$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/8ee9e17d-abc8-31b9-a1e8-0b48a2e69622.roa File: 8ee9e17d-abc8-31b9-a1e8-0b48a2e69622.roa (raw, json) Hash identifier: oiUjZ9W6PVperuPUY0wtGTPMtW6Oee4mRULwCk583xw= Subject key identifier: 64:7A:53:E3:23:CD:62:F7:23:4E:49:AF:A0:F9:34:AE:F8:5D:60:EC Certificate issuer: /CN=45fe4043-69f6-4f38-9003-897cd909fb3b Certificate serial: 010D0C9F43285848F22C68F0A6DBC4D169D8D880 Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/8ee9e17d-abc8-31b9-a1e8-0b48a2e69622.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 13813 IP address blocks: 199.19.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:68:f0:a6:db:c4:d1:69:d8:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=1d4fd5e2-1abd-4ad6-8d91-840ce065d8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3f:7e:19:70:dd:cc:75:8d:7c:cb:42:56:22: 48:85:af:64:8c:34:27:17:a0:73:58:cc:61:92:ab: 2b:0c:8d:3c:d2:6f:b2:36:3a:d3:f0:32:26:9d:1f: 29:e1:5a:51:2c:36:a7:53:6e:b4:5f:a4:0a:95:8f: a9:cc:2f:17:0d:38:10:61:74:8c:ae:8d:ac:b2:79: f1:c7:6c:a0:da:a6:cc:0b:6d:1d:6b:a6:9d:15:1c: 16:a8:72:ec:14:76:7a:49:67:c5:71:11:91:69:eb: ab:e4:a9:20:67:e0:3b:04:d1:20:b0:bd:db:da:92: 58:7c:da:10:62:60:29:ac:b5:5c:ba:4c:68:85:24: d3:a9:9b:a9:1e:80:28:d7:2b:d8:ef:84:9c:be:f4: bf:a8:92:43:7f:b3:9b:4c:42:8b:d9:1d:1d:43:c5: bd:20:b6:23:3a:78:6e:28:b0:11:80:24:7e:85:48: a3:7f:4d:63:85:5a:cb:be:89:78:83:f0:cc:c6:f8: 5b:c9:34:dd:22:aa:84:73:ef:9c:d8:04:30:1a:80: 4e:07:fd:9f:50:a1:31:eb:54:d6:bd:a8:29:1a:43: eb:4a:63:6b:50:99:18:c0:88:9e:b3:45:6b:21:7a: d6:b0:e3:2e:f8:51:a9:b7:55:fd:fc:e9:27:3e:36: 23:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7A:53:E3:23:CD:62:F7:23:4E:49:AF:A0:F9:34:AE:F8:5D:60:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/8ee9e17d-abc8-31b9-a1e8-0b48a2e69622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl X509v3 Authority Key Identifier: keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer sbgp-ipAddrBlock: critical IPv4: 199.19.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6f:3e:7b:36:8f:fb:37:fa:67:9c:a4:b6:c7:1f:3a:b4:20: f7:a5:cf:74:96:b8:a0:e0:7c:53:92:91:16:a9:dd:03:1f:ad: f0:61:8d:59:24:c9:71:91:c3:55:29:0c:48:44:4e:b0:22:2b: 25:b3:1c:65:2e:e2:c2:be:ef:93:03:f8:c2:f7:e9:90:9a:09: 9e:ce:8b:84:94:63:a9:60:c4:1d:83:6c:1c:97:9e:fd:a4:e5: 4f:dd:51:c9:96:8b:e6:67:9f:b6:69:d1:44:e6:6c:db:89:83: 10:bc:c4:13:7b:c4:51:b0:d4:e8:9e:b2:d0:b5:ac:19:27:ca: 64:f9:78:e0:00:3e:4c:00:31:f7:84:0f:c1:e5:73:42:f0:9a: 9b:32:cc:1c:44:2c:3f:e9:91:44:01:b1:bf:a8:9f:50:7f:f9: 05:23:51:af:4b:7d:56:a7:e5:b3:60:bd:db:8b:e5:12:6e:7d: c5:96:15:86:7b:ec:8c:45:64:64:d2:87:da:46:19:85:5d:d4: 2c:06:b7:9f:1b:3c:fa:a4:83:ce:cf:01:e1:a7:36:35:ac:1d: b6:01:f0:cd:c1:14:37:7c:66:c9:00:6f:43:f9:b2:2b:b6:61: 3b:14:49:97:e9:d6:3a:0c:0d:70:4f:47:77:0a:14:3a:53:bc: 09:43:ba:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGjwptvE0WnY2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVmZTQwNDMtNjlmNi00ZjM4LTkwMDMtODk3Y2Q5MDlm YjNiMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MWQ0ZmQ1ZTItMWFiZC00YWQ2LThkOTEtODQwY2UwNjVkOGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j9+GXDdzHWNfMtCViJIha9kjDQnF6BzWMxh kqsrDI080m+yNjrT8DImnR8p4VpRLDanU260X6QKlY+pzC8XDTgQYXSMro2ssnnx x2yg2qbMC20da6adFRwWqHLsFHZ6SWfFcRGRaeur5KkgZ+A7BNEgsL3b2pJYfNoQ YmAprLVcukxohSTTqZupHoAo1yvY74ScvvS/qJJDf7ObTEKL2R0dQ8W9ILYjOnhu KLARgCR+hUijf01jhVrLvol4g/DMxvhbyTTdIqqEc++c2AQwGoBOB/2fUKEx61TW vagpGkPrSmNrUJkYwIies0VrIXrWsOMu+FGpt1X9/OknPjYjaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGR6U+MjzWL3I05Jr6D5NK74XWDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NWZl NDA0My02OWY2LTRmMzgtOTAwMy04OTdjZDkwOWZiM2IvOGVlOWUxN2QtYWJjOC0z MWI5LWExZTgtMGI0OGEyZTY5NjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDVmZTQwNDMtNjlmNi00ZjM4LTkw MDMtODk3Y2Q5MDlmYjNiLzQ1ZmU0MDQzLTY5ZjYtNGYzOC05MDAzLTg5N2NkOTA5 ZmIzYi5jcmwwHwYDVR0jBBgwFoAU0DHIaPcTXNFR/vwIg1/VKc2jFhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80NWZlNDA0My02OWY2LTRmMzgtOTAwMy04OTdj ZDkwOWZiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABvPns2j/s3+mecpLbHHzq0IPelz3SWuKDgfFOSkRap3QMfrfBhjVkk yXGRw1UpDEhETrAiKyWzHGUu4sK+75MD+ML36ZCaCZ7Oi4SUY6lgxB2DbByXnv2k 5U/dUcmWi+Znn7Zp0UTmbNuJgxC8xBN7xFGw1OiestC1rBknymT5eOAAPkwAMfeE D8Hlc0LwmpsyzBxELD/pkUQBsb+on1B/+QUjUa9LfVan5bNgvduL5RJufcWWFYZ7 7IxFZGTSh9pGGYVd1CwGt58bPPqkg87PAeGnNjWsHbYB8M3BFDd8ZskAb0P5siu2 YTsUSZfp1joMDXBPR3cKFDpTvAlDujQ= -----END CERTIFICATE-----Generated at Mon Apr 7 18:39:03 2025 by rpki-client