$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/e99bbcb0-3cc9-3cec-9f2f-4b4401092111.roa File: e99bbcb0-3cc9-3cec-9f2f-4b4401092111.roa (raw, json) Hash identifier: gkpW3OUQmaiKELhKt3JaxKwcqbtAwrZ1jXOu50cYfRA= Subject key identifier: EC:08:BF:2C:53:7A:CA:DC:98:D5:F4:F8:B3:4D:37:81:C2:74:D5:65 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285848A049125B972EE6ACFE679A80 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/e99bbcb0-3cc9-3cec-9f2f-4b4401092111.roa Signing time: Wed 22 Jan 2025 06:03:27 +0000 ROA not before: Wed 22 Jan 2025 06:03:27 +0000 ROA not after: Tue 22 Apr 2025 05:03:27 +0000 asID: 19165 IP address blocks: 199.21.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:49:12:5b:97:2e:e6:ac:fe:67:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jan 22 06:03:27 2025 GMT Not After : Apr 22 05:03:27 2025 GMT Subject: CN=a3897576-d867-431f-8076-591d339d3ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:b4:a6:b1:f6:c0:ab:07:ef:2f:47:2d:5b: 16:71:ca:1c:ff:58:b0:a8:c0:c3:aa:d9:a1:bc:a1: 75:91:c8:54:25:d1:44:fe:65:95:8b:a3:87:78:1a: 90:bb:22:30:b1:8d:4a:70:23:ab:33:0b:a2:86:e7: e4:59:6f:15:aa:92:5e:d3:f0:01:99:0d:f3:b6:2e: b0:39:9f:ff:cf:b7:92:0a:8d:14:40:83:a5:3f:65: 2b:1d:e6:8b:5f:5e:9f:75:92:1a:c0:fd:97:8a:ef: 3b:fe:ad:d4:91:eb:79:dc:29:ec:d4:0d:ea:44:99: c2:99:62:2a:fb:b7:d9:dc:b4:95:5b:fd:a9:af:d6: e8:03:ae:63:35:f5:a5:c2:cd:75:b3:c4:42:c9:6d: ee:7b:df:5d:75:b9:a8:79:be:91:01:74:c3:c6:44: 95:eb:ad:5d:f8:3d:07:cf:68:56:71:26:49:ad:c7: 87:39:9d:04:e8:a8:ed:fd:3e:54:65:b8:0b:f4:b6: 33:43:9c:68:b3:57:05:8b:c8:6a:a8:f2:3c:4a:90: b0:30:24:76:59:2a:3f:93:41:d5:55:c5:dc:e3:a5: d3:60:5b:bf:32:9b:1b:f6:3b:e6:42:7d:90:04:e9: 32:5d:df:7b:73:28:26:61:3f:bd:21:45:c0:f1:73: 6b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:08:BF:2C:53:7A:CA:DC:98:D5:F4:F8:B3:4D:37:81:C2:74:D5:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/e99bbcb0-3cc9-3cec-9f2f-4b4401092111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 199.21.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:50:83:96:f0:a8:df:7b:a8:0a:31:dc:1b:bb:c6:b0:45:3c: a6:13:8b:a2:e3:b1:b4:80:de:7a:6d:39:00:c7:6a:62:44:79: fb:77:79:41:06:be:81:85:c0:7c:62:5b:37:77:b9:9b:ad:ac: 3b:6f:32:8c:4f:66:fc:e2:33:16:07:ef:f8:cb:57:d7:73:bf: bc:7f:f2:af:9e:3c:e0:dd:04:98:bb:04:79:94:95:b3:7b:94: a2:85:24:5a:8c:12:87:46:a2:f5:84:81:78:c9:b6:b8:cd:03: 3e:d6:70:f7:c8:bb:ab:78:27:79:6a:ab:d0:2b:cb:a2:81:8f: 46:49:e1:91:56:db:7f:ec:df:80:e8:a5:d5:20:8d:d8:b4:3b: d2:da:12:7e:03:62:f9:72:b3:db:c9:94:14:94:41:d1:a5:c3: b0:d8:05:fc:71:3a:dd:b6:1b:87:ba:11:f1:7d:b0:15:01:62: 15:0c:87:4b:46:34:1f:1c:21:5e:d4:5f:08:a2:d5:3c:15:c4: 89:76:f5:9d:06:10:0d:d3:9e:ca:ef:04:37:1c:f3:62:e4:e2: 9a:73:83:4a:59:ea:2b:68:a3:ef:6b:1c:96:44:19:77:a2:51: e7:ce:54:59:e5:ef:dc:68:fd:17:ec:04:16:79:4f:d7:2b:29: 45:09:a9:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigSRJbly7mrP5nmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDEyMjA2MDMyN1oXDTI1MDQyMjA1MDMyN1owLzEtMCsGA1UEAxMk YTM4OTc1NzYtZDg2Ny00MzFmLTgwNzYtNTkxZDMzOWQzY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrq0prH2wKsH7y9HLVsWccoc/1iwqMDDqtmh vKF1kchUJdFE/mWVi6OHeBqQuyIwsY1KcCOrMwuihufkWW8VqpJe0/ABmQ3zti6w OZ//z7eSCo0UQIOlP2UrHeaLX16fdZIawP2Xiu87/q3Uket53Cns1A3qRJnCmWIq +7fZ3LSVW/2pr9boA65jNfWlws11s8RCyW3ue99ddbmoeb6RAXTDxkSV661d+D0H z2hWcSZJrceHOZ0E6Kjt/T5UZbgL9LYzQ5xos1cFi8hqqPI8SpCwMCR2WSo/k0HV VcXc46XTYFu/Mpsb9jvmQn2QBOkyXd97cygmYT+9IUXA8XNr/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwIvyxTesrcmNX0+LNNN4HCdNVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZTk5YmJjYjAtM2NjOS0z Y2VjLTlmMmYtNGI0NDAxMDkyMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxVUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5Qg5bwqN97qAox3Bu7xrBFPKYTi6LjsbSA3nptOQDHamJEeft3eUEG voGFwHxiWzd3uZutrDtvMoxPZvziMxYH7/jLV9dzv7x/8q+ePODdBJi7BHmUlbN7 lKKFJFqMEodGovWEgXjJtrjNAz7WcPfIu6t4J3lqq9Ary6KBj0ZJ4ZFW23/s34Do pdUgjdi0O9LaEn4DYvlys9vJlBSUQdGlw7DYBfxxOt22G4e6EfF9sBUBYhUMh0tG NB8cIV7UXwii1TwVxIl29Z0GEA3TnsrvBDcc82Lk4ppzg0pZ6itoo+9rHJZEGXei UefOVFnl79xo/RfsBBZ5T9crKUUJqRA= -----END CERTIFICATE-----Generated at Sun Apr 6 01:59:36 2025 by rpki-client