$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2cde349a-f723-3bc8-a70e-e03f9cdcd93b.roa File: 2cde349a-f723-3bc8-a70e-e03f9cdcd93b.roa (raw, json) Hash identifier: 0eavfTQKxy9/Ekn8WAMga4BmkzLW6EvrrC0vOmSZXDE= Subject key identifier: 64:4D:A7:11:CE:FB:78:EA:1D:F3:6C:39:0E:54:BA:7C:BA:77:4E:D6 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F43285848E00658648ED7345F2507FFC0 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2cde349a-f723-3bc8-a70e-e03f9cdcd93b.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 3300 IP address blocks: 206.182.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:58:64:8e:d7:34:5f:25:07:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=da53004d-8a39-4740-a515-67ceee8b9169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d8:75:ed:30:69:08:2e:06:c9:33:08:af:68: c9:2f:77:e8:cd:f2:8a:c0:38:b3:f4:b7:62:74:9a: ea:69:19:11:bc:3f:25:b5:a7:56:14:85:19:aa:bc: 44:a8:75:88:a0:c6:ed:86:18:bd:ae:18:4a:d8:24: fc:7c:a7:43:13:6b:4a:0d:77:27:49:26:f4:9d:ec: bd:c5:a9:44:70:b0:86:86:cd:9b:8a:04:9f:a0:6e: 50:d2:77:2c:3b:6b:59:f2:9e:e6:39:99:ec:32:3c: 76:2c:97:f1:ac:e6:90:78:4b:fc:4e:26:dd:b0:9a: 21:6c:2f:95:06:64:92:8b:bd:00:53:a5:b5:ee:ba: 23:17:70:6d:ac:90:b3:5d:c2:77:f7:bf:2c:4d:ac: 39:10:0a:36:9f:70:e7:8b:eb:6d:14:d5:a3:83:a6: 53:98:43:70:a9:0f:d3:be:31:1e:f8:d0:e0:1b:82: e4:d0:4a:e7:96:14:e4:9f:b6:91:d5:20:47:ac:61: 79:a7:7f:7f:df:b9:96:a9:08:b0:a6:7b:f8:9a:8e: 90:bd:6b:4e:b5:bd:85:d4:37:75:b5:89:01:9a:79: 1c:f9:52:d7:70:2b:08:21:49:6b:9c:21:5d:57:46: b5:03:35:40:d0:f2:69:e1:73:e0:6b:b6:90:3e:c7: f8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4D:A7:11:CE:FB:78:EA:1D:F3:6C:39:0E:54:BA:7C:BA:77:4E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2cde349a-f723-3bc8-a70e-e03f9cdcd93b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 206.182.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:25:68:c2:44:0b:c8:c9:40:e0:83:c0:96:7d:e4:0a:6d:03: b4:d9:83:71:49:76:2d:23:7b:e1:ae:ca:d7:5b:c2:90:68:46: 67:af:50:a4:d3:45:e0:2c:ff:73:5d:88:77:f3:49:05:b1:a2: e4:ac:fc:6c:f6:c4:76:6d:2c:42:31:c6:d5:da:c2:a3:71:09: 3c:08:36:98:6a:60:75:c6:b3:8c:7e:57:30:3c:ed:94:b9:4c: d4:8e:a5:32:f2:0b:13:15:63:d9:ad:24:c0:43:26:dc:28:52: a6:2e:41:17:c8:c1:83:e9:8d:d7:7c:64:e2:07:48:9c:eb:d9: 52:77:28:ff:21:25:28:43:a0:a4:2f:de:21:d0:7c:32:03:4a: c8:9e:0e:54:74:c5:fb:84:3e:47:f6:5d:94:28:4b:b8:6b:d9: 27:77:72:a1:6b:9d:ba:dc:13:31:48:bf:93:df:c4:27:08:f5: 6c:ec:5e:d6:14:cc:2b:ce:49:7b:e2:36:b1:e2:61:35:85:90: 9e:a4:8c:c6:ae:ad:3f:86:70:9a:eb:47:78:f6:f1:9a:9b:ba: 44:43:6f:6b:02:17:8a:fc:73:52:50:c6:9c:84:73:43:04:de: 61:65:33:b4:8c:5c:05:9b:7f:f0:4f:35:a6:08:b1:0b:87:2c: 71:c6:db:0d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjgBlhkjtc0XyUH/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZGE1MzAwNGQtOGEzOS00NzQwLWE1MTUtNjdjZWVlOGI5MTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdh17TBpCC4GyTMIr2jJL3fozfKKwDiz9Ldi dJrqaRkRvD8ltadWFIUZqrxEqHWIoMbthhi9rhhK2CT8fKdDE2tKDXcnSSb0ney9 xalEcLCGhs2bigSfoG5Q0ncsO2tZ8p7mOZnsMjx2LJfxrOaQeEv8TibdsJohbC+V BmSSi70AU6W17rojF3BtrJCzXcJ3978sTaw5EAo2n3Dni+ttFNWjg6ZTmENwqQ/T vjEe+NDgG4Lk0ErnlhTkn7aR1SBHrGF5p39/37mWqQiwpnv4mo6QvWtOtb2F1Dd1 tYkBmnkc+VLXcCsIIUlrnCFdV0a1AzVA0PJp4XPga7aQPsf4JwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGRNpxHO+3jqHfNsOQ5Uuny6d07WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMmNkZTM0OWEtZjcyMy0z YmM4LWE3MGUtZTAzZjljZGNkOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzrYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAciVowkQLyMlA4IPAln3kCm0DtNmDcUl2LSN74a7K11vCkGhGZ69QpNNF 4Cz/c12Id/NJBbGi5Kz8bPbEdm0sQjHG1drCo3EJPAg2mGpgdcazjH5XMDztlLlM 1I6lMvILExVj2a0kwEMm3ChSpi5BF8jBg+mN13xk4gdInOvZUnco/yElKEOgpC/e IdB8MgNKyJ4OVHTF+4Q+R/ZdlChLuGvZJ3dyoWudutwTMUi/k9/EJwj1bOxe1hTM K85Je+I2seJhNYWQnqSMxq6tP4ZwmutHePbxmpu6RENvawIXivxzUlDGnIRzQwTe YWUztIxcBZt/8E81pgixC4csccbbDQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:41 2025 by rpki-client