ec:c0:48:6e:99:b3:47:32:be:31:2f:04: a7:0d:2c:ef:53:b7:e6:19:72:70:da:8d:4a:54:8b:34:4d:87: 37:41:43:01:d3:64:03:f8:cd:42:8a:0b:33:5f:26:78:c6:50: a9:9a:e8:2f:43:54:8a:ac:da:7a:a4:07:ad:39:8d:cd:4c:a5: a0:ca:4c:9d:ed:78:f1:d1:d5:ae:cb:4a:2f:1c:ca:24:b4:9c: c4:8a:b0:7b:ee:fa:56:7a:f8:56:d7:87:f6:ba:06:64:e2:01: f7:a4:de:2b:e5:6e:c9:ed:5d:4c:4b:56:6b:ba:21:22:bb:5e: a3:ac:46:5a:1d:fb:3c:f5:96:40:b8:e6:af:2f:48:8c:ef:b5: 95:0c:79:5c:c7:5d:23:3f:b7:1f:89:19:8f:a5:e3:33:21:d7: 58:93:8f:f9:e5:ca:f1:57:b2:2f:cd:d6:97:35:cd:d0:7e:5f: 5e:4f:55:0b:28:7e:05:66:35:7a:38:e6:c6:53:03:22:ff:08: c7:f9:33:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7T/9tQvRAbTvXG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk ZmE0ZDNjNWQtODVhMi00MzE4LTk3ZTYtMDU1NGE5NDAxMjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCGe3mDWZiB6tcV85ijRb4eJDy/qz2iLuGtF 3ntUcViZXHnbVUTWsBDnvaZAablTU7AI444bIqKuMhDUfwJbsoySThFl+SkyLWI/ x5EhT+ntgiP4mzrI70P/1J4qBCEYZ6FRLJwC1GcMjLNfKtPGdaGrDurApq9tqt+A NTEV/TFx7WswYCd4EyQIRYz19Hs01BYAzMUdc4sQaKoCDfkyfHHbnvpMrurj7KB2 oAF0LATdRQQ+sBZ4Q9+vyWH9u97rytNlNrE/ABFXAkgEHZW8MmZPpiI/lMweQqrA pRYUz+j7+JZrBiPANNIHHszidJxftSaHvsMMj93YF0X7PachwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx0KscAIEoTWUdajdr/suphSjDRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvZjkyZmQ0ZGEtZDZiMi0z YzgzLWEyYzMtMDRiN2ExOGRmMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0EoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvlRJzrZDNi8yn5Xwp316EZaF+HKJZgl27+YRnUhmJ6nG/vkxgShuCa k/M33k4DTfvpzQYnwAKWjSQK8+zASG6Zs0cyvjEvBKcNLO9Tt+YZcnDajUpUizRN hzdBQwHTZAP4zUKKCzNfJnjGUKma6C9DVIqs2nqkB605jc1MpaDKTJ3tePHR1a7L Si8cyiS0nMSKsHvu+lZ6+FbXh/a6BmTiAfek3ivlbsntXUxLVmu6ISK7XqOsRlod +zz1lkC45q8vSIzvtZUMeVzHXSM/tx+JGY+l4zMh11iTj/nlyvFXsi/N1pc1zdB+ X15PVQsofgVmNXo45sZTAyL/CMf5M7w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:38 2025 by rpki-client