$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb80c2bc-ad24-3e68-a8dc-91e324196117.roa File: bb80c2bc-ad24-3e68-a8dc-91e324196117.roa (raw, json) Hash identifier: OrnQVqFclIVcNm0jcc0bnS5kTEbHUogAzbVxoQTOq/8= Subject key identifier: 4A:B9:F1:8B:80:79:EA:DF:76:E4:8D:E7:75:F1:6E:36:13:6D:5D:D8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99648E84B314E5EAF8F4100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb80c2bc-ad24-3e68-a8dc-91e324196117.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397216 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:48:e8:4b:31:4e:5e:af:8f:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=3e2695c9-28da-4091-b761-fb746572b895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:61:5b:53:ac:35:09:e6:ff:ac:80:f7:69: ba:c0:16:c7:90:48:98:4b:36:ee:97:42:5a:a2:e6: ba:83:14:26:3a:b2:f1:ed:e0:a0:42:38:a0:d8:19: d1:fa:06:df:c3:04:ce:9c:b1:a3:7d:f0:e4:45:83: 3d:82:78:2a:21:24:86:2b:98:f6:9d:92:81:02:17: 4f:ce:24:a9:5b:32:ce:ab:c5:5a:83:f1:49:75:1f: aa:9c:0d:7f:5e:63:5d:9f:fd:71:e4:e2:2d:9f:eb: d7:99:cd:f6:91:13:00:a4:b7:2b:d7:8c:29:27:a7: 90:ea:72:ba:4d:2d:00:e8:f3:db:e0:c4:25:7f:a1: cf:8a:a5:59:5f:ba:31:2f:16:5f:f6:32:ad:ca:bd: 06:b3:69:7a:79:79:fd:ca:9a:85:a6:22:b1:e9:1d: a3:9b:c3:43:2c:f9:ea:f2:1a:c2:f3:78:37:ba:b7: bd:50:27:be:b4:2b:c1:c2:0d:6e:4d:be:10:c7:73: 70:89:6a:ef:2b:98:27:69:43:5e:ae:a2:fa:38:61: 9e:af:ee:92:e3:a4:8a:27:b0:4b:5e:1d:f8:5e:8b: f9:fb:d3:77:4e:73:f2:6d:a3:24:c7:5a:88:bc:6d: d4:77:8c:db:3e:95:1b:48:d8:03:dd:c7:12:d5:66: a6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B9:F1:8B:80:79:EA:DF:76:E4:8D:E7:75:F1:6E:36:13:6D:5D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb80c2bc-ad24-3e68-a8dc-91e324196117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:bc:65:b1:92:fd:2f:28:91:a8:d0:f5:b3:e8:d3:76:f6:ef: c3:5c:a8:2b:e2:b1:cc:93:a8:7a:0b:7d:a0:76:94:1f:28:05: e9:f4:f5:44:a5:c9:35:4a:7c:95:6e:a3:53:78:8b:99:d8:0f: aa:5d:02:6e:44:95:7a:2e:9c:b8:9f:f9:0f:e1:69:2f:5a:c4: c4:5e:f6:8e:07:9d:d3:4a:55:d1:f6:a3:e5:81:ca:d3:6f:c5: 8c:db:a3:60:a5:5e:fa:c6:c1:22:88:3a:4e:1a:4f:5c:e9:ac: 07:2f:6e:3e:21:cf:0a:21:6e:61:d7:3d:d0:e8:7c:09:d5:32: ab:3a:45:eb:3b:55:28:f8:97:0e:9a:d0:e2:f2:c9:61:95:c0: 72:44:28:ea:85:c6:4c:ca:ae:64:24:c7:01:77:8d:3b:fa:08: 7c:90:8d:48:ac:b8:64:3f:86:75:02:59:48:6b:e1:0c:01:03: bb:76:27:22:04:3b:55:60:5a:af:31:e9:73:f1:7e:dd:4c:e1: 1d:0b:46:43:c2:95:55:50:6e:75:15:65:1b:66:ba:02:ce:30: 94:bb:be:e5:ff:54:92:36:01:af:9e:d9:87:e6:6b:68:27:b6: 76:a1:f9:b1:14:e9:2f:06:67:ea:4d:b9:54:c4:6b:9a:50:55: ef:d5:5c:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkjoSzFOXq+PQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk M2UyNjk1YzktMjhkYS00MDkxLWI3NjEtZmI3NDY1NzJiODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt15hW1OsNQnm/6yA92m6wBbHkEiYSzbul0Ja oua6gxQmOrLx7eCgQjig2BnR+gbfwwTOnLGjffDkRYM9gngqISSGK5j2nZKBAhdP ziSpWzLOq8Vag/FJdR+qnA1/XmNdn/1x5OItn+vXmc32kRMApLcr14wpJ6eQ6nK6 TS0A6PPb4MQlf6HPiqVZX7oxLxZf9jKtyr0Gs2l6eXn9ypqFpiKx6R2jm8NDLPnq 8hrC83g3ure9UCe+tCvBwg1uTb4Qx3NwiWrvK5gnaUNerqL6OGGer+6S46SKJ7BL Xh34Xov5+9N3TnPybaMkx1qIvG3Ud4zbPpUbSNgD3ccS1WamVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq58YuAeerfduSN53XxbjYTbV3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmI4MGMyYmMtYWQyNC0z ZTY4LWE4ZGMtOTFlMzI0MTk2MTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS8ZbGS/S8okajQ9bPo03b278NcqCviscyTqHoLfaB2lB8oBen09USl yTVKfJVuo1N4i5nYD6pdAm5ElXounLif+Q/haS9axMRe9o4HndNKVdH2o+WBytNv xYzbo2ClXvrGwSKIOk4aT1zprAcvbj4hzwohbmHXPdDofAnVMqs6Res7VSj4lw6a 0OLyyWGVwHJEKOqFxkzKrmQkxwF3jTv6CHyQjUisuGQ/hnUCWUhr4QwBA7t2JyIE O1VgWq8x6XPxft1M4R0LRkPClVVQbnUVZRtmugLOMJS7vuX/VJI2Aa+e2Yfma2gn tnah+bEU6S8GZ+pNuVTEa5pQVe/VXNE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:48:29 2025 by rpki-client