$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/cafabcb4-1733-380b-a238-a258e12b6734.roa File: cafabcb4-1733-380b-a238-a258e12b6734.roa (raw, json) Hash identifier: y6ko1BAc1M/IpJCGA2NXz6jDjVYw1Q/sqNxPKjqYF7w= Subject key identifier: DB:52:03:C1:88:9E:F4:E2:5B:C1:38:CF:67:29:BA:B9:9F:19:76:ED Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487755D90F3F9624E571D24580 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/cafabcb4-1733-380b-a238-a258e12b6734.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 192.156.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d9:0f:3f:96:24:e5:71:d2:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=f93602fb-7c08-46e1-9e4f-d2291338fd66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:16:a9:d9:ab:04:0f:7d:d7:18:a9:6d:98:6a: fc:0d:f7:02:16:92:47:b2:83:20:ed:6e:00:87:01: 44:ee:62:9e:9f:10:0f:fd:88:fd:19:c8:56:4b:a0: 28:6c:78:9a:4c:10:3c:0e:a7:af:6b:49:71:7b:e1: 94:98:cb:94:8e:19:f8:2e:1b:46:35:75:da:25:37: e0:2e:c9:73:a0:c7:e4:06:db:5c:2f:35:73:68:c3: d9:ce:b0:12:12:b3:c9:ed:2b:30:34:17:a6:a1:88: 40:35:b1:eb:fd:a0:e8:65:95:d1:35:c2:b4:93:92: c9:5d:a1:29:ad:00:43:96:da:30:27:4a:b2:cd:62: 7a:41:3c:b1:8e:45:c9:06:f2:20:33:b8:b1:d8:39: 9b:f1:12:51:d0:88:fe:fa:2d:65:b9:bb:7b:10:b0: 55:c2:ca:98:86:7b:6b:7a:fc:19:73:16:2f:29:46: ba:c9:45:d6:b1:34:56:dc:39:22:0c:d3:e2:8d:7f: 15:56:c1:d4:ad:54:3d:c7:27:61:47:bb:43:7d:a1: 86:b4:53:60:a0:c3:40:21:bc:6b:e5:dd:3d:e5:d4: 17:f0:a8:df:ce:6d:45:6f:0f:0d:51:3b:d6:00:85: a3:32:a2:d6:f4:e7:f4:10:64:c4:af:2e:b5:27:b5: 2b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:52:03:C1:88:9E:F4:E2:5B:C1:38:CF:67:29:BA:B9:9F:19:76:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/cafabcb4-1733-380b-a238-a258e12b6734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 192.156.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:33:b0:ac:9e:21:cd:42:3a:25:ca:8c:8f:ac:e5:fa:31:b9: 95:41:b8:be:45:89:66:0e:16:9c:86:cf:5a:94:e1:54:84:5b: 94:51:67:80:8c:82:2a:5d:17:cf:57:e5:74:b1:b8:c1:62:df: 85:cd:85:59:8b:09:c2:74:3b:97:66:be:e1:97:00:59:38:e5: a3:04:5d:00:e7:22:ae:df:93:05:40:2a:a3:bb:89:1b:e0:fa: f6:5f:9b:b8:fa:9d:b7:50:4e:0a:04:9a:4f:73:54:60:ce:9e: 92:64:30:20:50:dc:bd:13:28:2c:b2:85:95:2e:ca:f3:ab:9b: 5b:dd:ef:83:a5:a6:93:b5:e4:b7:c1:97:d0:23:7c:18:1b:d8: 8e:f3:92:97:95:fc:20:33:34:b5:0e:64:21:45:f8:4d:1a:e4: 25:7a:3a:b8:81:cd:03:5c:ac:3f:9e:43:5e:0d:16:ac:fd:1c: 1d:27:28:b5:52:46:3d:be:ab:42:21:64:42:85:b8:d0:e1:fc: 37:a8:cb:a3:f6:1d:03:c9:6f:0a:1d:93:e3:5d:8a:3e:3d:ae: a6:14:f3:1f:23:bf:67:ff:40:67:81:ab:48:d8:10:cb:72:7c: e4:0f:67:ce:04:d4:fe:1e:c1:7f:79:27:b9:dd:c6:cc:4e:5c: 12:ec:a7:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdkPP5Yk5XHSRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk ZjkzNjAyZmItN2MwOC00NmUxLTllNGYtZDIyOTEzMzhmZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxap2asED33XGKltmGr8DfcCFpJHsoMg7W4A hwFE7mKenxAP/Yj9GchWS6AobHiaTBA8Dqeva0lxe+GUmMuUjhn4LhtGNXXaJTfg LslzoMfkBttcLzVzaMPZzrASErPJ7SswNBemoYhANbHr/aDoZZXRNcK0k5LJXaEp rQBDltowJ0qyzWJ6QTyxjkXJBvIgM7ix2Dmb8RJR0Ij++i1lubt7ELBVwsqYhntr evwZcxYvKUa6yUXWsTRW3DkiDNPijX8VVsHUrVQ9xydhR7tDfaGGtFNgoMNAIbxr 5d095dQX8Kjfzm1Fbw8NUTvWAIWjMqLW9Of0EGTEry61J7UrPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtSA8GInvTiW8E4z2cpurmfGXbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvY2FmYWJjYjQtMTczMy0z ODBiLWEyMzgtYTI1OGUxMmI2NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJzbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMzsKyeIc1COiXKjI+s5foxuZVBuL5FiWYOFpyGz1qU4VSEW5RRZ4CM gipdF89X5XSxuMFi34XNhVmLCcJ0O5dmvuGXAFk45aMEXQDnIq7fkwVAKqO7iRvg +vZfm7j6nbdQTgoEmk9zVGDOnpJkMCBQ3L0TKCyyhZUuyvOrm1vd74OlppO15LfB l9AjfBgb2I7zkpeV/CAzNLUOZCFF+E0a5CV6OriBzQNcrD+eQ14NFqz9HB0nKLVS Rj2+q0IhZEKFuNDh/Deoy6P2HQPJbwodk+Ndij49rqYU8x8jv2f/QGeBq0jYEMty fOQPZ84E1P4ewX95J7ndxsxOXBLsp54= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:03 2025 by rpki-client