$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/b96e1617-e784-3bbb-ba2d-2f4a764d0e95.roa File: b96e1617-e784-3bbb-ba2d-2f4a764d0e95.roa (raw, json) Hash identifier: ittYYdMdW8iBAX6L+t9nzGjKD1f+NUyHF5QrNAQ1bAA= Subject key identifier: CB:CC:68:60:7B:A9:74:26:A6:8E:06:12:95:78:6F:81:C9:D9:F4:17 Certificate issuer: /CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b Certificate serial: 010D0C9F43285848A136136D63ADB7C93EC75000 Authority key identifier: BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/b96e1617-e784-3bbb-ba2d-2f4a764d0e95.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 199.4.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:13:6d:63:ad:b7:c9:3e:c7:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=840b19e8-f18d-485c-adeb-620d4b2d3cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:55:42:81:28:e9:b7:80:11:f7:40:d0:08:af: 21:2a:f7:3b:0e:4c:a3:01:b3:9d:6a:05:98:ff:9d: e7:9b:28:88:eb:23:67:c5:4d:3f:ac:b1:ae:6a:0f: c5:63:f3:d0:e3:2b:e8:e1:d5:20:7c:e4:9c:21:85: 3e:1f:f7:1b:7c:0a:fe:a1:26:e0:b0:bd:8b:41:4a: 2f:c0:01:2c:ed:9b:e7:24:02:88:79:ae:bf:67:6b: e8:90:77:06:24:3a:c7:f5:ae:b2:d3:b5:9a:75:02: 86:61:7c:b0:d4:20:53:58:cf:35:c0:a3:7d:a6:c7: 6a:d8:14:6f:4b:67:2f:d1:0f:ed:e9:7b:99:1a:4c: 97:ab:d3:db:0c:59:17:a6:5f:a9:ed:f6:22:a9:3a: 0c:bf:f3:99:1b:1b:46:8a:cc:af:f9:d2:1a:e0:fa: d6:22:7b:3d:1a:28:ad:22:bb:74:3a:22:71:65:3d: 25:c8:11:39:34:8d:67:fb:01:14:c5:d7:8d:6b:a1: f8:d3:fd:f5:9e:1e:56:31:fb:72:e7:59:74:95:1a: 68:35:18:e5:54:7a:9c:6c:bc:0c:2d:19:da:e4:86: bd:1f:0a:66:6a:ba:cd:41:0a:90:ba:29:3a:2f:9e: 5f:f4:39:c5:d4:08:f0:fd:af:92:90:74:83:3a:7c: b4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CC:68:60:7B:A9:74:26:A6:8E:06:12:95:78:6F:81:C9:D9:F4:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/b96e1617-e784-3bbb-ba2d-2f4a764d0e95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl X509v3 Authority Key Identifier: keyid:BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer sbgp-ipAddrBlock: critical IPv4: 199.4.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:91:4a:ea:c8:9c:44:b7:db:d1:22:7a:68:40:0f:3c:e9:a4: 50:56:ef:c8:1d:7b:ce:59:63:c3:02:e3:c5:ea:6c:70:d3:83: 8a:ea:4c:c7:9f:53:fd:8c:b9:8b:3a:38:2f:7c:7c:cb:d7:11: 87:0d:4a:95:e3:f3:e3:58:e6:ce:67:b3:12:ff:50:69:c3:ed: f1:6b:e1:96:ed:45:c2:16:0c:56:85:39:2a:6b:1f:c1:a3:b6: ae:4f:cd:bf:c7:c3:e2:2a:79:d2:52:0a:02:13:11:b3:cc:c4: 98:25:5e:0b:76:de:bd:a7:ab:4a:94:81:c1:22:e6:a7:a0:61: 88:d1:79:8a:be:b5:85:ed:3c:71:e8:57:5c:d9:94:43:b5:44: cb:4d:0b:73:d9:90:d5:f5:b4:f9:15:44:5b:01:b8:57:86:a0: b6:ad:4a:c8:e7:93:4b:de:87:2a:4e:43:67:0c:3f:b2:d0:99: 4c:12:73:7e:1d:01:09:1c:09:80:ef:63:43:7f:34:30:4d:08: 60:68:90:bd:06:ba:60:14:0c:42:aa:db:58:1d:e8:ad:e0:21: 0b:1e:24:36:1c:a2:9f:a1:9e:35:f5:2f:11:44:8f:9f:48:b0: 90:a7:c2:54:9b:07:d6:f2:49:db:50:d4:0b:1c:9a:3d:22:09: c5:d7:f4:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhNtY623yT7HUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE2MGJiZWUtMDRkNS00ODA2LTkwNTUtYTA5YzcwY2U4 ZjJiMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ODQwYjE5ZTgtZjE4ZC00ODVjLWFkZWItNjIwZDRiMmQzY2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1VCgSjpt4AR90DQCK8hKvc7DkyjAbOdagWY /53nmyiI6yNnxU0/rLGuag/FY/PQ4yvo4dUgfOScIYU+H/cbfAr+oSbgsL2LQUov wAEs7ZvnJAKIea6/Z2vokHcGJDrH9a6y07WadQKGYXyw1CBTWM81wKN9psdq2BRv S2cv0Q/t6XuZGkyXq9PbDFkXpl+p7fYiqToMv/OZGxtGisyv+dIa4PrWIns9Giit Irt0OiJxZT0lyBE5NI1n+wEUxdeNa6H40/31nh5WMfty51l0lRpoNRjlVHqcbLwM LRna5Ia9HwpmarrNQQqQuik6L55f9DnF1Ajw/a+SkHSDOny07QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvMaGB7qXQmpo4GEpV4b4HJ2fQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTYw YmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDljNzBjZThmMmIvYjk2ZTE2MTctZTc4NC0z YmJiLWJhMmQtMmY0YTc2NGQwZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGE2MGJiZWUtMDRkNS00ODA2LTkw NTUtYTA5YzcwY2U4ZjJiLzRhNjBiYmVlLTA0ZDUtNDgwNi05MDU1LWEwOWM3MGNl OGYyYi5jcmwwHwYDVR0jBBgwFoAUusClpSsZA/hh4otA+HJqBec0jZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTYwYmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDlj NzBjZThmMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwSHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2RSurInES329EiemhADzzppFBW78gde85ZY8MC48XqbHDTg4rqTMef U/2MuYs6OC98fMvXEYcNSpXj8+NY5s5nsxL/UGnD7fFr4ZbtRcIWDFaFOSprH8Gj tq5Pzb/Hw+IqedJSCgITEbPMxJglXgt23r2nq0qUgcEi5qegYYjReYq+tYXtPHHo V1zZlEO1RMtNC3PZkNX1tPkVRFsBuFeGoLatSsjnk0vehypOQ2cMP7LQmUwSc34d AQkcCYDvY0N/NDBNCGBokL0GumAUDEKq21gd6K3gIQseJDYcop+hnjX1LxFEj59I sJCnwlSbB9bySdtQ1Ascmj0iCcXX9GQ= -----END CERTIFICATE-----Generated at Fri Apr 4 23:32:46 2025 by rpki-client