$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6703e771-5eea-3671-b411-16fe0476211b.roa File: 6703e771-5eea-3671-b411-16fe0476211b.roa (raw, json) Hash identifier: lW96rg0Y3UvH+XVT5suNw6GAWPngc/NQ2J4T1YWDTKc= Subject key identifier: 30:8B:D0:AA:56:16:72:65:5A:F5:BB:8C:AC:8B:2B:4F:1B:06:83:2D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58212836A8CD1B22CAFEC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6703e771-5eea-3671-b411-16fe0476211b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 199.36.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:12:83:6a:8c:d1:b2:2c:af:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=91f05ee3-212a-40d9-b8c3-84c25b4a2e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d3:e3:91:91:79:cb:58:5e:78:c4:61:2e:e3: a9:16:a9:13:b7:9a:c8:9e:f8:a0:de:01:57:c4:64: 4d:73:71:ea:d5:6e:4d:b9:1a:f6:3c:59:7e:55:b0: fd:b4:8d:67:6d:70:c2:bc:6b:30:95:fb:8a:d0:4e: d5:fc:25:66:a1:fd:c9:00:16:20:76:85:37:56:8b: f1:26:41:7d:f2:c7:2c:85:14:73:2b:a5:f9:cc:ab: ad:46:ba:da:56:fc:2b:df:a1:07:b3:a6:f4:91:51: c7:87:60:05:4d:b6:5f:33:c2:86:7e:83:11:52:9e: ab:6a:63:c6:72:0d:80:19:f5:fb:e7:65:2f:09:6c: 21:37:62:ef:40:ef:ef:b3:d8:a9:28:51:92:57:11: ab:59:9e:ef:66:49:77:a7:19:d7:65:0c:86:fe:20: fe:8a:a4:a4:e3:19:6e:8e:20:a5:83:4a:79:9c:52: e0:72:ab:07:c7:a6:bb:97:18:94:20:18:b1:19:86: 75:85:66:20:19:0b:1a:73:e9:ce:19:2d:67:ff:2d: 10:f8:ca:5e:80:d8:55:45:14:9f:a3:a7:6b:38:bb: 21:f4:57:f6:20:c8:a2:30:8e:f2:3a:70:b0:a8:e8: 0a:03:2b:6a:66:c9:8b:1f:db:c0:11:9e:1c:78:85: 8a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8B:D0:AA:56:16:72:65:5A:F5:BB:8C:AC:8B:2B:4F:1B:06:83:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6703e771-5eea-3671-b411-16fe0476211b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:18:dc:4e:8c:99:f1:3a:c6:f9:a0:01:d0:e9:ab:de:bb:45: 18:20:c0:fe:69:7b:8f:d1:b3:09:41:af:26:68:68:90:40:90: 16:d3:45:9e:32:48:18:75:0c:17:07:ce:21:97:91:eb:1f:93: e8:3e:07:84:0d:f8:1a:19:05:58:9f:69:a4:b6:af:37:46:d7: 3a:bf:10:e8:9f:ac:40:97:74:fb:37:6f:c3:4c:d2:90:4c:b0: 04:76:a0:63:e5:24:a4:47:9f:33:10:04:c3:4d:67:86:94:8d: 74:7e:45:01:78:c2:20:83:50:36:55:7f:ff:81:28:4e:39:33: c7:11:b2:6c:d9:1b:9f:ae:20:84:c7:81:9f:d5:52:78:c0:a4: 52:e6:60:af:b4:64:23:e6:7a:e5:36:25:cc:24:b8:e4:fa:20: f1:65:d8:b0:18:55:e1:a5:c2:b6:17:3d:ff:ac:39:50:cc:50: f9:79:4e:d3:8b:bc:78:9f:26:4e:d8:12:b8:c3:01:1b:2b:46: ee:f4:a1:5b:5e:bc:ce:ca:c2:b2:f7:b4:c9:ec:bf:02:08:c6: e5:ca:0c:4e:54:47:9d:b5:c8:e3:2a:d9:b5:cb:76:ef:f5:ee: 95:c9:73:ab:26:f2:d3:f9:10:da:f2:ad:77:1d:a8:c1:df:57: 3a:f4:86:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghKDaozRsiyv7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTFmMDVlZTMtMjEyYS00MGQ5LWI4YzMtODRjMjViNGEyZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldPjkZF5y1heeMRhLuOpFqkTt5rInvig3gFX xGRNc3Hq1W5NuRr2PFl+VbD9tI1nbXDCvGswlfuK0E7V/CVmof3JABYgdoU3Vovx JkF98scshRRzK6X5zKutRrraVvwr36EHs6b0kVHHh2AFTbZfM8KGfoMRUp6ramPG cg2AGfX752UvCWwhN2LvQO/vs9ipKFGSVxGrWZ7vZkl3pxnXZQyG/iD+iqSk4xlu jiClg0p5nFLgcqsHx6a7lxiUIBixGYZ1hWYgGQsac+nOGS1n/y0Q+MpegNhVRRSf o6drOLsh9Ff2IMiiMI7yOnCwqOgKAytqZsmLH9vAEZ4ceIWK1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCL0KpWFnJlWvW7jKyLK08bBoMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjcwM2U3NzEtNWVlYS0z NjcxLWI0MTEtMTZmZTA0NzYyMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxySaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcY3E6MmfE6xvmgAdDpq967RRggwP5pe4/RswlBryZoaJBAkBbTRZ4y SBh1DBcHziGXkesfk+g+B4QN+BoZBVifaaS2rzdG1zq/EOifrECXdPs3b8NM0pBM sAR2oGPlJKRHnzMQBMNNZ4aUjXR+RQF4wiCDUDZVf/+BKE45M8cRsmzZG5+uIITH gZ/VUnjApFLmYK+0ZCPmeuU2JcwkuOT6IPFl2LAYVeGlwrYXPf+sOVDMUPl5TtOL vHifJk7YErjDARsrRu70oVtevM7KwrL3tMnsvwIIxuXKDE5UR521yOMq2bXLdu/1 7pXJc6sm8tP5ENryrXcdqMHfVzr0hpk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:37 2025 by rpki-client