$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/43c6244b-772e-36a4-a28f-a623f82d6ed9.roa File: 43c6244b-772e-36a4-a28f-a623f82d6ed9.roa (raw, json) Hash identifier: CKkziCPnF2w285ikB8p7IyY9KzZN1ldmQ06d03ag8uI= Subject key identifier: C3:C5:53:C9:B3:5E:4E:BA:91:0A:FF:83:A0:B8:C6:0E:C5:8F:18:B2 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F43285848854B4DC2C7790A4D6D21F500 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/43c6244b-772e-36a4-a28f-a623f82d6ed9.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 55195 IP address blocks: 199.4.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:4d:c2:c7:79:0a:4d:6d:21:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=449d9c56-7cb1-4f91-9bd2-7cebb52dc5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:a1:8a:5b:de:99:30:60:ab:81:ec:fa:27: 4e:e2:54:7a:c1:61:f8:76:4c:53:8c:07:de:6b:b5: c6:07:57:fa:bb:39:27:cd:5a:af:1c:2a:a5:e9:a3: b7:75:c0:85:07:c2:81:48:27:9e:ee:5e:77:fb:0a: e2:1a:7c:d2:47:ab:70:06:d5:c4:27:83:83:ef:26: 56:3c:61:b3:5e:c3:d2:ad:cc:ca:58:20:a0:bd:1d: b8:f1:9e:b3:19:65:a8:2d:3c:22:86:ad:da:64:27: f8:fc:8a:ea:62:ec:3a:8e:e9:f0:3e:be:62:90:7e: 64:62:e5:7d:95:1f:13:57:83:48:e5:19:b7:64:d8: 22:8a:2b:33:f7:38:33:11:02:1e:e6:d7:71:21:d1: 08:9e:4a:cb:00:ac:ea:ba:93:0c:5f:73:fe:50:cf: 03:ea:70:70:30:77:f2:08:43:b8:91:04:74:68:8c: 38:d6:91:d4:b3:a2:db:b4:59:84:77:eb:89:8e:60: 2e:42:82:ee:d1:1f:96:65:2f:7e:da:ac:0a:59:a1: 44:49:37:4b:8b:2a:06:a3:27:42:7f:2a:59:b4:c6: 63:ed:89:12:91:3d:34:cc:eb:99:86:85:b6:75:0d: cc:0d:2e:eb:9a:48:b1:a0:e7:c8:44:62:e5:ed:a5: cc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C5:53:C9:B3:5E:4E:BA:91:0A:FF:83:A0:B8:C6:0E:C5:8F:18:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/43c6244b-772e-36a4-a28f-a623f82d6ed9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv4: 199.4.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:fd:65:50:cf:ee:a1:13:f4:3f:9d:6e:3d:c3:c9:fb:59:01: 82:0a:97:41:c8:cd:0c:99:cb:a3:52:88:aa:17:31:3a:f5:1f: dc:57:d5:96:2d:55:08:e2:14:87:50:53:cb:ea:ef:42:ea:b3: 02:f0:27:db:b3:ca:75:f6:ce:3c:9f:6c:95:f8:60:8b:7b:3d: b8:61:a3:6a:21:45:e5:71:a0:00:c0:f7:91:6a:ed:71:07:47: 8a:54:b0:0f:3e:48:8f:20:40:20:03:bc:e4:8c:46:59:67:3b: 88:89:84:d1:b0:ba:af:6e:56:9d:95:c1:87:3c:06:0e:80:e4: 31:d2:f3:43:97:f6:6b:8b:4c:77:25:6f:0d:93:a8:e1:f3:09: bf:62:b5:11:30:26:d7:70:80:0b:38:10:1a:74:62:b0:d8:cc: a5:c8:8c:ee:22:57:f7:5b:bb:23:a6:27:9a:05:54:16:30:89: fb:ca:16:93:d2:68:d0:1c:6d:17:45:ff:e1:d8:a6:e0:0e:03: 18:37:96:12:52:58:fa:65:10:e5:e2:54:68:03:b4:4a:26:06: 67:ad:01:c4:c5:01:c3:54:05:e5:fb:c6:6c:76:8b:52:61:18: a5:50:b0:38:ed:80:8b:36:c2:ed:9c:27:50:e2:a1:01:95:bd: 99:47:ec:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS03Cx3kKTW0h9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk NDQ5ZDljNTYtN2NiMS00ZjkxLTliZDItN2NlYmI1MmRjNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG+hilvemTBgq4Hs+idO4lR6wWH4dkxTjAfe a7XGB1f6uzknzVqvHCql6aO3dcCFB8KBSCee7l53+wriGnzSR6twBtXEJ4OD7yZW PGGzXsPSrczKWCCgvR248Z6zGWWoLTwihq3aZCf4/IrqYuw6junwPr5ikH5kYuV9 lR8TV4NI5Rm3ZNgiiisz9zgzEQIe5tdxIdEInkrLAKzqupMMX3P+UM8D6nBwMHfy CEO4kQR0aIw41pHUs6LbtFmEd+uJjmAuQoLu0R+WZS9+2qwKWaFESTdLiyoGoydC fypZtMZj7YkSkT00zOuZhoW2dQ3MDS7rmkixoOfIRGLl7aXMpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPFU8mzXk66kQr/g6C4xg7FjxiyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvNDNjNjI0NGItNzcyZS0z NmE0LWEyOGYtYTYyM2Y4MmQ2ZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKz9ZVDP7qET9D+dbj3DyftZAYIKl0HIzQyZy6NSiKoXMTr1H9xX1ZYt VQjiFIdQU8vq70LqswLwJ9uzynX2zjyfbJX4YIt7Pbhho2ohReVxoADA95Fq7XEH R4pUsA8+SI8gQCADvOSMRllnO4iJhNGwuq9uVp2VwYc8Bg6A5DHS80OX9muLTHcl bw2TqOHzCb9itREwJtdwgAs4EBp0YrDYzKXIjO4iV/dbuyOmJ5oFVBYwifvKFpPS aNAcbRdF/+HYpuAOAxg3lhJSWPplEOXiVGgDtEomBmetAcTFAcNUBeX7xmx2i1Jh GKVQsDjtgIs2wu2cJ1DioQGVvZlH7AQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:28:23 2025 by rpki-client