$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa File: 2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa (raw, json) Hash identifier: oqiYbwgs3spgFPpGOAI8WEW+5OThoGnDyNt/Ns4mS8A= Subject key identifier: EF:73:05:B1:71:F1:0D:03:69:2D:D8:3E:CD:2E:0A:73:B6:0A:B4:7E Certificate issuer: /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Certificate serial: 010D0C9F432858487E50634D926E7A1CD9F5DC00 Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa Signing time: Fri 10 Jan 2025 02:00:40 +0000 ROA not before: Fri 10 Jan 2025 02:00:40 +0000 ROA not after: Thu 10 Apr 2025 01:00:40 +0000 asID: 396026 IP address blocks: 199.230.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7e:50:63:4d:92:6e:7a:1c:d9:f5:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Validity Not Before: Jan 10 02:00:40 2025 GMT Not After : Apr 10 01:00:40 2025 GMT Subject: CN=c17ebe3e-7ada-48ff-8e51-5947d45c9525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:82:bd:1a:a9:72:cb:0a:0e:f6:7b:02:8d:d8: 09:65:64:0a:46:4b:d9:d5:9f:88:0a:ce:69:6d:8c: 32:2e:e3:1c:4a:2e:b6:10:8e:72:13:d1:27:16:e8: 6e:7c:22:4c:35:11:1f:96:2b:f1:19:2f:a2:8c:04: 90:6a:13:0c:cf:e0:19:ec:38:bb:62:86:24:0e:73: 87:5d:74:07:99:ff:b9:44:46:38:45:13:24:65:f9: 32:ae:98:bf:93:5b:49:d2:1b:e0:1c:6e:54:57:b2: 4b:6d:af:96:15:bb:9f:bf:ee:35:18:35:e2:4e:15: 56:00:fa:68:eb:9a:73:16:12:3a:ad:e4:30:3a:1c: 9a:dd:c9:b0:dd:e4:5c:e0:70:e8:40:3d:c6:d3:26: 24:59:3a:b3:b0:03:11:ba:38:1e:b1:d7:b8:ad:2b: 6b:9b:cd:d1:49:ad:18:de:33:fa:ce:06:df:a1:b7: 99:b3:62:e1:a1:ed:bf:03:93:38:7e:e4:00:c3:a2: 71:b6:3a:a0:2e:31:d4:42:b4:be:6b:d3:90:62:2a: 50:e2:93:cd:53:9f:8c:82:13:0a:c8:cf:9b:ba:2d: 5a:13:f1:26:d8:e6:be:ce:33:7b:3f:71:5f:5d:c9: a6:2a:e5:5b:f8:62:6e:96:81:40:11:db:c5:a2:a9: d6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:73:05:B1:71:F1:0D:03:69:2D:D8:3E:CD:2E:0A:73:B6:0A:B4:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl X509v3 Authority Key Identifier: keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer sbgp-ipAddrBlock: critical IPv4: 199.230.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c3:78:ff:3e:7b:ed:1a:83:48:8d:eb:84:be:23:9e:00:2f: 07:e1:97:5e:af:f5:c5:71:6f:b0:bc:fb:16:06:03:6e:ef:26: ff:c0:d8:08:0b:a5:f9:e4:9a:be:53:28:81:3f:0b:08:26:bc: 55:d3:9d:77:99:ad:d1:15:cf:7f:ed:a5:61:0f:c8:8c:69:32: 83:d1:45:76:ea:53:5c:38:2f:11:91:fd:3e:40:95:e6:39:1a: 28:fe:e0:0e:3f:3f:13:15:14:0e:ee:c6:ef:a2:59:90:f2:13: 2e:bd:f0:0a:01:1e:51:c9:ad:ea:52:58:84:ef:61:44:21:10: 71:99:48:20:a7:69:94:9f:e6:c0:db:a2:dd:47:ee:13:7f:e8: 7e:87:81:83:c6:c1:4f:4b:53:a7:76:ca:26:86:61:f0:94:57: aa:d5:97:41:53:45:ee:27:4a:31:5a:e4:e3:46:2f:da:32:d9: 4c:bd:a2:83:a6:f4:7d:03:ed:3e:98:71:17:1c:f9:8f:05:91: 39:fb:34:51:72:2f:7e:25:ff:d9:de:29:75:54:9b:8f:52:40: 03:2b:97:f5:76:04:d4:b2:1e:68:d7:a1:98:82:89:c6:a1:96: b7:d7:06:ae:bb:56:fa:49:28:c8:cd:01:02:f6:6c:18:62:43: bc:f0:fe:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh+UGNNkm56HNn13AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2 NDdhMB4XDTI1MDExMDAyMDA0MFoXDTI1MDQxMDAxMDA0MFowLzEtMCsGA1UEAxMk YzE3ZWJlM2UtN2FkYS00OGZmLThlNTEtNTk0N2Q0NWM5NTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYK9GqlyywoO9nsCjdgJZWQKRkvZ1Z+ICs5p bYwyLuMcSi62EI5yE9EnFuhufCJMNREflivxGS+ijASQahMMz+AZ7Di7YoYkDnOH XXQHmf+5REY4RRMkZfkyrpi/k1tJ0hvgHG5UV7JLba+WFbufv+41GDXiThVWAPpo 65pzFhI6reQwOhya3cmw3eRc4HDoQD3G0yYkWTqzsAMRujgesde4rStrm83RSa0Y 3jP6zgbfobeZs2Lhoe2/A5M4fuQAw6JxtjqgLjHUQrS+a9OQYipQ4pPNU5+MghMK yM+bui1aE/Em2Oa+zjN7P3FfXcmmKuVb+GJuloFAEdvFoqnW4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9zBbFx8Q0DaS3YPs0uCnO2CrR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZj NmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvMmQ4ZTE0YmYtMTIzYS0z NTNmLWJjMWQtN2YwZjcwODcyMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ2YzZlYTEtNGYxYy00NTc5LWI0 YjEtNzg4OTFhMzQ2NDdhLzM0NmM2ZWExLTRmMWMtNDU3OS1iNGIxLTc4ODkxYTM0 NjQ3YS5jcmwwHwYDVR0jBBgwFoAUco1y15nyFUEivuvxCazPlr+/hnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5 MWEzNDY0N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+ZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjDeP8+e+0ag0iN64S+I54ALwfhl16v9cVxb7C8+xYGA27vJv/A2AgL pfnkmr5TKIE/CwgmvFXTnXeZrdEVz3/tpWEPyIxpMoPRRXbqU1w4LxGR/T5AleY5 Gij+4A4/PxMVFA7uxu+iWZDyEy698AoBHlHJrepSWITvYUQhEHGZSCCnaZSf5sDb ot1H7hN/6H6HgYPGwU9LU6d2yiaGYfCUV6rVl0FTRe4nSjFa5ONGL9oy2Uy9ooOm 9H0D7T6YcRcc+Y8FkTn7NFFyL34l/9neKXVUm49SQAMrl/V2BNSyHmjXoZiCicah lrfXBq67VvpJKMjNAQL2bBhiQ7zw/mw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:13 2025 by rpki-client