$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ac48f340-e66d-3e30-8f20-abcd664e0251.roa File: ac48f340-e66d-3e30-8f20-abcd664e0251.roa (raw, json) Hash identifier: /WoqbMpcKgpiiENIluz/Xd5qNLLhp6hrJ7Slm8l/3e0= Subject key identifier: C6:1C:2C:3F:11:E1:38:7B:2D:B4:8E:9B:9B:02:DA:11:82:21:87:72 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584871C0765904CCACB2BCDCEC00 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ac48f340-e66d-3e30-8f20-abcd664e0251.roa Signing time: Sun 05 Jan 2025 14:00:52 +0000 ROA not before: Sun 05 Jan 2025 14:00:52 +0000 ROA not after: Sat 05 Apr 2025 13:00:52 +0000 asID: 27471 IP address blocks: 199.19.255.0/24 maxlen: 24 199.116.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:71:c0:76:59:04:cc:ac:b2:bc:dc:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Jan 5 14:00:52 2025 GMT Not After : Apr 5 13:00:52 2025 GMT Subject: CN=88c083dd-2058-49c1-8b57-8add32464318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:f5:e6:ef:e9:e7:2f:a6:ee:14:07:93:07: 4f:10:50:fe:e8:79:7b:49:7e:8b:bd:11:d8:b9:c4: 92:45:cc:25:24:f5:3a:f2:bc:80:ee:7b:ca:a8:ed: ef:5e:1b:7a:5b:89:5a:a5:ba:06:0e:ab:06:cb:86: 05:91:e9:45:ec:f2:f5:d8:ad:8e:db:e2:c1:07:ca: fe:6b:f3:73:a7:71:74:1a:d8:04:68:14:fd:94:93: d1:12:61:9c:e8:99:14:2f:fb:63:ee:54:61:43:ca: 7a:12:4f:97:bd:2f:3b:8d:e8:c6:c0:7d:6f:88:51: 55:59:56:a9:df:d5:dc:c7:d8:f0:2a:85:09:80:9e: c9:49:9c:7c:9a:58:d1:b1:d4:b4:21:5a:3e:de:79: f5:91:54:65:6f:8b:ce:20:a0:92:38:e4:bc:f9:a5: f3:15:ff:e2:02:3e:07:17:43:c9:65:f3:82:16:96: 55:0c:6a:d5:a4:3e:10:c2:8a:9a:c3:91:2f:98:86: 9d:f1:30:a7:a1:2e:7a:ea:8b:ca:43:9a:09:de:86: 6f:0a:e4:53:be:14:f3:02:0d:f6:ba:14:52:ce:a9: ce:61:ff:23:47:77:d2:89:98:47:00:3e:88:8b:ae: a1:cf:4b:72:83:e2:2d:d0:76:b6:dc:72:0b:42:60: 54:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1C:2C:3F:11:E1:38:7B:2D:B4:8E:9B:9B:02:DA:11:82:21:87:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ac48f340-e66d-3e30-8f20-abcd664e0251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 199.19.255.0/24 199.116.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:6d:07:6c:f0:1d:db:38:47:e3:b5:8f:84:91:c2:42:d5:fd: 3e:20:3f:68:27:92:b3:90:c8:c1:b6:10:91:12:34:ed:60:b4: 40:91:d2:e2:4a:97:39:b8:dd:cf:d2:fa:47:4f:77:1e:a8:fd: 4a:7d:c8:91:65:3d:da:5d:58:c3:d0:14:48:a5:04:f3:bf:ad: 08:03:bf:42:8b:8b:6f:27:f4:95:74:b4:41:8f:bf:26:d3:3b: a6:31:1e:dd:3b:42:79:cc:c4:c3:e0:22:bf:70:13:ea:fe:d3: 15:7b:23:a6:5d:4e:53:7f:c7:8f:19:76:72:21:f9:e5:da:ae: 82:7d:76:7b:62:18:f5:26:1a:57:3c:5c:3c:f3:3e:ed:e9:ef: 5e:67:8d:bd:75:7b:d1:af:d8:0f:51:b0:00:d5:00:c9:ff:6c: a3:84:50:a9:49:d1:3e:d1:b9:35:89:87:8e:c2:c8:f3:d8:a2: f2:be:4d:e4:5a:bc:83:e0:42:b5:88:21:df:d4:a5:61:6e:2d: 36:24:71:12:12:df:83:68:b5:f2:89:8a:c4:af:9e:bc:e8:64: 21:f5:ad:9c:aa:ce:95:12:51:c1:90:ac:d2:b6:88:d9:63:95: 0b:af:a6:a4:e0:fc:62:87:5c:e7:b4:18:b9:98:14:c4:cc:4f: 02:e4:d2:62 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEhxwHZZBMyssrzc7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODhjMDgzZGQtMjA1OC00OWMxLThiNTctOGFkZDMyNDY0MzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2715u/p5y+m7hQHkwdPEFD+6Hl7SX6LvRHY ucSSRcwlJPU68ryA7nvKqO3vXht6W4lapboGDqsGy4YFkelF7PL12K2O2+LBB8r+ a/Nzp3F0GtgEaBT9lJPREmGc6JkUL/tj7lRhQ8p6Ek+XvS87jejGwH1viFFVWVap 39Xcx9jwKoUJgJ7JSZx8mljRsdS0IVo+3nn1kVRlb4vOIKCSOOS8+aXzFf/iAj4H F0PJZfOCFpZVDGrVpD4Qwoqaw5EvmIad8TCnoS566ovKQ5oJ3oZvCuRTvhTzAg32 uhRSzqnOYf8jR3fSiZhHAD6Ii66hz0tyg+It0Ha23HILQmBU+wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMYcLD8R4Th7LbSOm5sC2hGCIYdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYWM0OGYzNDAtZTY2ZC0z ZTMwLThmMjAtYWJjZDY2NGUwMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxxP/AwQA x3SsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHltB2zwHds4R+O1j4SRwkLV/T4gP2gnkrOQyMG2EJESNO1g tECR0uJKlzm43c/S+kdPdx6o/Up9yJFlPdpdWMPQFEilBPO/rQgDv0KLi28n9JV0 tEGPvybTO6YxHt07QnnMxMPgIr9wE+r+0xV7I6ZdTlN/x48ZdnIh+eXaroJ9dnti GPUmGlc8XDzzPu3p715njb11e9Gv2A9RsADVAMn/bKOEUKlJ0T7RuTWJh47CyPPY ovK+TeRavIPgQrWIId/UpWFuLTYkcRIS34NotfKJisSvnrzoZCH1rZyqzpUSUcGQ rNK2iNljlQuvpqTg/GKHXOe0GLmYFMTMTwLk0mI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:16 2025 by rpki-client