$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/db9a8b16-ad6e-30e0-b040-845823dcb025.roa File: db9a8b16-ad6e-30e0-b040-845823dcb025.roa (raw, json) Hash identifier: jExP/any8oO0O/KYn/eDaKqx1+vEq6Ji2L0LnHVU2Ms= Subject key identifier: 0B:75:2C:08:73:45:3A:D2:37:ED:E6:C3:1D:0B:33:84:EE:EE:48:56 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F43285848D3765C775A5376EAADE9F400 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/db9a8b16-ad6e-30e0-b040-845823dcb025.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 3300 IP address blocks: 192.92.80.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:5c:77:5a:53:76:ea:ad:e9:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=c2d521f8-f426-4ba9-8e9d-483ab66c4d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9b:ca:e7:2b:c0:44:50:26:5c:da:3a:39:16: c1:4f:05:fe:a1:00:de:35:db:f1:55:48:d4:05:85: 62:a3:c9:5e:51:30:c8:15:f3:22:01:6a:bb:89:af: 40:07:91:05:e3:07:d9:42:6a:0b:25:0f:d7:ff:41: a9:17:6e:3d:ea:9b:75:13:a7:73:94:b5:74:b3:45: 61:76:c2:2e:42:e8:9d:9e:f2:5f:7c:bd:e9:67:59: 9a:1f:90:f9:c7:80:51:8d:21:46:b0:01:e4:45:11: 3b:94:4e:9a:14:15:26:bd:61:ae:02:a4:5b:78:82: ee:6d:03:be:be:cb:96:a3:52:3f:c0:8b:b7:d1:04: 47:6f:9a:c2:60:b7:4f:9c:8f:ee:8a:ae:11:57:75: 50:bf:12:01:0e:35:e6:d1:d3:7c:d5:95:d6:9c:0a: c6:00:51:55:58:d6:31:15:40:c0:43:da:39:e1:9e: a5:88:4f:99:ed:e7:75:d4:ce:38:cc:af:71:b6:30: 37:79:2f:68:f7:ac:b1:fc:77:51:1c:aa:2b:8f:21: 10:45:1c:0e:3f:3a:da:5b:ce:97:a5:ac:09:78:8d: e5:33:1f:90:45:f6:c3:2b:71:75:10:79:74:6c:2e: 35:45:01:d3:07:8e:61:99:f4:98:e2:a5:41:35:a0: 24:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:75:2C:08:73:45:3A:D2:37:ED:E6:C3:1D:0B:33:84:EE:EE:48:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/db9a8b16-ad6e-30e0-b040-845823dcb025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.92.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:74:89:dd:2e:e1:22:f5:36:1f:d4:86:8a:78:8e:95:69:12: e6:ae:ac:ab:1d:d8:de:6d:65:e0:32:9a:65:7f:fb:2d:63:8f: 5b:7a:eb:06:2a:53:48:3b:d9:a3:2a:d1:19:fb:d0:54:e1:a0: 9a:8a:0d:99:44:0f:57:ac:bf:08:f3:35:5b:db:de:8a:a5:60: 06:5c:22:dc:e6:f7:cb:39:61:1a:d8:f1:dc:89:5b:85:83:6c: 65:29:3a:7e:9f:b8:be:2b:d0:a7:0e:06:d7:3e:f1:53:9b:2c: 67:3c:0a:8c:32:e6:5d:6b:58:15:26:b0:cf:35:cb:8f:7a:11: 35:3b:16:30:07:12:fb:89:fd:17:41:c5:13:67:18:bd:81:74: 81:db:57:47:f0:14:0b:37:f0:55:b7:71:ba:9d:b5:ea:b1:5d: 08:11:fa:dc:4b:7c:79:ce:f9:00:18:dd:f9:ce:3f:1e:77:ea: 77:04:5e:bc:11:1c:87:6e:44:00:b8:80:9b:c7:d5:74:3f:e8: ab:c4:51:85:81:c3:b2:46:ef:89:2b:5a:7c:5b:5f:cb:58:e1: ec:50:60:9c:31:04:df:f4:31:3f:e1:74:95:6d:01:f8:36:db: 89:32:e7:01:82:ca:7b:67:00:f9:8a:50:ff:18:41:39:de:7e: fb:2b:fd:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdlx3WlN26q3p9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk YzJkNTIxZjgtZjQyNi00YmE5LThlOWQtNDgzYWI2NmM0ZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZvK5yvARFAmXNo6ORbBTwX+oQDeNdvxVUjU BYVio8leUTDIFfMiAWq7ia9AB5EF4wfZQmoLJQ/X/0GpF2496pt1E6dzlLV0s0Vh dsIuQuidnvJffL3pZ1maH5D5x4BRjSFGsAHkRRE7lE6aFBUmvWGuAqRbeILubQO+ vsuWo1I/wIu30QRHb5rCYLdPnI/uiq4RV3VQvxIBDjXm0dN81ZXWnArGAFFVWNYx FUDAQ9o54Z6liE+Z7ed11M44zK9xtjA3eS9o96yx/HdRHKorjyEQRRwOPzraW86X pawJeI3lMx+QRfbDK3F1EHl0bC41RQHTB45hmfSY4qVBNaAkzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAt1LAhzRTrSN+3mwx0LM4Tu7khWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvZGI5YThiMTYtYWQ2ZS0z MGUwLWIwNDAtODQ1ODIzZGNiMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB90id0u4SL1Nh/Uhop4jpVpEuaurKsd2N5tZeAymmV/+y1jj1t66wYq U0g72aMq0Rn70FThoJqKDZlED1esvwjzNVvb3oqlYAZcItzm98s5YRrY8dyJW4WD bGUpOn6fuL4r0KcOBtc+8VObLGc8Cowy5l1rWBUmsM81y496ETU7FjAHEvuJ/RdB xRNnGL2BdIHbV0fwFAs38FW3cbqdteqxXQgR+txLfHnO+QAY3fnOPx536ncEXrwR HIduRAC4gJvH1XQ/6KvEUYWBw7JG74krWnxbX8tY4exQYJwxBN/0MT/hdJVtAfg2 24ky5wGCyntnAPmKUP8YQTnefvsr/Xo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:59 2025 by rpki-client