$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa File: bcf63ce9-7252-3eb7-86a9-be391198cc94.roa (raw, json) Hash identifier: +JCWP2Er1DvTcB9EL3UGVNiFvfsQ0cU7Bayw2OUqQJo= Subject key identifier: 95:25:B4:C2:CF:1B:68:03:66:E8:58:0C:69:18:44:31:AF:44:5E:1E Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584824FA86388617C40AB3887100 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa Signing time: Mon 09 Dec 2024 02:00:40 +0000 ROA not before: Mon 09 Dec 2024 02:00:40 +0000 ROA not after: Sun 09 Mar 2025 02:00:40 +0000 asID: 396982 IP address blocks: 198.135.124.0/23 maxlen: 23 199.19.248.0/21 maxlen: 21 199.116.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:24:fa:86:38:86:17:c4:0a:b3:88:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Dec 9 02:00:40 2024 GMT Not After : Mar 9 02:00:40 2025 GMT Subject: CN=1ced4e01-d845-4925-a89f-6825321240e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:5b:10:b5:72:3a:8a:20:0b:86:27:63:51: b8:98:8b:89:ee:f1:b8:15:51:1e:25:37:d6:66:3b: b8:b7:8c:4b:32:e3:09:d2:c1:34:3a:d5:84:61:16: 40:57:86:62:eb:ba:51:5b:53:52:e4:0c:f3:1f:70: 63:73:2e:3f:d6:9f:57:e7:70:12:47:c3:8c:17:82: 04:93:49:9d:49:93:bd:90:f9:a1:7d:ed:c2:72:16: 22:68:d2:cc:0d:7a:7a:38:c2:fa:06:d5:40:fe:51: d4:cb:e0:95:aa:7c:11:53:91:80:b6:b6:8e:e9:31: 96:21:4a:5c:e4:ee:15:d6:c2:e0:1a:d5:9f:21:0f: ca:b8:d4:3d:cf:6d:b6:9d:6b:f1:ba:5f:b1:53:07: 71:c6:aa:89:3c:04:e7:90:3c:7f:3b:01:44:46:e8: 8c:f4:13:ec:0b:0d:eb:d2:98:b6:2c:9f:a3:c8:69: 11:e3:5b:d0:2e:80:97:90:fb:da:49:fd:93:4a:f1: ae:46:b5:81:02:cb:41:ad:ab:9c:1f:1b:74:7a:98: c1:59:70:82:74:7a:6e:da:3a:08:4c:3f:60:c3:8d: bf:7a:4e:7d:ce:d2:a0:4f:26:48:cd:07:7b:79:a9: d9:31:80:6e:76:de:bf:98:2f:37:f3:d2:35:82:b9: 3e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:25:B4:C2:CF:1B:68:03:66:E8:58:0C:69:18:44:31:AF:44:5E:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 198.135.124.0/23 199.19.248.0/21 199.116.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ba:36:cb:60:c5:86:80:6a:5d:02:f4:9f:73:04:63:15:2c: 4d:0d:0c:0b:97:54:01:4e:18:d9:3b:5c:e7:33:3d:73:d6:13: 76:44:b3:b9:a5:04:7a:41:c2:e1:92:4d:3d:f9:41:c4:ee:2b: a6:39:d2:a9:14:92:65:f4:c8:e9:49:88:38:04:4a:59:a6:cd: e5:e0:9e:5b:bf:6a:99:f6:de:e3:e7:ee:ad:b9:31:21:37:42: 9f:6d:b6:d0:9c:03:e6:15:42:8a:c9:2a:ed:e6:ed:0c:b1:e3: 08:d0:f0:34:65:c2:2b:72:41:67:b2:b5:1e:6c:98:b0:ae:34: e9:b8:6f:6b:9b:fb:2d:44:02:e8:fe:64:36:3d:e0:c7:ff:bd: e2:ee:16:9c:15:ec:7d:e4:13:08:74:1c:10:16:9e:42:73:df: 13:d4:67:3c:60:e0:15:46:89:2c:79:ed:39:64:4f:f8:64:25: 5f:d5:e7:a4:42:ae:98:c9:ca:0b:b1:55:c1:18:69:d1:04:92: cf:b6:25:c6:b3:07:b6:b0:c9:72:c3:9b:1e:b2:3b:9a:b1:fb: d6:71:81:ab:22:5c:a3:49:e9:cf:4f:a9:8c:f7:cd:50:e1:7f: 61:23:a7:41:5d:4c:bf:80:85:ef:01:24:fa:46:3e:f7:5e:84: ad:c4:89:39 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEgk+oY4hhfECrOIcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk MWNlZDRlMDEtZDg0NS00OTI1LWE4OWYtNjgyNTMyMTI0MGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCtbELVyOoogC4YnY1G4mIuJ7vG4FVEeJTfW Zju4t4xLMuMJ0sE0OtWEYRZAV4Zi67pRW1NS5AzzH3Bjcy4/1p9X53ASR8OMF4IE k0mdSZO9kPmhfe3CchYiaNLMDXp6OML6BtVA/lHUy+CVqnwRU5GAtraO6TGWIUpc 5O4V1sLgGtWfIQ/KuNQ9z222nWvxul+xUwdxxqqJPATnkDx/OwFERuiM9BPsCw3r 0pi2LJ+jyGkR41vQLoCXkPvaSf2TSvGuRrWBAstBraucHxt0epjBWXCCdHpu2joI TD9gw42/ek59ztKgTyZIzQd7eanZMYBudt6/mC8389I1grk+1QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJUltMLPG2gDZuhYDGkYRDGvRF4eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYmNmNjNjZTktNzI1Mi0z ZWI3LTg2YTktYmUzOTExOThjYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBxod8AwQD xxP4AwQDx3SoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHC6NstgxYaAal0C9J9zBGMVLE0NDAuXVAFOGNk7 XOczPXPWE3ZEs7mlBHpBwuGSTT35QcTuK6Y50qkUkmX0yOlJiDgESlmmzeXgnlu/ apn23uPn7q25MSE3Qp9tttCcA+YVQorJKu3m7Qyx4wjQ8DRlwityQWeytR5smLCu NOm4b2ub+y1EAuj+ZDY94Mf/veLuFpwV7H3kEwh0HBAWnkJz3xPUZzxg4BVGiSx5 7TlkT/hkJV/V56RCrpjJyguxVcEYadEEks+2JcazB7awyXLDmx6yO5qx+9Zxgasi XKNJ6c9PqYz3zVDhf2Ejp0FdTL+Ahe8BJPpGPvdehK3EiTk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:46 2025 by rpki-client