$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/53de87bb-ba5f-3d9d-b019-48e29dbd0a21.roa File: 53de87bb-ba5f-3d9d-b019-48e29dbd0a21.roa (raw, json) Hash identifier: 5EePfJZrA+EHYM3g6RlxJO5mvDw+U7u3DC37tX1Z5a8= Subject key identifier: 1F:86:53:84:AE:71:6D:35:30:C1:8E:D2:1C:B2:87:55:F1:7B:25:00 Certificate issuer: /CN=d3bf923d-6c9d-4713-887f-1f30075cf850 Certificate serial: 010D0C9F4328584875F05238422A76B627DBC7A8 Authority key identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/53de87bb-ba5f-3d9d-b019-48e29dbd0a21.roa Signing time: Tue 07 Jan 2025 02:00:39 +0000 ROA not before: Tue 07 Jan 2025 02:00:39 +0000 ROA not after: Mon 07 Apr 2025 01:00:39 +0000 asID: 32746 IP address blocks: 199.175.56.0/22 maxlen: 24 199.201.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:f0:52:38:42:2a:76:b6:27:db:c7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3bf923d-6c9d-4713-887f-1f30075cf850 Validity Not Before: Jan 7 02:00:39 2025 GMT Not After : Apr 7 01:00:39 2025 GMT Subject: CN=aea02125-8ffc-4771-aa5c-f2c58ce52a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:96:ca:28:d2:5b:93:96:85:f0:50:2d:c2: 1b:04:68:b3:fe:8c:31:34:e2:0a:c4:06:18:99:85: 34:57:1e:5e:6e:a7:7f:c2:82:00:2b:85:f5:3e:f7: 6c:bf:30:d9:53:ba:be:7e:ba:44:39:db:ce:6c:1f: 38:70:ea:e1:11:cc:29:a0:72:c6:ff:32:f8:dc:1d: 2d:84:c7:c6:66:11:26:53:d9:a2:ab:e6:e5:1f:e0: b7:81:c2:fc:64:7b:2d:1e:90:71:9d:8f:9e:f2:12: 9a:70:cd:01:61:58:73:11:83:26:02:f0:b9:d7:a2: 60:f8:66:de:64:66:06:6e:a2:d6:42:71:88:50:3e: 55:52:25:ab:95:81:89:6f:af:d9:01:6c:39:4f:d6: 90:f6:6e:20:55:05:7e:fa:f5:2d:65:18:19:42:69: dc:c4:ae:ec:e2:18:8c:d6:16:5c:89:71:da:47:12: 22:a7:36:13:24:67:42:c4:6c:59:8f:dc:33:11:25: ab:f1:7f:dc:25:a4:3d:58:32:bb:d6:a1:42:23:c2: a3:56:3a:18:1b:7d:ac:57:3b:45:8c:2d:07:dc:81: 2e:dd:00:e6:d2:93:46:e4:5d:60:09:e8:98:a6:ce: 0d:24:73:db:71:39:26:39:d2:c4:af:38:c8:61:b3: 90:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:86:53:84:AE:71:6D:35:30:C1:8E:D2:1C:B2:87:55:F1:7B:25:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/53de87bb-ba5f-3d9d-b019-48e29dbd0a21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl X509v3 Authority Key Identifier: keyid:5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer sbgp-ipAddrBlock: critical IPv4: 199.175.56.0/22 199.201.