$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/3df5c989-5d1e-3810-980c-0ab3219805da.roa File: 3df5c989-5d1e-3810-980c-0ab3219805da.roa (raw, json) Hash identifier: 2pkB1RSPj6SD8IJvxjHSKTGWYt1zjyOp6Y8WeaaYDVw= Subject key identifier: 9C:EA:7F:E8:5D:9B:80:A9:25:B4:12:59:2C:11:75:FF:96:14:F8:8D Certificate issuer: /CN=19e99068-492b-4b53-9e32-828f20955f8d Certificate serial: 010D0C9F43285848494570C24B4100A2B1593240 Authority key identifier: 58:EA:AD:7F:15:96:06:89:00:D3:5E:81:EC:41:53:08:86:F8:25:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/3df5c989-5d1e-3810-980c-0ab3219805da.roa Signing time: Sun 22 Dec 2024 02:00:39 +0000 ROA not before: Sun 22 Dec 2024 02:00:39 +0000 ROA not after: Sat 22 Mar 2025 01:00:39 +0000 asID: 27275 IP address blocks: 198.161.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/19e99068-492b-4b53-9e32-828f20955f8d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/19e99068-492b-4b53-9e32-828f20955f8d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:49:45:70:c2:4b:41:00:a2:b1:59:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e99068-492b-4b53-9e32-828f20955f8d Validity Not Before: Dec 22 02:00:39 2024 GMT Not After : Mar 22 01:00:39 2025 GMT Subject: CN=888fc971-acf7-4b55-a73d-42842546678b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:7d:32:86:90:26:60:21:8e:52:61:49:07: 40:97:2e:1f:0e:f5:01:8f:47:8e:c1:9d:0e:a8:bc: 08:70:ef:39:2f:4f:99:a5:72:b7:15:2a:fd:97:67: 75:13:2a:34:f9:b5:06:fc:82:12:ff:4b:3c:0f:16: 6b:1c:bf:dc:91:9a:0d:dd:88:29:8b:86:52:e0:4a: 6e:85:48:ee:69:fd:f4:53:41:1c:30:84:79:0d:76: 10:88:0f:5a:0f:57:cf:a9:bf:d7:42:22:ac:7c:c6: a1:6d:db:6b:27:8f:3d:5a:10:46:ee:9f:dc:bd:2e: c0:f3:78:56:ad:80:14:80:ae:de:65:ac:dc:fb:bb: 24:cf:4e:aa:00:a0:e2:ec:1a:6d:2c:f4:26:08:d1: 3d:4f:c5:e5:58:d7:33:ce:d2:3b:03:16:7d:8a:d9: 88:2e:7d:b6:a5:56:24:92:72:f9:0d:28:2d:33:b9: 29:49:ab:de:ee:f2:a5:93:dd:e8:9f:b6:64:a4:fe: 49:61:89:27:2e:9f:7c:4b:c1:cd:3f:f2:b8:74:b4: 5b:71:9b:5f:fa:02:6f:43:42:a1:dc:8a:a2:03:37: 6b:97:b2:93:f3:49:12:d7:f5:d5:13:39:b7:07:e4: c8:f9:0a:86:e8:70:9a:60:81:75:c7:86:bc:22:76: c7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EA:7F:E8:5D:9B:80:A9:25:B4:12:59:2C:11:75:FF:96:14:F8:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/3df5c989-5d1e-3810-980c-0ab3219805da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/19e99068-492b-4b53-9e32-828f20955f8d.crl X509v3 Authority Key Identifier: keyid:58:EA:AD:7F:15:96:06:89:00:D3:5E:81:EC:41:53:08:86:F8:25:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d.cer sbgp-ipAddrBlock: critical IPv4: 198.161.