$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e394159b-b6d4-3b54-9538-6f74a1f6c8a0.roa File: e394159b-b6d4-3b54-9538-6f74a1f6c8a0.roa (raw, json) Hash identifier: j5nXFwAdNgHuzoZnvhLBVLXazWUSttXVZ5Wa9IdY1r4= Subject key identifier: 57:48:23:77:03:C4:FC:07:6E:A5:54:39:5E:E6:1A:7D:50:91:B9:E1 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F43285848BFEBA7CB3D3CBFE417B3DF40 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e394159b-b6d4-3b54-9538-6f74a1f6c8a0.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 198949 IP address blocks: 199.241.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a7:cb:3d:3c:bf:e4:17:b3:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=88c6ae3c-73e0-48a0-8fd6-c01a5b17d84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:69:4f:5b:84:43:b6:f9:3b:fb:81:a3:67:f3: 09:02:36:c9:25:19:98:02:d0:d9:c4:75:20:93:fa: 13:6b:7d:9d:f2:40:99:d7:e6:b2:4c:51:7c:43:70: 5f:22:5d:ba:1e:8d:27:ee:b4:61:67:8b:1b:fc:91: 29:99:bd:63:af:d3:01:d2:a0:df:dd:a6:3b:3a:c1: 4c:67:9e:2d:57:c7:ec:42:e5:a4:be:03:9b:b0:66: 8d:8b:14:8a:ad:e2:ea:a5:35:5a:22:dc:ad:dc:59: 0d:9d:ac:e3:ef:29:ce:8d:21:d2:31:17:5d:27:c3: dd:c4:14:41:6f:51:33:5b:24:78:2f:80:bb:ed:11: b0:b7:e5:2e:81:0a:dd:16:8e:f3:87:f7:01:18:51: c1:80:86:de:60:bf:9d:fa:41:d4:dd:43:73:8d:0b: 1a:b3:a4:5d:c5:bc:3b:6a:b5:84:19:ff:19:ca:51: c2:80:4e:b1:9a:73:44:51:39:23:92:a8:f2:4c:c2: dc:e4:10:2e:03:3d:2d:a4:08:87:9b:02:15:e5:ef: ea:ad:c7:92:d6:fd:9d:a9:7e:89:54:53:d7:f4:1f: 54:5e:e0:97:68:6e:29:c2:b5:5d:a4:7e:c9:10:2f: d1:f9:6a:8e:40:8e:fe:ec:83:ca:b9:63:f8:0a:a4: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:48:23:77:03:C4:FC:07:6E:A5:54:39:5E:E6:1A:7D:50:91:B9:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e394159b-b6d4-3b54-9538-6f74a1f6c8a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 199.241.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:82:c9:4b:14:a4:78:3e:66:8f:84:e1:01:a6:99:3e:fe:72: e7:42:f9:91:5b:72:4a:56:8c:15:60:01:60:14:d2:1b:77:bb: 4d:87:4c:03:1f:3e:e0:f6:64:b9:7a:39:9b:0c:a3:0b:1a:60: 00:3c:89:ef:d5:b3:99:a0:ca:fe:11:8c:95:cc:69:01:fa:d1: da:93:ea:b4:20:a9:42:78:7f:6e:37:a5:47:42:62:ed:70:27: fd:68:e3:f8:7d:f6:8a:54:6d:59:41:db:8b:9c:f2:3e:8c:df: 90:be:28:93:2f:0d:b1:15:fe:bb:f1:ee:69:0a:c5:3c:88:e2: 05:86:55:2f:c4:23:07:f4:cf:54:f8:e6:a9:31:01:3f:04:24: 9a:23:d7:27:41:b4:c4:41:87:41:47:2d:8c:71:61:d7:b9:4c: ea:e3:34:f0:6e:60:f5:43:b3:46:f0:89:9d:92:e6:83:a3:56: f1:f8:e2:72:b8:1c:85:ff:7d:fc:22:d3:e9:60:5c:e0:f1:37: 59:7f:15:f5:c3:0c:b9:3d:3b:29:5b:f5:41:2d:b1:25:30:3a: 93:6a:6f:0c:da:e2:08:bb:1c:10:2b:fb:45:b8:ca:b2:6e:42: d5:c6:cb:6b:fb:89:49:4c:6e:60:27:a2:07:1d:8f:24:d1:a4: 44:31:ea:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66fLPTy/5Bez30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ODhjNmFlM2MtNzNlMC00OGEwLThmZDYtYzAxYTViMTdkODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2lPW4RDtvk7+4GjZ/MJAjbJJRmYAtDZxHUg k/oTa32d8kCZ1+ayTFF8Q3BfIl26Ho0n7rRhZ4sb/JEpmb1jr9MB0qDf3aY7OsFM Z54tV8fsQuWkvgObsGaNixSKreLqpTVaItyt3FkNnazj7ynOjSHSMRddJ8PdxBRB b1EzWyR4L4C77RGwt+UugQrdFo7zh/cBGFHBgIbeYL+d+kHU3UNzjQsas6Rdxbw7 arWEGf8ZylHCgE6xmnNEUTkjkqjyTMLc5BAuAz0tpAiHmwIV5e/qrceS1v2dqX6J VFPX9B9UXuCXaG4pwrVdpH7JEC/R+WqOQI7+7IPKuWP4CqSwlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdII3cDxPwHbqVUOV7mGn1QkbnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZTM5NDE1OWItYjZkNC0z YjU0LTk1MzgtNmY3NGExZjZjOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiCyUsUpHg+Zo+E4QGmmT7+cudC+ZFbckpWjBVgAWAU0ht3u02HTAMf PuD2ZLl6OZsMowsaYAA8ie/Vs5mgyv4RjJXMaQH60dqT6rQgqUJ4f243pUdCYu1w J/1o4/h99opUbVlB24uc8j6M35C+KJMvDbEV/rvx7mkKxTyI4gWGVS/EIwf0z1T4 5qkxAT8EJJoj1ydBtMRBh0FHLYxxYde5TOrjNPBuYPVDs0bwiZ2S5oOjVvH44nK4 HIX/ffwi0+lgXODxN1l/FfXDDLk9Oylb9UEtsSUwOpNqbwza4gi7HBAr+0W4yrJu QtXGy2v7iUlMbmAnogcdjyTRpEQx6kY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:20 2025 by rpki-client