$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/bb1e31e4-7415-3d35-ab1d-6e250ac21284.roa File: bb1e31e4-7415-3d35-ab1d-6e250ac21284.roa (raw, json) Hash identifier: awrOF2+UYaN8JUCCxoMFB3YolTPBY0D1v46Bu31cX9Y= Subject key identifier: E0:E2:E9:7E:45:58:DD:31:72:51:45:EB:9E:63:E3:8B:88:A2:3F:10 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F43285848D3765CAD899C87E21B7939C0 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/bb1e31e4-7415-3d35-ab1d-6e250ac21284.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 3300 IP address blocks: 199.6.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:5c:ad:89:9c:87:e2:1b:79:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=9b490d88-8315-45a1-bab4-da86e32876de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:84:db:14:19:61:a0:85:e6:9f:9b:9f:b2: f5:f3:64:35:68:e4:f2:9c:87:e7:8b:9a:2c:d1:57: 50:65:25:9c:20:e1:6d:4a:dd:36:94:04:23:89:0c: 05:cb:9f:ff:cc:e3:09:5f:78:15:6b:7f:77:1c:c2: 8a:c7:f1:15:d4:b1:39:10:07:58:ce:01:af:68:fb: 7a:79:09:b8:60:25:e0:a8:64:81:a2:e7:9b:bd:92: 37:27:68:cf:6d:2a:62:e9:15:71:f7:03:ff:a8:2a: 42:a8:02:e8:ed:93:75:09:ad:90:37:d4:6e:40:00: fe:b3:e9:67:87:27:ce:f2:40:3e:75:5d:88:71:5e: 20:8b:10:2c:0d:23:e1:94:7b:5b:72:7c:23:e0:f4: cf:0a:02:56:2a:40:8a:01:4a:b6:d7:a0:b5:e8:12: ab:c7:0e:bd:41:f3:4a:a7:93:a4:1d:d8:91:83:d6: d4:3b:5e:1f:73:74:49:48:f8:8d:77:11:ae:51:a5: 5f:14:d9:e3:43:29:ba:38:5e:14:9a:14:fc:f7:1b: 7d:76:b3:fb:38:9a:31:cb:1f:81:5b:ad:5c:67:28: 51:c8:f0:64:13:52:0b:81:fd:f6:ae:a3:29:e6:51: 9b:72:c2:09:ef:4a:fa:73:e1:4b:b1:23:5f:63:41: a6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E2:E9:7E:45:58:DD:31:72:51:45:EB:9E:63:E3:8B:88:A2:3F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/bb1e31e4-7415-3d35-ab1d-6e250ac21284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 199.6.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c4:b6:da:10:b4:23:f8:55:45:5a:cd:0f:ff:9b:41:b2:2a: aa:63:7d:48:01:c0:5f:69:38:85:6e:6e:88:3c:81:68:b6:2f: 46:86:8f:51:e4:90:c5:da:ff:7f:e1:42:d7:4e:50:30:24:22: 24:a5:f5:e7:54:d2:83:4e:0c:a6:32:72:85:1a:0e:e9:5f:2e: d6:b6:45:1e:19:23:a2:8e:a0:6b:3e:3f:67:c7:37:53:84:95: 1f:bc:9a:7e:f5:ef:65:23:01:28:8c:e2:0e:12:c9:86:a8:b5: a5:4c:03:c9:a2:b2:0b:c3:f9:dc:09:37:9d:21:8b:b9:33:6e: 15:30:7a:f3:d6:43:a4:7c:d7:74:bc:25:cc:fb:4b:93:aa:b0: f5:08:82:a5:3c:d4:8e:5f:04:ea:b3:b5:8f:1f:d1:9b:52:94: ad:69:e5:f4:9f:bd:01:fc:cf:4d:aa:fa:e5:b6:de:66:bc:2b: da:88:e8:6d:22:31:e1:f2:5b:21:d9:55:c4:e6:f8:d4:28:24: e4:05:39:85:e1:1e:86:8a:c8:f5:66:e5:9e:b2:ad:20:30:f5: 79:c5:14:f0:72:28:f6:90:d2:8d:c0:b5:fe:36:86:a9:6e:7e: c4:af:01:09:b2:14:6d:dd:e3:61:ff:38:94:93:64:21:bf:4c: 3b:29:80:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdlytiZyH4ht5OcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk OWI0OTBkODgtODMxNS00NWExLWJhYjQtZGE4NmUzMjg3NmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxKE2xQZYaCF5p+bn7L182Q1aOTynIfni5os 0VdQZSWcIOFtSt02lAQjiQwFy5//zOMJX3gVa393HMKKx/EV1LE5EAdYzgGvaPt6 eQm4YCXgqGSBouebvZI3J2jPbSpi6RVx9wP/qCpCqALo7ZN1Ca2QN9RuQAD+s+ln hyfO8kA+dV2IcV4gixAsDSPhlHtbcnwj4PTPCgJWKkCKAUq216C16BKrxw69QfNK p5OkHdiRg9bUO14fc3RJSPiNdxGuUaVfFNnjQym6OF4UmhT89xt9drP7OJoxyx+B W61cZyhRyPBkE1ILgf32rqMp5lGbcsIJ70r6c+FLsSNfY0GmXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODi6X5FWN0xclFF655j44uIoj8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvYmIxZTMxZTQtNzQxNS0z ZDM1LWFiMWQtNmUyNTBhYzIxMjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxwZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXEttoQtCP4VUVazQ//m0GyKqpjfUgBwF9pOIVubog8gWi2L0aGj1Hk kMXa/3/hQtdOUDAkIiSl9edU0oNODKYycoUaDulfLta2RR4ZI6KOoGs+P2fHN1OE lR+8mn7172UjASiM4g4SyYaotaVMA8misgvD+dwJN50hi7kzbhUwevPWQ6R813S8 Jcz7S5OqsPUIgqU81I5fBOqztY8f0ZtSlK1p5fSfvQH8z02q+uW23ma8K9qI6G0i MeHyWyHZVcTm+NQoJOQFOYXhHoaKyPVm5Z6yrSAw9XnFFPByKPaQ0o3Atf42hqlu fsSvAQmyFG3d42H/OJSTZCG/TDspgAM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:49 2025 by rpki-client