$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa File: f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa (raw, json) Hash identifier: wcJhTbTz1dOHADp5nhCgZW+aZw4EzGJkuFxRQqv34qc= Subject key identifier: DB:EE:DA:A2:35:9D:15:02:65:C8:ED:2C:37:07:C0:7D:B1:72:B0:84 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848907602FBA85FD239D8ABDA80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 397229 IP address blocks: 199.7.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:02:fb:a8:5f:d2:39:d8:ab:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=8d05e5f1-2868-42a8-856b-daee5fcaf2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:21:06:ff:56:6d:c9:1e:f8:e6:2f:f7:4a:5d: f5:61:0b:c2:3c:ad:41:48:9d:48:23:74:b4:dd:9c: 58:c2:c1:21:46:eb:e4:d7:a3:ea:6d:d8:aa:61:01: e6:a6:8d:f3:a9:6a:9e:70:11:33:91:8d:70:d2:fc: 5d:c9:c9:c4:db:9b:12:fd:c1:ec:ab:0f:82:a3:64: a6:f3:67:c0:81:e7:ce:b0:d4:a2:ff:81:5b:2c:bd: 9d:20:08:d2:10:4f:56:4b:54:95:27:36:49:d3:08: e2:12:06:d3:e6:ae:bd:cc:66:e2:7a:95:88:7a:fa: ea:c2:d9:2d:56:d1:1a:63:34:11:9e:e7:e3:85:d3: 09:98:25:80:0c:24:dd:f4:fb:18:2c:6d:27:16:6a: 9e:c7:4c:08:9f:e6:1b:66:e1:7f:1d:d3:78:64:00: 60:1e:b5:c0:6e:0b:85:66:79:da:dc:70:9e:fe:f8: c9:2e:1d:4c:e6:44:af:77:95:ea:19:ff:d1:d1:c1: cd:0b:e7:70:63:32:57:b2:13:d7:b5:7c:cf:92:af: 3e:cc:5b:3c:b3:e2:b8:04:77:55:98:51:b0:60:a1: 51:5a:fe:db:71:18:5d:7c:76:70:18:ed:a7:58:3e: b5:e0:04:04:31:4b:80:0e:e6:6c:8a:88:79:ac:5d: 0b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EE:DA:A2:35:9D:15:02:65:C8:ED:2C:37:07:C0:7D:B1:72:B0:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:33:54:c1:29:0e:d8:3b:b1:4a:4a:4c:ef:11:a3:53:d6:0a: 2a:35:21:38:a6:a4:51:b3:51:a4:b8:ec:b9:71:ca:41:f9:85: e6:3d:d3:e5:95:87:11:ce:9a:53:bd:ab:f7:7c:ee:b2:6b:50: 34:4f:bf:18:ae:fa:8e:34:8b:a1:b3:84:fc:00:c3:ac:e0:19: cf:6e:f9:d4:a4:d9:6a:85:9e:69:5f:be:78:ca:19:fe:bb:a2: f0:d2:b6:a2:2d:37:3f:da:f5:de:ea:5d:63:71:31:19:d0:3b: ac:8b:e7:6c:33:b6:1c:7b:61:42:a3:1f:10:fb:61:e8:a4:eb: 6e:88:b3:66:6d:dc:26:02:c6:4d:be:0e:49:c8:63:a7:ff:37: 62:7b:8e:d2:56:fc:17:0b:82:d4:08:a8:6c:1f:ab:33:14:39: d4:74:54:f8:55:3d:14:f5:dd:a1:44:9c:57:01:0c:de:76:6e: 1b:b3:ac:d5:d1:e4:c8:b5:da:14:63:92:f2:ec:42:60:70:37: 05:9c:30:4d:b6:70:8a:ce:67:82:51:73:80:e1:db:07:cc:61: dd:0b:ff:57:44:61:79:70:4e:0c:83:83:4e:55:1e:0f:e5:51: 14:84:6f:f6:3e:9f:19:3f:3a:b7:be:f8:1c:ed:fc:96:10:d4: 2c:5b:8f:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgL7qF/SOdir2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk OGQwNWU1ZjEtMjg2OC00MmE4LTg1NmItZGFlZTVmY2FmMmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiEG/1ZtyR745i/3Sl31YQvCPK1BSJ1II3S0 3ZxYwsEhRuvk16PqbdiqYQHmpo3zqWqecBEzkY1w0vxdycnE25sS/cHsqw+Co2Sm 82fAgefOsNSi/4FbLL2dIAjSEE9WS1SVJzZJ0wjiEgbT5q69zGbiepWIevrqwtkt VtEaYzQRnufjhdMJmCWADCTd9PsYLG0nFmqex0wIn+YbZuF/HdN4ZABgHrXAbguF Znna3HCe/vjJLh1M5kSvd5XqGf/R0cHNC+dwYzJXshPXtXzPkq8+zFs8s+K4BHdV mFGwYKFRWv7bcRhdfHZwGO2nWD614AQEMUuADuZsioh5rF0L7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvu2qI1nRUCZcjtLDcHwH2xcrCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjg4MzdlYmEtNmQ3Ny0z YTk4LTk5ZTgtZTQzNjdjZmRmOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0zVMEpDtg7sUpKTO8Ro1PWCio1ITimpFGzUaS47LlxykH5heY90+WV hxHOmlO9q/d87rJrUDRPvxiu+o40i6GzhPwAw6zgGc9u+dSk2WqFnmlfvnjKGf67 ovDStqItNz/a9d7qXWNxMRnQO6yL52wzthx7YUKjHxD7Yeik626Is2Zt3CYCxk2+ DknIY6f/N2J7jtJW/BcLgtQIqGwfqzMUOdR0VPhVPRT13aFEnFcBDN52bhuzrNXR 5Mi12hRjkvLsQmBwNwWcME22cIrOZ4JRc4Dh2wfMYd0L/1dEYXlwTgyDg05VHg/l URSEb/Y+nxk/Ore++Bzt/JYQ1Cxbj30= -----END CERTIFICATE-----Generated at Sun Feb 16 20:44:07 2025 by rpki-client