$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fca14046-e1b7-32dd-ac32-ee4414b87b9e.roa File: fca14046-e1b7-32dd-ac32-ee4414b87b9e.roa (raw, json) Hash identifier: ROvXUIOzR8tyn+Y2N5rxwTo1YoI11/a9BYOmNo+1Xjc= Subject key identifier: D2:18:3A:CE:62:6F:9D:D3:94:7C:27:84:68:7B:C9:CB:F5:EA:A7:B3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C5818BBC52843C687C623300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fca14046-e1b7-32dd-ac32-ee4414b87b9e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 199.223.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8b:bc:52:84:3c:68:7c:62:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=9c24e0df-9f96-4331-a856-35899303d626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1a:98:13:6c:40:fc:6e:a0:1e:7a:12:be:aa: 38:20:70:ff:3b:b5:1d:1d:49:c4:33:ba:5e:64:75: 9f:e7:e4:7a:b6:42:b4:5d:9c:3e:6b:45:c3:6b:33: ec:b1:4c:d3:fb:a7:81:29:ca:1e:6c:0a:1d:2f:1e: cc:4b:57:8e:3e:f8:82:16:d3:1d:05:10:f5:db:29: c5:a5:83:43:4e:e5:71:eb:e2:7b:fd:12:90:c3:d2: 88:1c:f3:f7:71:56:96:d3:12:fc:a4:4a:93:15:9f: d5:ec:c6:31:93:f6:42:a4:0f:c6:c9:8d:ba:98:be: 3a:cb:2b:4e:b3:cc:5b:c6:06:d5:40:68:57:f8:e5: dd:6d:bf:50:f8:2b:e1:51:4d:90:ca:d3:27:9c:60: 42:e5:95:49:82:0e:26:e4:fd:3b:23:6e:20:23:e9: b5:7b:87:ce:b5:8c:ed:c0:ce:3b:1c:21:27:ed:6b: 53:7c:e3:e5:f9:01:00:30:89:f4:c2:8e:04:a8:85: ef:70:f6:e9:21:3b:10:2b:3c:3c:07:02:24:51:d5: da:c2:a9:09:65:d2:5d:e4:66:ea:d5:2c:ce:20:e9: 4c:61:ab:b5:91:25:14:ba:0c:ef:2f:fe:eb:4f:69: ee:62:dc:a1:51:0c:1c:37:26:38:29:8f:b4:43:ba: da:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:18:3A:CE:62:6F:9D:D3:94:7C:27:84:68:7B:C9:CB:F5:EA:A7:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fca14046-e1b7-32dd-ac32-ee4414b87b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 199.223.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b3:e5:54:24:73:83:4e:61:a1:b3:31:a0:21:13:a0:21:85: 62:31:4f:d8:05:30:bb:88:0d:47:1b:18:de:2c:64:f3:4b:65: 37:a6:2d:cc:8e:57:d9:5c:4c:e7:95:5e:1c:47:80:14:a7:7c: 8a:f5:1d:3c:ff:8c:fa:7e:8e:a1:92:7b:94:e9:53:1d:8c:19: 52:a3:7d:61:d7:0f:30:87:51:3f:76:10:ce:b3:d1:4d:bb:6e: 16:ed:64:e6:c1:ca:67:68:0f:94:bd:29:9d:50:0f:62:eb:40: 57:3a:42:30:42:c3:0b:ff:dc:61:bb:eb:22:08:a2:d1:ae:34: 5e:90:a1:64:ea:ed:c9:42:65:bb:aa:e3:a8:7c:e8:16:21:e8: 08:94:c9:3f:e6:c0:a9:6b:f9:03:43:74:be:1a:b3:3f:f9:bc: 02:08:d4:17:e9:4a:6e:60:dd:e7:65:a8:7d:71:6e:f9:39:de: 2e:f6:5d:78:6d:ba:3b:ad:97:99:63:3b:f9:40:78:05:9c:4a: 2f:66:03:2f:4f:4e:6a:a2:d0:63:1f:45:3f:fc:74:f6:53:1c: 8e:3f:81:00:74:12:12:86:2a:24:ec:20:86:a4:f4:35:9d:6c: dd:47:bf:92:25:ee:72:20:29:34:7e:27:68:48:6a:02:05:a3: 64:7d:59:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYu8UoQ8aHxiMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OWMyNGUwZGYtOWY5Ni00MzMxLWE4NTYtMzU4OTkzMDNkNjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxqYE2xA/G6gHnoSvqo4IHD/O7UdHUnEM7pe ZHWf5+R6tkK0XZw+a0XDazPssUzT+6eBKcoebAodLx7MS1eOPviCFtMdBRD12ynF pYNDTuVx6+J7/RKQw9KIHPP3cVaW0xL8pEqTFZ/V7MYxk/ZCpA/GyY26mL46yytO s8xbxgbVQGhX+OXdbb9Q+CvhUU2QytMnnGBC5ZVJgg4m5P07I24gI+m1e4fOtYzt wM47HCEn7WtTfOPl+QEAMIn0wo4EqIXvcPbpITsQKzw8BwIkUdXawqkJZdJd5Gbq 1SzOIOlMYau1kSUUugzvL/7rT2nuYtyhUQwcNyY4KY+0Q7raXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIYOs5ib53TlHwnhGh7ycv16qezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmNhMTQwNDYtZTFiNy0z MmRkLWFjMzItZWU0NDE0Yjg3YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9/tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2z5VQkc4NOYaGzMaAhE6AhhWIxT9gFMLuIDUcbGN4sZPNLZTemLcyO V9lcTOeVXhxHgBSnfIr1HTz/jPp+jqGSe5TpUx2MGVKjfWHXDzCHUT92EM6z0U27 bhbtZObBymdoD5S9KZ1QD2LrQFc6QjBCwwv/3GG76yIIotGuNF6QoWTq7clCZbuq 46h86BYh6AiUyT/mwKlr+QNDdL4asz/5vAII1BfpSm5g3edlqH1xbvk53i72XXht ujutl5ljO/lAeAWcSi9mAy9PTmqi0GMfRT/8dPZTHI4/gQB0EhKGKiTsIIak9DWd bN1Hv5Il7nIgKTR+J2hIagIFo2R9WfE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:30 2025 by rpki-client