$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/129327fb-9efb-3484-8474-2a5a8327c64e.roa File: 129327fb-9efb-3484-8474-2a5a8327c64e.roa (raw, json) Hash identifier: KP5A+B5bNaPFE0OhUCS+sEbZm4vr/ijxldWzHoWW3hM= Subject key identifier: 9B:8C:5A:EE:2C:1A:73:AB:6C:84:B6:9F:F6:9C:DF:BD:89:37:79:76 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F432858488DAB50DEB8C52B43BFE40560 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/129327fb-9efb-3484-8474-2a5a8327c64e.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 140096 IP address blocks: 198.176.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:50:de:b8:c5:2b:43:bf:e4:05:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=36437af3-372c-488f-adcf-f94cf343e56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:02:18:32:63:ca:b1:2a:42:f4:9c:23:9c: 71:ca:68:77:33:4f:a2:de:6a:ce:0a:9d:93:ce:85: a9:e4:b3:6e:e9:3e:62:4f:74:d3:47:db:a5:5a:bc: 48:15:76:03:93:8b:c0:40:97:a4:3e:cd:45:6d:22: d1:98:a0:78:0a:68:c0:eb:5f:16:2c:ce:b5:18:93: a6:29:28:fe:20:41:d2:a1:f1:94:d2:a1:f1:cf:f4: da:ee:5f:6f:6f:b8:84:47:4d:f6:e2:95:cb:92:97: 75:b3:0c:e5:54:34:60:67:b6:53:52:14:08:f4:88: d7:04:9a:f6:5d:12:11:df:65:e0:75:47:67:d6:4e: 82:82:5b:1c:3d:14:60:1b:04:21:c7:19:cf:8a:f2: 94:b9:4e:f7:1f:c4:80:06:df:fc:c1:88:12:fe:1d: cf:4a:b8:1c:ad:44:4e:67:20:a4:e1:aa:82:25:4e: 77:51:c8:81:28:6b:8e:d5:a0:ca:cf:61:3e:95:35: 34:91:93:91:0f:95:9d:b2:2f:bf:10:db:48:49:2f: b6:64:e5:0a:0d:f9:84:2c:58:15:57:13:b1:96:c7: 37:ea:e3:74:89:8e:6e:2e:63:b1:73:b5:24:d9:f5: 45:01:9f:be:65:d2:9f:d4:1e:5f:9f:19:ee:f2:73: b6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8C:5A:EE:2C:1A:73:AB:6C:84:B6:9F:F6:9C:DF:BD:89:37:79:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/129327fb-9efb-3484-8474-2a5a8327c64e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 198.176.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:6f:4c:16:a8:32:ca:7d:90:05:6d:df:8c:bc:c8:5e:58:3a: 32:97:be:59:36:7c:8e:d3:83:62:4f:83:97:11:63:13:3b:dc: 2b:1e:2e:d4:0f:77:47:17:0f:1b:33:51:c7:81:43:11:83:50: 85:5d:57:78:21:09:91:d5:fb:92:3d:03:a5:59:6a:fb:02:21: 17:7a:78:37:d5:ce:89:f9:8e:af:85:48:4e:d5:e9:b1:5a:b6: 20:d9:6c:0d:28:ae:99:32:c6:48:e1:ab:ea:c7:f7:27:6f:37: b1:d7:a6:ed:6e:99:2a:a8:6c:07:ef:ea:de:8e:24:12:cb:8f: d2:f2:cf:4e:c8:a1:75:10:1e:27:ce:ec:68:9c:38:a1:3d:5d: 35:f9:e6:b8:e9:7f:e3:72:cc:48:bd:ce:18:e4:60:04:42:28: df:72:8a:b7:2a:e1:85:89:01:89:a7:a0:8f:8c:3c:00:0f:dc: 5a:1c:73:c5:ae:71:de:6b:41:f5:f4:c7:c0:95:2c:77:d5:aa: cd:56:5d:f6:fe:4b:21:4e:58:de:92:6c:e3:a1:73:2b:97:69: 96:39:d0:76:17:ce:1b:49:45:59:f5:b2:7c:56:80:29:33:5e: a8:11:af:ef:f2:cf:da:1b:9b:f2:84:61:65:3a:6f:a7:58:86: ba:c2:b0:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq1DeuMUrQ7/kBWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk MzY0MzdhZjMtMzcyYy00ODhmLWFkY2YtZjk0Y2YzNDNlNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk4CGDJjyrEqQvScI5xxymh3M0+i3mrOCp2T zoWp5LNu6T5iT3TTR9ulWrxIFXYDk4vAQJekPs1FbSLRmKB4CmjA618WLM61GJOm KSj+IEHSofGU0qHxz/Ta7l9vb7iER0324pXLkpd1swzlVDRgZ7ZTUhQI9IjXBJr2 XRIR32XgdUdn1k6CglscPRRgGwQhxxnPivKUuU73H8SABt/8wYgS/h3PSrgcrURO ZyCk4aqCJU53UciBKGuO1aDKz2E+lTU0kZORD5Wdsi+/ENtISS+2ZOUKDfmELFgV VxOxlsc36uN0iY5uLmOxc7Uk2fVFAZ++ZdKf1B5fnxnu8nO2MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuMWu4sGnOrbIS2n/ac372JN3l2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvMTI5MzI3ZmItOWVmYi0z NDg0LTg0NzQtMmE1YTgzMjdjNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrA6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9vTBaoMsp9kAVt34y8yF5YOjKXvlk2fI7Tg2JPg5cRYxM73CseLtQP d0cXDxszUceBQxGDUIVdV3ghCZHV+5I9A6VZavsCIRd6eDfVzon5jq+FSE7V6bFa tiDZbA0orpkyxkjhq+rH9ydvN7HXpu1umSqobAfv6t6OJBLLj9Lyz07IoXUQHifO 7GicOKE9XTX55rjpf+NyzEi9zhjkYARCKN9yircq4YWJAYmnoI+MPAAP3Focc8Wu cd5rQfX0x8CVLHfVqs1WXfb+SyFOWN6SbOOhcyuXaZY50HYXzhtJRVn1snxWgCkz XqgRr+/yz9obm/KEYWU6b6dYhrrCsEY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:49 2025 by rpki-client