$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/254985db-4130-3371-adaf-7de790bd4207.roa File: 254985db-4130-3371-adaf-7de790bd4207.roa (raw, json) Hash identifier: 5N23GKnmY/SoV8gNJ8oDjbOpcY3OOT14SuP0dahnPr8= Subject key identifier: 67:E8:E9:31:65:BA:E1:A3:F0:CF:9F:41:E0:FA:87:AE:91:7D:53:2B Certificate issuer: /CN=b5f49734-696b-4966-8db9-1388a58a153f Certificate serial: 010D0C9F4328584840E5582806B3E630A0718260 Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/254985db-4130-3371-adaf-7de790bd4207.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 210 IP address blocks: 198.60.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:58:28:06:b3:e6:30:a0:71:82:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=60b2cf1c-20db-4fdb-9182-6df2a63e553b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:96:ee:57:3c:8b:f7:31:ea:cd:2c:f0:a9: cd:d1:2b:e9:f9:5f:0c:62:34:db:ed:45:4b:9f:fb: 4a:66:25:fd:62:72:8c:0d:55:d6:a7:75:a1:ef:8d: 41:4b:e2:9f:52:2e:00:2f:79:ef:22:75:ab:61:f0: 61:c2:85:53:e4:8c:98:32:31:94:93:a2:85:0a:1a: d2:3a:92:39:6e:cb:49:af:cf:fe:9f:d3:86:32:50: 38:ac:d8:57:97:57:a2:1b:17:87:9a:fa:68:92:49: 57:c7:c4:bd:48:da:31:a0:9b:67:3a:64:47:8e:a7: 28:5b:68:e8:97:eb:6b:bd:c7:d5:3a:b6:51:d8:13: 88:a4:11:f7:f3:ec:7d:50:1a:3e:37:b0:7b:b9:a0: 62:49:23:22:93:2e:c4:44:37:37:85:b2:4a:dd:06: da:fb:71:f2:35:f5:51:e2:a4:b9:b3:cc:5b:1a:89: 52:ab:73:40:6e:78:e6:d4:26:a5:37:92:4e:76:b7: 0d:10:bc:54:5a:01:1b:62:27:1d:f2:1f:96:9d:c2: 27:d5:7e:70:33:2a:6e:10:5f:4b:02:c2:4c:be:1e: 23:de:3f:37:3f:af:1f:6b:f2:3a:43:55:2f:0d:24: d4:0b:cc:65:43:88:1c:5c:0b:4b:5e:2d:bf:10:b1: f4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E8:E9:31:65:BA:E1:A3:F0:CF:9F:41:E0:FA:87:AE:91:7D:53:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/254985db-4130-3371-adaf-7de790bd4207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl X509v3 Authority Key Identifier: keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer sbgp-ipAddrBlock: critical IPv4: 198.60.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a5:57:b1:1b:2d:31:c5:0c:15:b3:d0:5c:2a:f7:62:00:4d: 8c:e8:7c:d4:3f:a1:ad:33:25:0d:54:40:f6:74:30:99:40:27: 7d:1b:f5:f7:1b:46:84:de:1d:6f:28:23:83:66:a1:aa:8d:f2: 82:5f:72:ea:40:e3:52:e9:85:e8:d4:73:85:e0:6b:97:f1:59: 6c:2c:ca:ba:24:ec:17:c7:28:c9:68:5b:e4:3d:f4:ee:ce:ee: 4d:fd:f4:d1:52:b6:b3:53:36:92:29:61:31:99:08:f8:19:b9: 44:29:2d:45:8e:a2:f9:83:c8:39:d0:7b:4b:01:38:11:5b:e2: d3:0d:84:3e:32:48:01:c0:b3:e6:dc:89:7f:69:bf:cd:b9:e6: a1:45:80:b6:07:32:f8:2c:1d:39:6b:7a:18:b5:1c:c5:8c:96: 93:6b:a8:a1:74:a5:72:cb:17:8c:db:04:0b:6d:3b:4a:d4:90: 1e:9e:c8:8e:f1:50:b2:2a:61:f6:9c:6c:ef:81:61:9c:5c:7e: 15:06:ea:fe:db:03:df:53:e6:b6:7b:e2:8e:1d:ed:48:da:ec: ab:46:01:ea:55:55:38:ff:0e:90:ec:2e:7d:de:a6:1a:d0:8c: 6f:a7:90:af:18:62:2d:05:1d:5c:c6:ad:8b:e6:87:82:c0:8a: 7a:84:95:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5VgoBrPmMKBxgmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx NTNmMB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk NjBiMmNmMWMtMjBkYi00ZmRiLTkxODItNmRmMmE2M2U1NTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM2W7lc8i/cx6s0s8KnN0Svp+V8MYjTb7UVL n/tKZiX9YnKMDVXWp3Wh741BS+KfUi4AL3nvInWrYfBhwoVT5IyYMjGUk6KFChrS OpI5bstJr8/+n9OGMlA4rNhXl1eiGxeHmvpokklXx8S9SNoxoJtnOmRHjqcoW2jo l+trvcfVOrZR2BOIpBH38+x9UBo+N7B7uaBiSSMiky7ERDc3hbJK3Qba+3HyNfVR 4qS5s8xbGolSq3NAbnjm1CalN5JOdrcNELxUWgEbYicd8h+WncIn1X5wMypuEF9L AsJMvh4j3j83P68fa/I6Q1UvDSTUC8xlQ4gcXAtLXi2/ELH0lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfo6TFluuGj8M+fQeD6h66RfVMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0 OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvMjU0OTg1ZGItNDEzMC0z MzcxLWFkYWYtN2RlNzkwYmQ0MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4 YTU4YTE1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjwCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJulV7EbLTHFDBWz0Fwq92IATYzofNQ/oa0zJQ1UQPZ0MJlAJ30b9fcb RoTeHW8oI4NmoaqN8oJfcupA41LphejUc4Xga5fxWWwsyrok7BfHKMloW+Q99O7O 7k399NFStrNTNpIpYTGZCPgZuUQpLUWOovmDyDnQe0sBOBFb4tMNhD4ySAHAs+bc iX9pv8255qFFgLYHMvgsHTlrehi1HMWMlpNrqKF0pXLLF4zbBAttO0rUkB6eyI7x ULIqYfacbO+BYZxcfhUG6v7bA99T5rZ74o4d7Uja7KtGAepVVTj/DpDsLn3ephrQ jG+nkK8YYi0FHVzGrYvmh4LAinqElfE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:30:18 2025 by rpki-client