$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0c7a2849-8a58-3970-b3dd-35145bd6165e.roa File: 0c7a2849-8a58-3970-b3dd-35145bd6165e.roa (raw, json) Hash identifier: uWiidIKNc08dnnSD4lfrEMvr4vvQgz9fLG7i8SRVDF4= Subject key identifier: 42:C4:50:85:A4:60:62:94:BC:61:35:3C:C7:36:4C:C2:49:77:AA:08 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487755D8FF88BF3BFADA152D80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0c7a2849-8a58-3970-b3dd-35145bd6165e.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 19795 IP address blocks: 192.156.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d8:ff:88:bf:3b:fa:da:15:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=bcf74310-3d84-459a-a6bb-22ae30ea5e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ea:7a:c5:cd:8d:bc:00:fa:9e:ad:00:3d:0a: 90:f5:9b:6a:07:88:ae:a3:9b:2f:73:66:26:9d:e9: 3a:f6:62:b8:93:41:33:0b:71:87:b8:3d:93:44:66: e7:a4:ea:84:cb:f6:79:3b:c3:e8:1d:27:91:a2:26: 73:05:1f:6c:bd:96:0a:f5:84:d0:b1:fe:5f:e3:fb: 02:46:b6:22:1c:a9:23:96:cc:c9:05:d1:a4:ae:c3: a6:cc:8d:4f:f3:dc:c3:32:f8:6b:c2:de:19:69:e6: 5b:1e:ab:dd:54:e7:02:a2:13:18:8c:46:6f:8f:0b: 3d:5b:ba:de:e4:6b:28:7f:20:ab:bb:fb:bf:c0:39: ab:56:d2:8c:6c:0a:3f:ba:e9:15:59:ec:6a:70:eb: 77:16:f7:15:64:5f:73:56:43:ea:8b:cb:e4:7c:40: 63:6d:70:04:80:30:5c:99:f6:6c:e8:f3:eb:d0:b9: a3:c2:a2:20:5b:35:c0:3d:c8:f4:f4:1a:ac:3a:a9: df:3d:d6:a3:57:df:a7:28:3c:82:ee:ea:59:85:10: 95:35:c8:e8:3c:13:4d:d9:e5:6a:5e:5c:2a:65:58: 96:65:0b:0a:56:8e:e5:a7:37:67:62:86:50:ef:eb: dc:d2:06:e2:6b:e9:5a:9b:e5:9e:f4:fe:95:91:b0: 0b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C4:50:85:A4:60:62:94:BC:61:35:3C:C7:36:4C:C2:49:77:AA:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0c7a2849-8a58-3970-b3dd-35145bd6165e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 192.156.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:40:d2:05:2a:71:50:42:a4:f5:35:a1:55:fe:6c:94:da:07: b5:e0:34:77:bf:d9:e8:9b:82:2f:4a:82:c3:c6:89:ea:0d:d7: d5:6f:6f:09:5d:ad:7d:a0:71:f1:6f:08:2d:77:f2:9a:55:89: b5:45:52:e2:5d:3d:eb:7c:ec:04:a7:cf:50:14:f7:67:a1:0b: 85:5f:ea:68:0c:5a:5f:e8:ef:b1:55:d7:88:72:49:64:62:73: f2:c3:21:fb:34:ad:ae:8c:2b:c0:9f:52:0f:d7:92:20:33:30: 6d:fb:83:84:03:73:39:04:b8:24:fa:6c:03:9e:ca:55:65:f0: 43:b4:9b:bf:c3:72:7c:58:dc:36:cb:2b:5e:21:f1:4e:e1:7e: 3e:1a:76:48:ed:24:e5:80:6a:35:db:30:6e:ae:a1:5c:58:2e: 45:63:80:44:c3:cc:6b:95:d6:5e:1b:7f:4a:ca:85:60:91:ea: ad:94:d8:62:a4:1f:db:49:c9:cc:03:bd:66:a6:a9:e4:1e:de: 7a:59:c8:34:87:f3:c7:0c:41:a6:f4:3e:21:9d:4b:c4:47:4e: 28:5d:ec:ef:d4:11:a2:e1:f2:d5:7e:d9:a2:17:a7:92:be:7b: 9b:e4:28:bd:78:30:e1:61:e1:8b:24:55:60:83:bd:ce:51:7f: 00:97:29:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3Vdj/iL87+toVLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk YmNmNzQzMTAtM2Q4NC00NTlhLWE2YmItMjJhZTMwZWE1ZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjep6xc2NvAD6nq0APQqQ9ZtqB4iuo5svc2Ym nek69mK4k0EzC3GHuD2TRGbnpOqEy/Z5O8PoHSeRoiZzBR9svZYK9YTQsf5f4/sC RrYiHKkjlszJBdGkrsOmzI1P89zDMvhrwt4ZaeZbHqvdVOcCohMYjEZvjws9W7re 5GsofyCru/u/wDmrVtKMbAo/uukVWexqcOt3FvcVZF9zVkPqi8vkfEBjbXAEgDBc mfZs6PPr0LmjwqIgWzXAPcj09BqsOqnfPdajV9+nKDyC7upZhRCVNcjoPBNN2eVq XlwqZViWZQsKVo7lpzdnYoZQ7+vc0gbia+lam+We9P6VkbALAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELEUIWkYGKUvGE1PMc2TMJJd6oIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMGM3YTI4NDktOGE1OC0z OTcwLWIzZGQtMzUxNDViZDYxNjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJzbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINA0gUqcVBCpPU1oVX+bJTaB7XgNHe/2eibgi9KgsPGieoN19Vvbwld rX2gcfFvCC138ppVibVFUuJdPet87ASnz1AU92ehC4Vf6mgMWl/o77FV14hySWRi c/LDIfs0ra6MK8CfUg/XkiAzMG37g4QDczkEuCT6bAOeylVl8EO0m7/DcnxY3DbL K14h8U7hfj4adkjtJOWAajXbMG6uoVxYLkVjgETDzGuV1l4bf0rKhWCR6q2U2GKk H9tJycwDvWamqeQe3npZyDSH88cMQab0PiGdS8RHTihd7O/UEaLh8tV+2aIXp5K+ e5vkKL14MOFh4YskVWCDvc5RfwCXKag= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:32 2025 by rpki-client