$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa File: 789da6a0-2c7a-3a3d-9143-50da694cacaa.roa (raw, json) Hash identifier: 7vfETenWAvHFnmQkQ8JY9PQn8HKv1qbtNLMlkkdBSWk= Subject key identifier: 89:A3:C5:88:17:BA:10:5C:78:1A:51:E7:FE:40:C3:16:4E:43:5F:BA Certificate issuer: /CN=e2311284-478e-4111-8d73-27148a01fa21 Certificate serial: 010D0C9F43285848A29B514E3D0DEBAD41201100 Authority key identifier: 8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 17056 IP address blocks: 199.168.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:51:4e:3d:0d:eb:ad:41:20:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2311284-478e-4111-8d73-27148a01fa21 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=9aa1e5c7-5c37-45ca-b2db-42f95b1c9813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a5:51:db:fe:30:78:70:5a:76:a0:2b:42:f9: 7f:ca:73:39:45:2b:99:5c:a7:17:dc:17:30:3d:72: b6:cf:57:96:44:46:22:79:66:78:4e:bd:9e:da:5b: ce:8e:84:f6:10:f7:15:93:e2:62:73:e5:42:72:c9: e1:8b:02:6f:12:25:9b:b8:ca:dd:30:8c:53:06:15: 98:55:b7:a7:7b:d8:80:b2:33:91:84:d9:38:d8:30: 84:e9:1c:5e:5e:77:c3:28:fe:cd:48:51:96:5e:10: b6:22:ef:2e:1e:f2:b1:60:65:ef:7e:f3:40:6f:99: 55:34:24:91:70:50:a5:4c:6f:72:ae:a5:91:f7:73: 39:27:33:e0:95:f9:cd:50:c4:28:9a:7b:9c:33:fe: 08:a3:e8:45:8f:da:f6:81:39:a1:74:3f:1b:b7:c3: 11:ac:52:a1:87:4f:56:0d:7d:0c:51:f9:9a:2d:22: 37:a9:e3:83:86:3e:90:ad:94:ed:5d:e0:3d:1d:87: c6:c5:3b:b9:9a:a1:05:33:e1:4d:d3:1c:3d:a1:df: dc:ea:72:31:11:c1:38:8e:90:d0:4c:7a:e3:75:0d: e0:1c:38:50:3a:25:58:97:52:25:bb:96:ce:88:a5: 63:58:40:90:30:53:e2:94:10:a4:05:a3:3a:b7:0e: c4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A3:C5:88:17:BA:10:5C:78:1A:51:E7:FE:40:C3:16:4E:43:5F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl X509v3 Authority Key Identifier: keyid:8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer sbgp-ipAddrBlock: critical IPv4: 199.168.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a6:73:18:c4:55:2f:1a:53:c5:b0:7d:84:eb:c4:2f:70:3e: ce:59:aa:1c:9e:e2:0d:aa:8e:df:20:5a:a1:92:65:9e:fe:c4: f6:18:04:90:73:19:99:7d:db:fa:0a:3a:f6:4a:98:f4:3b:55: a2:f1:d2:c9:e2:eb:d9:07:2b:92:27:50:b5:97:eb:1c:25:b1: 43:ec:c5:24:f7:37:b8:0d:25:18:34:c8:50:89:d8:8c:bd:6b: 78:87:62:50:8e:a7:7d:11:34:8c:40:e9:04:c2:b0:34:47:84: 89:b6:5b:da:6a:49:48:3f:75:dc:e8:12:9b:93:09:5b:bb:14: 94:e7:57:b6:3c:5d:03:be:ef:97:3e:49:da:97:78:4c:0c:d6: 50:78:15:e0:38:fc:fd:45:e3:47:85:d7:4e:14:17:dd:b9:8a: 2b:07:4d:5a:b1:4e:d8:47:ff:04:0b:b7:15:38:60:de:f0:8f: 0b:2b:ce:ae:61:a1:92:0d:00:8b:82:df:e0:e6:f7:7d:eb:00: ef:f7:d0:fd:11:d2:ff:6b:19:ad:b3:ed:c9:66:0f:94:a8:73: 02:79:d8:8c:6a:e7:7f:7a:3f:2a:05:09:c9:40:71:88:14:61: a9:71:c0:45:dc:be:77:e2:c8:13:5e:ec:49:1c:36:f9:58:27: e4:d7:1f:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1FOPQ3rrUEgEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIzMTEyODQtNDc4ZS00MTExLThkNzMtMjcxNDhhMDFm YTIxMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk OWFhMWU1YzctNWMzNy00NWNhLWIyZGItNDJmOTViMWM5ODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqVR2/4weHBadqArQvl/ynM5RSuZXKcX3Bcw PXK2z1eWREYieWZ4Tr2e2lvOjoT2EPcVk+Jic+VCcsnhiwJvEiWbuMrdMIxTBhWY Vbene9iAsjORhNk42DCE6RxeXnfDKP7NSFGWXhC2Iu8uHvKxYGXvfvNAb5lVNCSR cFClTG9yrqWR93M5JzPglfnNUMQomnucM/4Io+hFj9r2gTmhdD8bt8MRrFKhh09W DX0MUfmaLSI3qeODhj6QrZTtXeA9HYfGxTu5mqEFM+FN0xw9od/c6nIxEcE4jpDQ THrjdQ3gHDhQOiVYl1Ilu5bOiKVjWECQMFPilBCkBaM6tw7EuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImjxYgXuhBceBpR5/5AwxZOQ1+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMx MTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0OGEwMWZhMjEvNzg5ZGE2YTAtMmM3YS0z YTNkLTkxNDMtNTBkYTY5NGNhY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTIzMTEyODQtNDc4ZS00MTExLThk NzMtMjcxNDhhMDFmYTIxL2UyMzExMjg0LTQ3OGUtNDExMS04ZDczLTI3MTQ4YTAx ZmEyMS5jcmwwHwYDVR0jBBgwFoAUjPBojc3iLqg2nDEwEA+YdRqH274wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMxMTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0 OGEwMWZhMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6jgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2mcxjEVS8aU8WwfYTrxC9wPs5Zqhye4g2qjt8gWqGSZZ7+xPYYBJBz GZl92/oKOvZKmPQ7VaLx0sni69kHK5InULWX6xwlsUPsxST3N7gNJRg0yFCJ2Iy9 a3iHYlCOp30RNIxA6QTCsDRHhIm2W9pqSUg/ddzoEpuTCVu7FJTnV7Y8XQO+75c+ SdqXeEwM1lB4FeA4/P1F40eF104UF925iisHTVqxTthH/wQLtxU4YN7wjwsrzq5h oZINAIuC3+Dm933rAO/30P0R0v9rGa2z7clmD5SocwJ52Ixq5396PyoFCclAcYgU YalxwEXcvnfiyBNe7EkcNvlYJ+TXHyk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:59 2025 by rpki-client