$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa File: 437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa (raw, json) Hash identifier: BOEoKTZ6y8O+DLJfeQzBtm6fqPSq7L2r9i7UDt0HuCU= Subject key identifier: 31:78:48:AC:BA:63:AC:74:B6:E7:EF:17:9A:5D:93:9D:A0:82:4F:13 Certificate issuer: /CN=ca91b8b1-a975-4a43-947f-794da888c198 Certificate serial: 010D0C9F43285848828083E51740B9DA30926220 Authority key identifier: 12:90:A8:FB:25:F3:18:F0:78:D4:C4:7C:89:4F:C3:D4:9E:A5:89:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 396982 IP address blocks: 204.138.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:83:e5:17:40:b9:da:30:92:62:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca91b8b1-a975-4a43-947f-794da888c198 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=ee351bab-bbd9-4b10-90cc-93ed63499cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:21:07:86:09:e9:b7:8b:ba:50:3b:28:d2:94: 18:4a:5f:78:04:c5:0a:df:91:61:0f:e9:5d:93:21: 1d:43:65:4a:c5:29:be:f2:a2:3c:f7:fb:bb:1f:04: f4:c4:80:dc:5e:1a:a8:2e:57:8b:88:59:7d:a0:f4: 40:13:c0:97:00:41:81:fb:11:99:78:f5:4c:36:48: e1:ce:19:12:48:5f:e9:62:4f:33:bd:ee:dd:5d:80: 21:3e:7c:3d:42:13:c4:00:ae:6f:2f:a4:38:bb:67: 42:90:c6:b8:ec:10:cd:48:57:28:d7:4e:5c:ca:70: b9:68:77:10:36:20:10:54:d3:f4:9c:92:17:f7:6d: fd:83:31:be:e1:6f:98:3b:27:9b:cf:fa:7f:76:ac: b9:db:46:d6:77:bf:a2:9f:1e:19:c5:f3:10:b4:6c: 48:23:b6:31:3c:46:68:96:46:4b:4e:0d:74:86:54: a2:62:d4:06:cf:57:9a:58:5e:7b:60:7d:15:c7:ab: 04:3e:00:2b:f9:9e:ec:96:df:bf:6b:59:4f:6b:03: 50:a0:36:46:45:87:0a:e4:ec:51:fe:25:a6:9e:e6: f4:b8:4a:56:d1:74:85:01:eb:ad:40:a9:dd:02:bb: 70:29:42:b9:fa:7c:89:f1:fb:72:cb:e2:64:4c:c2: 23:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:78:48:AC:BA:63:AC:74:B6:E7:EF:17:9A:5D:93:9D:A0:82:4F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.crl X509v3 Authority Key Identifier: keyid:12:90:A8:FB:25:F3:18:F0:78:D4:C4:7C:89:4F:C3:D4:9E:A5:89:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer sbgp-ipAddrBlock: critical IPv4: 204.138.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:40:e7:07:9a:87:bb:e8:9e:08:7c:16:60:6c:2b:1a:7e:43: c0:4c:f2:40:be:da:3d:2f:5d:ea:8a:e7:1c:66:49:44:8f:74: 9b:3f:86:25:20:95:62:1f:e0:f9:30:88:9a:ca:cf:3c:a9:1b: f2:56:31:84:95:23:b2:73:92:15:0e:19:c1:c3:ce:43:e0:6a: 58:35:c6:e3:6c:3a:76:66:4d:5f:dd:db:5e:50:58:45:ab:74: 2c:49:9d:33:f2:ac:c7:d8:c0:44:b8:ee:72:33:da:e6:7f:13: 04:0b:9b:98:1f:84:b0:18:88:c2:91:e9:08:83:57:a9:64:03: 61:0e:9d:42:9a:07:ed:f1:55:94:e4:1a:c8:2b:0d:41:ca:72: 7b:76:17:24:c4:a5:a1:78:7f:a9:ec:03:1e:dd:82:c4:79:c3: 52:ed:0e:11:35:71:ce:62:40:7e:78:56:21:50:45:37:f9:92: 50:a0:c7:b2:63:d6:ae:2e:bc:fc:72:59:d9:2f:dc:23:bc:6e: b8:ae:09:c1:91:e8:e2:d3:5b:11:4d:e3:24:b9:f4:b9:44:b3: 32:e1:ad:df:d3:0b:f0:ac:f7:52:df:d2:9a:46:b9:cf:ba:f8: e5:87:a4:30:a7:03:19:9b:8f:47:cd:71:4a:61:3a:90:ea:96: 71:31:fb:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgIPlF0C52jCSYiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E5MWI4YjEtYTk3NS00YTQzLTk0N2YtNzk0ZGE4ODhj MTk4MB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZWUzNTFiYWItYmJkOS00YjEwLTkwY2MtOTNlZDYzNDk5Y2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSEHhgnpt4u6UDso0pQYSl94BMUK35FhD+ld kyEdQ2VKxSm+8qI89/u7HwT0xIDcXhqoLleLiFl9oPRAE8CXAEGB+xGZePVMNkjh zhkSSF/pYk8zve7dXYAhPnw9QhPEAK5vL6Q4u2dCkMa47BDNSFco105cynC5aHcQ NiAQVNP0nJIX9239gzG+4W+YOyebz/p/dqy520bWd7+inx4ZxfMQtGxII7YxPEZo lkZLTg10hlSiYtQGz1eaWF57YH0Vx6sEPgAr+Z7slt+/a1lPawNQoDZGRYcK5OxR /iWmnub0uEpW0XSFAeutQKndArtwKUK5+nyJ8ftyy+JkTMIjkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDF4SKy6Y6x0tufvF5pdk52ggk8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYTkx YjhiMS1hOTc1LTRhNDMtOTQ3Zi03OTRkYTg4OGMxOTgvNDM3ZDBlNmMtYTgxNS0z MTRkLThjYjAtZDRiNGVlMjQ2ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2E5MWI4YjEtYTk3NS00YTQzLTk0 N2YtNzk0ZGE4ODhjMTk4L2NhOTFiOGIxLWE5NzUtNGE0My05NDdmLTc5NGRhODg4 YzE5OC5jcmwwHwYDVR0jBBgwFoAUEpCo+yXzGPB41MR8iU/D1J6lieMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYTkxYjhiMS1hOTc1LTRhNDMtOTQ3Zi03OTRk YTg4OGMxOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIpjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVA5weah7vongh8FmBsKxp+Q8BM8kC+2j0vXeqK5xxmSUSPdJs/hiUg lWIf4PkwiJrKzzypG/JWMYSVI7JzkhUOGcHDzkPgalg1xuNsOnZmTV/d215QWEWr dCxJnTPyrMfYwES47nIz2uZ/EwQLm5gfhLAYiMKR6QiDV6lkA2EOnUKaB+3xVZTk GsgrDUHKcnt2FyTEpaF4f6nsAx7dgsR5w1LtDhE1cc5iQH54ViFQRTf5klCgx7Jj 1q4uvPxyWdkv3CO8briuCcGR6OLTWxFN4yS59LlEszLhrd/TC/Cs91Lf0ppGuc+6 +OWHpDCnAxmbj0fNcUphOpDqlnEx+9s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:58 2025 by rpki-client