$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa File: bd8c4790-3fa7-3392-86ba-87e9adece526.roa (raw, json) Hash identifier: NH/vzZ3GR0vR5lEzh2PuRcnPzP9ZaKrQMOlD+TIzuHU= Subject key identifier: 02:00:A7:B6:BB:5D:CB:79:4A:76:44:23:99:4A:42:63:47:23:02:37 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285848573AD17DD36547BA79DB2140 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa Signing time: Fri 27 Dec 2024 02:00:40 +0000 ROA not before: Fri 27 Dec 2024 02:00:40 +0000 ROA not after: Thu 27 Mar 2025 01:00:40 +0000 asID: 14618 IP address blocks: 199.36.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:57:3a:d1:7d:d3:65:47:ba:79:db:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Dec 27 02:00:40 2024 GMT Not After : Mar 27 01:00:40 2025 GMT Subject: CN=693d7d88-e4fb-458d-853a-565aacd53488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:72:de:57:d0:2c:fe:b9:cb:61:ac:2e:4b:98: 71:aa:76:03:d2:b5:b7:bb:2d:2f:d6:f6:22:9f:41: 63:0c:4b:b4:81:1e:e2:83:8f:0d:9b:b0:f5:57:c6: 80:15:e3:c6:8d:8c:e1:7a:e2:4c:40:cb:94:5f:58: 5d:04:90:34:76:f1:79:7e:c8:00:53:77:14:10:b5: 6b:18:f4:59:c9:bb:fa:1d:43:5d:18:ed:a8:94:9a: 53:24:67:f0:6c:c9:6b:36:25:29:0e:ab:0f:85:84: 40:dd:0f:eb:06:6e:3b:c4:89:01:fd:d4:b6:b0:7e: 16:c3:76:d9:39:e5:2e:e0:72:ad:ec:2c:3d:f7:1f: 0c:6a:d8:8f:da:bf:b1:49:a3:9f:76:9a:24:e3:0a: 9f:c5:06:8e:75:03:7a:79:9f:fa:4c:44:0c:e7:c1: ca:3b:ca:55:97:bb:c5:9b:ff:73:a8:2f:ea:e7:ad: 2c:fb:f0:a3:ed:d9:8c:31:c0:50:51:d7:9a:02:a0: 6f:da:ef:9c:e2:60:bc:f1:15:86:5d:91:b0:0d:97: 72:1c:0e:92:73:a7:ca:52:dd:2f:78:7e:98:be:44: bf:37:e5:61:20:5d:dd:0e:7f:d1:93:07:cc:3f:8e: f1:54:38:37:0a:36:b4:86:4a:66:7e:5e:e2:62:b4: cc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:00:A7:B6:BB:5D:CB:79:4A:76:44:23:99:4A:42:63:47:23:02:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:52:52:e2:9a:32:65:38:40:77:db:8c:c1:44:16:33:69:d4: d9:31:fb:6f:55:16:21:c5:db:af:0a:09:b2:14:b2:e2:1c:a6: 33:8d:14:5a:09:4a:be:1a:47:2a:ee:70:b1:aa:c9:19:6c:71: d7:7d:7a:52:2a:0f:5f:16:85:10:e0:d0:9b:05:c8:fe:83:6f: db:4a:07:30:12:ad:c1:ad:55:f3:8f:80:b2:95:83:82:f3:50: d3:b5:a8:61:d5:34:3d:11:2b:0b:76:3b:17:24:f6:d5:19:12: 8f:d3:38:4a:ab:a9:63:2b:16:df:6c:89:78:d1:57:8e:58:95: 42:f2:cf:71:d7:1b:1b:83:84:3c:e0:25:57:04:48:31:d7:0b: ac:c0:89:e3:a9:25:c1:a0:68:df:6b:fe:67:ed:7b:1d:2d:82: 6e:94:9e:65:71:fe:5b:43:a6:77:47:96:21:1b:52:4a:cb:71: dc:cc:a8:03:74:9e:91:f7:9b:cc:46:4b:91:cb:f6:c1:f7:48: e2:35:c8:e6:3e:ba:59:69:84:bc:c1:19:2c:7a:f7:5f:0d:82: 8e:51:10:59:f5:bd:10:74:66:bb:e7:95:ec:f0:98:8f:81:f0: d1:d9:a7:38:c8:e4:cd:c5:51:35:ef:db:06:71:c4:72:77:86: fc:85:84:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOtF902VHunnbIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk NjkzZDdkODgtZTRmYi00NThkLTg1M2EtNTY1YWFjZDUzNDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHLeV9As/rnLYawuS5hxqnYD0rW3uy0v1vYi n0FjDEu0gR7ig48Nm7D1V8aAFePGjYzheuJMQMuUX1hdBJA0dvF5fsgAU3cUELVr GPRZybv6HUNdGO2olJpTJGfwbMlrNiUpDqsPhYRA3Q/rBm47xIkB/dS2sH4Ww3bZ OeUu4HKt7Cw99x8MatiP2r+xSaOfdpok4wqfxQaOdQN6eZ/6TEQM58HKO8pVl7vF m/9zqC/q560s+/Cj7dmMMcBQUdeaAqBv2u+c4mC88RWGXZGwDZdyHA6Sc6fKUt0v eH6YvkS/N+VhIF3dDn/RkwfMP47xVDg3Cja0hkpmfl7iYrTMfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIAp7a7Xct5SnZEI5lKQmNHIwI3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmQ4YzQ3OTAtM2ZhNy0z MzkyLTg2YmEtODdlOWFkZWNlNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdSUuKaMmU4QHfbjMFEFjNp1Nkx+29VFiHF268KCbIUsuIcpjONFFoJ Sr4aRyrucLGqyRlscdd9elIqD18WhRDg0JsFyP6Db9tKBzASrcGtVfOPgLKVg4Lz UNO1qGHVND0RKwt2Oxck9tUZEo/TOEqrqWMrFt9siXjRV45YlULyz3HXGxuDhDzg JVcESDHXC6zAieOpJcGgaN9r/mftex0tgm6UnmVx/ltDpndHliEbUkrLcdzMqAN0 npH3m8xGS5HL9sH3SOI1yOY+ullphLzBGSx6918Ngo5REFn1vRB0ZrvnlezwmI+B 8NHZpzjI5M3FUTXv2wZxxHJ3hvyFhGI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:04 2025 by rpki-client