$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa File: c84238dc-4927-30ce-80e8-d4213dd4be12.roa (raw, json) Hash identifier: N7yUDCKYarowHwkUrT882s2cljNFPYPPk1ko2RJbaMA= Subject key identifier: 9F:E9:81:99:3E:15:9B:D0:3B:73:AE:EB:32:D5:21:C5:A9:52:75:3E Certificate issuer: /CN=fb8e9f00-13c9-406e-9c03-d71cd386c086 Certificate serial: 010D0C9F432858487CEB32DD6B82053DBF8E9600 Authority key identifier: 88:9A:AF:B4:41:CD:EB:C5:CC:85:1D:00:F8:39:57:55:95:34:B4:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 198.89.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:32:dd:6b:82:05:3d:bf:8e:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb8e9f00-13c9-406e-9c03-d71cd386c086 Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=d5c8b51a-ba25-48c7-bab7-0e0910c99a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0d:ca:48:9c:1e:66:a4:e8:09:03:44:03:4d: 64:5f:9d:63:8c:31:35:55:00:71:13:44:1a:a6:b1: 6c:aa:3e:0b:d7:41:d4:ae:f7:d6:5f:21:22:e2:28: b7:c0:69:3d:36:95:39:63:d5:85:8e:4e:a2:fe:91: 22:0d:bb:5e:86:31:c8:49:01:8d:60:0b:c1:47:37: 63:4b:60:06:33:5a:f0:08:bb:a8:2e:fd:6a:f5:94: c9:d2:1a:59:8d:53:41:3d:4f:6b:60:ca:68:5a:84: f9:3d:d6:53:6d:09:4a:fa:4b:e5:54:0d:d1:69:ba: 6d:78:d2:3e:b7:bf:c9:a1:f5:73:e5:b6:b4:fe:ab: 6a:03:88:ec:85:6f:28:4d:75:79:6e:aa:e5:57:10: 60:ee:f6:eb:e2:dd:72:bd:1c:c2:64:58:88:50:49: 8b:44:a5:ef:73:aa:58:b6:38:36:83:9c:fa:7d:2c: e8:5a:f3:80:52:e5:29:5f:b6:2d:14:18:5d:db:1d: be:d1:71:de:0d:38:61:7b:68:8a:17:34:86:94:5b: 8e:1e:70:4a:e2:81:63:04:fb:80:47:36:dc:b6:0d: 11:64:fa:4a:71:99:89:b8:53:32:95:74:c0:87:df: ec:6c:33:6f:9a:8b:df:56:77:22:73:1b:d2:28:8e: d0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E9:81:99:3E:15:9B:D0:3B:73:AE:EB:32:D5:21:C5:A9:52:75:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.crl X509v3 Authority Key Identifier: keyid:88:9A:AF:B4:41:CD:EB:C5:CC:85:1D:00:F8:39:57:55:95:34:B4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer sbgp-ipAddrBlock: critical IPv4: 198.89.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:00:56:e1:d8:55:9a:45:b4:1f:d2:a4:f0:4e:59:ed:cc:08: 77:9d:4d:1d:6b:53:1a:8b:f1:f5:df:bc:91:a1:00:2b:32:2b: 85:df:31:27:56:32:a9:95:19:e9:74:07:ae:f2:21:77:e9:08: 03:42:00:a0:3c:07:b7:86:34:8d:98:ce:57:94:23:4d:c4:d8: 72:cb:55:95:a5:1b:6a:95:f2:db:52:2b:52:96:c6:8d:2e:c8: d6:07:1c:34:99:d7:c1:19:6a:c6:93:b6:51:86:4f:f3:54:61: c9:9a:06:c4:29:d1:e9:da:98:6f:08:4a:7e:d9:7e:c2:95:f9: 1b:bc:2a:e5:b8:72:6a:76:b6:b9:d1:82:63:f3:b5:70:cf:63: 0b:a8:4f:c4:d1:76:8e:f1:21:b3:df:ea:41:9d:9f:e2:36:a7: b6:ac:cb:47:15:27:f5:e1:2b:27:83:7f:c3:ed:ed:ce:50:cd: 1b:b3:00:c2:a1:a6:a3:dc:42:1d:4b:db:aa:75:48:9b:33:d2: 33:15:01:ea:92:ad:45:a3:08:98:7d:a0:6f:97:cf:d4:87:c3: d5:1e:8f:1f:bd:84:45:8b:95:db:e1:79:08:c8:a1:d5:a5:be: c2:4f:d6:1a:80:b1:54:50:c3:ad:75:76:8a:d0:9c:f1:9e:76: 14:84:f8:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86zLda4IFPb+OlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI4ZTlmMDAtMTNjOS00MDZlLTljMDMtZDcxY2QzODZj MDg2MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk ZDVjOGI1MWEtYmEyNS00OGM3LWJhYjctMGUwOTEwYzk5YTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA3KSJweZqToCQNEA01kX51jjDE1VQBxE0Qa prFsqj4L10HUrvfWXyEi4ii3wGk9NpU5Y9WFjk6i/pEiDbtehjHISQGNYAvBRzdj S2AGM1rwCLuoLv1q9ZTJ0hpZjVNBPU9rYMpoWoT5PdZTbQlK+kvlVA3RabpteNI+ t7/JofVz5ba0/qtqA4jshW8oTXV5bqrlVxBg7vbr4t1yvRzCZFiIUEmLRKXvc6pY tjg2g5z6fSzoWvOAUuUpX7YtFBhd2x2+0XHeDThhe2iKFzSGlFuOHnBK4oFjBPuA Rzbctg0RZPpKcZmJuFMylXTAh9/sbDNvmovfVncicxvSKI7QbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/pgZk+FZvQO3Ou6zLVIcWpUnU+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mYjhl OWYwMC0xM2M5LTQwNmUtOWMwMy1kNzFjZDM4NmMwODYvYzg0MjM4ZGMtNDkyNy0z MGNlLTgwZTgtZDQyMTNkZDRiZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmI4ZTlmMDAtMTNjOS00MDZlLTlj MDMtZDcxY2QzODZjMDg2L2ZiOGU5ZjAwLTEzYzktNDA2ZS05YzAzLWQ3MWNkMzg2 YzA4Ni5jcmwwHwYDVR0jBBgwFoAUiJqvtEHN68XMhR0A+DlXVZU0tIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mYjhlOWYwMC0xM2M5LTQwNmUtOWMwMy1kNzFj ZDM4NmMwODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlkaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoAVuHYVZpFtB/SpPBOWe3MCHedTR1rUxqL8fXfvJGhACsyK4XfMSdW MqmVGel0B67yIXfpCANCAKA8B7eGNI2YzleUI03E2HLLVZWlG2qV8ttSK1KWxo0u yNYHHDSZ18EZasaTtlGGT/NUYcmaBsQp0enamG8ISn7ZfsKV+Ru8KuW4cmp2trnR gmPztXDPYwuoT8TRdo7xIbPf6kGdn+I2p7asy0cVJ/XhKyeDf8Pt7c5QzRuzAMKh pqPcQh1L26p1SJsz0jMVAeqSrUWjCJh9oG+Xz9SHw9Uejx+9hEWLldvheQjIodWl vsJP1hqAsVRQw611dorQnPGedhSE+Gw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:19 2025 by rpki-client