$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ea25304e-5e06-3ced-b3a0-30a19c749708.roa File: ea25304e-5e06-3ced-b3a0-30a19c749708.roa (raw, json) Hash identifier: dlxF7tMBd4iwnGdmGHtfzagChyQHowKuBzupFpDSGqk= Subject key identifier: C3:63:1F:B6:92:5A:6B:7B:88:5D:42:E7:1C:DD:D3:6C:19:B3:44:8B Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F43285848143A7D9A62CBB880574C0FA0 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ea25304e-5e06-3ced-b3a0-30a19c749708.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 64236 IP address blocks: 199.91.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:7d:9a:62:cb:b8:80:57:4c:0f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=a57f3cb9-b20d-4a67-9cc9-f52bbc2377ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:aa:86:75:9c:92:53:51:1e:4a:c7:23:db: 6f:fe:20:84:7c:0a:3c:76:f3:f4:98:8c:86:6c:98: 15:76:89:8d:13:dc:99:21:28:52:4f:39:73:0d:f1: 59:23:bc:c0:1b:c5:87:5d:33:55:57:75:aa:be:26: 51:6d:61:f2:94:d8:a0:1a:70:bc:1b:ad:38:55:6b: 01:68:f8:a1:7b:18:d4:98:94:43:f5:fd:46:02:8b: 29:0e:15:a2:27:dc:8b:94:64:82:09:fe:3b:46:2f: c5:33:23:04:5d:b5:a9:aa:4f:b2:df:01:8e:37:ad: 9d:95:f7:31:00:2c:7b:bd:78:cd:1e:0f:30:2a:69: 48:9a:fb:5a:35:7e:02:48:b0:95:5e:48:6f:b1:47: a4:73:f9:ec:df:36:06:e1:b7:4d:2c:41:fa:91:4d: b8:e4:d9:30:04:6a:fe:f1:d2:dd:96:df:d9:77:21: 1b:ea:0d:b8:a9:69:8d:3f:28:ac:f5:02:c5:a9:70: 8e:77:44:cc:95:f0:8d:3f:c6:52:4e:e2:a1:7e:84: e2:1e:fc:a3:7b:ba:e8:f4:25:4b:cf:db:99:fb:0e: 19:1d:b5:81:ec:84:10:63:8d:ea:f8:f1:f3:f9:dd: 53:58:6b:f2:c1:d3:30:f5:4f:93:75:f1:07:f4:b9: de:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:63:1F:B6:92:5A:6B:7B:88:5D:42:E7:1C:DD:D3:6C:19:B3:44:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ea25304e-5e06-3ced-b3a0-30a19c749708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv4: 199.91.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:4d:d6:91:1f:10:9e:db:f5:97:16:2f:15:a3:3e:9e:be:e7: 1f:ff:bd:52:89:e9:4e:f1:fe:59:9b:04:69:14:59:b3:68:b9: 13:bc:7c:b5:cf:57:9d:27:31:93:44:d3:94:9b:5a:53:b5:91: 4b:4e:52:08:91:28:ac:b4:29:ce:52:e5:ac:34:f3:e0:2f:99: 7d:b7:0a:3e:0c:44:a3:e5:51:e6:30:51:d8:14:25:ec:b8:f2: 51:81:d9:ce:fe:53:45:c8:ea:5b:d7:51:63:e1:f0:b6:c7:cb: 1d:90:b8:ef:1c:0e:43:87:1f:7f:72:50:a4:de:89:b6:1f:f2: 6e:07:43:c6:f8:d7:d1:cc:1b:c4:88:5b:12:9d:f1:40:3a:25: 94:11:69:a6:33:82:b2:0c:b5:03:cf:ee:aa:83:24:4d:34:1a: f4:3a:51:0c:78:b1:98:15:e3:4c:7f:42:29:97:18:28:ff:9f: d9:61:e3:87:d0:4c:e4:f2:36:97:0b:e8:28:43:43:74:bc:b5: 15:86:b1:ea:3d:08:30:61:53:b4:35:10:6f:b6:fc:42:09:91: 22:7f:8b:d9:fa:9c:dc:68:ca:87:30:e1:c2:9d:ab:00:06:d4: 1d:1d:69:29:ac:40:6a:b5:16:8a:d7:dc:be:49:64:97:6c:90: b1:02:4f:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOn2aYsu4gFdMD6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk YTU3ZjNjYjktYjIwZC00YTY3LTljYzktZjUyYmJjMjM3N2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfmqhnWcklNRHkrHI9tv/iCEfAo8dvP0mIyG bJgVdomNE9yZIShSTzlzDfFZI7zAG8WHXTNVV3WqviZRbWHylNigGnC8G604VWsB aPihexjUmJRD9f1GAospDhWiJ9yLlGSCCf47Ri/FMyMEXbWpqk+y3wGON62dlfcx ACx7vXjNHg8wKmlImvtaNX4CSLCVXkhvsUekc/ns3zYG4bdNLEH6kU245NkwBGr+ 8dLdlt/ZdyEb6g24qWmNPyis9QLFqXCOd0TMlfCNP8ZSTuKhfoTiHvyje7ro9CVL z9uZ+w4ZHbWB7IQQY43q+PHz+d1TWGvywdMw9U+TdfEH9LneqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNjH7aSWmt7iF1C5xzd02wZs0SLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvZWEyNTMwNGUtNWUwNi0z Y2VkLWIzYTAtMzBhMTljNzQ5NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1usMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVN1pEfEJ7b9ZcWLxWjPp6+5x//vVKJ6U7x/lmbBGkUWbNouRO8fLXP V50nMZNE05SbWlO1kUtOUgiRKKy0Kc5S5aw08+AvmX23Cj4MRKPlUeYwUdgUJey4 8lGB2c7+U0XI6lvXUWPh8LbHyx2QuO8cDkOHH39yUKTeibYf8m4HQ8b419HMG8SI WxKd8UA6JZQRaaYzgrIMtQPP7qqDJE00GvQ6UQx4sZgV40x/QimXGCj/n9lh44fQ TOTyNpcL6ChDQ3S8tRWGseo9CDBhU7Q1EG+2/EIJkSJ/i9n6nNxoyocw4cKdqwAG 1B0daSmsQGq1ForX3L5JZJdskLECT04= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:30 2025 by rpki-client