$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f1b37e34-0530-3d7a-bf38-76831b59972d.roa File: f1b37e34-0530-3d7a-bf38-76831b59972d.roa (raw, json) Hash identifier: w0RZEcKVpqaWnyq00WKcOFDLdjqLd3C96vP9OQ0a+8k= Subject key identifier: 66:F0:44:AB:87:BC:B3:C9:39:EB:8E:93:1A:FD:D3:BA:CB:B9:14:E0 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F432858484D758AEC91AB21FB76086928 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f1b37e34-0530-3d7a-bf38-76831b59972d.roa Signing time: Mon 23 Dec 2024 14:00:51 +0000 ROA not before: Mon 23 Dec 2024 14:00:51 +0000 ROA not after: Sun 23 Mar 2025 13:00:51 +0000 asID: 22612 IP address blocks: 199.85.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:75:8a:ec:91:ab:21:fb:76:08:69:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Dec 23 14:00:51 2024 GMT Not After : Mar 23 13:00:51 2025 GMT Subject: CN=d9d5052c-1ae8-42cd-82a2-ae8fe305a5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:27:50:21:43:65:29:77:50:6c:34:5d:56:a8: 7a:94:02:a9:85:0f:77:d2:41:3f:5d:51:7d:65:19: cd:17:86:42:e5:0e:03:ed:74:c2:a3:a1:91:26:f1: a4:8e:b6:b3:7f:74:57:97:dd:a3:e7:4e:23:5d:2f: 42:55:55:bb:b4:57:45:54:82:d6:95:ff:53:03:bc: 4b:b8:5c:9f:88:5b:4a:ef:07:67:d6:8b:87:e0:8a: a5:d8:a3:01:84:f0:4e:5d:b7:35:50:db:b4:83:1c: af:4c:2f:35:50:4c:96:0d:f4:08:60:cc:70:23:ec: 70:b7:0b:37:80:c7:2a:d2:b5:a5:0a:51:4f:0f:07: 9f:31:20:44:cc:fc:68:46:66:f3:02:14:d6:4c:6b: e6:d2:0b:52:c5:b6:06:5b:25:61:95:09:7d:41:9b: 36:4b:eb:18:7c:21:6b:18:d9:d7:a0:0f:ed:97:d9: 6f:7c:64:c0:ac:22:9c:aa:d8:28:8c:9f:0f:4c:9d: 48:6f:68:dd:c4:bf:d1:a2:0c:56:80:39:45:f5:f3: 0e:9a:f3:68:c7:6b:8d:59:7e:bc:92:3d:d7:bb:24: a4:0c:5f:27:f1:70:c8:95:f3:d4:ba:00:67:99:f0: 4b:71:dc:d9:d2:1e:eb:02:80:bb:29:39:57:56:c6: 59:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F0:44:AB:87:BC:B3:C9:39:EB:8E:93:1A:FD:D3:BA:CB:B9:14:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f1b37e34-0530-3d7a-bf38-76831b59972d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 199.85.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f5:67:02:11:5e:dd:04:59:96:4a:3b:c1:79:44:1f:97:d8: f3:b2:de:d4:f4:8b:d9:39:46:a6:c5:93:11:9c:50:4b:23:7a: f3:0b:9a:bf:fa:ab:37:d4:ce:81:bf:fa:6b:41:f1:79:b4:c4: 56:19:58:ad:77:76:94:64:7c:af:9d:e8:7f:a3:84:7b:cb:6d: 67:6f:fd:27:30:cf:9a:b4:54:b1:f3:4c:ab:13:32:f6:02:ca: 7b:a8:8c:9d:db:e5:6a:dc:1c:5c:f4:7e:3e:89:36:10:0e:c7: f8:43:07:ed:f5:0d:89:f6:a2:52:d1:e5:cf:b4:21:8c:a4:95: 79:a8:87:82:b7:4a:d9:99:8a:cc:67:4d:93:9a:23:ee:8a:fd: db:24:b0:ef:a3:e1:01:50:dc:41:03:04:ab:e3:36:3c:d2:a6: 4f:4c:04:8b:83:fd:bc:b2:0b:9b:e4:58:6a:44:fe:56:e0:be: 18:4f:20:ef:92:8e:e4:43:b6:53:92:d5:3b:64:2b:79:d0:6e: 4e:ab:57:6a:1d:f0:c9:ed:ed:ce:8e:b1:f1:f8:54:fe:65:2c: 14:80:d8:b6:0a:57:e5:d1:b0:1f:ce:14:e5:6b:84:6a:26:94: 35:df:9c:69:81:1a:bf:48:f5:b0:70:e2:8b:a9:b3:37:de:2e: f8:9a:bf:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdYrskash+3YIaSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZDlkNTA1MmMtMWFlOC00MmNkLTgyYTItYWU4ZmUzMDVhNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSdQIUNlKXdQbDRdVqh6lAKphQ930kE/XVF9 ZRnNF4ZC5Q4D7XTCo6GRJvGkjrazf3RXl92j504jXS9CVVW7tFdFVILWlf9TA7xL uFyfiFtK7wdn1ouH4Iql2KMBhPBOXbc1UNu0gxyvTC81UEyWDfQIYMxwI+xwtws3 gMcq0rWlClFPDwefMSBEzPxoRmbzAhTWTGvm0gtSxbYGWyVhlQl9QZs2S+sYfCFr GNnXoA/tl9lvfGTArCKcqtgojJ8PTJ1Ib2jdxL/RogxWgDlF9fMOmvNox2uNWX68 kj3XuySkDF8n8XDIlfPUugBnmfBLcdzZ0h7rAoC7KTlXVsZZCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbwRKuHvLPJOeuOkxr907rLuRTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvZjFiMzdlMzQtMDUzMC0z ZDdhLWJmMzgtNzY4MzFiNTk5NzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv1ZwIRXt0EWZZKO8F5RB+X2POy3tT0i9k5RqbFkxGcUEsjevMLmr/6 qzfUzoG/+mtB8Xm0xFYZWK13dpRkfK+d6H+jhHvLbWdv/Scwz5q0VLHzTKsTMvYC ynuojJ3b5WrcHFz0fj6JNhAOx/hDB+31DYn2olLR5c+0IYyklXmoh4K3StmZisxn TZOaI+6K/dsksO+j4QFQ3EEDBKvjNjzSpk9MBIuD/byyC5vkWGpE/lbgvhhPIO+S juRDtlOS1TtkK3nQbk6rV2od8Mnt7c6OsfH4VP5lLBSA2LYKV+XRsB/OFOVrhGom lDXfnGmBGr9I9bBw4oupszfeLviavxE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:49 2025 by rpki-client