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:0e:49:6e:bc:d9:4a:3e:e7:06:0f:68:b7:7c:de:b7:1b:1f: 4e:80:e3:83:a2:9c:ec:cc:30:76:df:a3:29:74:21:b7:13:d4: 36:93:fa:58:3a:ff:d2:07:f0:60:d8:34:78:72:db:b7:2a:42: 13:8f:3a:77:7f:be:d2:e4:e7:61:72:97:f6:b9:b9:c1:f2:61: a9:f9:5e:a5:30:21:36:80:f6:9c:be:38:7c:6b:e1:22:a0:e6: b0:c0:b4:81:47:48:85:6d:3a:13:45:7d:ab:99:d0:04:da:c3: 36:15:e2:fe:f1:95:f5:3d:df:8b:03:95:42:1d:a4:b5:9c:de: 3d:87:41:a6:cc:86:e7:96:9d:39:9a:dd:45:09:21:0a:2f:4b: 83:5e:c9:f3:cf:ef:c4:f5:bf:d8:a8:b3:31:4e:1b:f3:37:71: 71:d2:7b:9f:e8:8a:a4:3a:c6:89:47:49:27:e3:04:a7:73:a2: 94:b7:30:bd:1b:07:e8:98:67:12:dd:a5:bc:b0:f1:9f:fd:64: 97:47:97:a5:1b:0a:cb:7e:72:d6:29:55:3d:d4:e7:58:b8:2f: 7a:95:b9:04:53:2e:34:ee:65:64:54:16:0c:29:6e:60:c6:2e: b0:8e:1b:ec:c2:d8:b0:96:b4:33:08:69:66:dc:af:fa:a9:23: f5:20:71:40 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEh18FI4Qip2tifbx6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNiZjkyM2QtNmM5ZC00NzEzLTg4N2YtMWYzMDA3NWNm ODUwMB4XDTI1MDEwNzAyMDAzOVoXDTI1MDQwNzAxMDAzOVowLzEtMCsGA1UEAxMk YWVhMDIxMjUtOGZmYy00NzcxLWFhNWMtZjJjNThjZTUyYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTuWyijSW5OWhfBQLcIbBGiz/owxNOIKxAYY mYU0Vx5ebqd/woIAK4X1PvdsvzDZU7q+frpEOdvObB84cOrhEcwpoHLG/zL43B0t hMfGZhEmU9miq+blH+C3gcL8ZHstHpBxnY+e8hKacM0BYVhzEYMmAvC516Jg+Gbe ZGYGbqLWQnGIUD5VUiWrlYGJb6/ZAWw5T9aQ9m4gVQV++vUtZRgZQmncxK7s4hiM 1hZciXHaRxIipzYTJGdCxGxZj9wzESWr8X/cJaQ9WDK71qFCI8KjVjoYG32sVztF jC0H3IEu3QDm0pNG5F1gCeiYps4NJHPbcTkmOdLErzjIYbOQnQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB+GU4SucW01MMGO0hyyh1XxeyUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kM2Jm OTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMwMDc1Y2Y4NTAvNTNkZTg3YmItYmE1Zi0z ZDlkLWIwMTktNDhlMjlkYmQwYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDNiZjkyM2QtNmM5ZC00NzEzLTg4 N2YtMWYzMDA3NWNmODUwL2QzYmY5MjNkLTZjOWQtNDcxMy04ODdmLTFmMzAwNzVj Zjg1MC5jcmwwHwYDVR0jBBgwFoAUW36UafuPFj/MySVSVEX7bbvaxbswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kM2JmOTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMw MDc1Y2Y4NTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCx684AwQD x8lgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACIOSW682Uo+5wYPaLd83rcbH06A44OinOzMMHbfoyl0IbcT 1DaT+lg6/9IH8GDYNHhy27cqQhOPOnd/vtLk52Fyl/a5ucHyYan5XqUwITaA9py+ OHxr4SKg5rDAtIFHSIVtOhNFfauZ0ATawzYV4v7xlfU934sDlUIdpLWc3j2HQabM hueWnTma3UUJIQovS4NeyfPP78T1v9ioszFOG/M3cXHSe5/oiqQ6xolHSSfjBKdz opS3ML0bB+iYZxLdpbyw8Z/9ZJdHl6UbCst+ctYpVT3U51i4L3qVuQRTLjTuZWRU FgwpbmDGLrCOG+zC2LCWtDMIaWbcr/qpI/UgcUA= -----END CERTIFICATE-----Generated at Sun Feb 16 21:00:58 2025 by rpki-client