$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa File: 9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa (raw, json) Hash identifier: R7BWTHBQZXfGUgbDHGdm0KE5N+kCb+H39iNGlQjq37A= Subject key identifier: DF:2F:0F:2E:17:82:0A:3A:3F:F9:B7:3A:FC:E7:68:37:66:4E:59:49 Certificate issuer: /CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Certificate serial: 010D0C9F43285848ADC60484A470BC7917543D50 Authority key identifier: 84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 32815 IP address blocks: 199.247.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:04:84:a4:70:bc:79:17:54:3d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=f6bd2a67-6133-4eae-bff1-f6d4411ad4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:70:01:3e:3e:51:c6:1a:2b:97:a0:ae:e1: ce:03:bb:86:63:de:60:8d:ec:61:c3:3d:ca:bb:0d: f2:16:a4:70:e3:7d:38:c2:0d:7c:48:37:23:16:b5: 8b:09:86:e1:4d:36:af:51:bb:f5:b0:9a:40:53:00: ce:4c:51:11:9e:7a:2e:67:f7:19:96:fb:f9:df:da: 46:a5:fd:6f:f5:e2:0c:ff:60:c1:30:79:85:fd:ca: 28:9f:b6:f3:5f:a4:69:3b:89:7a:a9:26:39:13:b2: bd:d6:86:51:90:46:5f:48:8b:6e:ad:ef:5d:7a:4c: 84:0d:76:e7:a9:e2:db:e4:8a:b1:91:67:fd:0e:82: 86:2d:1e:64:c9:a6:c3:d7:fe:02:4f:3c:b0:52:0b: c5:e8:42:f4:ea:21:ef:9d:5c:f8:7e:20:98:c0:e8: a5:f8:9e:32:1f:ef:47:af:d7:2b:0e:ea:96:fb:2e: a1:6f:f0:20:20:2c:3e:bf:6f:3e:96:c5:b5:1c:eb: 19:e6:35:09:56:7b:75:ae:91:15:42:0f:2c:6b:fa: c7:cb:a4:01:a3:f8:cb:09:25:1d:89:cf:3c:a5:66: 5f:9b:8a:eb:8f:48:28:9e:08:cf:6f:cd:38:2e:12: 10:c3:78:d5:6f:8d:3c:2b:7b:09:ca:7f:1c:dc:3c: 2e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2F:0F:2E:17:82:0A:3A:3F:F9:B7:3A:FC:E7:68:37:66:4E:59:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl X509v3 Authority Key Identifier: keyid:84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer sbgp-ipAddrBlock: critical IPv4: 199.247.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d0:ff:28:20:02:20:cc:fb:2e:ce:da:97:34:60:77:36:9d: 52:73:91:fd:a2:c6:91:de:de:7f:31:44:69:cb:7a:32:40:90: 5c:2f:57:3c:52:d6:20:66:2a:e6:f2:92:c9:58:44:39:53:cd: 74:65:35:6c:8e:d9:f4:43:8c:25:af:2e:7e:1c:36:6e:9b:eb: a7:8e:ac:8c:87:f3:49:94:8c:49:98:dd:05:1a:f6:7e:99:dd: c7:5a:38:58:f3:54:c0:65:02:ca:95:db:8b:18:48:b9:f6:d5: 35:74:ec:91:41:5f:90:7c:b8:0d:7d:37:e4:46:3e:8c:68:66: 27:72:97:b2:c4:cf:c7:89:4b:47:25:fc:1c:cc:08:5f:76:23: 6e:92:dc:99:87:96:cd:6a:8c:21:96:82:f8:a8:82:d8:d4:b8: 77:d0:39:28:9f:5b:aa:ba:be:d3:c3:fe:e8:4c:e8:a2:8e:19: 66:93:09:d5:b6:5b:40:f9:55:b3:46:59:3e:71:87:73:76:f1: 2b:dc:49:d6:51:42:36:5f:8f:6a:81:94:db:fe:d7:73:7b:52: 08:58:37:91:5a:2b:7c:a2:b1:44:a9:6c:4a:4f:1f:54:88:a4: b1:b0:1e:29:a2:b1:20:39:d4:f9:3c:91:2c:0f:7c:32:10:d1: 14:20:0f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgSEpHC8eRdUPVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk2OTRjMjEtMTc4Yy00ZTdiLTllNzgtMDhiYzk3OGM1 ZTZmMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZjZiZDJhNjctNjEzMy00ZWFlLWJmZjEtZjZkNDQxMWFkNGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO9wAT4+UcYaK5egruHOA7uGY95gjexhwz3K uw3yFqRw4304wg18SDcjFrWLCYbhTTavUbv1sJpAUwDOTFERnnouZ/cZlvv539pG pf1v9eIM/2DBMHmF/coon7bzX6RpO4l6qSY5E7K91oZRkEZfSIture9dekyEDXbn qeLb5IqxkWf9DoKGLR5kyabD1/4CTzywUgvF6EL06iHvnVz4fiCYwOil+J4yH+9H r9crDuqW+y6hb/AgICw+v28+lsW1HOsZ5jUJVnt1rpEVQg8sa/rHy6QBo/jLCSUd ic88pWZfm4rrj0gongjPb804LhIQw3jVb408K3sJyn8c3Dwu0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8vDy4Xggo6P/m3OvznaDdmTllJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5 NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJjOTc4YzVlNmYvOWE5MjM1YWMtOWFkMS0z YTgzLWI5MzEtZTA4NmE5ODAwYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTk2OTRjMjEtMTc4Yy00ZTdiLTll NzgtMDhiYzk3OGM1ZTZmL2E5Njk0YzIxLTE3OGMtNGU3Yi05ZTc4LTA4YmM5Nzhj NWU2Zi5jcmwwHwYDVR0jBBgwFoAUhDmBT2ek8Gmra1l9o+ocZu5EiB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJj OTc4YzVlNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx/eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArQ/yggAiDM+y7O2pc0YHc2nVJzkf2ixpHe3n8xRGnLejJAkFwvVzxS 1iBmKubykslYRDlTzXRlNWyO2fRDjCWvLn4cNm6b66eOrIyH80mUjEmY3QUa9n6Z 3cdaOFjzVMBlAsqV24sYSLn21TV07JFBX5B8uA19N+RGPoxoZidyl7LEz8eJS0cl /BzMCF92I26S3JmHls1qjCGWgviogtjUuHfQOSifW6q6vtPD/uhM6KKOGWaTCdW2 W0D5VbNGWT5xh3N28SvcSdZRQjZfj2qBlNv+13N7UghYN5FaK3yisUSpbEpPH1SI pLGwHimisSA51Pk8kSwPfDIQ0RQgD/0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:27 2025 by rpki-client