$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/bd353f5d-37a8-3741-80ef-6617fb84aecf.roa File: bd353f5d-37a8-3741-80ef-6617fb84aecf.roa (raw, json) Hash identifier: VVNrGyR5gikpwaGgVebYdaMjLerEqHTKdUvA8F/yQeM= Subject key identifier: F8:93:72:C8:FC:CF:55:C7:CE:D0:98:68:90:58:5D:48:34:41:7C:79 Certificate issuer: /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Certificate serial: 010D0C9F432858487E506397CF71C720E24C0980 Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/bd353f5d-37a8-3741-80ef-6617fb84aecf.roa Signing time: Fri 10 Jan 2025 02:00:40 +0000 ROA not before: Fri 10 Jan 2025 02:00:40 +0000 ROA not after: Thu 10 Apr 2025 01:00:40 +0000 asID: 19740 IP address blocks: 199.96.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7e:50:63:97:cf:71:c7:20:e2:4c:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Validity Not Before: Jan 10 02:00:40 2025 GMT Not After : Apr 10 01:00:40 2025 GMT Subject: CN=2850864c-2c8f-4222-b363-20a7cf0fdddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:c2:40:fb:f1:1d:c9:1d:08:05:42:d6:37: 2c:09:df:67:e3:24:f2:25:b2:fa:a3:02:16:ac:b1: ba:5e:aa:55:50:95:6d:20:9c:b5:c5:26:6f:fb:7b: f3:2d:4f:32:6a:67:5b:ce:b9:2e:84:01:a0:bd:86: 89:ba:af:38:7a:d2:df:2d:08:2a:78:4e:40:f1:6d: 44:eb:fc:4c:30:c3:dc:82:a7:6c:06:73:bc:b4:46: 23:5a:b4:86:45:9c:85:63:84:24:d3:3f:0e:82:b6: 8e:7a:7c:b9:e5:b3:9d:ba:9c:41:c2:42:3c:86:2c: 98:34:f5:65:ec:f2:07:44:fa:67:e4:8e:23:89:1f: ed:90:fd:1c:4b:0e:84:a8:b5:30:03:33:20:fe:8d: e2:04:5a:67:b9:c1:27:8d:2d:61:e8:57:0a:45:e1: c5:05:83:bb:e6:21:68:7b:f9:92:0d:d8:dd:02:5c: d2:f7:4e:ac:88:a1:bd:8b:a2:43:a5:fd:ab:9f:ab: ac:61:92:e5:cd:ac:f6:4f:92:69:13:3d:0a:d9:a0: f8:5f:ac:88:38:be:3f:c0:ce:fb:9d:54:c5:f8:a1: 9a:c1:74:de:94:b9:66:a4:b6:88:f0:2e:da:6a:ad: 97:c3:22:2d:54:bd:00:6a:f4:f5:59:9c:3b:2d:f6: 9f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:93:72:C8:FC:CF:55:C7:CE:D0:98:68:90:58:5D:48:34:41:7C:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/bd353f5d-37a8-3741-80ef-6617fb84aecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl X509v3 Authority Key Identifier: keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer sbgp-ipAddrBlock: critical IPv4: 199.96.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e2:da:9d:37:94:23:69:7d:ca:8e:d7:bc:9f:7e:60:70:38: 2b:81:e8:43:17:b5:02:77:2b:30:e6:4b:8f:a8:b3:1d:74:ca: 8c:9c:5b:80:3e:14:9e:ec:cb:84:f7:96:15:81:01:c6:0e:34: da:a1:bd:e2:07:f7:03:82:78:62:fa:f6:f8:e1:f9:cf:52:7f: 37:13:da:09:5c:c3:7e:9e:c9:63:b1:e9:2b:e9:18:51:e0:f4: c3:25:19:9d:1a:ff:4f:8f:22:75:a8:6c:55:4d:f5:88:e9:8f: d6:12:6c:af:b1:f2:17:de:9d:c1:97:3a:d8:82:02:97:a8:35: 74:c6:ff:3f:39:17:93:a7:64:5b:7d:3b:12:cc:16:c6:86:bc: a2:5d:e7:a7:fa:31:a9:48:10:ac:0e:8f:27:d1:57:62:d8:13: db:6c:3e:01:b2:11:e2:8c:9a:b9:71:bb:cd:1a:56:ac:90:23: 1a:10:8c:5c:fb:93:fd:3c:24:ea:05:52:fe:80:fd:96:24:46: d0:8c:df:b7:ec:7a:74:56:8d:3b:2b:d1:e8:32:c7:dd:f1:e6: 7f:75:4a:33:77:1a:f9:67:82:86:76:5c:f6:8d:9f:5d:75:47: db:77:1c:e8:d2:ae:3e:98:f3:ce:f7:28:98:da:a1:6b:1a:29: 2c:ed:97:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh+UGOXz3HHIOJMCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2 NDdhMB4XDTI1MDExMDAyMDA0MFoXDTI1MDQxMDAxMDA0MFowLzEtMCsGA1UEAxMk Mjg1MDg2NGMtMmM4Zi00MjIyLWIzNjMtMjBhN2NmMGZkZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcbCQPvxHckdCAVC1jcsCd9n4yTyJbL6owIW rLG6XqpVUJVtIJy1xSZv+3vzLU8yamdbzrkuhAGgvYaJuq84etLfLQgqeE5A8W1E 6/xMMMPcgqdsBnO8tEYjWrSGRZyFY4Qk0z8OgraOeny55bOdupxBwkI8hiyYNPVl 7PIHRPpn5I4jiR/tkP0cSw6EqLUwAzMg/o3iBFpnucEnjS1h6FcKReHFBYO75iFo e/mSDdjdAlzS906siKG9i6JDpf2rn6usYZLlzaz2T5JpEz0K2aD4X6yIOL4/wM77 nVTF+KGawXTelLlmpLaI8C7aaq2XwyItVL0AavT1WZw7LfafOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiTcsj8z1XHztCYaJBYXUg0QXx5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZj NmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvYmQzNTNmNWQtMzdhOC0z NzQxLTgwZWYtNjYxN2ZiODRhZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ2YzZlYTEtNGYxYy00NTc5LWI0 YjEtNzg4OTFhMzQ2NDdhLzM0NmM2ZWExLTRmMWMtNDU3OS1iNGIxLTc4ODkxYTM0 NjQ3YS5jcmwwHwYDVR0jBBgwFoAUco1y15nyFUEivuvxCazPlr+/hnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5 MWEzNDY0N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2CHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPi2p03lCNpfcqO17yffmBwOCuB6EMXtQJ3KzDmS4+osx10yoycW4A+ FJ7sy4T3lhWBAcYONNqhveIH9wOCeGL69vjh+c9SfzcT2glcw36eyWOx6SvpGFHg 9MMlGZ0a/0+PInWobFVN9Yjpj9YSbK+x8hfencGXOtiCApeoNXTG/z85F5OnZFt9 OxLMFsaGvKJd56f6MalIEKwOjyfRV2LYE9tsPgGyEeKMmrlxu80aVqyQIxoQjFz7 k/08JOoFUv6A/ZYkRtCM37fsenRWjTsr0egyx93x5n91SjN3GvlngoZ2XPaNn111 R9t3HOjSrj6Y8873KJjaoWsaKSztlx4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:36 2025 by rpki-client