$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa File: e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa (raw, json) Hash identifier: psOZuQyqPO4XHjxqQsC9AG6nYOI9hDoqMbypniNxU2c= Subject key identifier: 06:C9:CA:9A:F3:62:EA:DC:DB:A5:EC:15:E3:97:1D:60:08:43:83:44 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584882808773DB180A447D41EC00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 199.255.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:87:73:db:18:0a:44:7d:41:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=51e2d608-bbaf-4dc8-b9e6-97bb5291a6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:20:44:ae:24:1f:7b:aa:f1:b0:c2:25:64:da: 42:04:95:df:c2:43:ea:e6:0e:6b:e4:a8:be:9f:4a: d8:4a:9b:60:55:0a:ba:18:c1:aa:62:12:eb:bf:fe: 76:6d:fa:55:af:10:dd:71:7b:03:54:b0:cb:8b:b1: c6:d2:f4:f1:fa:77:5c:fb:d0:71:03:bb:f3:b4:95: f3:4d:44:bc:5c:2a:cf:5e:e8:4f:28:62:b3:e1:e7: 55:dc:e3:89:69:8d:aa:77:21:c7:0b:a9:fa:63:06: da:09:c4:e9:f1:b3:12:9f:c8:9a:92:5e:de:08:f1: f5:5f:82:6a:46:09:95:55:8a:af:f7:66:f2:55:47: d6:b0:16:d8:e8:f3:21:6c:a0:40:b1:d3:b8:07:de: db:49:34:95:a9:9d:6d:75:7c:6d:54:81:a7:1f:1a: 6f:d9:4c:1e:84:bb:48:0e:4d:35:c2:31:6c:06:31: 92:c5:d7:bb:44:8e:52:9d:db:d8:99:ed:44:3c:7d: 4c:d8:5b:ef:fd:2d:e5:d9:2a:bf:a6:6b:37:7e:2d: 0d:65:56:58:32:5d:4e:15:37:bf:12:66:e8:ab:f6: 1d:55:7b:24:2c:ec:22:38:6e:07:49:07:af:2b:ec: cc:22:95:9a:24:00:68:eb:8b:c6:a8:d9:12:5a:97: 85:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C9:CA:9A:F3:62:EA:DC:DB:A5:EC:15:E3:97:1D:60:08:43:83:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:61:5a:10:e6:50:b0:37:cd:8d:f2:9c:97:99:85:89:0c:22: ae:a9:23:db:fd:23:40:5c:55:dc:bc:6b:bb:7d:20:e3:01:3f: df:97:e9:e8:01:d5:32:44:71:4b:dd:5b:c7:cb:33:b5:15:b7: 6d:ba:62:db:2b:c7:2b:52:6c:1c:a9:46:86:85:31:53:45:38: 92:bd:5f:b1:12:97:5e:ea:d4:89:cb:88:85:7c:f4:f1:ec:ae: 9f:1e:94:fc:9a:ed:2b:7a:69:00:bb:61:a4:5a:37:c0:84:ce: 0e:09:33:32:37:71:a5:2b:f7:29:31:db:3f:74:35:50:56:26: 49:9b:8f:f1:3f:f0:db:6a:92:3f:38:6c:03:08:3e:1d:7f:b4: 8c:76:39:06:08:fd:4a:13:44:17:e8:e2:4d:d9:90:a2:df:2b: 5e:ae:da:87:6a:07:e6:ec:13:12:bc:63:d7:75:c4:2f:a9:12: 1f:b9:e6:05:f9:15:43:2f:9e:44:34:54:2e:44:ee:33:c7:ae: 5f:12:81:94:a7:3b:21:fc:1c:b0:d8:f3:f8:ab:00:fc:42:6e: 88:5a:4d:e8:e7:38:13:62:1a:3e:4c:a1:ee:32:95:86:11:2f: 32:47:bd:36:e4:d8:f8:af:a0:f6:b5:69:30:be:04:14:2f:43: 01:34:dc:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgIdz2xgKRH1B7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk NTFlMmQ2MDgtYmJhZi00ZGM4LWI5ZTYtOTdiYjUyOTFhNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iBEriQfe6rxsMIlZNpCBJXfwkPq5g5r5Ki+ n0rYSptgVQq6GMGqYhLrv/52bfpVrxDdcXsDVLDLi7HG0vTx+ndc+9BxA7vztJXz TUS8XCrPXuhPKGKz4edV3OOJaY2qdyHHC6n6YwbaCcTp8bMSn8iakl7eCPH1X4Jq RgmVVYqv92byVUfWsBbY6PMhbKBAsdO4B97bSTSVqZ1tdXxtVIGnHxpv2UwehLtI Dk01wjFsBjGSxde7RI5SndvYme1EPH1M2Fvv/S3l2Sq/pms3fi0NZVZYMl1OFTe/ Emboq/YdVXskLOwiOG4HSQevK+zMIpWaJABo64vGqNkSWpeF/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbJyprzYurc26XsFeOXHWAIQ4NEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZTY2ODQwYzItNzJlOC0z NjdmLWJmZjEtM2RjMmE5YjA1NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhhWhDmULA3zY3ynJeZhYkMIq6pI9v9I0BcVdy8a7t9IOMBP9+X6egB 1TJEcUvdW8fLM7UVt226YtsrxytSbBypRoaFMVNFOJK9X7ESl17q1InLiIV89PHs rp8elPya7St6aQC7YaRaN8CEzg4JMzI3caUr9ykx2z90NVBWJkmbj/E/8Ntqkj84 bAMIPh1/tIx2OQYI/UoTRBfo4k3ZkKLfK16u2odqB+bsExK8Y9d1xC+pEh+55gX5 FUMvnkQ0VC5E7jPHrl8SgZSnOyH8HLDY8/irAPxCbohaTejnOBNiGj5Moe4ylYYR LzJHvTbk2PivoPa1aTC+BBQvQwE03B0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:23:14 2025 by rpki-client