$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa File: 5cc41769-a8f8-3609-a674-3c555a34b77b.roa (raw, json) Hash identifier: 8Jn/ZbyANpoNZaXLZpe7vnPx0djwAYQHK9gASquZgps= Subject key identifier: BC:AD:FD:B7:B1:16:9F:A9:B8:A4:FC:6E:59:81:4D:3C:D5:9B:6F:0C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BBBB7D60600D43798FA29E00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 199.126.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:7d:60:60:0d:43:79:8f:a2:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=c37d6939-489d-4e89-8bd6-0699ce705a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6c:43:75:1a:cc:11:4c:12:cd:bd:78:f2:54: b8:a3:3a:72:3d:15:25:8b:5e:3d:51:16:51:6a:64: 33:53:ec:95:1f:69:80:63:e4:9f:c6:9a:a3:29:85: de:68:6c:8d:2c:61:6f:ff:71:05:d6:01:28:9b:5e: 81:41:5c:98:b8:81:b2:8b:f8:0d:3e:73:f4:24:55: 22:6d:2a:50:41:34:09:76:b5:94:9a:ae:da:e3:3c: 31:d2:36:6e:2f:8d:4e:fd:dd:98:2a:82:b0:7f:bf: 81:42:34:5d:7c:8d:71:b9:08:d2:3f:9f:a0:2f:11: 72:cd:56:68:e1:e9:fe:49:ec:51:c1:20:2b:86:4f: 3b:55:6d:06:96:93:cb:7a:34:cc:4f:f9:50:34:6b: df:77:31:26:da:d1:a5:7a:72:8a:5c:67:76:8e:2f: 5e:38:20:25:93:e4:47:a7:93:58:80:bd:4a:71:1c: 26:20:3a:30:9d:91:f3:cc:25:09:88:f9:0b:8b:17: 1c:42:7e:92:a1:48:91:f4:b1:af:95:b8:49:74:0f: 5e:01:f0:b3:c4:80:65:8a:cb:43:ab:7c:0e:59:fd: e6:2a:32:ba:3c:4a:f3:cd:02:93:e8:60:4d:ef:70: ab:59:e4:c8:dd:b9:ab:0b:78:3c:c1:03:22:ea:74: a7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AD:FD:B7:B1:16:9F:A9:B8:A4:FC:6E:59:81:4D:3C:D5:9B:6F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 199.126.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9c:d8:5e:7f:1b:27:d1:09:d1:c3:74:72:b7:4a:14:60:e5: 7d:f6:75:e5:c6:62:80:25:b1:5a:40:9a:00:bd:d6:94:d9:ee: d7:74:b1:09:7e:4d:9d:00:f4:db:38:90:11:13:bc:ed:9b:8b: 0a:0c:d9:17:d2:2c:c1:4a:19:fe:8b:51:4e:75:75:0d:b4:5a: 98:86:04:62:3c:87:62:78:9f:20:af:96:ad:ce:68:88:5b:67: 9f:e2:46:e0:99:98:8f:3d:c6:9c:29:a4:7f:02:8c:f8:c5:1d: d9:49:ce:45:3a:9f:40:57:13:da:cf:b3:38:40:08:3f:88:32: fe:2b:1f:d0:3a:24:86:56:19:f4:d3:70:53:68:0d:85:22:12: d1:b8:6c:bd:4d:75:ae:80:96:0c:7e:4b:bd:08:6c:88:82:61: 97:91:4c:5c:d0:24:42:c8:a3:83:6c:66:c1:5c:0c:bf:b0:d5: 27:6f:b9:7c:62:8c:55:61:d1:62:9c:df:a8:28:e0:3b:e1:a0: d9:77:5c:48:00:3e:fb:93:c3:f6:34:3c:f6:8c:2e:30:4e:b3: 65:97:38:a5:55:8c:5d:f9:42:a6:2d:3f:cc:ea:22:4e:19:c6: 82:a7:7c:dd:97:65:52:1d:a7:07:bc:68:25:79:55:43:34:ce: 14:a1:26:d5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi7u31gYA1DeY+ingAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk YzM3ZDY5MzktNDg5ZC00ZTg5LThiZDYtMDY5OWNlNzA1YTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2xDdRrMEUwSzb148lS4ozpyPRUli149URZR amQzU+yVH2mAY+SfxpqjKYXeaGyNLGFv/3EF1gEom16BQVyYuIGyi/gNPnP0JFUi bSpQQTQJdrWUmq7a4zwx0jZuL41O/d2YKoKwf7+BQjRdfI1xuQjSP5+gLxFyzVZo 4en+SexRwSArhk87VW0GlpPLejTMT/lQNGvfdzEm2tGlenKKXGd2ji9eOCAlk+RH p5NYgL1KcRwmIDownZHzzCUJiPkLixccQn6SoUiR9LGvlbhJdA9eAfCzxIBlistD q3wOWf3mKjK6PErzzQKT6GBN73CrWeTI3bmrC3g8wQMi6nSneQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLyt/bexFp+puKT8blmBTTzVm28MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWNjNDE3NjktYThmOC0z NjA5LWE2NzQtM2M1NTVhMzRiNzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAx34wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAM5zYXn8bJ9EJ0cN0crdKFGDlffZ15cZigCWxWkCaAL3WlNnu13SxCX5N nQD02ziQERO87ZuLCgzZF9IswUoZ/otRTnV1DbRamIYEYjyHYnifIK+Wrc5oiFtn n+JG4JmYjz3GnCmkfwKM+MUd2UnORTqfQFcT2s+zOEAIP4gy/isf0DokhlYZ9NNw U2gNhSIS0bhsvU11roCWDH5LvQhsiIJhl5FMXNAkQsijg2xmwVwMv7DVJ2+5fGKM VWHRYpzfqCjgO+Gg2XdcSAA++5PD9jQ89owuME6zZZc4pVWMXflCpi0/zOoiThnG gqd83ZdlUh2nB7xoJXlVQzTOFKEm1Q== -----END CERTIFICATE-----Generated at Sun Feb 16 20:40:55 2025 by rpki-client