$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b4a475e-7805-313a-8a90-9e9a9d40bc1f.roa File: 8b4a475e-7805-313a-8a90-9e9a9d40bc1f.roa (raw, json) Hash identifier: 4/34sJFhSkGuhAitCSjggSElblX2cX6HwvoY1V65u6s= Subject key identifier: 0C:A5:8E:9D:24:A3:F1:F1:2A:CD:FF:A8:C5:43:40:3D:BA:80:7D:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584858A04461243E4692D0378080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b4a475e-7805-313a-8a90-9e9a9d40bc1f.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 200005 IP address blocks: 170.199.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:44:61:24:3e:46:92:d0:37:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=65f02c2d-7990-48b7-9515-69234d71bf22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:6d:41:49:e3:9b:05:3e:9d:d3:66:4a:25: df:12:44:41:81:ba:66:65:d3:10:6a:17:36:45:19: 92:ec:97:a2:76:ba:af:4c:1a:10:23:72:b4:34:2a: 91:9c:21:ee:e5:7c:c3:cb:c5:e2:a6:68:69:da:2d: ec:6b:2f:f2:4a:66:ba:93:18:fc:16:f5:5a:68:69: 22:0e:2a:96:2d:21:72:b9:eb:6f:a1:4a:c8:e3:2b: ba:e5:20:b5:92:ce:18:b8:45:94:2b:28:c4:54:de: f8:5d:72:95:a0:d9:3b:e3:48:59:ce:0e:9a:99:f2: 9e:81:1d:35:47:21:21:66:e5:d6:36:47:ce:c4:82: b3:03:a8:96:7f:ea:18:f5:b5:eb:73:e9:b1:05:df: c7:54:63:86:ed:ad:71:44:0e:5a:40:09:f7:96:82: bd:1a:9d:65:bb:b9:13:8b:5b:a4:0d:09:a5:f0:db: 4f:6f:37:6e:42:33:88:85:f4:f5:b7:e1:5b:a2:5d: 09:b9:09:99:4a:25:ab:fe:10:46:a7:78:d6:4d:70: 82:6e:86:8c:ea:40:0f:fb:57:d5:86:dd:18:74:c8: fd:d9:8d:28:1e:d3:02:12:93:ce:45:a1:51:19:bd: 73:53:17:1b:13:8c:54:af:22:76:7e:7d:cf:5c:29: 3a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A5:8E:9D:24:A3:F1:F1:2A:CD:FF:A8:C5:43:40:3D:BA:80:7D:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b4a475e-7805-313a-8a90-9e9a9d40bc1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 170.199.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6b:9d:fd:6b:90:5e:e1:89:59:71:04:71:6d:91:dc:39:8e: e1:f5:36:93:07:2e:48:1c:02:76:9e:b3:6f:99:b9:59:ec:5a: 9a:06:e7:09:03:0a:f4:3c:ba:22:84:fd:1b:bb:dd:8f:c5:f9: 89:04:bf:5d:f0:4d:c1:75:7a:5e:a7:e8:d1:97:95:d3:99:0e: 10:a3:11:e2:aa:5a:ae:8a:be:8e:8c:c1:b9:66:94:12:97:3e: 9e:80:ce:c5:16:06:06:01:d0:d5:3b:cb:00:e8:25:51:87:0f: 41:f7:7d:fc:33:ef:42:90:ef:f7:f4:33:30:72:61:5a:fe:49: 5a:97:18:61:c1:8a:33:b3:ef:ca:c9:d7:a0:d7:ee:aa:57:7b: 0e:d9:24:ce:a4:ab:ce:ee:e7:1b:92:10:54:2a:ac:08:1b:e4: ff:82:22:4c:78:b8:c8:49:a7:a8:32:ca:fd:82:be:89:50:d7: 2c:07:ff:5f:0c:8e:5b:72:65:07:b3:76:d3:57:31:b3:3f:d9: ab:ad:f9:ba:2c:89:eb:81:87:2f:b0:94:de:ab:3c:9d:7a:75: 4b:9d:00:5e:da:c1:43:78:2a:72:e8:85:03:36:c0:1e:7e:0c: 9e:32:51:70:3a:05:3a:ed:64:37:4b:60:9f:e7:f1:c1:d7:85: 33:d1:f6:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoERhJD5GktA3gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk NjVmMDJjMmQtNzk5MC00OGI3LTk1MTUtNjkyMzRkNzFiZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCFtQUnjmwU+ndNmSiXfEkRBgbpmZdMQahc2 RRmS7JeidrqvTBoQI3K0NCqRnCHu5XzDy8Xipmhp2i3say/ySma6kxj8FvVaaGki DiqWLSFyuetvoUrI4yu65SC1ks4YuEWUKyjEVN74XXKVoNk740hZzg6amfKegR01 RyEhZuXWNkfOxIKzA6iWf+oY9bXrc+mxBd/HVGOG7a1xRA5aQAn3loK9Gp1lu7kT i1ukDQml8NtPbzduQjOIhfT1t+Fbol0JuQmZSiWr/hBGp3jWTXCCboaM6kAP+1fV ht0YdMj92Y0oHtMCEpPORaFRGb1zUxcbE4xUryJ2fn3PXCk6rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyljp0ko/HxKs3/qMVDQD26gH0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI0YTQ3NWUtNzgwNS0z MTNhLThhOTAtOWU5YTlkNDBiYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNrnf1rkF7hiVlxBHFtkdw5juH1NpMHLkgcAnaes2+ZuVnsWpoG5wkD CvQ8uiKE/Ru73Y/F+YkEv13wTcF1el6n6NGXldOZDhCjEeKqWq6Kvo6MwblmlBKX Pp6AzsUWBgYB0NU7ywDoJVGHD0H3ffwz70KQ7/f0MzByYVr+SVqXGGHBijOz78rJ 16DX7qpXew7ZJM6kq87u5xuSEFQqrAgb5P+CIkx4uMhJp6gyyv2CvolQ1ywH/18M jltyZQezdtNXMbM/2aut+bosieuBhy+wlN6rPJ16dUudAF7awUN4KnLohQM2wB5+ DJ4yUXA6BTrtZDdLYJ/n8cHXhTPR9kc= -----END CERTIFICATE-----Generated at Fri Mar 14 07:17:44 2025 by rpki-client