$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa File: 1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa (raw, json) Hash identifier: 8JAnyoYAGLVTScnhkNdTOD/6+XHdGOAmjMaLCxA7SYo= Subject key identifier: E0:CE:50:EF:6B:FA:B6:51:E4:4D:C3:E4:3C:CE:12:97:68:AD:22:81 Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F4328584840E556EF380CDBB238C669C4 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 11052 IP address blocks: 199.249.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:56:ef:38:0c:db:b2:38:c6:69:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=71f1f34a-eb97-46a8-9519-e9f1eee375b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:68:74:0e:4a:c9:1e:79:0b:75:39:fb:aa:38: 32:be:6c:59:48:9d:ad:13:86:f5:09:cf:2b:c3:87: dc:6e:cc:4e:91:c6:35:9e:55:65:2a:24:c3:10:23: 63:d8:4f:ea:b7:f3:95:70:d7:76:6f:ec:2c:89:ef: 88:55:c8:dd:75:6c:ec:1f:c1:04:b1:2f:59:57:d9: 3c:3c:7b:cf:0b:c7:90:99:d4:db:6a:4f:59:58:5b: 74:b4:35:2f:ef:e7:21:b6:a7:29:3b:dd:62:83:28: 22:15:b5:0d:05:4c:94:ff:fe:48:70:13:f2:11:da: 32:88:9a:4e:1e:cc:f5:34:66:46:15:99:4c:d5:46: d7:45:99:65:37:cd:86:30:16:04:39:c9:52:37:87: 35:92:17:7b:00:5e:f9:96:43:19:34:a4:b6:0f:de: f9:70:5f:7a:08:01:28:18:19:5f:d0:9b:9e:11:90: 20:17:79:05:39:92:8d:a2:66:2b:85:6c:11:71:39: 8d:3a:ab:46:df:d4:7c:4f:38:f3:87:4e:d8:fd:aa: 8f:3a:b6:f2:8e:54:bb:ea:eb:17:3e:b2:d8:1f:c7: b4:b2:6a:d0:ce:20:9d:94:22:59:1c:dd:7c:c8:6c: e2:05:29:66:80:5d:c1:1c:eb:79:5a:86:b0:66:da: 2e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CE:50:EF:6B:FA:B6:51:E4:4D:C3:E4:3C:CE:12:97:68:AD:22:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:22:a2:98:c6:47:31:e1:06:99:43:c4:ce:05:01:42:26:20: 5e:84:3f:78:2b:34:ed:3c:ee:7d:2e:65:87:b1:9f:17:40:95: 4f:88:93:4f:a3:4c:96:63:8e:21:59:95:b4:db:5a:48:14:c0: e5:16:08:44:6b:99:73:c2:da:b5:a8:08:e2:ca:48:c0:9a:db: b5:eb:d5:1f:48:3f:1e:aa:1b:da:f8:10:75:52:3b:80:85:82: dd:49:ec:6b:cf:f7:12:dc:96:b5:d1:df:17:94:9f:50:d2:49: 45:f4:46:39:24:4a:e3:52:54:af:c1:73:db:9c:1c:75:0e:d9: c2:c5:59:7e:34:00:c2:46:1e:8e:75:a4:34:e8:25:bf:eb:c1: 58:58:c3:aa:aa:c9:aa:c4:ba:7d:9a:85:7e:a3:ef:66:36:e9: 28:42:1e:27:dc:46:49:be:6b:1e:9a:45:5e:7a:33:c7:b4:fd: ed:54:ca:25:66:18:b9:8a:bc:4d:2b:ae:12:ea:ba:bb:e5:6b: 78:2e:ab:e9:1c:8f:26:49:07:30:a0:d7:f2:0a:4a:e5:5d:bd: c7:71:dc:b4:47:b2:f9:90:fd:7b:a6:14:61:da:41:20:77:15: 26:c9:b1:5c:46:3b:30:30:a4:6e:9c:8d:e9:b5:7c:11:bc:70: f4:90:da:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5VbvOAzbsjjGacQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk NzFmMWYzNGEtZWI5Ny00NmE4LTk1MTktZTlmMWVlZTM3NWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Wh0DkrJHnkLdTn7qjgyvmxZSJ2tE4b1Cc8r w4fcbsxOkcY1nlVlKiTDECNj2E/qt/OVcNd2b+wsie+IVcjddWzsH8EEsS9ZV9k8 PHvPC8eQmdTbak9ZWFt0tDUv7+chtqcpO91igygiFbUNBUyU//5IcBPyEdoyiJpO Hsz1NGZGFZlM1UbXRZllN82GMBYEOclSN4c1khd7AF75lkMZNKS2D975cF96CAEo GBlf0JueEZAgF3kFOZKNomYrhWwRcTmNOqtG39R8Tzjzh07Y/aqPOrbyjlS76usX PrLYH8e0smrQziCdlCJZHN18yGziBSlmgF3BHOt5WoawZtounQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODOUO9r+rZR5E3D5DzOEpdorSKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvMWVmYWNhMmUtZWNiNy0z YWYyLWE2ODAtYWE0Y2QyNGRmNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgiopjGRzHhBplDxM4FAUImIF6EP3grNO087n0uZYexnxdAlU+Ik0+j TJZjjiFZlbTbWkgUwOUWCERrmXPC2rWoCOLKSMCa27Xr1R9IPx6qG9r4EHVSO4CF gt1J7GvP9xLclrXR3xeUn1DSSUX0RjkkSuNSVK/Bc9ucHHUO2cLFWX40AMJGHo51 pDToJb/rwVhYw6qqyarEun2ahX6j72Y26ShCHifcRkm+ax6aRV56M8e0/e1UyiVm GLmKvE0rrhLqurvla3guq+kcjyZJBzCg1/IKSuVdvcdx3LRHsvmQ/XumFGHaQSB3 FSbJsVxGOzAwpG6cjem1fBG8cPSQ2hY= -----END CERTIFICATE-----Generated at Sun Feb 16 21:01:59 2025 by rpki-client