$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa File: bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa (raw, json) Hash identifier: h6Us/QsFdtVSORa75qGWlJlx4M3Lm+4O5WWVjMY9exo= Subject key identifier: 40:FE:BE:D9:99:30:FC:F5:32:62:BB:9D:D2:A3:55:04:28:75:66:26 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584894A5E9FB288DC69115FA0B80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 31898 IP address blocks: 199.36.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:e9:fb:28:8d:c6:91:15:fa:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=2e184927-82c7-4203-949e-a7ebfa987c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a9:3f:4d:a0:5b:cb:70:fb:44:59:79:13:73: 4b:82:c2:9a:08:a6:30:67:49:1c:2f:28:ea:53:01: b8:13:05:ea:2f:46:f0:6c:df:ed:cc:36:a7:c7:5f: a4:19:68:0b:7e:af:67:13:75:6e:ee:ea:7f:26:64: 8d:46:98:34:fe:17:b9:00:df:a9:e7:de:35:c5:96: 30:a3:14:d8:53:c8:2c:42:59:6b:5a:0b:d3:37:68: 0c:f8:fd:92:bb:a2:67:61:b6:3f:f3:b4:a4:c6:47: ba:dc:89:27:75:87:bf:04:27:fc:d3:59:ce:0c:2e: 1f:37:7e:d7:12:97:eb:b8:b2:57:6f:bc:65:af:39: e8:ff:41:b2:f2:9e:3d:18:f0:9b:82:c3:85:f5:19: 95:21:28:9f:a2:c2:9f:0a:bd:ab:4c:c7:7d:f2:d7: 00:e9:30:94:13:4e:fb:61:2b:75:0f:25:b9:28:b6: 0f:0b:4d:d7:99:80:d5:85:34:9f:a7:f6:d8:6b:b7: 8f:f3:a6:c8:86:2b:97:df:2b:61:10:9e:6d:2a:b2: 2d:4b:47:2c:cb:45:1a:3f:a0:5e:d3:5c:fd:85:cd: 81:81:54:96:16:f0:48:f3:d7:56:06:03:61:56:d6: 2a:cf:41:55:21:96:7c:f0:0b:a6:c7:c0:d7:92:00: 1e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FE:BE:D9:99:30:FC:F5:32:62:BB:9D:D2:A3:55:04:28:75:66:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:bc:41:ff:bd:9f:85:71:59:64:68:ca:9b:af:9b:5c:69:7c: 16:b5:77:f7:5c:71:19:e1:31:43:14:86:68:44:68:b4:5c:76: 92:d7:c6:35:35:f6:1f:1b:2b:64:f1:50:40:a1:4d:dc:aa:06: 6e:30:15:fd:40:d8:ec:4f:24:3e:d5:8f:e5:6d:3d:32:33:b8: ca:96:e3:60:6a:36:2b:62:35:12:ed:47:23:1e:65:09:cf:40: 4b:1e:c3:d9:ae:5c:43:a4:3c:89:21:42:02:1c:df:2d:e8:3a: 69:6a:3b:af:e0:c3:fc:51:b3:ae:01:f8:ab:00:19:0c:fc:0c: c0:97:9d:7e:fb:b5:68:06:55:59:5e:ff:11:47:08:26:01:fe: f2:fb:a6:8e:f9:e4:e2:03:0e:97:1c:f0:29:75:98:16:63:7e: 85:98:cb:f6:c2:95:81:fb:5f:f0:f4:74:85:7a:19:96:d1:72: 07:a6:7f:c4:27:45:55:3a:f5:15:8f:95:19:11:ad:da:88:62: 60:12:03:aa:4d:51:15:22:77:2b:b8:1f:42:12:6c:14:67:be: 70:1c:a7:e5:c9:8d:fc:da:d1:85:de:3b:d8:b6:d8:a9:7f:53: f2:6e:4a:0b:28:b5:7a:d7:01:f8:6c:f9:3a:4d:9e:b3:a6:73: 3d:4f:6d:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpen7KI3GkRX6C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk MmUxODQ5MjctODJjNy00MjAzLTk0OWUtYTdlYmZhOTg3YzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnak/TaBby3D7RFl5E3NLgsKaCKYwZ0kcLyjq UwG4EwXqL0bwbN/tzDanx1+kGWgLfq9nE3Vu7up/JmSNRpg0/he5AN+p5941xZYw oxTYU8gsQllrWgvTN2gM+P2Su6JnYbY/87Skxke63IkndYe/BCf801nODC4fN37X EpfruLJXb7xlrzno/0Gy8p49GPCbgsOF9RmVISifosKfCr2rTMd98tcA6TCUE077 YSt1DyW5KLYPC03XmYDVhTSfp/bYa7eP86bIhiuX3ythEJ5tKrItS0csy0UaP6Be 01z9hc2BgVSWFvBI89dWBgNhVtYqz0FVIZZ88Aumx8DXkgAeeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFED+vtmZMPz1MmK7ndKjVQQodWYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmJhNDhmNmYtNzIzMS0z ZjNhLWE4ZTAtOGMzZWY1ZDk0ZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK8Qf+9n4VxWWRoypuvm1xpfBa1d/dccRnhMUMUhmhEaLRcdpLXxjU1 9h8bK2TxUEChTdyqBm4wFf1A2OxPJD7Vj+VtPTIzuMqW42BqNitiNRLtRyMeZQnP QEsew9muXEOkPIkhQgIc3y3oOmlqO6/gw/xRs64B+KsAGQz8DMCXnX77tWgGVVle /xFHCCYB/vL7po755OIDDpcc8Cl1mBZjfoWYy/bClYH7X/D0dIV6GZbRcgemf8Qn RVU69RWPlRkRrdqIYmASA6pNURUidyu4H0ISbBRnvnAcp+XJjfza0YXeO9i22Kl/ U/JuSgsotXrXAfhs+TpNnrOmcz1PbVU= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:23 2025 by rpki-client