$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ea6caabc-bb2b-301b-91ea-7da33ceec31a.roa File: ea6caabc-bb2b-301b-91ea-7da33ceec31a.roa (raw, json) Hash identifier: ffYgy+buo7+4dRWdlomml1rcyI9G1Rdi6dpFv090C7Q= Subject key identifier: C3:76:BD:72:B5:03:1C:FF:D4:82:95:E0:C1:D2:F3:8E:88:EA:54:C4 Certificate issuer: /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593 Certificate serial: 010D0C9F43285848B090B323ACA01DA8ACFCC780 Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ea6caabc-bb2b-301b-91ea-7da33ceec31a.roa Signing time: Tue 28 Jan 2025 02:00:39 +0000 ROA not before: Tue 28 Jan 2025 02:00:39 +0000 ROA not after: Mon 28 Apr 2025 01:00:39 +0000 asID: 396422 IP address blocks: 199.21.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:90:b3:23:ac:a0:1d:a8:ac:fc:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593 Validity Not Before: Jan 28 02:00:39 2025 GMT Not After : Apr 28 01:00:39 2025 GMT Subject: CN=a441bb75-7dde-4685-873c-1906e9ae1c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:91:88:6a:3f:81:ab:45:77:a0:07:79:bc: 33:81:0c:34:b7:9c:06:c9:14:c4:02:67:62:c4:fa: 7e:f3:96:0d:d3:55:8d:27:93:4d:89:bb:07:aa:99: 22:fa:bd:d9:13:aa:4f:03:2e:44:46:68:32:74:40: e5:8d:a0:3f:00:86:72:f5:03:61:d6:77:fa:f1:f1: 56:69:49:6f:f1:f9:f7:a3:f9:5d:25:88:28:83:e9: 60:1a:4e:b8:df:7e:b2:6c:96:7e:89:97:39:f0:cf: e8:4d:e7:a1:78:a0:79:04:2c:ee:b1:5c:54:1f:2a: 32:32:eb:08:ec:c1:65:f7:de:46:05:0e:5d:5c:9a: 3d:02:36:b9:7f:c4:3e:e8:23:88:68:a2:f7:e3:45: ea:bf:1f:09:f0:c4:69:fd:01:1c:d8:cb:16:cd:38: d5:41:ad:a8:24:da:47:6a:35:6c:3a:cd:2a:40:a0: 6b:e3:01:39:d1:70:a5:90:ed:c2:6b:15:fc:b4:59: d8:3c:39:1c:3e:de:2b:fb:cf:85:0f:db:48:fb:93: a7:49:9d:fe:9d:20:44:1a:9a:aa:d3:4b:d9:cf:4f: 1e:03:b2:54:4c:dd:f0:2c:2d:82:20:cf:0a:5a:d3: 13:f0:ba:3a:7e:2d:fb:cf:38:bd:18:20:9d:9e:7a: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:76:BD:72:B5:03:1C:FF:D4:82:95:E0:C1:D2:F3:8E:88:EA:54:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ea6caabc-bb2b-301b-91ea-7da33ceec31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl X509v3 Authority Key Identifier: keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer sbgp-ipAddrBlock: critical IPv4: 199.21.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a2:4c:5d:21:e3:ff:fb:5f:36:dd:8f:3b:53:2a:e6:5f:32: 4e:c2:2b:d6:69:bc:22:0f:69:eb:c6:f6:0a:58:1c:32:7c:69: 60:00:89:99:c7:96:08:91:26:ab:3f:8a:9a:82:cc:9f:25:38: a1:63:cd:94:de:71:80:8b:d9:89:7e:a9:13:b7:f1:9d:5a:a2: a7:bc:29:74:77:55:10:1f:b0:72:93:8b:73:2a:5e:d6:1b:86: 1e:ff:10:da:c7:a1:94:e0:51:d0:9c:cf:d8:6b:e0:de:92:f8: b1:81:b2:09:e3:e6:36:14:4b:92:11:b8:b6:11:59:78:9c:1d: 21:25:6f:a3:86:a7:8b:11:3f:b8:fb:d1:fe:64:58:1d:00:c2: 13:d0:b6:e3:ae:08:0a:e7:7c:42:48:bb:ca:20:11:54:4b:85: 3c:97:51:0c:83:a9:a8:fe:ca:d6:c7:34:ce:ba:b5:3e:c4:87: 30:d4:f2:c9:18:f5:9d:0c:15:f7:d4:c4:f9:ac:96:a2:3f:a0: 3a:03:08:e0:70:e9:60:d7:13:b0:55:43:26:33:b0:62:88:7f: 0b:8d:8f:b3:5e:1a:cd:b0:ec:5b:44:6d:73:09:79:de:41:56: 92:48:af:a0:bd:10:d3:0a:80:ed:9e:16:d0:08:68:39:63:54: 94:ff:04:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiwkLMjrKAdqKz8x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU2MzQ2ZjItNjZmYi00YWM5LThiMGMtMWY4YmJiZmM4 NTkzMB4XDTI1MDEyODAyMDAzOVoXDTI1MDQyODAxMDAzOVowLzEtMCsGA1UEAxMk YTQ0MWJiNzUtN2RkZS00Njg1LTg3M2MtMTkwNmU5YWUxYzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eCRiGo/gatFd6AHebwzgQw0t5wGyRTEAmdi xPp+85YN01WNJ5NNibsHqpki+r3ZE6pPAy5ERmgydEDljaA/AIZy9QNh1nf68fFW aUlv8fn3o/ldJYgog+lgGk64336ybJZ+iZc58M/oTeeheKB5BCzusVxUHyoyMusI 7MFl995GBQ5dXJo9Aja5f8Q+6COIaKL340Xqvx8J8MRp/QEc2MsWzTjVQa2oJNpH ajVsOs0qQKBr4wE50XClkO3CaxX8tFnYPDkcPt4r+8+FD9tI+5OnSZ3+nSBEGpqq 00vZz08eA7JUTN3wLC2CIM8KWtMT8Lo6fi37zzi9GCCdnno2VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMN2vXK1Axz/1IKV4MHS846I6lTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTYz NDZmMi02NmZiLTRhYzktOGIwYy0xZjhiYmJmYzg1OTMvZWE2Y2FhYmMtYmIyYi0z MDFiLTkxZWEtN2RhMzNjZWVjMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWU2MzQ2ZjItNjZmYi00YWM5LThi MGMtMWY4YmJiZmM4NTkzLzVlNjM0NmYyLTY2ZmItNGFjOS04YjBjLTFmOGJiYmZj ODU5My5jcmwwHwYDVR0jBBgwFoAUJkCK/RbbhxHG2cZwZUqe3PK7k2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTYzNDZmMi02NmZiLTRhYzktOGIwYy0xZjhi YmJmYzg1OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyiTF0h4//7XzbdjztTKuZfMk7CK9ZpvCIPaevG9gpYHDJ8aWAAiZnH lgiRJqs/ipqCzJ8lOKFjzZTecYCL2Yl+qRO38Z1aoqe8KXR3VRAfsHKTi3MqXtYb hh7/ENrHoZTgUdCcz9hr4N6S+LGBsgnj5jYUS5IRuLYRWXicHSElb6OGp4sRP7j7 0f5kWB0AwhPQtuOuCArnfEJIu8ogEVRLhTyXUQyDqaj+ytbHNM66tT7EhzDU8skY 9Z0MFffUxPmslqI/oDoDCOBw6WDXE7BVQyYzsGKIfwuNj7NeGs2w7FtEbXMJed5B VpJIr6C9ENMKgO2eFtAIaDljVJT/BKc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:34 2025 by rpki-client