$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa File: 9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa (raw, json) Hash identifier: IqEI1LR6TeUDLxXDcBn1/WEKDzCYWw09xlRNkf88Tvs= Subject key identifier: 73:F9:1E:39:0D:F4:04:B5:76:BA:FF:F8:47:08:FC:FD:2C:7C:3A:37 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F432858489075FB2E8B14850FA61CFA20 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 32771 IP address blocks: 199.247.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:fb:2e:8b:14:85:0f:a6:1c:fa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=53f49df0-eafb-4cdc-bb06-406902584a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8f:6e:7b:a0:be:aa:42:ec:25:67:79:0e:d0: ad:6c:25:ce:83:a5:ce:bf:44:56:d6:f2:06:03:38: e2:e9:46:b8:ca:de:c9:4b:92:b5:45:89:a8:c2:98: 2d:66:89:6e:a2:19:40:e3:55:67:bd:ca:59:8a:5d: 42:e4:d6:7c:f0:58:c0:c5:cb:38:ae:2b:69:c8:fc: 85:e4:7e:e6:27:87:89:df:5a:cf:bb:dc:d2:92:c8: 8a:e9:09:a3:c5:4a:f6:4b:07:cc:c9:d1:2b:fa:29: 56:4e:2d:b4:ea:dd:7f:37:ec:6a:ec:1a:7f:9f:49: f3:4e:9a:09:7b:a6:c6:ee:8c:e8:b3:6f:82:3f:08: 8c:92:89:68:44:00:ec:16:a9:67:4f:71:c2:95:fe: 5d:0d:31:3d:67:a9:90:f6:4f:c5:d5:cb:18:70:9c: cf:fe:8a:b3:9f:fa:36:e8:dd:e9:d0:9a:d8:7d:2b: 0d:9a:35:3e:cc:e6:eb:39:e1:e5:a3:d4:4a:6d:6d: c3:71:94:c5:8d:63:dc:29:e4:7f:dd:28:43:8f:17: 55:1f:ed:87:58:2c:df:ce:84:c1:6c:67:dd:99:a9: 5d:36:b5:e4:ea:93:2d:21:d3:b1:0d:9f:4e:c0:80: 30:9a:66:2f:41:a8:9e:31:33:29:60:8b:c6:18:b2: 9e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F9:1E:39:0D:F4:04:B5:76:BA:FF:F8:47:08:FC:FD:2C:7C:3A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv4: 199.247.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:cc:26:c1:bb:5a:1a:b6:89:ff:ba:bb:5e:6c:8a:9f:f9:9a: e4:2a:8e:5d:1b:c8:ae:24:62:39:0f:ff:84:92:62:13:bc:83: 6d:c7:ad:12:b0:c2:73:79:46:07:31:e7:6c:26:b1:0d:bc:8e: c7:9c:69:82:f4:07:02:12:31:9b:d7:f0:b0:d4:a7:9c:b9:8e: 97:40:b2:4a:ab:86:02:22:c1:85:77:a3:f6:eb:ef:91:cf:9e: e8:89:8d:31:d9:8b:d5:ea:ce:7b:e0:7f:89:86:80:dd:4a:da: f0:ef:29:55:48:6b:5d:4a:d4:2b:e1:d3:4f:da:e5:88:ec:54: fd:ec:1b:92:e7:af:33:f7:ba:07:3d:8e:2d:95:5e:ef:3f:7e: 47:95:22:39:e4:66:2c:95:af:ca:c7:cb:f6:1a:68:f0:24:ba: 26:f0:34:5e:34:f0:f3:b8:0e:f5:7b:b1:99:7c:3b:3f:da:b5: 62:f0:91:c8:3c:d3:ae:a1:e8:c1:fe:cf:83:4b:8b:43:c0:5d: f2:bf:36:7d:64:5f:70:c5:54:30:d5:51:19:01:9d:20:44:1d: 2d:06:3e:ee:db:95:8e:60:1f:92:3f:fb:8c:d3:14:8d:94:f3: 11:61:a5:43:d2:ce:38:84:9c:6f:08:96:45:3f:3f:cd:d0:01: d9:10:0a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfsuixSFD6Yc+iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk NTNmNDlkZjAtZWFmYi00Y2RjLWJiMDYtNDA2OTAyNTg0YTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo9ue6C+qkLsJWd5DtCtbCXOg6XOv0RW1vIG Azji6Ua4yt7JS5K1RYmowpgtZoluohlA41VnvcpZil1C5NZ88FjAxcs4ritpyPyF 5H7mJ4eJ31rPu9zSksiK6QmjxUr2SwfMydEr+ilWTi206t1/N+xq7Bp/n0nzTpoJ e6bG7ozos2+CPwiMkoloRADsFqlnT3HClf5dDTE9Z6mQ9k/F1csYcJzP/oqzn/o2 6N3p0JrYfSsNmjU+zObrOeHlo9RKbW3DcZTFjWPcKeR/3ShDjxdVH+2HWCzfzoTB bGfdmaldNrXk6pMtIdOxDZ9OwIAwmmYvQaieMTMpYIvGGLKePQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP5HjkN9AS1drr/+EcI/P0sfDo3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvOWJhOWVmNmMtODVlNy0z YjcxLTg5ZTctNDFiMmJkMzE0ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/eZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPMJsG7Whq2if+6u15sip/5muQqjl0byK4kYjkP/4SSYhO8g23HrRKw wnN5Rgcx52wmsQ28jsecaYL0BwISMZvX8LDUp5y5jpdAskqrhgIiwYV3o/br75HP nuiJjTHZi9Xqznvgf4mGgN1K2vDvKVVIa11K1Cvh00/a5YjsVP3sG5LnrzP3ugc9 ji2VXu8/fkeVIjnkZiyVr8rHy/YaaPAkuibwNF408PO4DvV7sZl8Oz/atWLwkcg8 066h6MH+z4NLi0PAXfK/Nn1kX3DFVDDVURkBnSBEHS0GPu7blY5gH5I/+4zTFI2U 8xFhpUPSzjiEnG8IlkU/P83QAdkQCjA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:46 2025 by rpki-client