$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa File: 60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa (raw, json) Hash identifier: 5JA9np7QXWLK3u3H8syRdCXfoxEBr3Uk1Vd8UBH0ymI= Subject key identifier: 6B:72:3F:88:C8:86:7B:CE:3C:F6:1E:39:D0:78:91:F2:FF:0D:23:8B Certificate issuer: /CN=2f4dd615-5a9e-4057-98d2-c069dd16f4f7 Certificate serial: 010D0C9F43285848DBD66C14F6BCA9C87ED07400 Authority key identifier: 91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 14618 IP address blocks: 172.99.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:6c:14:f6:bc:a9:c8:7e:d0:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f4dd615-5a9e-4057-98d2-c069dd16f4f7 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=06dc6612-0bee-4c91-b1b1-11ff5463911e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:26:b8:83:02:f7:d1:10:ba:92:ef:15:4f:65: ca:3f:1e:a0:04:e1:8d:c0:0f:55:fe:79:2c:5c:92: 42:4f:17:1d:94:af:32:01:a4:af:19:6c:af:4e:b0: 0f:5e:4f:3c:0b:cf:ce:f8:bb:2f:c7:bc:2e:6f:cc: 52:3c:a9:2a:d1:ee:4a:b3:49:8f:f3:6d:40:85:9a: 39:22:71:e9:09:f9:55:d7:15:1d:68:c6:fd:71:7d: 00:5c:b2:0f:63:3f:e6:1d:13:d3:29:bb:6b:4a:d3: 24:36:8b:c0:c4:a4:92:e8:5b:aa:95:a7:65:6d:fe: 89:8d:8b:91:8d:8f:5d:c7:f8:2c:fe:67:f9:b8:9b: ec:cb:81:57:d9:c4:d6:35:73:5f:71:ec:80:7b:73: e3:b3:c5:89:a1:24:2e:b5:1c:aa:45:91:0a:3e:14: 01:6e:54:0b:1a:c4:ea:99:c8:7e:f6:89:f6:5c:a0: 5b:1a:c3:e3:71:ca:68:b8:13:61:dd:96:60:9c:20: cd:fa:ea:86:1b:c3:a3:cb:07:88:d4:1b:5a:24:d5: de:99:49:c6:67:9a:b0:f7:b8:93:74:6d:f2:14:70: c5:83:91:39:e1:e7:5a:83:81:e7:83:ff:3f:97:8b: 5b:b5:ce:57:70:6b:36:8a:8c:21:25:3b:dc:df:e5: 97:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:72:3F:88:C8:86:7B:CE:3C:F6:1E:39:D0:78:91:F2:FF:0D:23:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.crl X509v3 Authority Key Identifier: keyid:91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer sbgp-ipAddrBlock: critical IPv4: 172.99.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7f:9e:41:40:8c:97:85:aa:33:63:5b:1f:8b:72:74:3f:10: 84:08:2b:34:f1:cb:18:33:9b:ae:ae:89:c8:64:e9:6f:67:98: 07:06:1c:bc:d9:d5:b1:cf:52:db:bb:85:cb:8d:e2:06:8b:b6: 96:f6:70:2c:37:97:4c:e1:72:28:9d:ef:ce:59:98:24:85:68: f5:1b:2e:16:63:5e:54:66:aa:40:a0:8a:f7:c9:fa:e3:12:22: 42:00:28:98:0f:74:4f:f7:da:6e:87:e1:fa:51:14:6b:b2:36: 57:78:73:ff:60:96:37:68:fc:20:8b:5a:70:72:30:5e:97:7c: ff:54:05:95:90:0c:ee:0b:59:df:5a:bd:6b:23:34:e7:c9:5b: 42:74:11:ab:2b:8d:88:8a:3c:11:45:2c:b8:c5:a3:0c:99:59: 08:62:d5:3a:db:4f:48:b4:26:9b:07:79:04:d8:7b:a0:fb:99: 96:1d:7c:f0:b3:6c:ec:98:c5:7b:ea:46:c8:2d:ec:81:be:3a: 51:4f:18:32:55:24:24:26:d3:fe:07:ad:ff:ed:d9:fb:a6:3f: d2:95:d0:b4:4e:ed:71:ef:2d:68:44:1a:32:c5:73:34:79:ee: e8:6f:ee:b1:ba:5f:1b:de:d5:dc:06:85:cf:0e:04:79:c1:ce: 7a:ae:0a:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1mwU9rypyH7QdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY0ZGQ2MTUtNWE5ZS00MDU3LTk4ZDItYzA2OWRkMTZm NGY3MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk MDZkYzY2MTItMGJlZS00YzkxLWIxYjEtMTFmZjU0NjM5MTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnia4gwL30RC6ku8VT2XKPx6gBOGNwA9V/nks XJJCTxcdlK8yAaSvGWyvTrAPXk88C8/O+Lsvx7wub8xSPKkq0e5Ks0mP821AhZo5 InHpCflV1xUdaMb9cX0AXLIPYz/mHRPTKbtrStMkNovAxKSS6Fuqladlbf6JjYuR jY9dx/gs/mf5uJvsy4FX2cTWNXNfceyAe3Pjs8WJoSQutRyqRZEKPhQBblQLGsTq mch+9on2XKBbGsPjccpouBNh3ZZgnCDN+uqGG8OjyweI1BtaJNXemUnGZ5qw97iT dG3yFHDFg5E54edag4Hng/8/l4tbtc5XcGs2iowhJTvc3+WXiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtyP4jIhnvOPPYeOdB4kfL/DSOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjRk ZDYxNS01YTllLTQwNTctOThkMi1jMDY5ZGQxNmY0ZjcvNjBjYTk1ZTctMjk3NS0z YjA5LWI4ZWUtY2ViM2QxZGY5MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmY0ZGQ2MTUtNWE5ZS00MDU3LTk4 ZDItYzA2OWRkMTZmNGY3LzJmNGRkNjE1LTVhOWUtNDA1Ny05OGQyLWMwNjlkZDE2 ZjRmNy5jcmwwHwYDVR0jBBgwFoAUkRmv7ICfXyFIlKG3jeZh5Yt4wdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjRkZDYxNS01YTllLTQwNTctOThkMi1jMDY5 ZGQxNmY0ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN/nkFAjJeFqjNjWx+LcnQ/EIQIKzTxyxgzm66uichk6W9nmAcGHLzZ 1bHPUtu7hcuN4gaLtpb2cCw3l0zhciid785ZmCSFaPUbLhZjXlRmqkCgivfJ+uMS IkIAKJgPdE/32m6H4fpRFGuyNld4c/9gljdo/CCLWnByMF6XfP9UBZWQDO4LWd9a vWsjNOfJW0J0EasrjYiKPBFFLLjFowyZWQhi1TrbT0i0JpsHeQTYe6D7mZYdfPCz bOyYxXvqRsgt7IG+OlFPGDJVJCQm0/4Hrf/t2fumP9KV0LRO7XHvLWhEGjLFczR5 7uhv7rG6Xxve1dwGhc8OBHnBznquCg8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:32 2025 by rpki-client