$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c456b53c-367c-332e-a64e-6255602c852a.roa File: c456b53c-367c-332e-a64e-6255602c852a.roa (raw, json) Hash identifier: l5xwAc4+DoN4OSLHLpn67KfHd7l7oN/Hu6poDvvznKs= Subject key identifier: 8F:52:5B:C8:62:D8:7B:B5:B1:B3:E6:61:0E:31:CD:F6:05:C5:71:68 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C5820550793A01EAC2F47DF0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c456b53c-367c-332e-a64e-6255602c852a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 199.223.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:05:50:79:3a:01:ea:c2:f4:7d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3c55e4ce-ec9d-468d-981b-c8f70bc27387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:f2:54:f1:45:73:10:c0:32:db:66:97:f5: a1:24:47:88:a8:53:bc:b1:89:7d:b8:cc:0f:e1:44: 1f:77:31:29:ca:50:53:89:cf:28:d4:3a:4c:2d:4c: bf:e1:85:9e:33:d5:7c:c7:77:d8:db:c8:64:ba:b1: 59:cd:20:53:20:f7:96:b3:06:94:3a:b1:c5:5f:ff: a0:1f:56:25:44:a7:2b:e8:22:d3:c3:6f:6f:95:22: eb:1d:97:2b:fe:40:c5:b3:94:e2:e0:6c:af:b6:43: 21:23:c0:06:92:aa:a9:52:f8:80:55:19:ad:af:a3: 0a:da:bb:0d:0e:9a:10:00:6b:ca:5c:be:7d:e3:1e: 7a:4e:d4:eb:7d:89:08:41:64:ba:4f:60:68:c1:a2: 69:4e:b3:66:df:d5:4f:9e:21:0b:ef:bc:28:c4:12: 34:9b:4a:e7:16:bd:92:5d:81:d4:0e:24:da:4a:d7: fa:eb:c2:37:33:3a:cb:e0:b5:8a:96:82:f3:04:17: 8b:37:e9:86:85:b3:79:a9:9b:c5:b5:2d:fa:b7:03: e4:5d:0a:24:e0:05:9f:a9:c1:94:ac:99:07:af:4a: c3:f0:29:3b:da:09:20:0b:c6:2f:d7:16:65:e5:b0: ba:06:ba:99:e0:60:9a:91:ad:b5:4f:59:04:53:77: 86:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:52:5B:C8:62:D8:7B:B5:B1:B3:E6:61:0E:31:CD:F6:05:C5:71:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c456b53c-367c-332e-a64e-6255602c852a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 199.223.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:51:fe:d6:af:c8:86:c5:a1:b0:ae:c2:92:b3:ad:69:30:26: 49:9f:26:dc:15:1e:01:86:05:b6:2a:c0:a1:16:d0:c1:8c:e5: df:1b:55:72:82:94:a1:ec:db:91:09:72:a6:c9:80:f9:b8:c1: 6b:72:86:9b:33:21:29:86:1f:45:05:ae:8e:42:dd:d6:76:6a: ba:78:fc:c2:05:d5:1d:0e:b1:02:e9:d1:97:05:a4:ef:39:73: fd:7e:f8:1f:a4:dc:5a:1c:47:02:63:ce:02:0d:5f:e5:e9:77: 53:06:9e:d7:62:86:31:82:85:17:a5:d7:fd:84:cd:40:7e:cd: 27:6b:c9:4c:90:42:fc:a5:55:29:43:62:77:29:d8:7e:28:d4: 24:95:b9:ba:4e:80:ee:6e:1f:ae:42:3d:41:02:54:e3:99:61: e2:75:7e:3f:0b:e2:05:f6:7d:e5:ba:43:f1:52:a7:bc:e0:24: 24:5f:53:e9:dd:51:96:53:46:b6:e0:a5:24:3f:cf:bf:b6:44: ef:03:d8:41:b4:dc:ad:f9:1f:68:f1:f9:e3:50:e3:11:d6:44: c1:d5:00:eb:2e:b2:46:9d:2e:34:8d:e8:5c:86:b8:8f:a3:c4: 71:63:28:b7:f1:ba:1d:2b:af:e9:3a:0f:5a:a0:e9:fd:75:be: a8:2d:5e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggVQeToB6sL0ffAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2M1NWU0Y2UtZWM5ZC00NjhkLTk4MWItYzhmNzBiYzI3Mzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgPyVPFFcxDAMttml/WhJEeIqFO8sYl9uMwP 4UQfdzEpylBTic8o1DpMLUy/4YWeM9V8x3fY28hkurFZzSBTIPeWswaUOrHFX/+g H1YlRKcr6CLTw29vlSLrHZcr/kDFs5Ti4GyvtkMhI8AGkqqpUviAVRmtr6MK2rsN DpoQAGvKXL594x56TtTrfYkIQWS6T2BowaJpTrNm39VPniEL77woxBI0m0rnFr2S XYHUDiTaStf668I3MzrL4LWKloLzBBeLN+mGhbN5qZvFtS36twPkXQok4AWfqcGU rJkHr0rD8Ck72gkgC8Yv1xZl5bC6BrqZ4GCaka21T1kEU3eGIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9SW8hi2Hu1sbPmYQ4xzfYFxXFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzQ1NmI1M2MtMzY3Yy0z MzJlLWE2NGUtNjI1NTYwMmM4NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExR/tavyIbFobCuwpKzrWkwJkmfJtwVHgGGBbYqwKEW0MGM5d8bVXKC lKHs25EJcqbJgPm4wWtyhpszISmGH0UFro5C3dZ2arp4/MIF1R0OsQLp0ZcFpO85 c/1++B+k3FocRwJjzgINX+Xpd1MGntdihjGChRel1/2EzUB+zSdryUyQQvylVSlD Yncp2H4o1CSVubpOgO5uH65CPUECVOOZYeJ1fj8L4gX2feW6Q/FSp7zgJCRfU+nd UZZTRrbgpSQ/z7+2RO8D2EG03K35H2jx+eNQ4xHWRMHVAOsuskadLjSN6FyGuI+j xHFjKLfxuh0rr+k6D1qg6f11vqgtXgI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:02 2025 by rpki-client