$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39e0bfa3-b9dd-382b-a7e7-1c0c4445fa26.roa File: 39e0bfa3-b9dd-382b-a7e7-1c0c4445fa26.roa (raw, json) Hash identifier: l4KbA0V7nQTsFzmQxEvPrY6JcMm20Kh6BU7+5ntpRwQ= Subject key identifier: CC:D8:09:EB:75:E7:5C:CE:DD:DC:9A:83:6B:0D:01:C4:32:6F:87:D5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584858A044F9FD6F10A8B3CE9820 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39e0bfa3-b9dd-382b-a7e7-1c0c4445fa26.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 200005 IP address blocks: 170.199.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:44:f9:fd:6f:10:a8:b3:ce:98:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=8e12498b-cb03-44e8-b283-f3e7d96eb382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a6:70:e3:dd:94:dd:76:12:0a:6a:a4:52:df: 0e:98:40:e6:49:c5:69:fd:98:7a:e0:49:63:94:1c: 50:d8:ab:3d:7c:aa:1c:31:ff:de:75:9f:d9:6f:6e: 64:53:ba:4f:7d:ec:1f:31:e0:20:3c:bc:b9:60:a8: 46:a8:a7:47:88:da:03:7c:16:8d:dd:74:46:f1:f5: 4c:80:82:60:5c:4d:f4:54:b4:57:4a:ba:77:db:1c: ea:41:fa:9f:84:86:5f:b8:f6:98:b1:70:d1:ba:b8: db:68:82:70:79:82:33:f3:1c:9b:b4:90:e5:b4:7f: 9e:31:c8:3d:11:e7:f4:30:ed:71:e1:f9:f8:a0:c8: 44:7d:60:51:2f:91:cf:5d:1c:27:ae:01:58:79:77: 64:ba:38:45:eb:b8:49:01:cf:46:1e:82:6c:a5:4b: bb:a9:64:8a:27:4d:8c:35:63:9a:0b:60:89:14:14: 49:7d:03:14:1f:4c:8e:f0:1b:e5:cc:ee:03:7d:89: 6f:cf:a4:fe:bb:ac:8c:01:9b:fd:25:23:88:15:fb: fc:8b:20:f6:82:11:87:31:41:69:db:5c:4a:c0:13: 3f:86:e8:0f:75:c7:44:d8:a7:d2:58:a8:1a:87:e4: 4e:d0:ab:77:4a:16:df:57:0c:42:3d:02:fa:25:11: 6d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D8:09:EB:75:E7:5C:CE:DD:DC:9A:83:6B:0D:01:C4:32:6F:87:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39e0bfa3-b9dd-382b-a7e7-1c0c4445fa26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 170.199.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5e:6a:e8:83:3d:3a:3f:1b:3c:ca:2a:80:16:a6:1e:0e:06: 00:b7:fc:32:f5:79:5d:f9:77:fe:81:e1:2f:3d:f1:4e:08:f3: 53:e5:b9:df:73:7c:cd:3c:b1:35:2f:b9:32:37:af:b6:d0:07: b0:a3:d1:cc:dd:fe:c8:ed:d1:9c:04:68:94:bb:b9:6d:37:d3: a3:29:94:cb:2f:c5:04:f0:8c:57:51:ba:67:6a:f1:36:fa:7a: 23:37:88:29:62:27:02:5b:64:67:f5:87:ae:69:e5:0b:39:fb: 14:a1:aa:df:0a:09:21:bf:d1:65:53:63:bc:2a:5a:82:bb:d2: 20:28:59:8c:9f:d9:eb:e6:f1:a5:73:50:51:61:b7:50:59:e5: 02:aa:ae:23:c3:f0:94:6f:12:e6:37:dc:11:b3:c2:f3:50:74: a7:12:c6:04:32:94:2d:31:1d:55:33:b3:e7:34:c7:b4:64:7e: 24:50:71:be:72:70:8b:95:f4:22:a2:46:9e:64:eb:93:f2:e7: 3d:44:bc:bf:f7:73:b9:09:c3:de:ae:42:77:d6:96:a7:b9:f4: 36:26:c9:f9:cd:f6:9f:27:a0:61:88:90:8d:79:e9:a8:52:ed: ff:81:48:e6:0d:6f:ae:91:90:71:04:36:d1:1c:98:fe:9e:98: c6:aa:28:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoET5/W8QqLPOmCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk OGUxMjQ5OGItY2IwMy00NGU4LWIyODMtZjNlN2Q5NmViMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6Zw492U3XYSCmqkUt8OmEDmScVp/Zh64Elj lBxQ2Ks9fKocMf/edZ/Zb25kU7pPfewfMeAgPLy5YKhGqKdHiNoDfBaN3XRG8fVM gIJgXE30VLRXSrp32xzqQfqfhIZfuPaYsXDRurjbaIJweYIz8xybtJDltH+eMcg9 Eef0MO1x4fn4oMhEfWBRL5HPXRwnrgFYeXdkujhF67hJAc9GHoJspUu7qWSKJ02M NWOaC2CJFBRJfQMUH0yO8BvlzO4DfYlvz6T+u6yMAZv9JSOIFfv8iyD2ghGHMUFp 21xKwBM/hugPdcdE2KfSWKgah+RO0Kt3ShbfVwxCPQL6JRFt0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzYCet151zO3dyag2sNAcQyb4fVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzllMGJmYTMtYjlkZC0z ODJiLWE3ZTctMWMwYzQ0NDVmYTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZeauiDPTo/GzzKKoAWph4OBgC3/DL1eV35d/6B4S898U4I81Plud9z fM08sTUvuTI3r7bQB7Cj0czd/sjt0ZwEaJS7uW0306MplMsvxQTwjFdRumdq8Tb6 eiM3iCliJwJbZGf1h65p5Qs5+xShqt8KCSG/0WVTY7wqWoK70iAoWYyf2evm8aVz UFFht1BZ5QKqriPD8JRvEuY33BGzwvNQdKcSxgQylC0xHVUzs+c0x7RkfiRQcb5y cIuV9CKiRp5k65Py5z1EvL/3c7kJw96uQnfWlqe59DYmyfnN9p8noGGIkI156ahS 7f+BSOYNb66RkHEENtEcmP6emMaqKPI= -----END CERTIFICATE-----Generated at Fri Mar 14 07:17:47 2025 by rpki-client