$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa File: b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa (raw, json) Hash identifier: iiXcOmML4dXnUpcXwRRgarTaLAMSTR/4h6XMWnQVjdA= Subject key identifier: A0:EC:BE:91:9E:E9:6A:F6:58:39:F3:F9:17:F8:34:CC:59:FE:C3:26 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285848143A7A8DC1E0EF62296553A8 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 25649 IP address blocks: 199.187.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:7a:8d:c1:e0:ef:62:29:65:53:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=bdee1a14-fd6d-4be3-95b9-884eb40295f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:31:26:b8:6a:7d:68:c1:67:63:04:64:7f:42: fb:ae:e7:7e:4f:5c:15:54:dd:fe:46:98:ff:4a:0c: 47:ae:c7:b8:6c:a9:a9:09:25:cf:2b:22:e8:61:ea: 17:ff:8a:9d:d5:0f:dc:90:b5:c1:d4:91:16:17:c6: 63:0e:02:9f:d2:5c:ba:82:07:7b:b9:8b:09:c6:03: db:57:91:47:75:d2:0f:db:64:d1:c7:8f:91:81:1c: 4c:41:11:18:53:95:2b:36:66:69:dd:80:31:0f:2b: 3a:f7:e8:91:bb:aa:d8:38:43:94:da:9d:20:9f:62: 43:15:2b:a7:4f:25:22:34:38:5b:59:bb:52:ed:ca: 3a:ec:62:3d:0d:d6:de:b2:72:6c:4b:5a:1f:d6:41: ab:59:27:75:a8:30:c0:f4:6a:6c:1b:46:34:03:2d: 9a:6e:be:2e:82:4b:ba:fc:ab:44:02:6a:fd:e0:25: 9f:9e:83:13:0f:7e:80:21:fb:f4:35:26:c4:99:1c: 43:d3:6e:25:86:d9:e0:df:f4:25:80:38:10:b0:6e: a4:89:a1:b8:96:fd:88:65:04:a5:ea:b6:46:42:78: 3e:ac:1c:e8:bc:dd:6f:96:fd:51:2d:0c:34:bb:5a: 47:c9:7d:ac:81:31:25:87:97:3d:53:7b:71:f1:30: 59:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EC:BE:91:9E:E9:6A:F6:58:39:F3:F9:17:F8:34:CC:59:FE:C3:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 199.187.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ab:61:b7:79:8d:70:18:cc:32:6d:84:b0:0f:3b:f6:17:60: 49:a9:20:7f:9c:a0:53:64:33:46:6a:51:82:79:9a:56:33:34: 3f:82:81:57:51:d2:18:e6:54:fe:58:f2:7c:52:89:67:9b:5d: c8:b8:2d:4d:71:7a:b1:d6:aa:8a:ec:c0:60:85:61:cc:41:ab: d2:8e:d7:e3:4e:fd:66:b1:c8:bf:02:b2:16:fd:82:84:7a:ee: eb:b6:e5:52:7b:d8:0f:0d:5c:6f:f9:de:4a:f3:b2:c1:b5:a3: a3:5f:37:a0:bf:b0:c9:0e:6f:5b:38:f7:86:72:fb:3d:d8:58: 0b:94:c1:ce:d4:40:a6:ee:d9:87:ef:f9:bb:e2:f2:20:fa:69: 81:23:f2:7e:cf:16:84:3d:6d:f4:60:e0:e0:f7:c4:ec:1b:12: e8:cc:4e:ec:c9:93:6b:11:8a:73:9c:4f:05:76:93:63:55:78: 9c:d6:97:9d:84:de:1a:82:5d:9e:b7:ce:15:0c:77:6d:1e:30: f2:5a:a3:ac:fe:96:eb:fe:81:58:a5:47:25:7f:d3:36:1f:8c: ac:81:1c:79:87:6d:3f:55:36:89:45:2c:75:d7:c9:dd:91:be: 57:52:43:0b:48:2b:39:07:49:7c:23:89:b7:41:28:cf:55:99: 0c:4b:06:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOnqNweDvYillU6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk YmRlZTFhMTQtZmQ2ZC00YmUzLTk1YjktODg0ZWI0MDI5NWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzEmuGp9aMFnYwRkf0L7rud+T1wVVN3+Rpj/ SgxHrse4bKmpCSXPKyLoYeoX/4qd1Q/ckLXB1JEWF8ZjDgKf0ly6ggd7uYsJxgPb V5FHddIP22TRx4+RgRxMQREYU5UrNmZp3YAxDys69+iRu6rYOEOU2p0gn2JDFSun TyUiNDhbWbtS7co67GI9DdbesnJsS1of1kGrWSd1qDDA9GpsG0Y0Ay2abr4ugku6 /KtEAmr94CWfnoMTD36AIfv0NSbEmRxD024lhtng3/QlgDgQsG6kiaG4lv2IZQSl 6rZGQng+rBzovN1vlv1RLQw0u1pHyX2sgTElh5c9U3tx8TBZxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDsvpGe6Wr2WDnz+Rf4NMxZ/sMmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvYjllMDkxZDgtOGE0Yi0z YjRmLWJlNDQtYzgzODE4ZjE2YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7voMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSrYbd5jXAYzDJthLAPO/YXYEmpIH+coFNkM0ZqUYJ5mlYzND+CgVdR 0hjmVP5Y8nxSiWebXci4LU1xerHWqorswGCFYcxBq9KO1+NO/WaxyL8Cshb9goR6 7uu25VJ72A8NXG/53krzssG1o6NfN6C/sMkOb1s494Zy+z3YWAuUwc7UQKbu2Yfv +bvi8iD6aYEj8n7PFoQ9bfRg4OD3xOwbEujMTuzJk2sRinOcTwV2k2NVeJzWl52E 3hqCXZ63zhUMd20eMPJao6z+luv+gVilRyV/0zYfjKyBHHmHbT9VNolFLHXXyd2R vldSQwtIKzkHSXwjibdBKM9VmQxLBvE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:19 2025 by rpki-client