$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/e7e9a678-ff8b-3604-bde7-42c16df85d1c.roa File: e7e9a678-ff8b-3604-bde7-42c16df85d1c.roa (raw, json) Hash identifier: Jz+5fsCAzLOVHG1lhEBg3TFUczy86cSSEwYTVN7hbao= Subject key identifier: 11:35:E8:6A:29:A5:4D:B9:73:8F:D0:5D:03:2A:42:C3:07:A4:9A:85 Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Certificate serial: 010D0C9F432858489A3B4A27F915DB124FF10000 Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/e7e9a678-ff8b-3604-bde7-42c16df85d1c.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 396982 IP address blocks: 199.47.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:4a:27:f9:15:db:12:4f:f1:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=0d8ee821-1c7c-4a49-bd94-b2e4a2c1c9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:42:34:aa:fe:23:88:34:df:ec:e2:18:1b: 90:d2:45:50:c9:9d:57:1b:ba:a6:fc:e3:33:36:1e: 19:25:7d:22:a6:ca:4b:27:75:9c:44:1a:a6:64:a4: f6:dd:45:eb:e8:b7:db:2d:a7:85:59:4a:b2:81:7e: 23:4a:2e:f4:c9:16:79:a2:7c:00:54:06:d9:88:f2: c0:45:7f:ea:6b:ad:4f:d9:72:8d:de:97:bf:bc:6e: 8e:4c:81:e3:73:15:72:f9:40:98:31:de:7d:aa:76: 9e:f7:da:b1:d7:d6:ec:57:e0:ae:3b:73:e5:30:41: 73:a3:f9:90:c0:7c:53:03:d4:10:10:dd:4d:8d:2c: 06:c7:cd:c4:3d:0a:ea:da:79:12:d0:d2:8d:98:a7: 0c:a9:9f:d3:b9:86:10:60:55:35:a7:d1:62:30:4e: 31:21:58:be:b5:f9:1c:dd:27:3a:8b:44:42:ef:f3: 08:73:49:cd:7f:04:4a:87:f8:25:67:36:d5:73:0b: cc:90:86:12:70:ac:e6:6d:3e:b3:61:8c:6e:8c:eb: 10:e0:6d:c7:22:3f:b4:ff:32:e9:35:51:42:48:52: a5:19:5a:63:e8:01:d0:3a:18:62:a3:66:1d:21:11: 1e:61:a7:45:00:82:75:e0:bf:19:f1:08:d9:07:ea: c0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:35:E8:6A:29:A5:4D:B9:73:8F:D0:5D:03:2A:42:C3:07:A4:9A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/e7e9a678-ff8b-3604-bde7-42c16df85d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl X509v3 Authority Key Identifier: keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer sbgp-ipAddrBlock: critical IPv4: 199.47.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bc:02:da:3c:13:74:63:02:04:e3:b7:11:c1:2d:44:61:a4: 98:c8:bf:e1:be:a2:d4:46:17:2e:bb:93:23:a6:10:44:fb:1d: 50:0b:4c:ee:72:65:2b:46:1e:25:a0:15:2b:7f:b4:50:46:e8: df:18:1b:83:5d:c7:68:49:16:5c:a2:7b:13:88:5f:04:21:92: 4e:83:57:1c:da:ce:c3:89:45:29:26:bd:f3:9e:5e:f1:75:ca: a8:bf:cf:be:3c:f9:b7:72:97:33:49:cc:c3:6f:ea:ab:98:3a: 51:56:91:a0:d2:a1:49:ac:d8:26:55:16:45:26:28:fe:3a:4e: 16:07:66:29:32:3a:6e:99:22:45:70:40:9f:88:be:59:f1:18: e9:5c:ed:f7:98:03:3d:25:62:1f:5b:47:e9:3c:a3:40:44:96: c4:72:b8:5f:bf:c6:80:d2:32:82:22:9c:76:85:97:ca:52:f8: f3:90:7d:f0:5b:40:ad:88:06:1e:5b:eb:72:d9:b2:0e:0c:f9: 71:5f:dd:d3:68:2a:5b:45:68:e0:5c:1d:75:42:30:26:8e:a3: 61:d1:18:03:ab:a2:13:05:3c:8b:8c:83:cc:47:a3:9c:57:7f: b4:56:85:98:a3:f7:d1:29:b9:71:46:b5:cd:98:1c:3e:d6:47: fc:04:ba:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0on+RXbEk/xAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw OTZlMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk MGQ4ZWU4MjEtMWM3Yy00YTQ5LWJkOTQtYjJlNGEyYzFjOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVxCNKr+I4g03+ziGBuQ0kVQyZ1XG7qm/OMz Nh4ZJX0ipspLJ3WcRBqmZKT23UXr6LfbLaeFWUqygX4jSi70yRZ5onwAVAbZiPLA RX/qa61P2XKN3pe/vG6OTIHjcxVy+UCYMd59qnae99qx19bsV+CuO3PlMEFzo/mQ wHxTA9QQEN1NjSwGx83EPQrq2nkS0NKNmKcMqZ/TuYYQYFU1p9FiME4xIVi+tfkc 3Sc6i0RC7/MIc0nNfwRKh/glZzbVcwvMkIYScKzmbT6zYYxujOsQ4G3HIj+0/zLp NVFCSFKlGVpj6AHQOhhio2YdIREeYadFAIJ14L8Z8QjZB+rAuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBE16GoppU25c4/QXQMqQsMHpJqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvZTdlOWE2NzgtZmY4Yi0z NjA0LWJkZTctNDJjMTZkZjg1ZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy9tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu8Ato8E3RjAgTjtxHBLURhpJjIv+G+otRGFy67kyOmEET7HVALTO5y ZStGHiWgFSt/tFBG6N8YG4Ndx2hJFlyiexOIXwQhkk6DVxzazsOJRSkmvfOeXvF1 yqi/z748+bdylzNJzMNv6quYOlFWkaDSoUms2CZVFkUmKP46ThYHZikyOm6ZIkVw QJ+IvlnxGOlc7feYAz0lYh9bR+k8o0BElsRyuF+/xoDSMoIinHaFl8pS+POQffBb QK2IBh5b63LZsg4M+XFf3dNoKltFaOBcHXVCMCaOo2HRGAOrohMFPIuMg8xHo5xX f7RWhZij99EpuXFGtc2YHD7WR/wEuuU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:38 2025 by rpki-client