$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f465a6e5-5591-34dd-a559-1c8626c17563.roa File: f465a6e5-5591-34dd-a559-1c8626c17563.roa (raw, json) Hash identifier: TxN7gDAChhlUATE7EPoH8YC1NkJHT0ac5+q10YGXuf8= Subject key identifier: 50:BD:71:7E:31:CC:99:B4:AC:C5:80:A8:ED:1F:A4:A1:15:22:23:B4 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B27A7C2FC7B80E7FA3F80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f465a6e5-5591-34dd-a559-1c8626c17563.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 199.189.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:27:a7:c2:fc:7b:80:e7:fa:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=d4d90255-8ebf-40aa-8e59-02f195eea609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6b:f3:d4:bf:12:a4:c7:ed:89:3c:e5:19:17: c1:6b:94:ee:f0:74:88:8b:fe:97:ca:e2:b0:e5:12: a4:83:61:3a:a8:59:a9:c4:c5:fd:57:ac:52:45:6b: 57:87:8b:e1:16:dc:29:9c:5d:74:d0:43:a0:96:3b: 66:f6:5d:57:00:20:70:71:21:b5:1d:cd:e4:1c:e6: a2:4a:57:20:38:4c:74:68:d0:d9:c8:5f:71:60:8f: 87:aa:a2:e3:98:b6:7a:02:a4:f9:42:7f:89:e9:bf: 2a:bc:e1:d3:df:a5:57:62:86:63:a4:a3:4b:22:24: a3:66:dd:54:47:ba:9f:4e:f9:fa:2e:54:33:f6:9f: 81:7f:ee:d6:23:49:6b:ae:c9:1c:5b:62:90:be:2f: b3:62:80:2a:84:95:93:cb:64:9a:f3:03:8b:04:0f: df:18:17:20:78:53:5a:34:c2:3f:ea:1c:ce:c0:48: 68:bd:41:25:42:0b:85:b0:85:3e:eb:f6:fc:34:e4: 68:61:93:72:c2:cc:1f:93:36:fa:7e:7f:5e:4b:94: 06:35:b4:fd:d3:35:bc:98:e5:a3:ae:b5:4d:5e:64: b2:01:c6:78:6e:f4:1d:8b:b7:83:78:80:4a:63:52: 0e:15:1b:60:dd:38:4b:bc:44:8c:47:3c:3e:1b:5b: ff:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BD:71:7E:31:CC:99:B4:AC:C5:80:A8:ED:1F:A4:A1:15:22:23:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f465a6e5-5591-34dd-a559-1c8626c17563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.189.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d4:34:9f:4a:8e:c9:f6:47:8e:7f:4b:30:2e:05:97:32:99: 59:a4:a1:40:85:d3:b1:4f:eb:07:ee:28:d3:58:f6:92:7b:71: c0:bb:08:cd:40:55:46:e5:5b:dc:5d:72:61:27:4e:5e:06:4e: ac:2f:e9:a6:24:01:57:c2:ed:44:97:37:6e:d6:86:05:ba:a7: ec:d5:2b:f0:6c:80:be:ff:c7:c0:4e:9a:0e:29:80:70:6e:7a: 17:9b:91:df:b4:be:1b:a1:a3:29:ee:c3:34:05:10:46:97:ce: bf:a9:f4:f9:41:fd:8c:49:18:79:24:96:07:04:23:a6:7e:5f: 9b:60:40:f7:34:8c:a3:8e:c6:48:ef:ac:23:22:1e:79:60:4c: d9:59:5c:d0:ab:61:c1:74:c7:47:48:ed:4e:b9:77:1b:5b:e2: e2:d7:47:65:06:f3:af:03:5c:fb:1f:98:ba:18:09:8f:50:09: 5c:e8:60:3e:6f:74:a4:d7:41:97:50:f7:a1:07:aa:31:e1:25: 22:45:49:6f:ae:56:86:1f:11:4e:f8:04:31:31:2e:bc:85:23: 30:6d:e1:9e:6b:13:d2:94:b8:b9:d9:42:e2:fa:d1:4e:cd:f9: 54:93:43:d2:f9:70:8b:ec:51:1f:9d:95:27:b0:bf:2e:24:bb: a3:84:ba:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKyenwvx7gOf6P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZDRkOTAyNTUtOGViZi00MGFhLThlNTktMDJmMTk1ZWVhNjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGvz1L8SpMftiTzlGRfBa5Tu8HSIi/6XyuKw 5RKkg2E6qFmpxMX9V6xSRWtXh4vhFtwpnF100EOgljtm9l1XACBwcSG1Hc3kHOai SlcgOEx0aNDZyF9xYI+HqqLjmLZ6AqT5Qn+J6b8qvOHT36VXYoZjpKNLIiSjZt1U R7qfTvn6LlQz9p+Bf+7WI0lrrskcW2KQvi+zYoAqhJWTy2Sa8wOLBA/fGBcgeFNa NMI/6hzOwEhovUElQguFsIU+6/b8NORoYZNywswfkzb6fn9eS5QGNbT90zW8mOWj rrVNXmSyAcZ4bvQdi7eDeIBKY1IOFRtg3ThLvESMRzw+G1v/DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFC9cX4xzJm0rMWAqO0fpKEVIiO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjQ2NWE2ZTUtNTU5MS0z NGRkLWE1NTktMWM4NjI2YzE3NTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx71gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDUNJ9Kjsn2R45/SzAuBZcymVmkoUCF07FP6wfuKNNY9pJ7ccC7CM1A VUblW9xdcmEnTl4GTqwv6aYkAVfC7USXN27WhgW6p+zVK/BsgL7/x8BOmg4pgHBu ehebkd+0vhuhoynuwzQFEEaXzr+p9PlB/YxJGHkklgcEI6Z+X5tgQPc0jKOOxkjv rCMiHnlgTNlZXNCrYcF0x0dI7U65dxtb4uLXR2UG868DXPsfmLoYCY9QCVzoYD5v dKTXQZdQ96EHqjHhJSJFSW+uVoYfEU74BDExLryFIzBt4Z5rE9KUuLnZQuL60U7N +VSTQ9L5cIvsUR+dlSewvy4ku6OEuvs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:11 2025 by rpki-client