$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa File: a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa (raw, json) Hash identifier: e0E2mV7xiWbwHoOOKi4XNVIvJrLXAW8cZSDMr1UTCPI= Subject key identifier: 5D:DB:F9:B3:C2:5C:12:3A:DA:AA:4E:29:1A:AA:C6:19:8E:23:57:34 Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F432858483F8023FB1395519EA6464DC0 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa Signing time: Wed 18 Dec 2024 14:00:52 +0000 ROA not before: Wed 18 Dec 2024 14:00:52 +0000 ROA not after: Tue 18 Mar 2025 13:00:52 +0000 asID: 16509 IP address blocks: 199.187.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3f:80:23:fb:13:95:51:9e:a6:46:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Dec 18 14:00:52 2024 GMT Not After : Mar 18 13:00:52 2025 GMT Subject: CN=65f743dd-766f-447d-bf29-af7f81aef780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:8c:5f:51:d3:7f:f6:ce:b2:ce:94:07:91: 9b:bb:8c:4f:09:a4:70:d3:ea:62:c5:2f:b7:a8:27: dd:5c:67:7a:69:dd:57:d8:74:2f:be:2a:af:b5:39: d9:97:d3:ed:a4:9c:6e:80:23:32:b3:e7:44:3a:a6: 8c:e5:c9:45:60:e6:58:4d:bc:c3:d5:c2:05:10:c0: 51:51:99:ff:1a:24:75:bf:f9:08:c9:0d:48:cc:c6: 9e:1d:c5:06:f4:44:a1:98:89:3a:7e:29:8e:de:1b: 55:fa:7d:59:49:06:29:0d:c4:7c:c2:19:b2:35:8a: 31:7f:53:de:00:68:73:6d:ed:54:ae:b1:c4:c2:13: b0:7b:65:f7:d4:03:5c:2b:5e:c4:a3:74:23:8c:fd: 97:b3:97:42:51:a2:cf:df:50:27:d1:bf:6a:55:ad: ba:c5:f8:0f:9b:39:a8:4d:5b:aa:b6:41:2a:18:b3: 34:b8:a3:0e:02:02:47:03:71:91:40:a8:af:90:cd: 63:3d:29:1c:ef:92:4d:26:73:c3:f2:32:c9:4f:ea: 91:54:a3:e0:dd:52:b0:b8:43:5f:e6:09:a7:e0:49: 37:65:b0:67:35:bd:69:99:fe:0e:d2:fd:7f:b7:94: cd:2f:c9:bd:a7:8d:9e:6a:2e:42:e2:b7:a4:c4:3e: f1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DB:F9:B3:C2:5C:12:3A:DA:AA:4E:29:1A:AA:C6:19:8E:23:57:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d6:3f:c1:95:6d:3d:70:6e:bc:8b:4b:9e:8f:d8:4c:01:77: f2:b9:98:26:a7:4f:51:fe:a9:fd:96:8a:16:7d:4f:fd:45:43: 19:8c:bc:e5:9a:a5:c7:dd:58:73:67:5b:ad:f4:4c:3e:19:25: 29:26:e6:ae:67:db:db:bf:3b:c3:db:ee:eb:49:44:54:b9:38: 6a:9d:a8:a1:80:f2:b3:9c:0d:7a:df:ee:48:d3:c1:ce:66:a2: bb:d4:da:22:16:56:0b:eb:fc:87:7c:20:af:a5:37:c8:6a:31: 96:ab:86:ec:33:1f:35:6e:fc:6e:51:fd:c1:c2:7f:af:fd:9c: f9:94:be:b3:5d:75:e5:b4:08:e6:91:27:b0:56:66:71:ce:3d: 99:12:75:84:52:64:d4:53:f4:9d:e0:2d:90:96:fd:92:b4:a1: a0:9a:94:e4:a3:d5:75:ab:b6:bb:18:09:58:7b:ad:9e:ef:58: 60:8e:f7:db:93:ec:5c:6e:f2:93:64:c0:2a:a3:4e:3d:63:16: 33:82:a1:d9:68:7c:02:24:ef:ff:dd:1f:54:7a:22:38:33:5a: 2e:4c:59:9f:1b:b1:c7:06:21:65:2d:10:19:7d:46:00:5f:79: cd:54:68:93:16:90:47:f8:e1:f2:f0:7a:bb:76:6a:ba:e9:d5: fe:f3:27:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gCP7E5VRnqZGTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk NjVmNzQzZGQtNzY2Zi00NDdkLWJmMjktYWY3ZjgxYWVmNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulmMX1HTf/bOss6UB5Gbu4xPCaRw0+pixS+3 qCfdXGd6ad1X2HQvviqvtTnZl9PtpJxugCMys+dEOqaM5clFYOZYTbzD1cIFEMBR UZn/GiR1v/kIyQ1IzMaeHcUG9EShmIk6fimO3htV+n1ZSQYpDcR8whmyNYoxf1Pe AGhzbe1UrrHEwhOwe2X31ANcK17Eo3QjjP2Xs5dCUaLP31An0b9qVa26xfgPmzmo TVuqtkEqGLM0uKMOAgJHA3GRQKivkM1jPSkc75JNJnPD8jLJT+qRVKPg3VKwuENf 5gmn4Ek3ZbBnNb1pmf4O0v1/t5TNL8m9p42eai5C4rekxD7xkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3b+bPCXBI62qpOKRqqxhmOI1c0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvYTA4YmExYzktMzhhNy0z MWFkLWExNWUtMGM3MDQ0MTAyOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7upMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7WP8GVbT1wbryLS56P2EwBd/K5mCanT1H+qf2WihZ9T/1FQxmMvOWa pcfdWHNnW630TD4ZJSkm5q5n29u/O8Pb7utJRFS5OGqdqKGA8rOcDXrf7kjTwc5m orvU2iIWVgvr/Id8IK+lN8hqMZarhuwzHzVu/G5R/cHCf6/9nPmUvrNddeW0COaR J7BWZnHOPZkSdYRSZNRT9J3gLZCW/ZK0oaCalOSj1XWrtrsYCVh7rZ7vWGCO99uT 7Fxu8pNkwCqjTj1jFjOCodlofAIk7//dH1R6IjgzWi5MWZ8bsccGIWUtEBl9RgBf ec1UaJMWkEf44fLwert2arrp1f7zJ5U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:40 2025 by rpki-client