$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/cccc0481-09ad-3175-9e49-d8a58327c160.roa File: cccc0481-09ad-3175-9e49-d8a58327c160.roa (raw, json) Hash identifier: k5qY2VXgB4gV7sRpYQvE7XXYomdvCUCTKgMayt9uTiI= Subject key identifier: C2:1A:EB:85:D7:46:C4:1C:1F:EE:DC:8C:5A:5D:73:50:76:21:ED:59 Certificate issuer: /CN=80688222-2583-4dac-a7df-1d78925c7b53 Certificate serial: 010D0C9F432858483E1AB8387C0FF82F87A9BF90 Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/cccc0481-09ad-3175-9e49-d8a58327c160.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 1640 IP address blocks: 199.116.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:b8:38:7c:0f:f8:2f:87:a9:bf:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=c952dd10-e6f6-4138-a396-b41a5ffd89a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:91:a8:ed:b1:f3:aa:50:16:01:84:3f:fb:fa: 6a:6a:98:82:d9:0e:c1:13:70:78:45:e0:6b:54:ed: 38:9e:1c:90:d8:53:00:70:50:8b:a1:57:a6:1a:3d: 27:81:92:a2:39:a4:9f:a2:02:58:e6:c1:f1:4f:a0: 8e:60:e1:fc:0a:59:c0:a3:2c:43:ab:6c:1d:68:dd: 79:69:12:cd:8e:bc:46:f3:b1:f8:be:6b:6a:2c:d7: fd:51:9f:0c:e8:2c:41:26:39:20:38:75:48:6f:2b: 08:f2:b2:e1:da:53:55:08:f4:55:b1:ba:2d:97:fe: 58:d7:74:46:ac:ba:b6:5d:9b:c3:78:41:6e:4b:4a: e9:02:76:48:dc:79:3f:84:08:21:4b:43:7e:90:8c: 82:dc:72:51:9d:b8:9e:8a:78:3c:ac:ca:6d:c0:df: 1f:75:a6:50:8c:ef:7e:24:e9:40:0c:2f:67:3a:02: 2a:46:35:e5:31:a0:18:c8:48:84:2a:dd:40:ee:d1: 3d:76:9a:08:56:a8:61:f4:0a:7b:02:b3:fe:63:75: ac:ed:41:21:f9:c2:b4:c0:6b:e9:4e:67:77:f4:f1: 05:8b:a2:f1:d0:e2:7c:e1:77:5a:fc:ee:44:43:2f: b8:10:8a:11:a7:d7:74:97:71:66:0e:f5:f5:ad:d0: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1A:EB:85:D7:46:C4:1C:1F:EE:DC:8C:5A:5D:73:50:76:21:ED:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/cccc0481-09ad-3175-9e49-d8a58327c160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl X509v3 Authority Key Identifier: keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer sbgp-ipAddrBlock: critical IPv4: 199.116.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:64:a7:27:c3:9d:5d:89:d6:c9:7f:5a:0e:b1:c4:d2:9c:03: ef:e1:18:54:b5:6e:31:f3:f2:eb:91:d6:9f:a4:ae:0f:b1:0f: 77:a4:61:bd:dd:ba:55:d6:93:1b:3c:b2:6c:70:1b:1f:e1:86: 59:90:fa:b1:83:6c:6b:02:87:75:b4:f1:2b:3e:2b:a2:a7:8d: 75:b2:77:b4:9d:43:55:7c:e1:9a:2c:95:f0:15:57:4a:6d:fc: 87:1b:6a:f0:0f:44:fc:d2:0c:23:ba:c0:d3:1d:12:86:10:c1: 1f:35:1a:e3:16:92:13:89:8e:d2:93:fb:59:6e:1f:26:18:4b: b0:93:1a:da:22:c2:24:22:e5:15:3c:c8:90:9b:a1:74:df:ff: 59:2f:0e:52:77:5b:4a:b6:2d:61:b6:c2:06:e0:0a:16:c1:e2: b9:ea:4e:b7:1d:55:d7:f3:5e:d3:95:ad:12:ba:5c:d6:9b:be: 94:e4:24:b5:f2:c0:4d:8d:ea:6a:7b:16:cf:a2:4d:78:81:eb: 3e:18:fe:ca:7c:a9:cf:f8:63:35:1c:f5:27:96:fe:6d:8c:aa: 0e:f9:0f:0f:54:02:45:60:ff:ea:0e:32:44:91:64:41:09:4f: 2d:a9:21:d2:81:ae:ac:bb:95:ea:e6:a5:df:1c:24:94:08:a9: c3:08:89:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+Grg4fA/4L4epv5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA2ODgyMjItMjU4My00ZGFjLWE3ZGYtMWQ3ODkyNWM3 YjUzMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk Yzk1MmRkMTAtZTZmNi00MTM4LWEzOTYtYjQxYTVmZmQ4OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5Go7bHzqlAWAYQ/+/pqapiC2Q7BE3B4ReBr VO04nhyQ2FMAcFCLoVemGj0ngZKiOaSfogJY5sHxT6COYOH8ClnAoyxDq2wdaN15 aRLNjrxG87H4vmtqLNf9UZ8M6CxBJjkgOHVIbysI8rLh2lNVCPRVsbotl/5Y13RG rLq2XZvDeEFuS0rpAnZI3Hk/hAghS0N+kIyC3HJRnbieing8rMptwN8fdaZQjO9+ JOlADC9nOgIqRjXlMaAYyEiEKt1A7tE9dpoIVqhh9Ap7ArP+Y3Ws7UEh+cK0wGvp Tmd39PEFi6Lx0OJ84Xda/O5EQy+4EIoRp9d0l3FmDvX1rdDclQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIa64XXRsQcH+7cjFpdc1B2Ie1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4 ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4OTI1YzdiNTMvY2NjYzA0ODEtMDlhZC0z MTc1LTllNDktZDhhNTgzMjdjMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODA2ODgyMjItMjU4My00ZGFjLWE3 ZGYtMWQ3ODkyNWM3YjUzLzgwNjg4MjIyLTI1ODMtNGRhYy1hN2RmLTFkNzg5MjVj N2I1My5jcmwwHwYDVR0jBBgwFoAU+ahh3ff7wnrlT+4Ixm9SjWzKWrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4 OTI1YzdiNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3SYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9kpyfDnV2J1sl/Wg6xxNKcA+/hGFS1bjHz8uuR1p+krg+xD3ekYb3d ulXWkxs8smxwGx/hhlmQ+rGDbGsCh3W08Ss+K6KnjXWyd7SdQ1V84ZoslfAVV0pt /IcbavAPRPzSDCO6wNMdEoYQwR81GuMWkhOJjtKT+1luHyYYS7CTGtoiwiQi5RU8 yJCboXTf/1kvDlJ3W0q2LWG2wgbgChbB4rnqTrcdVdfzXtOVrRK6XNabvpTkJLXy wE2N6mp7Fs+iTXiB6z4Y/sp8qc/4YzUc9SeW/m2Mqg75Dw9UAkVg/+oOMkSRZEEJ Ty2pIdKBrqy7lermpd8cJJQIqcMIiQs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:33 2025 by rpki-client