$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa File: 5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa (raw, json) Hash identifier: YL38IE1Mc7K3MTt0MBZZfE1lGlb8StyE7SIynL87cQ4= Subject key identifier: 75:9A:99:95:A2:73:06:E5:E2:CA:4F:25:2E:D0:FA:B6:FF:BE:27:A6 Certificate issuer: /CN=8f27c934-ebc6-44a4-bba0-a03cc465334b Certificate serial: 010D0C9F43285848854B40931D738290B5782B40 Authority key identifier: E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 14333 IP address blocks: 199.168.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:40:93:1d:73:82:90:b5:78:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f27c934-ebc6-44a4-bba0-a03cc465334b Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=fbef6216-d44d-4787-aff7-28864f9af343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3a:16:85:e2:e5:96:e0:50:f1:a7:60:e3:c2: 40:0e:32:3a:5e:6b:74:99:63:4f:e6:a0:54:5c:c8: 61:9c:c2:d8:ea:57:c4:76:b8:56:af:f1:0c:34:ef: 2f:86:e7:12:cf:65:9e:d3:e2:0c:0e:9d:e6:87:97: 1d:fe:e0:49:ad:07:fb:d2:6e:77:5a:2d:26:1f:7b: 42:2f:e9:f8:a8:03:c6:64:26:0c:ba:3e:ed:aa:36: 20:ab:5d:bd:ef:99:5b:0a:55:6b:19:0c:93:d2:74: 06:c0:83:5b:64:f3:08:d8:a7:80:5d:77:93:e9:11: a9:97:4b:fc:c4:3d:fa:ee:65:f2:0a:d0:9b:e7:58: 8e:e4:a8:b1:b9:51:53:03:38:ae:ea:e0:b4:3f:d0: 2d:b0:b9:d7:8a:0e:58:da:53:e3:39:a2:aa:78:84: 7f:26:c6:38:3f:cd:a6:1c:da:27:86:c7:ad:47:1b: 47:cd:2b:ad:2b:ec:b4:47:e8:39:75:04:d2:12:75: 46:cb:fc:da:bb:fa:27:40:10:c2:4b:07:5a:6a:52: a3:89:51:84:f8:40:f9:0e:f5:81:4c:02:f3:a5:e6: 7d:d9:72:16:6e:14:bb:19:94:d8:33:19:68:43:e9: e7:25:43:3e:d5:5d:d0:16:66:70:69:2e:3d:c1:72: 78:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9A:99:95:A2:73:06:E5:E2:CA:4F:25:2E:D0:FA:B6:FF:BE:27:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl X509v3 Authority Key Identifier: keyid:E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer sbgp-ipAddrBlock: critical IPv4: 199.168.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ea:38:7d:c7:76:00:0d:f0:0c:21:ca:00:0f:fe:6b:3e:8b: 2b:82:8f:36:3c:cc:31:99:55:4b:9a:19:a4:2a:61:15:31:2d: 3b:c1:17:9f:82:06:48:dc:b9:bb:e2:4e:1a:cf:1b:08:aa:66: df:35:70:65:07:5a:0c:c0:c5:43:c7:55:37:78:04:25:b2:e0: d1:e8:84:1e:c5:47:2e:c8:23:d2:d1:99:a4:23:a7:cd:2a:71: ea:49:24:e7:11:a6:b8:2a:04:a0:89:cd:f9:c7:af:a5:7d:fc: 9d:9f:f0:ea:88:7c:3c:e0:50:ae:17:2a:4c:9a:51:3c:07:76: 57:60:ea:14:9b:23:1b:dd:1e:17:d2:d5:d5:66:86:94:dd:00: 1f:ff:df:a5:0e:cf:98:8b:13:9a:ca:9e:87:3a:80:ac:95:d9: dc:cd:1b:ee:70:e3:62:c6:c7:21:7e:84:ca:05:d0:34:85:97: 0f:4c:7f:b4:c5:85:5e:8f:36:ee:b7:3e:eb:f1:0c:e8:35:2c: 6f:52:d9:67:31:20:8f:7f:12:18:9d:6c:7f:96:bd:fd:37:13: 38:8a:d6:3a:ef:25:b6:45:64:27:31:e2:ac:80:82:7b:b5:b7: d8:7f:05:6e:f8:61:51:17:df:67:0a:f1:ab:d1:d6:8a:40:e4: e2:83:c2:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0CTHXOCkLV4K0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYyN2M5MzQtZWJjNi00NGE0LWJiYTAtYTAzY2M0NjUz MzRiMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk ZmJlZjYyMTYtZDQ0ZC00Nzg3LWFmZjctMjg4NjRmOWFmMzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDoWheLlluBQ8adg48JADjI6Xmt0mWNP5qBU XMhhnMLY6lfEdrhWr/EMNO8vhucSz2We0+IMDp3mh5cd/uBJrQf70m53Wi0mH3tC L+n4qAPGZCYMuj7tqjYgq12975lbClVrGQyT0nQGwINbZPMI2KeAXXeT6RGpl0v8 xD367mXyCtCb51iO5KixuVFTAziu6uC0P9AtsLnXig5Y2lPjOaKqeIR/JsY4P82m HNonhsetRxtHzSutK+y0R+g5dQTSEnVGy/zau/onQBDCSwdaalKjiVGE+ED5DvWB TALzpeZ92XIWbhS7GZTYMxloQ+nnJUM+1V3QFmZwaS49wXJ4XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWamZWicwbl4spPJS7Q+rb/viemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ZjI3 YzkzNC1lYmM2LTQ0YTQtYmJhMC1hMDNjYzQ2NTMzNGIvNWU5YTY0Y2EtZDljMi0z YTQwLWIyMTgtNDQyZTJkZWQyMGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGYyN2M5MzQtZWJjNi00NGE0LWJi YTAtYTAzY2M0NjUzMzRiLzhmMjdjOTM0LWViYzYtNDRhNC1iYmEwLWEwM2NjNDY1 MzM0Yi5jcmwwHwYDVR0jBBgwFoAU4bkaPPumXs0F9g4Sq6n1oxOo8WkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84ZjI3YzkzNC1lYmM2LTQ0YTQtYmJhMC1hMDNj YzQ2NTMzNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPqOH3HdgAN8AwhygAP/ms+iyuCjzY8zDGZVUuaGaQqYRUxLTvBF5+C BkjcubviThrPGwiqZt81cGUHWgzAxUPHVTd4BCWy4NHohB7FRy7II9LRmaQjp80q cepJJOcRprgqBKCJzfnHr6V9/J2f8OqIfDzgUK4XKkyaUTwHdldg6hSbIxvdHhfS 1dVmhpTdAB//36UOz5iLE5rKnoc6gKyV2dzNG+5w42LGxyF+hMoF0DSFlw9Mf7TF hV6PNu63PuvxDOg1LG9S2WcxII9/EhidbH+Wvf03EziK1jrvJbZFZCcx4qyAgnu1 t9h/BW74YVEX32cK8avR1opA5OKDwsg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:30 2025 by rpki-client