$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/9a1f6463-f00b-3e6a-bcec-2ba35266a874.roa File: 9a1f6463-f00b-3e6a-bcec-2ba35266a874.roa (raw, json) Hash identifier: Y0zBAb6A/wVUtHXZmlAL4u+O0favgwwihS5pdlZj+5M= Subject key identifier: 4D:76:0E:79:D6:63:B7:F1:C9:F3:8A:A5:CC:FD:8D:DA:3F:73:FB:99 Certificate issuer: /CN=80688222-2583-4dac-a7df-1d78925c7b53 Certificate serial: 010D0C9F432858483E1AB849DEFF844E85723700 Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/9a1f6463-f00b-3e6a-bcec-2ba35266a874.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 1640 IP address blocks: 199.192.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:b8:49:de:ff:84:4e:85:72:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=d6ccce02-d739-4a8e-8dd8-9052bda7df99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4f:e9:68:1f:47:af:c6:3a:2f:c9:44:39:5a: 14:05:f0:4e:98:6c:8a:ee:d3:9e:a2:5a:16:c0:51: 87:46:ce:28:3d:bd:e0:f8:73:7e:d6:1f:3a:b3:a9: 10:4f:c1:8c:1c:17:5a:67:8a:8f:76:7d:e1:c1:31: bf:c8:c5:59:77:fe:8b:09:fc:c3:3d:20:84:36:40: 5d:13:42:eb:68:b2:1b:8a:5c:dc:e0:10:6d:e7:60: 20:41:1b:26:6c:57:f6:47:85:2c:46:b1:f2:bb:87: e3:81:91:c1:d8:5b:68:6e:82:fd:38:7a:5b:39:f9: 2f:35:07:8b:ec:37:7b:db:06:53:5d:d8:0d:99:7a: aa:e4:2e:49:f9:dd:3e:eb:32:39:21:13:b9:2d:d8: 0c:df:ec:8d:22:a4:d6:29:69:0c:32:51:30:23:42: 27:1c:aa:c6:5a:10:fd:b0:68:14:8c:1b:33:6a:0d: b8:54:6b:86:ae:c6:15:cb:46:d2:d5:e1:cf:31:d7: 87:9b:ce:c0:9e:0c:8c:39:7a:84:7b:95:f8:d7:d7: 49:23:f5:fc:49:e7:41:62:53:f7:c1:92:37:60:4f: 74:3c:31:8d:d0:a5:fa:42:85:6c:79:8c:09:11:ea: 45:cb:66:04:79:87:df:44:98:fe:ed:d6:0b:78:cb: b9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:76:0E:79:D6:63:B7:F1:C9:F3:8A:A5:CC:FD:8D:DA:3F:73:FB:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/9a1f6463-f00b-3e6a-bcec-2ba35266a874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl X509v3 Authority Key Identifier: keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer sbgp-ipAddrBlock: critical IPv4: 199.192.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:2b:60:3c:5d:83:f0:0a:94:0e:8f:63:30:95:be:0a:71:6c: fe:8e:3f:74:3d:a1:b0:f7:f9:f2:45:c2:31:ca:19:0d:e5:e8: f8:7a:fd:0a:5e:70:e3:c2:cd:74:28:85:f9:d8:3d:c0:64:80: 8e:aa:81:20:d5:7c:8d:c3:23:01:ed:ba:33:db:4d:ff:75:fa: 89:67:81:6a:6f:1a:12:bc:9a:61:22:61:fd:10:92:18:ae:91: ea:d3:50:9f:31:bf:22:93:84:59:2a:5c:67:7f:29:f9:6d:03: 4c:be:de:8b:58:ca:a1:af:66:0a:25:28:3c:d8:cb:96:c4:e8: a4:41:65:b2:d2:75:89:1f:02:2b:17:02:1d:23:14:7f:2b:5b: 84:1e:d6:85:ef:8f:c2:51:4c:63:d3:0d:69:ba:4c:dc:9b:72: 14:fb:74:e0:cb:2a:86:aa:59:1a:72:1a:ca:a9:c3:71:e5:4e: c1:98:2c:f5:bb:f7:53:1a:54:4a:a3:97:52:df:f0:ec:fc:b8: 4b:4f:ff:4a:75:c1:04:d4:72:56:7e:ad:6f:d9:e2:2f:40:7e: c1:34:9d:a7:a8:dc:3e:7d:d2:c4:84:7f:04:f7:0c:3f:a6:ab: 12:fe:95:7e:e8:9a:4d:5f:e7:0b:56:32:32:a5:4b:15:44:43: 2e:d7:9a:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GrhJ3v+EToVyNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA2ODgyMjItMjU4My00ZGFjLWE3ZGYtMWQ3ODkyNWM3 YjUzMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk ZDZjY2NlMDItZDczOS00YThlLThkZDgtOTA1MmJkYTdkZjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0/paB9Hr8Y6L8lEOVoUBfBOmGyK7tOeoloW wFGHRs4oPb3g+HN+1h86s6kQT8GMHBdaZ4qPdn3hwTG/yMVZd/6LCfzDPSCENkBd E0LraLIbilzc4BBt52AgQRsmbFf2R4UsRrHyu4fjgZHB2FtoboL9OHpbOfkvNQeL 7Dd72wZTXdgNmXqq5C5J+d0+6zI5IRO5LdgM3+yNIqTWKWkMMlEwI0InHKrGWhD9 sGgUjBszag24VGuGrsYVy0bS1eHPMdeHm87AngyMOXqEe5X419dJI/X8SedBYlP3 wZI3YE90PDGN0KX6QoVseYwJEepFy2YEeYffRJj+7dYLeMu53wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE12DnnWY7fxyfOKpcz9jdo/c/uZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4 ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4OTI1YzdiNTMvOWExZjY0NjMtZjAwYi0z ZTZhLWJjZWMtMmJhMzUyNjZhODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODA2ODgyMjItMjU4My00ZGFjLWE3 ZGYtMWQ3ODkyNWM3YjUzLzgwNjg4MjIyLTI1ODMtNGRhYy1hN2RmLTFkNzg5MjVj N2I1My5jcmwwHwYDVR0jBBgwFoAU+ahh3ff7wnrlT+4Ixm9SjWzKWrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4 OTI1YzdiNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8B4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0rYDxdg/AKlA6PYzCVvgpxbP6OP3Q9obD3+fJFwjHKGQ3l6Ph6/Qpe cOPCzXQohfnYPcBkgI6qgSDVfI3DIwHtujPbTf91+olngWpvGhK8mmEiYf0Qkhiu kerTUJ8xvyKThFkqXGd/KfltA0y+3otYyqGvZgolKDzYy5bE6KRBZbLSdYkfAisX Ah0jFH8rW4Qe1oXvj8JRTGPTDWm6TNybchT7dODLKoaqWRpyGsqpw3HlTsGYLPW7 91MaVEqjl1Lf8Oz8uEtP/0p1wQTUclZ+rW/Z4i9AfsE0naeo3D590sSEfwT3DD+m qxL+lX7omk1f5wtWMjKlSxVEQy7XmjU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:01 2025 by rpki-client