$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a474ef21-5145-3424-b8cb-6fe09836be86.roa File: a474ef21-5145-3424-b8cb-6fe09836be86.roa (raw, json) Hash identifier: aBhVhAoWEzFIsmj0ey2VJGktjIvh6ceQrgoFaBVnhWs= Subject key identifier: 23:42:87:31:88:C7:9E:F5:FB:6C:E6:CB:14:AD:B9:0A:91:91:2B:54 Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F432858488AE092484F3A33548573D280 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a474ef21-5145-3424-b8cb-6fe09836be86.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 53542 IP address blocks: 199.255.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:92:48:4f:3a:33:54:85:73:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=843bbb2d-1cc0-41e2-bdb6-69ca6f59b940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:16:5e:d8:9d:ba:ce:23:18:93:63:79:f3: e5:33:f2:74:3f:8a:73:2a:98:0f:35:ae:b6:00:9c: 42:34:35:ef:30:4a:e0:ef:52:21:04:d9:f2:27:4f: 58:fb:53:6d:1f:ea:a5:99:b9:67:7c:4d:80:68:04: e4:3f:5c:2b:be:00:76:f6:59:49:b5:3e:27:77:c7: 19:3a:95:94:84:46:3a:72:2e:b9:cc:44:2d:e6:75: 45:d4:f9:46:98:62:04:31:f6:6e:db:9c:48:7e:06: ba:79:6d:62:ef:d2:31:29:98:d6:fc:d9:4f:0b:11: 23:f7:41:11:fd:b6:51:b2:3e:e5:c5:b9:57:a1:32: ea:9a:1e:96:9c:5f:aa:8a:20:3a:09:b1:39:19:2d: 0e:ae:07:68:ea:07:71:78:56:71:44:2a:7d:e7:e0: a6:76:2d:65:78:d7:77:62:27:c7:d6:f6:37:b8:d1: c7:74:e2:73:0b:19:1b:7a:58:ff:02:7e:1a:fa:a9: 7d:c1:9b:a7:fb:67:b6:af:0a:bc:25:e1:23:35:89: 05:b4:cd:22:b8:db:13:c3:aa:85:f1:c4:45:14:10: 57:02:db:01:f1:c1:20:4a:66:7b:27:3f:14:d8:41: f8:88:58:4c:e4:08:1b:83:b5:67:6b:e6:61:c6:20: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:42:87:31:88:C7:9E:F5:FB:6C:E6:CB:14:AD:B9:0A:91:91:2B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a474ef21-5145-3424-b8cb-6fe09836be86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:54:e8:01:e9:28:26:77:99:00:80:9e:bc:6e:45:78:af:a8: 40:13:4e:32:dd:5a:35:c8:62:29:fe:1e:bf:c4:08:37:e0:87: 32:d6:2a:be:08:0f:8a:b6:9e:3a:a9:f0:c0:4b:30:40:d6:5d: d7:de:72:37:08:17:eb:93:4a:29:13:c4:5d:16:da:ee:5c:51: cf:37:f4:a8:a8:00:83:76:3f:b4:73:0a:d9:b3:84:c1:77:ea: 7b:5f:26:b9:ba:85:00:d0:06:e1:73:e9:6c:75:b4:55:d6:e0: 6e:4c:f1:65:dd:63:f0:63:e9:f7:66:a3:52:3a:2d:36:69:29: f6:5a:2b:0c:1d:0b:3e:9b:b3:76:23:d7:b8:75:9b:6f:a4:26: 58:11:3b:be:99:fb:67:41:95:35:bf:2b:d3:54:da:5f:1f:9a: 49:05:a4:02:f0:dc:53:63:5c:2a:13:d3:96:82:5e:36:ff:88: ce:92:25:ad:af:12:bd:ec:3e:89:dc:c3:85:f7:07:98:1d:7e: 75:98:fb:ee:ec:ba:df:b9:0a:93:7f:e8:8f:14:03:4b:df:5e: 16:06:6c:c1:32:79:a7:fd:d0:d0:d1:8c:83:00:ae:3f:d3:e5: 16:cf:de:4b:06:a7:b7:88:4e:fd:3d:68:b8:74:98:14:62:14: 78:f5:18:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4JJITzozVIVz0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk ODQzYmJiMmQtMWNjMC00MWUyLWJkYjYtNjljYTZmNTliOTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaAWXtidus4jGJNjefPlM/J0P4pzKpgPNa62 AJxCNDXvMErg71IhBNnyJ09Y+1NtH+qlmblnfE2AaATkP1wrvgB29llJtT4nd8cZ OpWUhEY6ci65zEQt5nVF1PlGmGIEMfZu25xIfga6eW1i79IxKZjW/NlPCxEj90ER /bZRsj7lxblXoTLqmh6WnF+qiiA6CbE5GS0Orgdo6gdxeFZxRCp95+Cmdi1leNd3 YifH1vY3uNHHdOJzCxkbelj/An4a+ql9wZun+2e2rwq8JeEjNYkFtM0iuNsTw6qF 8cRFFBBXAtsB8cEgSmZ7Jz8U2EH4iFhM5Agbg7Vna+ZhxiAjEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNChzGIx571+2zmyxStuQqRkStUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvYTQ3NGVmMjEtNTE0NS0z NDI0LWI4Y2ItNmZlMDk4MzZiZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhU6AHpKCZ3mQCAnrxuRXivqEATTjLdWjXIYin+Hr/ECDfghzLWKr4I D4q2njqp8MBLMEDWXdfecjcIF+uTSikTxF0W2u5cUc839KioAIN2P7RzCtmzhMF3 6ntfJrm6hQDQBuFz6Wx1tFXW4G5M8WXdY/Bj6fdmo1I6LTZpKfZaKwwdCz6bs3Yj 17h1m2+kJlgRO76Z+2dBlTW/K9NU2l8fmkkFpALw3FNjXCoT05aCXjb/iM6SJa2v Er3sPoncw4X3B5gdfnWY++7sut+5CpN/6I8UA0vfXhYGbMEyeaf90NDRjIMArj/T 5RbP3ksGp7eITv09aLh0mBRiFHj1GCU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:30:05 2025 by rpki-client