$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b952b5e6-aab3-31c5-9372-9ae3e06dda1b.roa File: b952b5e6-aab3-31c5-9372-9ae3e06dda1b.roa (raw, json) Hash identifier: RF0t+7T1W/1mMHQDDC9+q4Ml7Exv8fQ+Lg4HwXiZ4vk= Subject key identifier: 64:40:0E:98:D1:DC:4D:90:F3:5C:8A:13:6B:96:6B:5D:C8:08:05:60 Certificate issuer: /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Certificate serial: 010D0C9F43285848696061150D6B7D0EE5CB9FA0 Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b952b5e6-aab3-31c5-9372-9ae3e06dda1b.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 20055 IP address blocks: 209.188.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:61:15:0d:6b:7d:0e:e5:cb:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=610687c0-182a-4ea9-bfd3-9215e924e03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a1:54:c5:ac:7f:46:f7:03:16:40:b6:28:c6: 11:86:db:97:a0:c0:13:6a:fd:76:ea:33:c9:16:17: 0b:ab:4a:82:ea:0b:a0:a6:19:a4:4f:d0:62:fe:c1: f0:7b:8f:70:1e:a4:71:58:02:d8:6d:7b:a6:fb:e4: a7:09:67:bd:17:1e:de:f5:b8:c3:77:d0:68:58:40: 6c:3d:59:21:c9:af:5c:62:cf:2b:6c:b0:c5:98:fc: d0:7f:84:3c:35:39:f5:26:a5:ba:73:0f:dc:67:52: 02:00:55:f9:1b:ea:e8:14:74:d3:f7:8c:bc:72:0e: d7:53:5e:0a:0f:05:a1:5e:91:c1:11:33:37:95:ae: 5a:c5:3f:a9:9a:a6:23:16:02:e6:47:0a:04:ce:c6: 68:03:af:b7:a4:98:7d:c7:78:03:64:82:ea:9d:72: ef:4b:d8:7a:05:c5:04:97:0a:70:4a:89:bb:b9:d5: 9d:d8:5d:ae:0d:81:54:41:ec:8f:6c:67:c1:f7:37: a1:0b:27:15:fb:de:2b:60:a9:6e:80:ac:81:69:d6: cc:b7:9e:c3:0e:aa:6d:73:60:9f:c5:0f:37:c9:f2: e9:4b:d9:8b:f1:be:1f:97:e6:74:5a:df:6e:4c:e2: 2f:4a:43:a3:2e:26:ff:fc:25:fe:e5:c5:24:1e:4c: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:40:0E:98:D1:DC:4D:90:F3:5C:8A:13:6B:96:6B:5D:C8:08:05:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b952b5e6-aab3-31c5-9372-9ae3e06dda1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl X509v3 Authority Key Identifier: keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer sbgp-ipAddrBlock: critical IPv4: 209.188.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:55:c2:53:a3:d4:20:d7:9a:00:fa:b9:4b:95:28:66:ad:52: ca:3f:22:58:c0:f0:6a:a1:d8:50:93:ba:c3:ff:6e:f6:c1:e0: 58:19:d3:c5:47:b6:e4:6b:8f:0c:88:b0:a2:63:e2:2e:b6:79: ff:85:a0:7a:2a:73:8c:c1:ad:e1:e1:4a:09:94:91:2d:cc:39: 69:b5:2a:a8:73:f1:6d:e3:85:46:84:4d:3c:9c:04:1e:1f:d8: 8f:b2:72:aa:17:b6:44:ff:f9:f1:cb:aa:93:37:b2:31:17:5f: 10:25:d9:ca:59:e2:e9:7b:d7:98:10:7b:58:2f:ce:1d:af:54: 56:44:ae:e2:fe:29:09:af:c2:97:c5:ff:ae:dc:50:59:48:38: 09:3e:42:dc:e5:9a:01:db:60:9e:92:94:44:dc:f4:f0:52:78: 26:5c:93:f1:3f:95:87:98:df:11:16:7e:9f:49:71:6b:37:11: 54:ba:f3:f8:d9:26:b6:50:3e:04:9c:22:03:d3:3a:1c:e4:94: d9:92:39:9f:9d:77:d6:e9:2b:a4:cf:61:43:b3:3b:9f:90:63: c7:05:15:c5:ab:fa:1e:37:59:8d:12:e0:cc:5c:22:61:90:1f: e3:9b:76:af:fc:09:55:4b:06:8b:d7:4e:d4:35:cf:10:ff:cc: 77:3b:40:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYGEVDWt9DuXLn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm M2M4MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk NjEwNjg3YzAtMTgyYS00ZWE5LWJmZDMtOTIxNWU5MjRlMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaFUxax/RvcDFkC2KMYRhtuXoMATav126jPJ FhcLq0qC6gugphmkT9Bi/sHwe49wHqRxWALYbXum++SnCWe9Fx7e9bjDd9BoWEBs PVkhya9cYs8rbLDFmPzQf4Q8NTn1JqW6cw/cZ1ICAFX5G+roFHTT94y8cg7XU14K DwWhXpHBETM3la5axT+pmqYjFgLmRwoEzsZoA6+3pJh9x3gDZILqnXLvS9h6BcUE lwpwSom7udWd2F2uDYFUQeyPbGfB9zehCycV+94rYKlugKyBadbMt57DDqptc2Cf xQ83yfLpS9mL8b4fl+Z0Wt9uTOIvSkOjLib//CX+5cUkHkxbBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRADpjR3E2Q81yKE2uWa13ICAVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvYjk1MmI1ZTYtYWFiMy0z MWM1LTkzNzItOWFlM2UwNmRkYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4 ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5 ZDkxYmYzYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bxjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlVwlOj1CDXmgD6uUuVKGatUso/IljA8Gqh2FCTusP/bvbB4FgZ08VH tuRrjwyIsKJj4i62ef+FoHoqc4zBreHhSgmUkS3MOWm1Kqhz8W3jhUaETTycBB4f 2I+ycqoXtkT/+fHLqpM3sjEXXxAl2cpZ4ul715gQe1gvzh2vVFZEruL+KQmvwpfF /67cUFlIOAk+QtzlmgHbYJ6SlETc9PBSeCZck/E/lYeY3xEWfp9JcWs3EVS68/jZ JrZQPgScIgPTOhzklNmSOZ+dd9bpK6TPYUOzO5+QY8cFFcWr+h43WY0S4MxcImGQ H+Obdq/8CVVLBovXTtQ1zxD/zHc7QBY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:30 2025 by rpki-client