$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/352287bb-7c9a-3a83-8ea6-1ca95a7ce918.roa File: 352287bb-7c9a-3a83-8ea6-1ca95a7ce918.roa (raw, json) Hash identifier: WDRYJ59RJUTR7l0SeH18rWApo+PeMOgjQiKMZ7hgBwY= Subject key identifier: 1D:DB:17:18:E8:AF:81:7A:0D:38:95:59:47:98:9C:32:F2:44:7E:6E Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Certificate serial: 010D0C9F432858489A3B4A17AD144AB32D2A2700 Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/352287bb-7c9a-3a83-8ea6-1ca95a7ce918.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 396982 IP address blocks: 199.47.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:4a:17:ad:14:4a:b3:2d:2a:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=9d584d1e-894b-4b18-854d-f59e4d1608bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:99:06:db:e3:68:ac:09:6b:28:1e:66:7e:5f: c8:ab:85:fc:1e:ca:61:27:c2:ed:85:04:29:16:71: cf:48:dd:d8:19:aa:53:0d:80:7d:f3:97:df:b6:d5: 3a:f4:1c:5c:b5:4d:aa:14:96:cc:10:07:45:93:c7: 3a:1d:7e:5b:39:b1:db:07:56:7c:53:e7:fe:88:d5: a5:b1:8e:27:f9:dc:99:82:27:db:1c:bd:7d:00:b5: f1:af:06:66:d6:c1:16:35:af:33:6b:2b:82:d2:8e: a0:9f:49:a9:7c:9a:a9:d1:b7:e8:f2:ff:64:c4:3a: 7b:ef:34:59:07:8d:e1:53:f1:37:07:3c:4b:b3:24: 21:87:17:3a:d7:43:27:ad:e8:b2:f5:88:24:32:da: b4:12:11:94:59:9f:c7:63:14:12:e8:d3:4e:6e:ca: f7:a7:10:eb:34:d6:3c:84:1e:be:2a:33:71:ce:7b: 12:87:66:1f:01:8b:be:a0:a0:34:1e:6c:b0:62:d0: 85:6d:fb:98:c7:bf:42:7f:15:19:4d:01:10:55:e7: 27:44:ca:90:4b:b3:d7:d5:c8:40:13:07:b2:2f:e9: e2:16:c5:9a:8a:dd:05:c3:50:05:02:68:29:bd:03: 24:e8:a4:ad:17:cd:04:f6:81:58:18:97:e0:48:e2: 83:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DB:17:18:E8:AF:81:7A:0D:38:95:59:47:98:9C:32:F2:44:7E:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/352287bb-7c9a-3a83-8ea6-1ca95a7ce918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl X509v3 Authority Key Identifier: keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer sbgp-ipAddrBlock: critical IPv4: 199.47.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:31:ad:05:c6:5a:ee:91:a2:9d:e1:6f:4c:9d:8b:e2:d1:1a: e1:54:30:ef:13:39:a5:bb:c3:ab:51:da:62:8d:e8:82:d4:cb: 79:42:6c:ae:34:d6:94:1f:22:ed:13:d5:dd:c9:1e:35:c9:1b: 16:9d:b6:c6:ba:fb:d4:ff:9e:f4:91:84:2d:62:c8:c2:3c:e8: 7d:fb:18:0c:4b:81:84:d3:97:e1:91:5e:af:6f:50:42:01:2d: a1:89:3d:3e:0e:eb:cc:73:8e:b0:79:60:28:ef:5c:55:23:7c: 38:48:80:1f:e1:80:95:43:a7:de:f9:24:56:a6:d3:09:c2:1b: 92:5c:c9:c5:2c:56:64:6f:30:fa:0a:76:bb:e2:2c:d5:b0:5c: 7f:e9:83:54:a2:67:85:41:43:66:83:e2:28:73:53:f3:bd:3f: 3d:98:42:18:34:86:ca:22:e7:06:66:72:0d:d5:f2:f3:97:83: c5:1d:03:ba:81:fb:2f:f8:f9:cc:0b:54:cb:88:fd:b6:6d:1e: bb:0d:7b:d4:75:17:7e:14:66:a5:b4:a6:49:06:45:e0:b2:d5: eb:76:c2:7f:9a:27:46:6c:8c:ac:f2:fe:35:f5:76:99:1f:05: 3d:5c:9f:77:05:49:25:cb:21:e1:ef:35:33:7d:04:4e:da:09: e4:f3:75:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0oXrRRKsy0qJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw OTZlMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk OWQ1ODRkMWUtODk0Yi00YjE4LTg1NGQtZjU5ZTRkMTYwOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJkG2+NorAlrKB5mfl/Iq4X8HsphJ8LthQQp FnHPSN3YGapTDYB985ffttU69BxctU2qFJbMEAdFk8c6HX5bObHbB1Z8U+f+iNWl sY4n+dyZgifbHL19ALXxrwZm1sEWNa8zayuC0o6gn0mpfJqp0bfo8v9kxDp77zRZ B43hU/E3BzxLsyQhhxc610Mnreiy9YgkMtq0EhGUWZ/HYxQS6NNObsr3pxDrNNY8 hB6+KjNxznsSh2YfAYu+oKA0HmywYtCFbfuYx79CfxUZTQEQVecnRMqQS7PX1chA EweyL+niFsWait0Fw1AFAmgpvQMk6KStF80E9oFYGJfgSOKDUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3bFxjor4F6DTiVWUeYnDLyRH5uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvMzUyMjg3YmItN2M5YS0z YTgzLThlYTYtMWNhOTVhN2NlOTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy9pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIxrQXGWu6Rop3hb0ydi+LRGuFUMO8TOaW7w6tR2mKN6ILUy3lCbK40 1pQfIu0T1d3JHjXJGxadtsa6+9T/nvSRhC1iyMI86H37GAxLgYTTl+GRXq9vUEIB LaGJPT4O68xzjrB5YCjvXFUjfDhIgB/hgJVDp975JFam0wnCG5JcycUsVmRvMPoK drviLNWwXH/pg1SiZ4VBQ2aD4ihzU/O9Pz2YQhg0hsoi5wZmcg3V8vOXg8UdA7qB +y/4+cwLVMuI/bZtHrsNe9R1F34UZqW0pkkGReCy1et2wn+aJ0ZsjKzy/jX1dpkf BT1cn3cFSSXLIeHvNTN9BE7aCeTzdWg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:30 2025 by rpki-client