$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/4c937432-f5d0-3780-a097-3ce5e4b72113.roa File: 4c937432-f5d0-3780-a097-3ce5e4b72113.roa (raw, json) Hash identifier: pS+dQ7vabut+gdwpwxXFaZoZHwLAXt7HqG1mc/FCf78= Subject key identifier: 3E:1A:33:F0:D0:9C:E0:21:F6:0B:69:05:5C:32:23:BC:00:D6:4A:B1 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F43285848D3765B8B86C1E09CB1269600 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/4c937432-f5d0-3780-a097-3ce5e4b72113.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 3300 IP address blocks: 192.157.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:5b:8b:86:c1:e0:9c:b1:26:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=24c62eaa-fa1c-42b8-a6c7-1b72f17d0318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c5:24:f7:1c:43:2c:0c:42:52:ba:f2:54:12: 7c:52:80:f4:18:6b:ef:ff:dc:4b:62:de:73:4f:7d: 51:58:54:5a:b6:b9:62:2c:12:db:e8:aa:20:e0:68: d0:77:d8:fe:78:4e:1b:fb:fe:6f:36:65:ea:4c:b4: e5:eb:0a:43:db:d6:0b:5b:e1:72:d4:53:03:a7:33: 6e:20:d1:f0:33:c1:0c:6a:03:c8:a4:2f:52:61:bb: a9:22:92:df:9f:7a:9b:46:4d:d6:7d:2b:f6:bb:d5: 5f:92:a3:2f:0d:c6:15:a4:6a:19:38:44:01:e8:f6: 7e:cc:53:85:19:0d:c6:ef:ae:2a:75:2b:2b:7c:3f: 01:03:92:28:a9:ab:9a:14:08:93:39:ab:ab:fc:36: 90:5c:d6:65:e8:7c:32:5e:cd:34:19:be:af:e9:1e: b1:a1:b4:7e:53:16:db:7a:0d:c7:8a:e0:2b:eb:dd: 38:a9:40:b4:61:73:f4:9b:ee:b8:10:a1:90:3b:68: 79:f9:c4:0f:c3:49:d7:09:53:33:a3:a3:c3:76:95: e6:46:bc:0a:1b:0c:70:e6:f8:20:e2:00:74:9b:d4: 33:0c:32:5a:a2:d6:fa:6e:7c:d1:d9:d0:20:84:86: 9e:48:db:bb:f1:87:1c:d0:a7:e1:f0:3d:91:14:e2: 25:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1A:33:F0:D0:9C:E0:21:F6:0B:69:05:5C:32:23:BC:00:D6:4A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/4c937432-f5d0-3780-a097-3ce5e4b72113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.157.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:84:ed:21:ee:00:28:3f:c7:5f:e9:e2:c3:ae:0e:e8:bc:8d: 37:0a:72:20:f5:63:31:f5:7a:c9:cf:59:e4:0c:83:53:f0:3f: f1:9f:8e:9d:aa:f2:f5:1e:87:5d:9f:c8:75:d6:0e:90:0d:95: c3:95:6a:34:1a:9d:5b:85:f8:73:b4:01:79:8e:92:bd:09:47: 44:59:5f:c0:a3:c5:17:24:da:cd:b8:dc:9f:15:8a:9c:a3:66: 46:7c:47:ec:71:b8:25:59:57:f5:5e:88:2d:3b:9a:a6:1b:c1: 50:6f:a9:9d:47:b0:d3:5b:d1:fb:7c:d0:d5:4b:a8:7d:f8:59: 18:60:fa:e2:14:a4:a8:ba:b4:d8:99:02:4e:52:96:cd:9b:5e: 9a:70:6a:4d:dd:4e:13:4b:5d:5f:24:c2:71:3e:91:f3:d7:ec: d3:b4:70:08:ff:15:8d:21:06:c9:c8:10:dd:28:11:04:50:b6: 55:27:70:06:4e:ee:6a:d2:1b:4b:f0:0b:b9:e1:ee:99:27:0a: e6:73:8b:ff:0a:2a:65:8b:74:d7:f1:56:fd:31:75:3e:99:76: 96:dd:f3:a1:18:46:75:cf:7a:20:23:6a:02:9d:20:1a:6c:67: 81:95:5e:98:3c:0b:70:20:d6:fa:e6:93:83:3f:b9:38:dd:01: 95:0e:55:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdluLhsHgnLEmlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk MjRjNjJlYWEtZmExYy00MmI4LWE2YzctMWI3MmYxN2QwMzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcUk9xxDLAxCUrryVBJ8UoD0GGvv/9xLYt5z T31RWFRatrliLBLb6Kog4GjQd9j+eE4b+/5vNmXqTLTl6wpD29YLW+Fy1FMDpzNu INHwM8EMagPIpC9SYbupIpLfn3qbRk3WfSv2u9VfkqMvDcYVpGoZOEQB6PZ+zFOF GQ3G764qdSsrfD8BA5IoqauaFAiTOaur/DaQXNZl6HwyXs00Gb6v6R6xobR+Uxbb eg3HiuAr6904qUC0YXP0m+64EKGQO2h5+cQPw0nXCVMzo6PDdpXmRrwKGwxw5vgg 4gB0m9QzDDJaotb6bnzR2dAghIaeSNu78Ycc0Kfh8D2RFOIlJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4aM/DQnOAh9gtpBVwyI7wA1kqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvNGM5Mzc0MzItZjVkMC0z NzgwLWEwOTctM2NlNWU0YjcyMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJ2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeE7SHuACg/x1/p4sOuDui8jTcKciD1YzH1esnPWeQMg1PwP/Gfjp2q 8vUeh12fyHXWDpANlcOVajQanVuF+HO0AXmOkr0JR0RZX8CjxRck2s243J8Vipyj ZkZ8R+xxuCVZV/VeiC07mqYbwVBvqZ1HsNNb0ft80NVLqH34WRhg+uIUpKi6tNiZ Ak5Sls2bXppwak3dThNLXV8kwnE+kfPX7NO0cAj/FY0hBsnIEN0oEQRQtlUncAZO 7mrSG0vwC7nh7pknCuZzi/8KKmWLdNfxVv0xdT6Zdpbd86EYRnXPeiAjagKdIBps Z4GVXpg8C3Ag1vrmk4M/uTjdAZUOVS4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:37 2025 by rpki-client