$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa File: 4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa (raw, json) Hash identifier: 7fe3U2T0U2uQkG2yVnSJavlTkhWBPFfz59rJf9KhcQI= Subject key identifier: A0:B8:77:C5:23:5A:CE:DE:E4:06:0B:F1:1C:EA:83:26:83:07:ED:29 Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F432858487FB5D9A471D3FAF2B15F5CA0 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 199.187.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:d9:a4:71:d3:fa:f2:b1:5f:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=8b2d0b4f-488a-4052-ac7e-0efb8a7f1c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9f:38:33:bc:1d:6f:c5:0c:47:a5:41:3a:d1: 72:74:4d:46:9e:53:70:ac:eb:55:57:34:2f:1a:29: b1:11:dd:41:a0:5d:8f:bc:cb:4e:ed:46:57:5c:f3: 1a:df:73:21:0b:4f:0a:a0:99:2d:d6:1e:6a:70:0a: 52:8f:96:1b:32:82:62:e2:41:de:a7:05:37:98:ac: 9d:fe:63:a2:49:6c:83:45:82:d6:04:a6:3f:bc:e7: d1:8a:7d:88:7f:3a:8f:e1:92:8f:90:f2:f5:dc:99: ce:f0:5e:07:54:1c:ce:25:b9:57:1d:12:c8:c5:8c: 79:34:35:37:a3:8b:ad:70:ba:46:89:22:b0:35:43: f3:3d:8c:4f:12:99:44:ad:84:5f:d9:4e:36:71:c2: 0d:5d:4d:4e:2e:27:b5:89:f1:93:26:43:2f:2c:8a: d6:53:66:98:27:3a:f7:99:cf:2d:d5:4b:fc:4d:79: 71:5e:f3:1f:8b:c3:dd:64:bd:1b:40:40:a2:9e:80: 64:55:e1:e3:4b:16:b5:ed:ae:7d:71:3e:aa:76:2b: 30:68:f7:76:de:1d:e2:d9:d9:2b:94:5c:9f:7b:2d: 5c:7b:cf:95:a0:3c:f7:e5:a6:69:d0:8d:65:ab:01: a7:77:34:66:62:26:2e:b9:0b:9c:93:09:90:c2:a8: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B8:77:C5:23:5A:CE:DE:E4:06:0B:F1:1C:EA:83:26:83:07:ED:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:e1:56:7f:7f:f0:ab:2a:5a:3f:ba:cb:37:44:22:05:4c:29: df:10:f3:62:42:74:19:13:55:dd:c9:8d:2d:10:99:7d:45:07: 72:3c:81:fa:18:be:07:be:b2:18:d6:54:44:f7:e6:48:b7:b4: 4b:f9:bb:8d:40:8b:dc:ba:b0:b1:e0:f6:69:d0:03:5e:8c:fa: e9:e0:48:79:ca:8b:05:97:f5:a3:34:23:2e:32:bb:35:8b:90: 92:92:e3:6e:83:fd:53:30:72:84:3b:e8:cf:5b:0a:7c:76:8c: bc:4f:bb:fa:d1:8d:fa:7d:a4:ff:9e:25:c2:af:6d:b7:0d:fc: 2e:1c:1f:b5:d9:03:74:82:ed:96:24:82:26:7f:69:46:43:f6: 71:94:8e:49:70:32:72:98:39:c4:92:fb:37:27:77:6d:51:a9: f9:f5:13:ec:37:1b:6a:7e:fd:38:3a:fe:58:4e:6f:4e:ad:4d: 92:2a:5f:8e:95:9e:c9:7c:9e:a9:80:dd:58:fd:1f:4e:f5:b9: 16:67:86:bb:ae:a0:c1:93:1e:7b:5b:5c:5d:bf:17:bd:2f:14: a4:2a:4f:2c:98:dc:a9:55:f8:d6:2d:04:c9:fa:ce:0d:72:fe: 51:db:83:4e:6e:5d:ed:55:d7:48:47:29:a4:3d:de:83:2f:e9: 56:1b:75:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tdmkcdP68rFfXKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk OGIyZDBiNGYtNDg4YS00MDUyLWFjN2UtMGVmYjhhN2YxYzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ84M7wdb8UMR6VBOtFydE1GnlNwrOtVVzQv GimxEd1BoF2PvMtO7UZXXPMa33MhC08KoJkt1h5qcApSj5YbMoJi4kHepwU3mKyd /mOiSWyDRYLWBKY/vOfRin2IfzqP4ZKPkPL13JnO8F4HVBzOJblXHRLIxYx5NDU3 o4utcLpGiSKwNUPzPYxPEplErYRf2U42ccINXU1OLie1ifGTJkMvLIrWU2aYJzr3 mc8t1Uv8TXlxXvMfi8PdZL0bQECinoBkVeHjSxa17a59cT6qdiswaPd23h3i2dkr lFyfey1ce8+VoDz35aZp0I1lqwGndzRmYiYuuQuckwmQwqjXWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKC4d8UjWs7e5AYL8RzqgyaDB+0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvNGIyOWE4ZDktZmY0Zi0z OWEzLThjNjktMTcwZWY1NDRlYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7uqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrhVn9/8KsqWj+6yzdEIgVMKd8Q82JCdBkTVd3JjS0QmX1FB3I8gfoY vge+shjWVET35ki3tEv5u41Ai9y6sLHg9mnQA16M+ungSHnKiwWX9aM0Iy4yuzWL kJKS426D/VMwcoQ76M9bCnx2jLxPu/rRjfp9pP+eJcKvbbcN/C4cH7XZA3SC7ZYk giZ/aUZD9nGUjklwMnKYOcSS+zcnd21Rqfn1E+w3G2p+/Tg6/lhOb06tTZIqX46V nsl8nqmA3Vj9H071uRZnhruuoMGTHntbXF2/F70vFKQqTyyY3KlV+NYtBMn6zg1y /lHbg05uXe1V10hHKaQ93oMv6VYbdZA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:32 2025 by rpki-client