$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa File: 5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa (raw, json) Hash identifier: oz24CCCSgqfTwQZwmXHO6UmkMYrxGkcxvKpK1aohZ6w= Subject key identifier: 14:E4:F2:B7:8D:C4:D3:8C:88:35:36:74:FA:76:00:30:FA:7E:EA:CC Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B3130D7D582ECDA050040 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 11404 IP address blocks: 199.59.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:31:30:d7:d5:82:ec:da:05:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=f51474ca-722a-47fb-bf9d-1be027873aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:78:5f:3d:e2:d1:6c:7b:c0:07:24:38:40:45: dd:e9:17:d9:f5:82:6c:ab:97:7a:dd:dd:88:8d:61: 87:30:28:5f:40:85:4e:10:c9:da:b3:7f:bc:44:0e: 6f:ce:e1:f8:2e:66:29:24:da:61:1f:0c:12:4d:93: e1:77:1b:29:aa:5e:73:a3:27:23:c9:6d:39:4a:63: c5:72:15:ec:d0:fe:b9:41:f1:f3:4d:da:95:71:f9: 17:cc:8b:58:cb:db:67:da:6a:0e:55:a5:18:f2:90: 70:e7:7c:01:c2:4d:e5:d1:70:c6:ef:79:c2:4d:f7: 7a:00:b0:6d:ed:c5:7c:42:e0:44:5a:47:01:61:78: 05:c6:1d:c0:d9:64:95:d2:e4:74:d6:1e:79:d1:e6: 8b:df:6a:ed:f6:1e:9b:31:79:c9:89:5e:38:b5:09: 16:ff:30:56:65:e1:1e:1f:57:9d:c6:ca:65:74:ec: 33:c3:7a:f5:af:24:10:bb:75:3b:cc:fc:b2:71:d5: bf:b7:db:09:ea:98:4c:a9:7f:9f:49:ba:ac:5a:bf: 58:42:5a:67:1d:7b:3b:1d:47:74:0f:a1:9d:d8:6e: a1:19:30:77:57:73:c0:65:94:28:0f:75:50:b3:55: 24:f1:c2:3a:ad:56:18:b4:a7:bd:25:20:c8:bb:fe: 8f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E4:F2:B7:8D:C4:D3:8C:88:35:36:74:FA:76:00:30:FA:7E:EA:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.59.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:cf:4c:c4:f7:fd:e5:ec:29:8b:da:52:bc:71:d5:fc:ac:78: 5a:1e:3f:bd:71:08:1c:dc:f0:f6:7f:be:41:f9:f3:96:d9:1a: 51:bb:96:5a:d1:f3:2f:a4:fc:69:df:fd:73:5c:0d:05:4b:00: 01:9a:1d:9d:34:f8:5f:67:81:7e:42:73:b3:25:09:60:f9:8e: 21:5e:5e:08:3b:76:49:7b:3c:93:bd:dc:6a:16:04:30:38:61: 6f:26:fc:00:94:8a:4d:3d:b2:0b:cc:d7:d5:81:5a:94:ac:09: 06:ef:3d:d8:10:bf:c2:00:a8:57:d2:5f:4e:77:96:53:6b:5a: 2e:61:6c:f5:e3:f2:b6:67:b7:6c:ad:f8:d0:0a:ef:55:8c:3a: fb:f2:5c:31:0a:14:4d:09:1d:93:35:fc:c1:2a:62:4f:67:43: 85:20:41:b6:ee:cf:04:e0:28:87:7c:6a:9d:98:07:de:86:89: 95:e7:93:08:41:4b:78:50:9a:a7:da:83:ab:22:dc:0b:6f:ca: f3:12:de:5d:7e:72:72:01:c2:51:13:49:8d:eb:36:05:32:1a: 13:11:62:c0:fd:e7:71:7f:c8:a2:f0:9b:b6:e7:db:af:71:aa: 6c:0c:1c:34:7e:a1:9a:bf:fc:df:e9:02:1c:82:c4:68:3c:0a: 63:42:34:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKzEw19WC7NoFAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZjUxNDc0Y2EtNzIyYS00N2ZiLWJmOWQtMWJlMDI3ODczYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinhfPeLRbHvAByQ4QEXd6RfZ9YJsq5d63d2I jWGHMChfQIVOEMnas3+8RA5vzuH4LmYpJNphHwwSTZPhdxspql5zoycjyW05SmPF chXs0P65QfHzTdqVcfkXzItYy9tn2moOVaUY8pBw53wBwk3l0XDG73nCTfd6ALBt 7cV8QuBEWkcBYXgFxh3A2WSV0uR01h550eaL32rt9h6bMXnJiV44tQkW/zBWZeEe H1edxspldOwzw3r1ryQQu3U7zPyycdW/t9sJ6phMqX+fSbqsWr9YQlpnHXs7HUd0 D6Gd2G6hGTB3V3PAZZQoD3VQs1Uk8cI6rVYYtKe9JSDIu/6PUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTk8reNxNOMiDU2dPp2ADD6furMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNWUxZjg4ZDctYmVlMC0z MTk1LWJkODItZGFmMWRmOGQ4ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxztoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDPTMT3/eXsKYvaUrxx1fyseFoeP71xCBzc8PZ/vkH585bZGlG7llrR 8y+k/Gnf/XNcDQVLAAGaHZ00+F9ngX5Cc7MlCWD5jiFeXgg7dkl7PJO93GoWBDA4 YW8m/ACUik09sgvM19WBWpSsCQbvPdgQv8IAqFfSX053llNrWi5hbPXj8rZnt2yt +NAK71WMOvvyXDEKFE0JHZM1/MEqYk9nQ4UgQbbuzwTgKId8ap2YB96GiZXnkwhB S3hQmqfag6si3AtvyvMS3l1+cnIBwlETSY3rNgUyGhMRYsD953F/yKLwm7bn269x qmwMHDR+oZq//N/pAhyCxGg8CmNCNPw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:19 2025 by rpki-client