$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/534e5e03-5a54-38cc-a774-6d07f571b6a5.roa File: 534e5e03-5a54-38cc-a774-6d07f571b6a5.roa (raw, json) Hash identifier: 5KmFIaVkHuA2r3BQUmc1BQWYU4v5MEBaUBgs7R3TuHg= Subject key identifier: 33:2E:F8:46:95:4A:59:68:3E:82:68:C1:99:5E:99:58:63:4C:3C:B0 Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Certificate serial: 010D0C9F432858488F107E6B74A93E48DB0B4140 Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/534e5e03-5a54-38cc-a774-6d07f571b6a5.roa Signing time: Thu 16 Jan 2025 02:00:39 +0000 ROA not before: Thu 16 Jan 2025 02:00:39 +0000 ROA not after: Wed 16 Apr 2025 01:00:39 +0000 asID: 40545 IP address blocks: 199.190.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8f:10:7e:6b:74:a9:3e:48:db:0b:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Validity Not Before: Jan 16 02:00:39 2025 GMT Not After : Apr 16 01:00:39 2025 GMT Subject: CN=91b47df3-d950-412b-bef0-5f65ca1d7797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ff:6b:25:12:dd:63:4f:9e:44:5c:ee:8c:88: 9b:67:db:78:4e:b8:c1:63:69:f7:f8:cf:58:04:f2: ba:0a:ca:64:ef:76:75:6c:23:18:05:c1:92:be:a5: 47:88:a8:54:42:0f:ce:43:43:47:2e:1c:38:be:c9: 4a:57:03:b6:0f:97:ad:79:40:c8:9a:93:78:e3:4f: 20:eb:74:51:90:e6:24:07:7d:3f:4b:9f:8f:cd:c6: 40:63:b4:8c:5c:30:be:2b:04:1e:c8:a0:c6:6f:04: 9c:08:4c:53:ae:44:a7:3d:85:54:db:4a:6f:d7:a5: eb:c3:9c:5c:80:d2:07:80:96:1e:f4:69:1c:d5:01: 20:18:56:10:aa:e8:44:ca:c5:a9:d6:29:fd:72:93: ad:e1:86:b6:ec:ad:92:41:38:f3:99:4a:ee:8a:77: aa:89:6c:c3:00:75:23:4d:fb:d1:49:10:82:1c:87: 17:cc:7d:a7:20:5e:6f:d9:b2:f7:2a:b5:8b:d6:db: 81:a6:a1:9e:67:d9:e6:ef:94:ff:be:92:2e:55:06: 75:cd:52:21:84:16:5f:7b:34:ff:0c:79:63:fb:95: 81:af:af:52:95:25:81:92:b4:67:0c:01:d4:03:db: c3:e3:a8:a2:29:4f:ac:19:3a:2f:2f:8e:24:be:26: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2E:F8:46:95:4A:59:68:3E:82:68:C1:99:5E:99:58:63:4C:3C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/534e5e03-5a54-38cc-a774-6d07f571b6a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl X509v3 Authority Key Identifier: keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer sbgp-ipAddrBlock: critical IPv4: 199.190.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:cb:53:4d:16:c7:44:d6:ce:3c:f9:b3:9a:0a:2a:0b:7c:ad: c0:55:f8:fa:cf:88:e1:84:f2:40:3e:f3:4b:5e:2a:42:d2:06: 44:58:a9:93:6e:a7:44:11:3f:ec:71:fc:76:66:35:7a:dc:8f: 77:7e:25:56:88:c8:6d:2b:5b:f6:d1:79:16:b5:6c:c3:58:30: dc:50:ad:bc:48:84:e3:18:57:96:2f:8a:2d:83:46:0e:da:42: 4b:7c:14:3b:5e:b9:22:b4:0b:7b:22:16:bd:a8:cc:0e:38:8c: a4:92:b0:fd:07:4f:a4:61:70:a8:54:8e:8e:7a:5d:2f:9b:ab: 24:48:66:cf:e2:6a:17:8c:de:fe:60:b6:09:f5:59:ae:97:14: 53:7a:87:72:a2:75:6c:96:2a:3d:50:e7:7c:59:20:29:11:4a: f4:74:5b:ef:a0:d4:ec:24:70:6e:52:5b:f5:c8:7e:bb:ba:48: 57:40:30:f0:00:b8:fa:bd:01:22:54:ed:7e:a5:c6:58:c0:65: b2:86:c4:01:9f:8d:c2:f3:8d:5b:c4:51:66:2a:03:9b:f7:80: f3:69:d8:ec:0e:b7:bb:d4:55:f4:5c:2a:23:b1:2f:00:c5:1d: ec:63:73:28:0d:9f:d6:08:61:39:ff:a2:7c:84:96:1b:f0:ed: 05:98:82:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiPEH5rdKk+SNsLQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkMzdiZjYtNjk1NS00ZWQ1LTgzNDctMjg5Njc2N2Fm YWIwMB4XDTI1MDExNjAyMDAzOVoXDTI1MDQxNjAxMDAzOVowLzEtMCsGA1UEAxMk OTFiNDdkZjMtZDk1MC00MTJiLWJlZjAtNWY2NWNhMWQ3Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof9rJRLdY0+eRFzujIibZ9t4TrjBY2n3+M9Y BPK6Cspk73Z1bCMYBcGSvqVHiKhUQg/OQ0NHLhw4vslKVwO2D5eteUDImpN4408g 63RRkOYkB30/S5+PzcZAY7SMXDC+KwQeyKDGbwScCExTrkSnPYVU20pv16Xrw5xc gNIHgJYe9Gkc1QEgGFYQquhEysWp1in9cpOt4Ya27K2SQTjzmUruineqiWzDAHUj TfvRSRCCHIcXzH2nIF5v2bL3KrWL1tuBpqGeZ9nm75T/vpIuVQZ1zVIhhBZfezT/ DHlj+5WBr69SlSWBkrRnDAHUA9vD46iiKU+sGTovL44kviYyeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMu+EaVSlloPoJowZlemVhjTDywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQz N2JmNi02OTU1LTRlZDUtODM0Ny0yODk2NzY3YWZhYjAvNTM0ZTVlMDMtNWE1NC0z OGNjLWE3NzQtNmQwN2Y1NzFiNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZkMzdiZjYtNjk1NS00ZWQ1LTgz NDctMjg5Njc2N2FmYWIwLzNmZDM3YmY2LTY5NTUtNGVkNS04MzQ3LTI4OTY3Njdh ZmFiMC5jcmwwHwYDVR0jBBgwFoAULNrtwbJ3wcnBT6n58z0s7qVZ2y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQzN2JmNi02OTU1LTRlZDUtODM0Ny0yODk2 NzY3YWZhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx77EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvLU00Wx0TWzjz5s5oKKgt8rcBV+PrPiOGE8kA+80teKkLSBkRYqZNu p0QRP+xx/HZmNXrcj3d+JVaIyG0rW/bReRa1bMNYMNxQrbxIhOMYV5Yvii2DRg7a Qkt8FDteuSK0C3siFr2ozA44jKSSsP0HT6RhcKhUjo56XS+bqyRIZs/iaheM3v5g tgn1Wa6XFFN6h3KidWyWKj1Q53xZICkRSvR0W++g1OwkcG5SW/XIfru6SFdAMPAA uPq9ASJU7X6lxljAZbKGxAGfjcLzjVvEUWYqA5v3gPNp2OwOt7vUVfRcKiOxLwDF HexjcygNn9YIYTn/onyElhvw7QWYghk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:28:59 2025 by rpki-client