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3c:d5:07:9e:82:74:2d:60:d9:2e:9c:c9:22:1d:e2:21:64: c4:9f:fb:80:7f:b8:2e:e8:62:99:8b:70:75:ed:99:0b:c5:19: 24:ef:5b:0a:80:4f:c1:e2:60:0f:ad:12:65:c8:0a:e3:4b:8f: ee:b9:b0:7a:4d:3a:57:7a:1d:38:bc:43:48:90:48:8f:54:c8: 1c:0f:3d:c0:98:52:fc:b0:ae:d5:4a:7e:85:6a:dc:ac:f0:c9: 9b:83:7d:36:dc:94:0a:be:9d:cf:6f:da:57:9f:84:d0:92:25: b0:0b:52:1a:ab:56:99:e5:63:fe:f3:1d:ee:55:f1:3a:4f:51: 24:e3:a7:d5:54:24:07:86:f2:5c:17:3b:b1:69:e9:47:75:b4: 66:1c:7b:ee:53:5f:1f:55:73:37:96:59:63:3e:ed:d5:4b:43: 83:77:13:e8:83:68:59:39:59:96:81:21:5f:22:96:be:3f:27: 53:31:75:1e:c6:40:02:12:e7:03:82:c7:99:a5:18:1f:dc:2d: 1a:8f:7b:bb:e9:63:94:e2:84:cc:06:68:d5:a2:cd:b3:1e:f2: b2:95:13:28:ca:a2:b3:b2:89:8e:63:46:a7:57:a3:ef:19:76: cb:6c:14:38:9a:af:4d:a0:ae:00:98:2a:5d:54:83:7d:42:61: 15:ca:64:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRXDCS0EAorFZMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTllOTkwNjgtNDkyYi00YjUzLTllMzItODI4ZjIwOTU1 ZjhkMB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk ODg4ZmM5NzEtYWNmNy00YjU1LWE3M2QtNDI4NDI1NDY2NzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucx9MoaQJmAhjlJhSQdAly4fDvUBj0eOwZ0O qLwIcO85L0+ZpXK3FSr9l2d1Eyo0+bUG/IIS/0s8DxZrHL/ckZoN3Ygpi4ZS4Epu hUjuaf30U0EcMIR5DXYQiA9aD1fPqb/XQiKsfMahbdtrJ489WhBG7p/cvS7A83hW rYAUgK7eZazc+7skz06qAKDi7BptLPQmCNE9T8XlWNczztI7AxZ9itmILn22pVYk knL5DSgtM7kpSave7vKlk93on7ZkpP5JYYknLp98S8HNP/K4dLRbcZtf+gJvQ0Kh 3IqiAzdrl7KT80kS1/XVEzm3B+TI+QqG6HCaYIF1x4a8InbHRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzqf+hdm4CpJbQSWSwRdf+WFPiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xOWU5 OTA2OC00OTJiLTRiNTMtOWUzMi04MjhmMjA5NTVmOGQvM2RmNWM5ODktNWQxZS0z ODEwLTk4MGMtMGFiMzIxOTgwNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTllOTkwNjgtNDkyYi00YjUzLTll MzItODI4ZjIwOTU1ZjhkLzE5ZTk5MDY4LTQ5MmItNGI1My05ZTMyLTgyOGYyMDk1 NWY4ZC5jcmwwHwYDVR0jBBgwFoAUWOqtfxWWBokA016B7EFTCIb4JYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xOWU5OTA2OC00OTJiLTRiNTMtOWUzMi04Mjhm MjA5NTVmOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg81QeegnQtYNkunMkiHeIhZMSf+4B/uC7oYpmLcHXtmQvFGSTvWwqA T8HiYA+tEmXICuNLj+65sHpNOld6HTi8Q0iQSI9UyBwPPcCYUvywrtVKfoVq3Kzw yZuDfTbclAq+nc9v2lefhNCSJbALUhqrVpnlY/7zHe5V8TpPUSTjp9VUJAeG8lwX O7Fp6Ud1tGYce+5TXx9VczeWWWM+7dVLQ4N3E+iDaFk5WZaBIV8ilr4/J1MxdR7G QAIS5wOCx5mlGB/cLRqPe7vpY5TihMwGaNWizbMe8rKVEyjKorOyiY5jRqdXo+8Z dstsFDiar02grgCYKl1Ug31CYRXKZG0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:40 2025 by rpki-client