$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/5c4f61f1-043b-3064-9934-b7267db0aae8.roa File: 5c4f61f1-043b-3064-9934-b7267db0aae8.roa (raw, json) Hash identifier: YC+1zJQ6nX/87bV/2ME0H8leQywSzQh8C8SNobVZVAM= Subject key identifier: CA:F0:8F:AD:E2:9B:F7:FB:97:54:DD:5D:3D:36:10:F1:45:70:50:F3 Certificate issuer: /CN=fedbf02b-de87-4991-b290-2a4b996f676e Certificate serial: 010D0C9F43285848100A81A1643B4D998019EEA0 Authority key identifier: 04:2B:D7:75:B3:A8:34:C3:B8:84:AF:1C:04:9A:B2:51:53:F9:47:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/5c4f61f1-043b-3064-9934-b7267db0aae8.roa Signing time: Sun 01 Dec 2024 14:00:51 +0000 ROA not before: Sun 01 Dec 2024 14:00:51 +0000 ROA not after: Sat 01 Mar 2025 14:00:51 +0000 asID: 394244 IP address blocks: 199.33.116.0/23 maxlen: 24 199.33.116.0/24 maxlen: 24 199.33.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/fedbf02b-de87-4991-b290-2a4b996f676e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/fedbf02b-de87-4991-b290-2a4b996f676e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:0a:81:a1:64:3b:4d:99:80:19:ee:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fedbf02b-de87-4991-b290-2a4b996f676e Validity Not Before: Dec 1 14:00:51 2024 GMT Not After : Mar 1 14:00:51 2025 GMT Subject: CN=890a952c-bbe0-4ea6-b610-199dfb465333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:cf:b8:c8:20:9f:da:7c:d7:a0:85:d8:3a: 12:f7:cd:42:24:6c:27:35:ed:15:28:61:ee:c5:29: 06:4e:54:0f:e2:2c:40:57:13:d9:65:76:f0:e4:4a: 8d:9c:f6:cb:48:07:6a:9a:9f:e9:b7:b6:8a:1d:6b: 45:ad:83:7c:a7:9b:02:b7:92:e5:4c:cf:39:68:b8: c8:87:55:cf:a4:16:27:e6:f8:46:9e:90:c4:25:ac: 07:7d:41:cd:ea:cf:83:6d:11:ab:d5:33:b9:8b:28: 3c:c9:d7:53:82:25:41:17:53:cc:2d:94:61:d8:03: 91:d7:79:12:46:95:b3:cf:fa:39:ab:19:5d:cf:84: ab:10:9f:a5:08:7a:22:11:71:36:fc:9f:84:b0:ef: 48:0c:5e:15:1e:e1:fe:62:7f:8d:02:7a:43:8e:f3: a5:2c:42:ba:11:38:d6:7f:25:b0:80:23:44:78:ad: e9:67:71:63:eb:01:3c:5a:8a:3f:09:7a:b5:6c:87: f7:e5:83:0b:5d:0d:d1:32:f1:0d:67:bc:b1:e5:14: d3:cb:4e:89:48:db:ff:a7:83:b4:84:9e:54:ba:1e: 21:97:95:62:2a:fd:1e:57:cd:01:51:27:b2:63:53: 6b:85:0f:57:67:87:c4:2a:9c:89:70:d8:d0:a2:0c: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F0:8F:AD:E2:9B:F7:FB:97:54:DD:5D:3D:36:10:F1:45:70:50:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/5c4f61f1-043b-3064-9934-b7267db0aae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/fedbf02b-de87-4991-b290-2a4b996f676e.crl X509v3 Authority Key Identifier: keyid:04:2B:D7:75:B3:A8:34:C3:B8:84:AF:1C:04:9A:B2:51:53:F9:47:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e.cer sbgp-ipAddrBlock: critical IPv4: 199.33.