$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa File: e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa (raw, json) Hash identifier: coRH3s8RvZbmfnk/NhnguNSTDx6pKzXZg5eX5OfN3iU= Subject key identifier: C3:B1:0A:E1:9A:FD:39:2D:A4:10:3C:C0:C8:6B:52:38:83:C6:6B:B3 Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Certificate serial: 010D0C9F43285848424AD149F955C57627E9FA80 Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa Signing time: Thu 19 Dec 2024 14:00:52 +0000 ROA not before: Thu 19 Dec 2024 14:00:52 +0000 ROA not after: Wed 19 Mar 2025 13:00:52 +0000 asID: 16509 IP address blocks: 199.19.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:4a:d1:49:f9:55:c5:76:27:e9:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Validity Not Before: Dec 19 14:00:52 2024 GMT Not After : Mar 19 13:00:52 2025 GMT Subject: CN=ecbb2700-7926-4435-a5e0-1ecea21ce07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:eb:f3:1a:9c:ed:89:83:13:49:ac:8d:97:b6: 18:f0:ae:a7:fb:fe:72:7e:70:0a:b6:90:ad:84:ac: 92:96:4c:93:75:7a:00:bf:bb:44:c6:e0:8a:a3:ad: 82:f5:c1:40:95:3c:8d:76:3d:c8:b6:11:79:fe:83: dd:87:30:0f:96:8f:ae:57:11:1e:4d:1e:ac:16:a5: 32:39:31:ff:fc:09:6f:e3:14:7a:23:53:52:78:f4: 2a:40:8e:dc:67:b0:55:5d:61:da:6c:f1:5e:e6:f0: 3a:3f:ae:ba:22:0e:1b:e3:f6:ff:1c:e1:56:ea:b0: 87:f2:e9:03:3c:d4:e0:c5:a7:af:72:ef:58:88:d0: e1:ac:af:9b:cc:b5:ad:d6:c6:d7:44:77:26:46:96: 58:37:e0:e8:60:38:6f:f7:78:97:d4:f2:19:9e:70: 20:70:97:4f:26:bb:27:6b:73:b3:5a:01:7c:ad:ad: 14:19:b6:03:a2:8d:61:80:6c:4f:d1:23:6d:3b:09: e9:09:d7:63:87:ef:ca:5d:aa:39:b6:70:71:02:ea: 89:fa:fd:0c:bf:14:e5:4a:90:53:af:63:0c:ac:58: bf:99:ae:28:9d:9c:51:ae:83:00:90:19:74:8e:b1: 54:a8:8f:33:5a:08:c4:9a:f2:10:69:b2:34:d4:00: cc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B1:0A:E1:9A:FD:39:2D:A4:10:3C:C0:C8:6B:52:38:83:C6:6B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl X509v3 Authority Key Identifier: keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer sbgp-ipAddrBlock: critical IPv4: 199.19.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:de:4e:04:dc:c4:11:ad:f6:bd:e4:ee:2a:d5:6d:7d:1b:a6: 5d:b8:00:92:d4:92:8c:08:1b:32:ee:d8:a4:46:ea:22:b3:71: b4:4c:41:26:92:42:a2:e1:53:40:7f:e9:22:70:5a:b5:6f:3e: 21:4c:02:4f:cd:de:c5:31:8f:34:fd:d0:56:cb:7d:e3:73:07: a7:f3:90:39:f8:cf:3d:a0:b4:2e:20:d7:94:3e:9b:16:c0:58: fe:9b:d6:c6:c0:28:3c:b9:b5:f4:67:29:39:6c:6d:9e:90:fc: 1c:80:09:a5:80:81:15:43:23:65:03:3e:df:e4:bc:57:c0:f7: 93:c9:9e:08:61:8e:ee:ef:8f:70:16:32:3c:a8:df:e1:91:38: 89:38:1d:ff:36:25:86:c3:64:2d:20:17:af:7d:09:78:7d:06: b1:e5:cd:c9:91:cc:f1:c0:35:b3:98:29:9e:ac:f6:b2:b0:17: 74:4a:78:1b:3a:38:bb:b9:9a:39:70:c5:3b:6d:c6:35:c2:35: 11:99:e5:9d:48:b1:7c:dc:37:9a:fe:1b:7c:5a:14:3a:7d:2f: 48:12:9f:b8:9b:b1:4f:b0:fb:47:2c:a4:c7:99:ea:65:de:78: 58:95:a8:da:29:be:fa:34:da:b2:00:b2:a6:72:f3:51:64:66: f2:d4:eb:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCStFJ+VXFdifp+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj YTk4MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZWNiYjI3MDAtNzkyNi00NDM1LWE1ZTAtMWVjZWEyMWNlMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OvzGpztiYMTSayNl7YY8K6n+/5yfnAKtpCt hKySlkyTdXoAv7tExuCKo62C9cFAlTyNdj3IthF5/oPdhzAPlo+uVxEeTR6sFqUy OTH//Alv4xR6I1NSePQqQI7cZ7BVXWHabPFe5vA6P666Ig4b4/b/HOFW6rCH8ukD PNTgxaevcu9YiNDhrK+bzLWt1sbXRHcmRpZYN+DoYDhv93iX1PIZnnAgcJdPJrsn a3OzWgF8ra0UGbYDoo1hgGxP0SNtOwnpCddjh+/KXao5tnBxAuqJ+v0MvxTlSpBT r2MMrFi/ma4onZxRroMAkBl0jrFUqI8zWgjEmvIQabI01ADM7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOxCuGa/TktpBA8wMhrUjiDxmuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvZTMyZGNhNmYtZTBkNy0z YTFmLWI1MWUtYTJkZGE0YThiMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2 Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0 MjlhNmNhOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHeTgTcxBGt9r3k7irVbX0bpl24AJLUkowIGzLu2KRG6iKzcbRMQSaS QqLhU0B/6SJwWrVvPiFMAk/N3sUxjzT90FbLfeNzB6fzkDn4zz2gtC4g15Q+mxbA WP6b1sbAKDy5tfRnKTlsbZ6Q/ByACaWAgRVDI2UDPt/kvFfA95PJnghhju7vj3AW Mjyo3+GROIk4Hf82JYbDZC0gF699CXh9BrHlzcmRzPHANbOYKZ6s9rKwF3RKeBs6 OLu5mjlwxTttxjXCNRGZ5Z1IsXzcN5r+G3xaFDp9L0gSn7ibsU+w+0cspMeZ6mXe eFiVqNopvvo02rIAsqZy81FkZvLU6wc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:59 2025 by rpki-client