$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/ae8e3b73-0d40-3905-9c3d-7dffecccd06e.roa File: ae8e3b73-0d40-3905-9c3d-7dffecccd06e.roa (raw, json) Hash identifier: lNLU9U2waym4IsiHX9ZRTZUsVBMqWjVxs+lJvqrhkac= Subject key identifier: 10:62:F8:1F:8F:B2:73:96:83:3F:75:6C:1B:EE:B0:87:E7:FC:46:DF Certificate issuer: /CN=a619cbd3-121a-4de5-b31a-efa0c294c430 Certificate serial: 010D0C9F432858487FB5E1E2DEF5DA3E146AD580 Authority key identifier: 20:E3:4B:44:25:30:34:A0:86:8F:A3:75:96:5E:65:DA:D8:BE:16:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/ae8e3b73-0d40-3905-9c3d-7dffecccd06e.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 14618 IP address blocks: 192.206.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/a619cbd3-121a-4de5-b31a-efa0c294c430.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/a619cbd3-121a-4de5-b31a-efa0c294c430.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:e1:e2:de:f5:da:3e:14:6a:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a619cbd3-121a-4de5-b31a-efa0c294c430 Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=9aac6e84-47e2-474e-b349-a65e5ddc0cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d5:22:fa:4b:50:34:9e:8d:ee:78:8c:ab:90: 13:f1:be:52:11:f1:62:fc:b6:df:2c:54:cb:12:3d: 4b:97:9b:c1:35:b2:27:24:7e:3e:56:01:2e:3c:c6: ee:97:2a:3e:84:02:d3:25:e4:a7:96:4d:fa:2d:1b: 00:2f:de:ab:c8:08:3b:26:85:27:22:cb:74:75:b6: 5b:fd:1f:27:a9:35:35:45:c8:0a:31:e1:2d:0a:5f: c5:10:bc:4d:8a:d5:77:bb:b7:92:12:35:f4:9c:77: 89:1f:e1:9f:ed:7f:b5:ff:3a:46:6e:dc:52:ad:53: 62:61:f2:b4:aa:c9:db:b9:15:7c:3c:9a:ab:68:18: 54:13:4b:93:9b:81:f6:6a:c4:f6:f1:0a:ce:d1:1e: f6:1e:f9:37:7f:a4:53:17:3c:6b:9d:2c:88:a7:2c: 63:a8:18:b2:31:7c:4f:85:79:3f:ae:e0:6e:ae:49: e3:61:b6:0a:11:78:3f:f0:5a:92:65:96:83:7a:dc: d4:e9:51:49:9c:23:8b:77:6b:34:6b:a5:1d:1e:57: 8e:93:e1:5d:05:21:af:26:17:cb:b2:20:dd:58:1d: 6a:a6:60:09:57:18:b3:90:12:3d:5d:f9:e2:38:e7: 15:61:6d:4f:26:f5:4f:87:46:1f:ee:42:e2:04:c3: bb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:62:F8:1F:8F:B2:73:96:83:3F:75:6C:1B:EE:B0:87:E7:FC:46:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/ae8e3b73-0d40-3905-9c3d-7dffecccd06e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/a619cbd3-121a-4de5-b31a-efa0c294c430.crl X509v3 Authority Key Identifier: keyid:20:E3:4B:44:25:30:34:A0:86:8F:A3:75:96:5E:65:DA:D8:BE:16:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer sbgp-ipAddrBlock: critical IPv4: 192.206.