$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2a4574b-94aa-3ecf-a9c5-de0ee411e940.roa File: f2a4574b-94aa-3ecf-a9c5-de0ee411e940.roa (raw, json) Hash identifier: 76Ui4IBeUnpJnWrn4lr7jxYQt60yafQB9NgiaDjO30Y= Subject key identifier: 37:99:24:6E:50:F1:DA:0B:27:A4:D6:8A:1F:75:0B:DF:42:7B:F3:66 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858487CEB6515DD490E4F4BA83F20 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2a4574b-94aa-3ecf-a9c5-de0ee411e940.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 397216 IP address blocks: 199.7.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:65:15:dd:49:0e:4f:4b:a8:3f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=11a523fd-59e9-47e5-ab1c-26f3b7d6f228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a5:b9:f5:53:92:96:e0:c9:6d:12:6c:11:7e: 89:ce:74:a5:d8:92:a5:42:0e:5e:d1:b9:72:a9:b9: a2:93:ce:63:65:3b:47:c1:b1:e8:58:64:19:ec:ae: 3f:b2:73:c6:05:d2:55:fa:37:03:fd:76:ee:60:24: 83:0d:3f:82:0e:1a:a8:cf:f5:f9:b7:3c:fc:27:9d: e5:fb:64:91:ab:2c:4e:b4:e4:33:ad:ac:e2:9f:4a: e4:91:1a:3d:e4:a4:28:64:b2:2c:3a:d6:ce:04:f2: 07:4b:8a:8b:7a:b8:0e:69:2e:72:49:c7:5f:2e:ca: b5:53:13:3d:a4:0e:8d:a0:5c:e7:79:d2:8c:6d:ac: 3c:7b:f8:4f:91:a1:e8:7d:d6:c6:35:1a:50:14:8c: 28:67:7e:b6:fc:98:9b:9e:dd:48:3b:50:13:0f:71: 2c:c5:36:fa:aa:36:12:55:4d:3e:4c:3d:b5:23:37: 9c:6b:05:8b:df:1a:55:76:b0:d3:ab:82:f4:9b:34: e7:c9:5a:3c:90:2e:ee:66:58:85:d4:1b:ff:e8:3a: 8b:2e:38:9a:26:17:18:5b:b3:ba:56:3f:a0:93:66: de:d4:a5:91:08:fd:04:99:c8:a0:7a:d0:93:7d:34: 1d:86:04:bd:7f:83:6d:9e:14:21:2d:5f:af:aa:36: 64:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:99:24:6E:50:F1:DA:0B:27:A4:D6:8A:1F:75:0B:DF:42:7B:F3:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2a4574b-94aa-3ecf-a9c5-de0ee411e940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0b:25:52:45:fa:2d:d1:fe:72:fd:d6:bb:2d:42:8c:ea:4a: 63:1f:01:8a:0b:42:06:29:44:e3:21:da:1c:09:93:59:d3:c7: 14:bd:75:a8:f0:57:77:ec:04:02:14:37:a8:7d:60:63:e0:40: 09:c4:a0:97:f0:5f:04:26:85:95:28:f4:30:93:47:67:ff:52: 38:e6:95:d7:cf:20:db:bb:25:07:df:83:bd:88:d6:e5:21:c1: 8f:83:8e:2b:49:90:c3:63:3c:61:da:6b:ca:b8:29:e9:4f:7c: 4c:cf:7d:63:9b:00:33:c2:1f:a3:4e:87:8e:45:a9:d7:b0:cf: 24:0b:0f:29:40:f2:7e:52:45:2b:f7:b2:33:7c:f4:4f:81:98: ac:d8:ab:90:4e:84:98:89:94:dd:55:e7:0e:a8:b9:c2:98:64: 7e:d8:77:b4:89:d7:45:07:76:2b:dc:84:1f:a3:e8:e8:1c:38: 9d:2e:68:3f:5d:95:88:92:51:97:d1:d0:2b:21:8f:5a:95:c6: f6:c5:61:e1:8f:a1:62:be:bd:2b:8f:47:af:21:d5:53:b9:3f: 1f:2c:89:cc:76:32:4c:78:d5:c3:a4:02:67:3a:80:99:22:67: c6:e6:c2:bb:f5:14:41:9c:f9:c3:3e:76:c3:cd:62:4b:7b:26: 1e:da:8b:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh862UV3UkOT0uoPyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk MTFhNTIzZmQtNTllOS00N2U1LWFiMWMtMjZmM2I3ZDZmMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaW59VOSluDJbRJsEX6JznSl2JKlQg5e0bly qbmik85jZTtHwbHoWGQZ7K4/snPGBdJV+jcD/XbuYCSDDT+CDhqoz/X5tzz8J53l +2SRqyxOtOQzrazin0rkkRo95KQoZLIsOtbOBPIHS4qLergOaS5yScdfLsq1UxM9 pA6NoFznedKMbaw8e/hPkaHofdbGNRpQFIwoZ362/Jibnt1IO1ATD3EsxTb6qjYS VU0+TD21IzecawWL3xpVdrDTq4L0mzTnyVo8kC7uZliF1Bv/6DqLLjiaJhcYW7O6 Vj+gk2be1KWRCP0EmcigetCTfTQdhgS9f4NtnhQhLV+vqjZklQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeZJG5Q8doLJ6TWih91C99Ce/NmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjJhNDU3NGItOTRhYS0z ZWNmLWE5YzUtZGUwZWU0MTFlOTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACALJVJF+i3R/nL91rstQozqSmMfAYoLQgYpROMh2hwJk1nTxxS9dajw V3fsBAIUN6h9YGPgQAnEoJfwXwQmhZUo9DCTR2f/UjjmldfPINu7JQffg72I1uUh wY+DjitJkMNjPGHaa8q4KelPfEzPfWObADPCH6NOh45FqdewzyQLDylA8n5SRSv3 sjN89E+BmKzYq5BOhJiJlN1V5w6oucKYZH7Yd7SJ10UHdivchB+j6OgcOJ0uaD9d lYiSUZfR0Cshj1qVxvbFYeGPoWK+vSuPR68h1VO5Px8sicx2Mkx41cOkAmc6gJki Z8bmwrv1FEGc+cM+dsPNYkt7Jh7aiz0= -----END CERTIFICATE-----Generated at Sun Feb 16 20:47:29 2025 by rpki-client