$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ec651062-e150-3475-8a69-0b79c30db69e.roa File: ec651062-e150-3475-8a69-0b79c30db69e.roa (raw, json) Hash identifier: xT43XGmaS+jqCVKpAFv+SMaO0DBXE1/df9PuBlv+UGo= Subject key identifier: 30:EC:B5:20:7A:B0:4B:DE:6C:28:A1:B6:01:E4:08:3C:B6:EB:32:77 Certificate issuer: /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Certificate serial: 010D0C9F432858488D119C4745CB240990F5BA20 Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ec651062-e150-3475-8a69-0b79c30db69e.roa Signing time: Wed 15 Jan 2025 08:51:21 +0000 ROA not before: Wed 15 Jan 2025 08:51:21 +0000 ROA not after: Tue 15 Apr 2025 07:51:21 +0000 asID: 23532 IP address blocks: 199.188.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:11:9c:47:45:cb:24:09:90:f5:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Validity Not Before: Jan 15 08:51:21 2025 GMT Not After : Apr 15 07:51:21 2025 GMT Subject: CN=483dceae-5285-4b34-92c3-b3b795f58c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:34:fc:cc:4c:6f:1e:0c:6a:d1:dd:15:4e: 21:e1:56:f0:dd:17:9b:be:13:3c:ec:cc:d2:88:81: 90:89:f9:e8:33:fd:f6:0e:f1:f4:69:f6:18:75:f0: 19:9f:bd:4d:78:27:e6:f8:f1:3f:b3:e4:b0:86:10: da:c2:7b:10:c1:ea:9e:b1:4a:b9:92:e4:fc:a7:f9: f6:cc:f1:77:6a:c9:d3:4f:19:6c:7a:a6:08:79:84: d0:3f:0c:a4:d4:95:9d:b4:3a:91:4e:da:2d:30:51: 67:7d:73:07:f0:50:cd:c7:1f:9d:ba:0a:64:82:8b: 4a:53:2e:8f:9a:44:32:9c:27:b9:47:7d:46:23:3e: 5f:a1:db:9e:16:fe:b8:39:7b:03:44:25:11:77:ff: c3:80:bb:1b:25:9e:b7:3b:f1:07:84:0d:26:f8:1a: ba:4d:fa:cc:11:7d:ef:85:3f:8f:17:6b:75:0d:69: a5:3e:dd:df:31:fa:2d:a6:88:55:97:9d:b7:77:fd: 20:5c:15:70:4a:8e:32:87:f5:fc:89:22:57:b7:1b: 11:4a:41:ca:63:4f:fb:27:22:da:02:84:00:d9:87: c6:df:93:d1:54:fc:17:7f:4e:c0:fc:e2:8e:52:d1: f3:40:db:0e:4c:c7:64:09:c1:02:57:99:9e:61:3b: d1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EC:B5:20:7A:B0:4B:DE:6C:28:A1:B6:01:E4:08:3C:B6:EB:32:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ec651062-e150-3475-8a69-0b79c30db69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl X509v3 Authority Key Identifier: keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer sbgp-ipAddrBlock: critical IPv4: 199.188.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:34:5c:de:cd:cc:94:af:95:17:bf:bd:73:72:8e:8e:8e:e2: 17:22:fa:69:20:6c:88:bb:e4:a9:3d:05:3a:d5:ba:4c:5a:6b: 77:bd:2a:ca:93:01:f5:e7:73:25:0b:6e:14:dd:92:63:9d:ac: f0:4c:00:74:a0:2f:1a:50:3b:18:fd:8e:36:85:eb:73:f2:fa: d0:cd:75:92:2a:9a:b9:2f:3c:96:12:30:da:77:39:9e:a3:86: 7a:af:8e:e0:19:fc:01:3f:6a:8f:30:ca:57:69:4c:d7:49:1a: fa:e7:ba:f7:3d:b0:af:2b:ed:5c:91:d3:72:b6:74:f0:38:94: 0d:e6:c6:1d:f6:88:b8:93:98:2a:3a:80:06:4c:2f:14:b7:d3: 43:47:98:91:f3:56:60:ec:7d:94:d7:4a:55:70:ae:4e:33:4f: 92:73:75:bf:5c:58:c5:a9:1b:ba:fa:f3:4e:95:a8:44:ac:d1: 53:d4:e2:c2:68:61:6b:15:cc:37:bd:b5:13:b4:2a:c6:01:a3: c0:7c:67:95:91:18:90:79:45:80:94:8d:eb:be:e0:5d:f6:e9: 51:c8:41:7d:9d:f4:90:d4:27:97:ce:ee:ce:b0:73:84:9a:a1: 76:1a:1f:8e:c0:72:16:5b:92:c8:3d:62:ca:7c:bc:f5:ec:3e: 3d:49:78:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNEZxHRcskCZD1uiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ2NjgxNDctYTcxYi00ZmIzLTllZDktZTFlMDQwNjFi YmRkMB4XDTI1MDExNTA4NTEyMVoXDTI1MDQxNTA3NTEyMVowLzEtMCsGA1UEAxMk NDgzZGNlYWUtNTI4NS00YjM0LTkyYzMtYjNiNzk1ZjU4Yzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHw0/MxMbx4MatHdFU4h4Vbw3RebvhM87MzS iIGQifnoM/32DvH0afYYdfAZn71NeCfm+PE/s+SwhhDawnsQweqesUq5kuT8p/n2 zPF3asnTTxlseqYIeYTQPwyk1JWdtDqRTtotMFFnfXMH8FDNxx+dugpkgotKUy6P mkQynCe5R31GIz5fodueFv64OXsDRCURd//DgLsbJZ63O/EHhA0m+Bq6TfrMEX3v hT+PF2t1DWmlPt3fMfotpohVl523d/0gXBVwSo4yh/X8iSJXtxsRSkHKY0/7JyLa AoQA2YfG35PRVPwXf07A/OKOUtHzQNsOTMdkCcECV5meYTvRewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDstSB6sEvebCihtgHkCDy26zJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2 ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUwNDA2MWJiZGQvZWM2NTEwNjItZTE1MC0z NDc1LThhNjktMGI3OWMzMGRiNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQ2NjgxNDctYTcxYi00ZmIzLTll ZDktZTFlMDQwNjFiYmRkL2M0NjY4MTQ3LWE3MWItNGZiMy05ZWQ5LWUxZTA0MDYx YmJkZC5jcmwwHwYDVR0jBBgwFoAUJSxl0Ssr5aaARTiY4Gtn2/UK7jgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUw NDA2MWJiZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7zEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA0XN7NzJSvlRe/vXNyjo6O4hci+mkgbIi75Kk9BTrVukxaa3e9KsqT AfXncyULbhTdkmOdrPBMAHSgLxpQOxj9jjaF63Py+tDNdZIqmrkvPJYSMNp3OZ6j hnqvjuAZ/AE/ao8wyldpTNdJGvrnuvc9sK8r7VyR03K2dPA4lA3mxh32iLiTmCo6 gAZMLxS300NHmJHzVmDsfZTXSlVwrk4zT5Jzdb9cWMWpG7r6806VqESs0VPU4sJo YWsVzDe9tRO0KsYBo8B8Z5WRGJB5RYCUjeu+4F326VHIQX2d9JDUJ5fO7s6wc4Sa oXYaH47AchZbksg9Ysp8vPXsPj1JeJc= -----END CERTIFICATE-----Generated at Wed Feb 5 09:45:02 2025 by rpki-client