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:6b:3d:4e:4a:93:6e:e5:f4:a4:a3:28:53:d8:32:c8:7e:32: f6:f3:d8:c8:df:9e:17:52:4e:d2:97:4a:25:48:a0:fa:8a:aa: 3e:0d:56:63:0a:15:5e:cb:0a:c6:a8:e2:79:7d:86:bb:3e:bd: 2b:7e:66:df:67:cf:04:ba:e7:8d:b2:ee:0f:b6:4b:d5:04:c3: 41:eb:87:d1:61:b3:25:f3:86:5a:53:79:57:db:91:35:69:85: 1d:c2:7a:53:d3:60:e6:fc:b2:9d:7a:bd:fa:b1:65:03:e3:65: 6d:15:29:ad:04:25:93:eb:cd:1a:4e:ea:54:93:1b:cb:df:bb: 9b:97:c5:61:c2:0d:f9:7b:b9:d1:7b:29:19:c2:e6:b9:e4:c8: e6:0f:7d:ca:60:e0:7c:8a:cd:cb:bb:55:6e:84:3c:d5:39:03: f1:a1:e9:47:d5:50:fa:61:61:df:fe:2a:a8:0b:67:65:81:3d: 5d:68:63:47:86:6b:5b:89:0c:c7:ed:57:1b:c0:84:76:d1:fb: b1:ec:8d:a2:07:0b:37:64:47:74:59:42:31:b0:1e:91:5e:f1: 95:28:b3:a4:59:cd:2d:8b:4e:de:d1:a3:1c:db:c8:44:a7:9e: b2:73:db:7e:c8:ab:33:21:d8:25:2b:7f:8e:73:f6:61:57:fc: 37:e0:eb:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCoGhZDtNmYAZ7qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmVkYmYwMmItZGU4Ny00OTkxLWIyOTAtMmE0Yjk5NmY2 NzZlMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk ODkwYTk1MmMtYmJlMC00ZWE2LWI2MTAtMTk5ZGZiNDY1MzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxTPuMggn9p816CF2DoS981CJGwnNe0VKGHu xSkGTlQP4ixAVxPZZXbw5EqNnPbLSAdqmp/pt7aKHWtFrYN8p5sCt5LlTM85aLjI h1XPpBYn5vhGnpDEJawHfUHN6s+DbRGr1TO5iyg8yddTgiVBF1PMLZRh2AOR13kS RpWzz/o5qxldz4SrEJ+lCHoiEXE2/J+EsO9IDF4VHuH+Yn+NAnpDjvOlLEK6ETjW fyWwgCNEeK3pZ3Fj6wE8Woo/CXq1bIf35YMLXQ3RMvENZ7yx5RTTy06JSNv/p4O0 hJ5Uuh4hl5ViKv0eV80BUSeyY1NrhQ9XZ4fEKpyJcNjQogzMewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrwj63im/f7l1TdXT02EPFFcFDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZWRi ZjAyYi1kZTg3LTQ5OTEtYjI5MC0yYTRiOTk2ZjY3NmUvNWM0ZjYxZjEtMDQzYi0z MDY0LTk5MzQtYjcyNjdkYjBhYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmVkYmYwMmItZGU4Ny00OTkxLWIy OTAtMmE0Yjk5NmY2NzZlL2ZlZGJmMDJiLWRlODctNDk5MS1iMjkwLTJhNGI5OTZm Njc2ZS5jcmwwHwYDVR0jBBgwFoAUBCvXdbOoNMO4hK8cBJqyUVP5RwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZWRiZjAyYi1kZTg3LTQ5OTEtYjI5MC0yYTRi OTk2ZjY3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyF0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRrPU5Kk27l9KSjKFPYMsh+Mvbz2MjfnhdSTtKXSiVIoPqKqj4NVmMK FV7LCsao4nl9hrs+vSt+Zt9nzwS6542y7g+2S9UEw0Hrh9FhsyXzhlpTeVfbkTVp hR3CelPTYOb8sp16vfqxZQPjZW0VKa0EJZPrzRpO6lSTG8vfu5uXxWHCDfl7udF7 KRnC5rnkyOYPfcpg4HyKzcu7VW6EPNU5A/Gh6UfVUPphYd/+KqgLZ2WBPV1oY0eG a1uJDMftVxvAhHbR+7HsjaIHCzdkR3RZQjGwHpFe8ZUos6RZzS2LTt7RoxzbyESn nrJz237IqzMh2CUrf45z9mFX/Dfg67s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:38 2025 by rpki-client