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:28:8f:bc:2c:66:5c:e7:7d:2d:c6:34:68:f4:cc:fd:b0:42: 91:ab:39:3c:dd:e1:ea:45:5c:d2:1e:ce:13:47:84:62:7c:ee: 68:f8:90:5c:a8:9c:b5:42:f1:61:aa:e3:49:07:3b:ae:48:23: 45:08:f5:8b:65:77:16:8c:8d:92:f4:7a:16:bf:ff:a1:07:d8: bb:fd:4d:79:a9:56:10:c9:a5:d9:64:dc:e5:78:13:b3:16:ad: 59:92:03:7e:d8:d1:3a:e7:a0:65:29:ab:dd:79:52:00:15:6f: 5c:61:cc:19:6d:27:aa:9b:0b:b1:56:ea:94:00:ba:7b:e3:24: 43:67:5a:d0:ba:09:44:97:f7:09:68:27:79:c6:ff:b4:75:c2: 5a:da:0a:87:a5:22:02:c7:88:39:20:53:34:59:49:3d:60:75: b4:69:94:b6:80:83:80:60:5d:14:db:ac:5b:2e:b1:49:64:c7: bb:12:f2:2f:0f:f6:e9:f1:99:4f:43:c8:51:f5:f0:fc:a2:49: 0b:e9:20:bc:98:a4:bf:b5:84:a7:7c:52:d6:cb:d4:d5:e1:1f: 22:63:de:5e:1c:d2:a4:4a:c5:e2:2b:30:4a:18:12:89:43:64: b1:8a:dc:8f:04:60:92:f5:dd:2b:c3:93:51:90:87:9f:47:20: 22:cd:0e:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/teHi3vXaPhRq1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYxOWNiZDMtMTIxYS00ZGU1LWIzMWEtZWZhMGMyOTRj NDMwMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk OWFhYzZlODQtNDdlMi00NzRlLWIzNDktYTY1ZTVkZGMwY2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdUi+ktQNJ6N7niMq5AT8b5SEfFi/LbfLFTL Ej1Ll5vBNbInJH4+VgEuPMbulyo+hALTJeSnlk36LRsAL96ryAg7JoUnIst0dbZb /R8nqTU1RcgKMeEtCl/FELxNitV3u7eSEjX0nHeJH+Gf7X+1/zpGbtxSrVNiYfK0 qsnbuRV8PJqraBhUE0uTm4H2asT28QrO0R72Hvk3f6RTFzxrnSyIpyxjqBiyMXxP hXk/ruBurknjYbYKEXg/8FqSZZaDetzU6VFJnCOLd2s0a6UdHleOk+FdBSGvJhfL siDdWB1qpmAJVxizkBI9XfniOOcVYW1PJvVPh0Yf7kLiBMO7DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBi+B+PsnOWgz91bBvusIfn/EbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjE5 Y2JkMy0xMjFhLTRkZTUtYjMxYS1lZmEwYzI5NGM0MzAvYWU4ZTNiNzMtMGQ0MC0z OTA1LTljM2QtN2RmZmVjY2NkMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTYxOWNiZDMtMTIxYS00ZGU1LWIz MWEtZWZhMGMyOTRjNDMwL2E2MTljYmQzLTEyMWEtNGRlNS1iMzFhLWVmYTBjMjk0 YzQzMC5jcmwwHwYDVR0jBBgwFoAUIONLRCUwNKCGj6N1ll5l2ti+FiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjE5Y2JkMy0xMjFhLTRkZTUtYjMxYS1lZmEw YzI5NGM0MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwM6SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGooj7wsZlznfS3GNGj0zP2wQpGrOTzd4epFXNIezhNHhGJ87mj4kFyo nLVC8WGq40kHO65II0UI9YtldxaMjZL0eha//6EH2Lv9TXmpVhDJpdlk3OV4E7MW rVmSA37Y0TrnoGUpq915UgAVb1xhzBltJ6qbC7FW6pQAunvjJENnWtC6CUSX9wlo J3nG/7R1wlraCoelIgLHiDkgUzRZST1gdbRplLaAg4BgXRTbrFsusUlkx7sS8i8P 9unxmU9DyFH18PyiSQvpILyYpL+1hKd8UtbL1NXhHyJj3l4c0qRKxeIrMEoYEolD ZLGK3I8EYJL13SvDk1GQh59HICLNDi0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:59 2025 by rpki-client