$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/b7404ae0-7eef-3155-87a4-fd6c76fcf911.roa File: b7404ae0-7eef-3155-87a4-fd6c76fcf911.roa (raw, json) Hash identifier: vgutxm7lsSugEsmdMtJ7r5XG4zbvH+Va7idHd3qeWjQ= Subject key identifier: B4:70:E2:D5:DC:9D:9B:BE:B0:2D:2B:B2:94:79:DA:B0:83:0F:CC:EE Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584851A56A6D8F700111064F2D58 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/b7404ae0-7eef-3155-87a4-fd6c76fcf911.roa Signing time: Wed 25 Dec 2024 02:00:38 +0000 ROA not before: Wed 25 Dec 2024 02:00:38 +0000 ROA not after: Tue 25 Mar 2025 01:00:38 +0000 asID: 16509 IP address blocks: 198.160.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:a5:6a:6d:8f:70:01:11:06:4f:2d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Dec 25 02:00:38 2024 GMT Not After : Mar 25 01:00:38 2025 GMT Subject: CN=bf9f6b0e-8793-4172-9d0e-62026e9fb1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:41:35:ec:ec:ed:4a:0c:8a:40:28:4f:a1: c8:6b:f2:56:f2:57:71:c9:a1:6c:5f:cb:1b:1f:96: 39:4d:6e:ba:80:6f:40:36:5e:3e:e0:92:05:9d:3a: e4:32:c9:77:68:45:b2:55:e2:3a:a6:52:dc:43:47: 2a:05:a4:21:ff:7a:6d:57:70:42:53:96:c2:7c:a7: 1f:96:4e:09:a6:2b:7c:78:f1:ab:a2:8d:55:d0:3e: 2a:f3:07:15:eb:f0:81:dc:e0:a8:c8:2e:2d:a6:2d: 1e:99:a2:24:07:d2:2b:a1:ab:df:fc:bb:00:21:ce: 91:f2:a1:f1:2e:e6:30:38:2b:61:8d:7e:0f:74:4b: df:18:80:c0:ad:fe:cf:df:dc:73:e0:4b:34:ce:35: 29:45:1a:10:72:6c:69:94:72:be:b0:1d:fc:4b:26: 90:69:c6:0d:66:7e:3d:d1:ef:83:fb:61:e0:22:04: 1f:6c:51:f3:3b:4c:2e:7d:f1:36:87:f2:e9:1d:6c: 95:83:df:5a:89:9d:b9:47:00:79:9c:91:4e:93:f1: f4:ce:ee:1f:c8:08:e1:0e:29:1a:42:31:e4:25:a9: 30:e1:34:35:cc:c3:2c:b5:4d:19:63:d3:63:03:7b: 5d:47:7e:da:3d:4f:29:58:fb:0d:30:93:0d:82:38: 76:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:70:E2:D5:DC:9D:9B:BE:B0:2D:2B:B2:94:79:DA:B0:83:0F:CC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/b7404ae0-7eef-3155-87a4-fd6c76fcf911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 198.160.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:92:f6:03:b0:5a:97:98:07:fa:f1:f5:df:36:1a:c9:63:36: da:73:a7:eb:00:97:a9:a3:f0:bd:36:97:81:fe:31:41:14:2f: 47:69:41:9c:3a:d5:75:fc:56:19:ff:9b:12:f4:58:26:3e:95: 76:db:32:ea:7b:1d:be:b4:5c:a9:40:c1:dd:49:38:ad:67:36: c3:8f:88:55:6d:73:c2:d4:47:02:b2:4a:a1:42:2f:a9:c9:a8: 8e:58:6f:40:21:71:23:9b:ec:91:a5:78:38:53:9a:f9:d3:af: 5c:37:1d:1e:24:75:a7:3f:c0:35:e7:98:13:db:49:68:96:82: 02:8c:39:7d:4b:fc:71:0f:17:0d:a4:34:81:3b:ba:b9:d5:dc: d9:34:11:52:18:95:98:94:29:5b:70:f4:48:33:50:24:53:1d: 5d:de:1a:ea:86:e3:f6:5b:6d:e6:08:fa:68:67:46:a7:0f:81: 2c:fb:27:51:32:80:10:6a:d4:27:d7:0b:48:d5:eb:60:f6:ad: 5b:4c:f5:b9:da:2b:6e:b9:a9:ea:d0:37:66:fc:80:0d:c9:82: d2:fd:86:91:4b:6f:07:7c:24:a6:dc:f3:19:4e:9a:90:4a:e8: a1:90:8a:59:45:28:fc:96:f5:76:99:cc:d0:cb:32:3e:1f:8e: ea:60:17:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpWptj3ABEQZPLVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk YmY5ZjZiMGUtODc5My00MTcyLTlkMGUtNjIwMjZlOWZiMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ9BNezs7UoMikAoT6HIa/JW8ldxyaFsX8sb H5Y5TW66gG9ANl4+4JIFnTrkMsl3aEWyVeI6plLcQ0cqBaQh/3ptV3BCU5bCfKcf lk4Jpit8ePGroo1V0D4q8wcV6/CB3OCoyC4tpi0emaIkB9Iroavf/LsAIc6R8qHx LuYwOCthjX4PdEvfGIDArf7P39xz4Es0zjUpRRoQcmxplHK+sB38SyaQacYNZn49 0e+D+2HgIgQfbFHzO0wuffE2h/LpHWyVg99aiZ25RwB5nJFOk/H0zu4fyAjhDika QjHkJakw4TQ1zMMstU0ZY9NjA3tdR37aPU8pWPsNMJMNgjh2SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRw4tXcnZu+sC0rspR52rCDD8zuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvYjc0MDRhZTAtN2VlZi0z MTU1LTg3YTQtZmQ2Yzc2ZmNmOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqCXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeS9gOwWpeYB/rx9d82GsljNtpzp+sAl6mj8L02l4H+MUEUL0dpQZw6 1XX8Vhn/mxL0WCY+lXbbMup7Hb60XKlAwd1JOK1nNsOPiFVtc8LURwKySqFCL6nJ qI5Yb0AhcSOb7JGleDhTmvnTr1w3HR4kdac/wDXnmBPbSWiWggKMOX1L/HEPFw2k NIE7urnV3Nk0EVIYlZiUKVtw9EgzUCRTHV3eGuqG4/ZbbeYI+mhnRqcPgSz7J1Ey gBBq1CfXC0jV62D2rVtM9bnaK265qerQN2b8gA3JgtL9hpFLbwd8JKbc8xlOmpBK 6KGQillFKPyW9XaZzNDLMj4fjupgFyE= -----END CERTIFICATE-----Generated at Fri Mar 14 11:11:12 2025 by rpki-client