$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e38aa2e-73a9-393f-919d-7d7d550f528a.roa File: 0e38aa2e-73a9-393f-919d-7d7d550f528a.roa (raw, json) Hash identifier: zMhM94gsF2j1Gv3KJvhcP9ksVdxhezY4/YxNUrAvnkk= Subject key identifier: CE:D5:21:99:9E:FF:E7:50:43:C6:5C:22:2D:D7:53:A5:22:A0:02:F1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858487CEB6676389F1D1C8315D8E0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e38aa2e-73a9-393f-919d-7d7d550f528a.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 397241 IP address blocks: 199.7.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:66:76:38:9f:1d:1c:83:15:d8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=0a76ff81-9c03-4e24-8cac-7b433bdfbb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ab:f6:e6:12:d7:c5:b7:34:bd:5f:fb:21:10: 08:99:e0:30:25:9b:0d:9a:ca:05:50:85:ab:07:11: d5:de:e7:15:d1:72:b0:16:2e:a0:b8:88:2a:ec:4e: 7f:16:7f:29:26:10:3f:a0:52:8e:34:54:d3:21:ed: 17:3a:9a:79:b5:03:1e:c6:a4:54:79:a4:40:29:f1: ec:dc:04:39:78:e6:e1:d2:f4:97:f9:db:de:d1:6e: b8:ec:e1:09:41:40:e5:9d:f7:56:86:cd:27:ff:11: 22:80:e3:0e:78:f2:f2:7b:7d:2a:98:2e:bc:b1:e6: 3b:c9:52:26:03:73:1d:6d:cc:d2:bb:57:c1:0c:36: f4:77:6b:34:c1:2d:9d:4e:a5:f7:46:5e:41:a7:2b: 98:79:7c:06:6d:54:00:2a:75:ca:44:da:ca:4c:76: de:81:84:6b:0f:f4:5f:1b:5b:80:6c:78:93:dd:0a: d0:7d:aa:d4:c6:7c:74:ef:10:a2:e6:48:9e:5d:0a: 51:0c:24:75:0d:d6:4a:d4:1c:b0:a9:8b:24:06:69: 9b:e3:64:f9:32:e4:08:a7:2d:9a:e8:e1:6f:71:8d: 20:63:73:61:19:7c:7c:fd:6f:9c:d6:5e:60:a1:b3: 0d:85:3f:6e:7e:2d:a1:e1:da:ed:5e:6e:37:11:4a: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D5:21:99:9E:FF:E7:50:43:C6:5C:22:2D:D7:53:A5:22:A0:02:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e38aa2e-73a9-393f-919d-7d7d550f528a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:83:f1:b0:f4:d4:08:60:fa:1f:36:c4:55:9b:78:74:6f:68: b5:d2:ac:09:2c:e3:72:2c:bd:72:1d:7f:69:f9:21:90:eb:25: 49:d3:f9:35:9f:cb:99:bc:4f:d3:06:f9:62:05:bc:8c:e6:e8: ce:b3:e3:3a:ee:1b:fc:62:e7:bf:c6:ec:0c:04:20:dc:7f:93: 6c:ea:ea:db:7f:13:4b:55:85:7b:6c:4e:f4:44:9c:8a:7c:e5: 95:72:ee:da:ae:f1:64:b3:af:c1:42:55:41:72:3b:13:d6:9b: 2a:6d:32:00:f9:e0:ef:33:33:43:5d:ab:4f:dc:63:ec:92:91: 41:d8:6a:b1:00:96:e7:2f:d2:d9:f3:09:fd:87:04:0d:de:27: 27:ed:07:c0:ca:94:36:38:3b:3a:ec:c4:81:4a:d6:ca:3c:64: 5b:7c:61:a8:72:89:71:b4:dd:a2:8e:30:3b:07:0f:9c:05:6f: e8:12:cd:b0:c0:87:a9:ef:fc:69:b9:a5:c7:24:43:70:23:d5: 7a:71:ad:be:d8:f6:6a:e5:44:1a:5a:01:6e:60:00:d8:1f:a3: e8:1a:91:8f:96:7f:f0:61:62:dd:11:32:9f:83:89:1d:aa:92: 5a:ba:ee:22:0a:93:3b:f9:21:c0:b5:3b:58:d1:89:17:56:1f: d7:c1:b3:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh862Z2OJ8dHIMV2OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk MGE3NmZmODEtOWMwMy00ZTI0LThjYWMtN2I0MzNiZGZiYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Kv25hLXxbc0vV/7IRAImeAwJZsNmsoFUIWr BxHV3ucV0XKwFi6guIgq7E5/Fn8pJhA/oFKONFTTIe0XOpp5tQMexqRUeaRAKfHs 3AQ5eObh0vSX+dve0W647OEJQUDlnfdWhs0n/xEigOMOePLye30qmC68seY7yVIm A3MdbczSu1fBDDb0d2s0wS2dTqX3Rl5BpyuYeXwGbVQAKnXKRNrKTHbegYRrD/Rf G1uAbHiT3QrQfarUxnx07xCi5kieXQpRDCR1DdZK1BywqYskBmmb42T5MuQIpy2a 6OFvcY0gY3NhGXx8/W+c1l5gobMNhT9ufi2h4drtXm43EUoFRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7VIZme/+dQQ8ZcIi3XU6UioALxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGUzOGFhMmUtNzNhOS0z OTNmLTkxOWQtN2Q3ZDU1MGY1MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOD8bD01Ahg+h82xFWbeHRvaLXSrAks43IsvXIdf2n5IZDrJUnT+TWf y5m8T9MG+WIFvIzm6M6z4zruG/xi57/G7AwEINx/k2zq6tt/E0tVhXtsTvREnIp8 5ZVy7tqu8WSzr8FCVUFyOxPWmyptMgD54O8zM0Ndq0/cY+ySkUHYarEAlucv0tnz Cf2HBA3eJyftB8DKlDY4OzrsxIFK1so8ZFt8YahyiXG03aKOMDsHD5wFb+gSzbDA h6nv/Gm5pcckQ3Aj1Xpxrb7Y9mrlRBpaAW5gANgfo+gakY+Wf/BhYt0RMp+DiR2q klq67iIKkzv5IcC1O1jRiRdWH9fBsws= -----END CERTIFICATE-----Generated at Sun Feb 16 20:43:36 2025 by rpki-client