$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa File: 18187cff-159b-3f88-aa27-6e6e06aa0b90.roa (raw, json) Hash identifier: V5IYxa8Fk0/bqs5Evj1c7YYUsi/+LvvhQ9bu0ZBnFKM= Subject key identifier: 7A:F5:2C:3E:D7:9A:FC:A4:6D:CE:BA:4E:5D:6E:B4:AD:6D:6D:16:99 Certificate issuer: /CN=11150dfe-c654-4719-b6c3-642628555522 Certificate serial: 010D0C9F43285848DA71002B5552E6F5B9928D00 Authority key identifier: 51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 15191 IP address blocks: 198.29.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:00:2b:55:52:e6:f5:b9:92:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11150dfe-c654-4719-b6c3-642628555522 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=8f1eb553-b8fb-4ca1-8fac-baa228923dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:a7:4e:76:ba:e7:ae:0d:a2:72:a6:6d:96: 4f:29:ab:98:6a:d3:f3:30:83:14:be:25:eb:d2:41: 66:45:9a:ab:49:fa:e8:3f:b0:d9:80:fc:6a:4b:7d: e4:72:94:e2:e8:d4:76:db:79:3d:12:1b:30:1d:7f: f4:36:a7:47:e5:42:da:08:13:4d:fc:dd:8e:88:c7: f1:40:c7:eb:ee:d8:e7:ae:1c:6f:3a:3b:32:16:12: 67:66:04:be:8c:48:6c:6a:29:02:a2:6d:cd:1a:5e: df:dc:74:3e:ac:cc:aa:98:bb:80:17:b4:1e:78:f2: 08:74:60:c6:4c:48:d3:9a:d0:4f:f9:fd:01:ed:38: ac:3c:5e:72:27:8a:51:fa:4e:8e:3b:68:62:0f:76: 61:b1:d6:45:3d:52:f8:7a:67:54:ce:fe:5b:25:7c: 2f:2d:b1:0d:f5:59:ca:2e:4d:61:da:b4:c2:5c:79: 8c:92:9b:96:78:09:47:9e:23:c6:fe:76:31:6a:d4: 99:12:41:b2:9b:3a:47:00:5b:7e:b8:2c:45:4b:91: 2e:bd:4d:e3:a6:ca:41:8f:92:ad:6b:ce:ba:ad:18: bf:a4:7e:ac:c8:2d:1e:78:ab:cd:c4:83:02:7c:ce: 44:36:7a:84:3a:02:2f:4e:41:b7:0e:b3:07:67:45: 92:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F5:2C:3E:D7:9A:FC:A4:6D:CE:BA:4E:5D:6E:B4:AD:6D:6D:16:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl X509v3 Authority Key Identifier: keyid:51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer sbgp-ipAddrBlock: critical IPv4: 198.29.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8d:70:05:b5:db:1b:c0:0f:84:3e:70:b6:d2:ef:93:15:7f: 19:2c:1b:5a:76:7f:62:ed:fd:b3:48:dd:8b:5d:4a:43:93:88: 68:5a:7a:7e:34:ef:88:b2:89:a5:c5:20:57:c3:d1:96:df:ec: ed:34:c6:47:ad:dc:b1:b1:bb:13:26:66:b3:02:02:7a:1e:ef: 55:a4:46:5e:09:42:61:65:54:2b:0d:94:19:0b:29:76:7c:46: 2f:cd:e3:11:57:96:f6:39:31:dc:28:84:c2:48:2b:71:9e:fc: 96:ab:90:17:4b:6f:ad:88:3c:22:e4:af:84:19:34:a5:bf:1b: ce:cd:ce:ec:5c:8f:85:42:ce:a7:33:53:ed:c4:ca:8f:f9:e8: 31:4c:53:33:91:c5:4e:0d:51:9b:fb:8d:70:12:ce:41:4f:a8: be:9f:11:8f:95:03:a0:2c:c3:fe:55:f1:be:47:4d:4c:f3:c6: 15:b8:58:40:49:79:28:ea:63:03:13:cc:88:a1:26:2d:61:62: 6b:a0:d4:84:e2:57:d1:f2:a9:9a:6e:17:56:33:bb:58:72:2e: 33:90:95:76:06:53:c2:7a:93:02:29:35:36:03:2c:f6:64:4a: 8b:ae:75:47:f0:19:89:22:1a:12:5a:5c:81:71:56:59:90:39: c1:59:e3:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQArVVLm9bmSjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExNTBkZmUtYzY1NC00NzE5LWI2YzMtNjQyNjI4NTU1 NTIyMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk OGYxZWI1NTMtYjhmYi00Y2ExLThmYWMtYmFhMjI4OTIzZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY2nTna6564NonKmbZZPKauYatPzMIMUviXr 0kFmRZqrSfroP7DZgPxqS33kcpTi6NR223k9EhswHX/0NqdH5ULaCBNN/N2OiMfx QMfr7tjnrhxvOjsyFhJnZgS+jEhsaikCom3NGl7f3HQ+rMyqmLuAF7QeePIIdGDG TEjTmtBP+f0B7TisPF5yJ4pR+k6OO2hiD3ZhsdZFPVL4emdUzv5bJXwvLbEN9VnK Lk1h2rTCXHmMkpuWeAlHniPG/nYxatSZEkGymzpHAFt+uCxFS5EuvU3jpspBj5Kt a866rRi/pH6syC0eeKvNxIMCfM5ENnqEOgIvTkG3DrMHZ0WSLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHr1LD7Xmvykbc66Tl1utK1tbRaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1 MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2Mjg1NTU1MjIvMTgxODdjZmYtMTU5Yi0z Zjg4LWFhMjctNmU2ZTA2YWEwYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTExNTBkZmUtYzY1NC00NzE5LWI2 YzMtNjQyNjI4NTU1NTIyLzExMTUwZGZlLWM2NTQtNDcxOS1iNmMzLTY0MjYyODU1 NTUyMi5jcmwwHwYDVR0jBBgwFoAUUXG9H0j6i8I6VqcUMA6ZC7noXlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2 Mjg1NTU1MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExh0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCNcAW12xvAD4Q+cLbS75MVfxksG1p2f2Lt/bNI3YtdSkOTiGhaen40 74iyiaXFIFfD0Zbf7O00xket3LGxuxMmZrMCAnoe71WkRl4JQmFlVCsNlBkLKXZ8 Ri/N4xFXlvY5MdwohMJIK3Ge/JarkBdLb62IPCLkr4QZNKW/G87Nzuxcj4VCzqcz U+3Eyo/56DFMUzORxU4NUZv7jXASzkFPqL6fEY+VA6Asw/5V8b5HTUzzxhW4WEBJ eSjqYwMTzIihJi1hYmug1ITiV9HyqZpuF1Yzu1hyLjOQlXYGU8J6kwIpNTYDLPZk SouudUfwGYkiGhJaXIFxVlmQOcFZ4yE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:26 2025 by rpki-client