$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa File: 19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa (raw, json) Hash identifier: 7H51tVjuMkFbeot7Dop5qi6RMOKR1kR9JYEazs0EGlc= Subject key identifier: 58:93:AC:7B:C7:12:02:04:26:36:D9:4E:74:A3:8A:D9:6F:D1:F8:E0 Certificate issuer: /CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Certificate serial: 010D0C9F432858485470341ECBB408CC55F88300 Authority key identifier: DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 8987 IP address blocks: 198.38.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:34:1e:cb:b4:08:cc:55:f8:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=b9fa54a6-f8d8-4e8c-9928-41e5b56f76ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a7:bf:27:a9:a0:84:4c:3b:59:0a:4f:fc:33: 05:16:1d:7e:39:13:bf:71:2e:cf:3c:e1:f3:a6:4d: 5c:7b:17:49:96:ae:5c:30:29:80:14:15:36:3e:5b: 74:17:70:27:a6:6f:67:b2:59:f7:65:5b:b1:a1:5c: 4e:f4:f4:88:aa:d8:6a:59:5a:d9:8d:06:b8:a1:c2: b5:a0:01:21:27:81:36:4a:ab:80:01:61:7c:c6:87: 70:09:47:9a:d8:61:5e:47:86:57:78:38:c1:b8:a0: 2d:1d:d6:8c:a1:cd:14:13:b1:44:d7:76:97:30:7e: 21:59:21:f5:10:fd:da:9b:ef:93:9e:ce:13:d0:4b: 20:20:31:cd:33:e1:da:81:36:5d:ff:c4:27:90:3b: e6:c2:7a:0f:70:be:ad:f1:5a:8b:13:60:0e:6a:21: 93:29:19:be:88:b1:67:f8:0d:c2:ee:83:21:f2:d6: 6f:fc:01:95:43:e4:5f:ca:50:d5:5d:da:b4:25:c9: 60:43:3b:88:b3:7b:1e:91:cf:9a:b9:70:5e:95:e8: ec:cf:71:e6:cf:fc:3e:53:99:7d:a0:76:26:92:8c: b5:aa:3c:a3:81:d9:01:1a:42:00:9d:8e:47:d3:90: ec:98:ae:ee:6e:12:1c:2e:56:c6:40:13:b0:9d:63: 0e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:93:AC:7B:C7:12:02:04:26:36:D9:4E:74:A3:8A:D9:6F:D1:F8:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl X509v3 Authority Key Identifier: keyid:DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer sbgp-ipAddrBlock: critical IPv4: 198.38.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:1c:6d:3e:98:01:07:5a:23:9e:5c:fa:b8:db:df:94:9b:9d: 97:ad:f7:8b:ef:80:fa:6a:d3:f1:e0:f2:7d:f6:86:4f:ac:54: 60:80:ae:f1:a8:1b:8f:7e:26:ec:33:c3:5a:af:27:39:fd:75: a8:01:86:ac:0f:68:54:6b:c7:54:c7:71:79:ff:74:97:0b:04: 8f:fa:1e:c2:67:55:b1:62:a9:ba:e5:a9:1b:69:fb:c9:62:9d: 3d:40:b9:31:1b:8d:1d:92:c6:36:69:e0:8d:01:e2:77:4e:ae: ff:69:ec:3a:6f:f7:c8:71:aa:5b:5e:87:55:df:7a:34:0d:ba: 8f:74:49:50:ee:8a:34:93:c9:3c:5c:b3:3a:81:50:00:2e:7b: bb:5e:1c:11:29:90:3e:02:86:ae:07:61:17:68:06:f5:69:f5: 75:45:c4:76:47:6d:35:4a:56:34:c7:ae:77:ea:25:10:1e:5f: 40:53:ea:db:06:29:80:79:d7:79:7e:17:99:7e:24:01:18:e4: 4a:ce:4f:8a:ac:9a:68:bb:72:3b:01:a1:db:51:2b:1f:ee:ae: 38:d2:55:42:31:9b:96:cf:e5:8c:10:7b:50:d7:f5:19:d4:c5: f5:cb:69:79:c3:62:db:2b:1e:1a:b6:b2:ad:40:4d:0d:85:f9: f4:79:48:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcDQey7QIzFX4gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk0MzVhMzgtYmI4OS00ZmNmLTllNWYtN2E2ZTUzYjJk M2JkMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk YjlmYTU0YTYtZjhkOC00ZThjLTk5MjgtNDFlNWI1NmY3NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjae/J6mghEw7WQpP/DMFFh1+ORO/cS7PPOHz pk1cexdJlq5cMCmAFBU2Plt0F3Anpm9nsln3ZVuxoVxO9PSIqthqWVrZjQa4ocK1 oAEhJ4E2SquAAWF8xodwCUea2GFeR4ZXeDjBuKAtHdaMoc0UE7FE13aXMH4hWSH1 EP3am++Tns4T0EsgIDHNM+HagTZd/8QnkDvmwnoPcL6t8VqLE2AOaiGTKRm+iLFn +A3C7oMh8tZv/AGVQ+RfylDVXdq0JclgQzuIs3sekc+auXBelejsz3Hmz/w+U5l9 oHYmkoy1qjyjgdkBGkIAnY5H05DsmK7ubhIcLlbGQBOwnWMO7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiTrHvHEgIEJjbZTnSjitlv0fjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQz NWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZlNTNiMmQzYmQvMTlhYThlMDItYjlkOC0z NTNmLWI2NjEtNGRiZjRlNzNjODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTk0MzVhMzgtYmI4OS00ZmNmLTll NWYtN2E2ZTUzYjJkM2JkL2E5NDM1YTM4LWJiODktNGZjZi05ZTVmLTdhNmU1M2Iy ZDNiZC5jcmwwHwYDVR0jBBgwFoAU3DKzk9ZklC2PYV15/d1U/xhXXlYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQzNWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZl NTNiMmQzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiZKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgcbT6YAQdaI55c+rjb35SbnZet94vvgPpq0/Hg8n32hk+sVGCArvGo G49+Juwzw1qvJzn9dagBhqwPaFRrx1THcXn/dJcLBI/6HsJnVbFiqbrlqRtp+8li nT1AuTEbjR2SxjZp4I0B4ndOrv9p7Dpv98hxqlteh1XfejQNuo90SVDuijSTyTxc szqBUAAue7teHBEpkD4Chq4HYRdoBvVp9XVFxHZHbTVKVjTHrnfqJRAeX0BT6tsG KYB513l+F5l+JAEY5ErOT4qsmmi7cjsBodtRKx/urjjSVUIxm5bP5YwQe1DX9RnU xfXLaXnDYtsrHhq2sq1ATQ2F+fR5SFg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:59 2025 by rpki-client