$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a55972d1-52bb-3e79-b883-0f553c41e2fc.roa File: a55972d1-52bb-3e79-b883-0f553c41e2fc.roa (raw, json) Hash identifier: ka3W4oPN7G2Rf2rk63GiGLtyKjmPMfjwOSzPnN5q1Nw= Subject key identifier: 31:6E:5F:60:4B:E0:85:96:1C:30:CE:3A:37:B7:40:2F:98:D9:F3:3F Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F432858493ED3D66FB378852689F11380 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a55972d1-52bb-3e79-b883-0f553c41e2fc.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 46652 IP address blocks: 199.4.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d6:6f:b3:78:85:26:89:f1:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=9197cb29-7c88-4c93-ab6b-84c910692d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:20:71:2a:55:06:d3:cf:ec:89:24:99:e5: 43:70:0b:59:a8:8e:55:a5:18:e7:cf:ac:08:f6:9c: 48:46:6d:89:e1:80:80:42:27:19:59:60:74:f9:1e: 6b:4b:28:60:55:be:78:62:69:ad:36:4c:53:96:50: 04:0c:2e:5f:4b:0b:55:2c:9c:83:df:56:d1:d8:ea: f5:39:ea:35:2b:ca:5e:7e:6c:ec:10:e9:74:b6:1a: 79:e0:e2:f0:fe:64:43:a7:67:7c:ca:b6:74:02:e3: fb:e9:e9:d7:c2:d3:73:1f:fe:39:42:ec:0b:67:3b: 4e:fd:f1:85:2b:04:65:31:90:07:0a:cf:2d:eb:c8: 17:07:13:f7:4d:36:26:67:8a:4a:e1:23:69:1d:ad: a7:67:1e:b2:a7:d6:30:fb:f0:5c:13:aa:6f:0d:78: e2:70:70:d1:3f:e6:26:f9:b9:6b:e8:b4:b3:aa:31: 1e:e2:1a:d5:08:c0:e8:43:ce:b7:2e:d2:73:ad:3a: 5f:04:8c:79:7e:a4:bc:63:fb:00:3a:40:9f:e5:f8: b6:97:64:be:20:74:ae:3a:9c:fd:f6:35:c9:a4:31: 9a:89:48:b7:e3:a3:a4:5f:e5:08:6a:39:7e:ad:a5: de:18:15:9d:5a:d4:a7:7f:75:7c:7f:40:d5:df:ff: 51:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6E:5F:60:4B:E0:85:96:1C:30:CE:3A:37:B7:40:2F:98:D9:F3:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a55972d1-52bb-3e79-b883-0f553c41e2fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 199.4.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d1:8b:2f:ae:ff:66:a6:8d:9c:47:39:02:f2:e0:a6:a3:92: 58:8f:18:55:a1:5c:bf:88:cb:84:bc:66:d2:ef:0a:c9:ac:39: 83:13:07:cb:d2:9f:4b:2b:01:14:96:0a:04:a1:0e:18:4f:db: 06:a9:fe:61:7c:62:04:c4:7a:b1:b7:ff:56:9d:54:4a:6f:58: 09:95:6a:95:14:d4:63:4b:c9:15:1a:8d:1b:8d:8c:94:d6:f8: db:f8:4b:10:b0:83:0c:2d:21:49:c9:56:0e:75:1e:7d:d4:3f: 99:f1:5a:71:3c:ec:03:0a:64:d0:ea:c6:59:96:19:3a:4c:a7: b8:2b:cc:dd:7d:c3:e9:a8:cd:cd:18:5e:13:b5:71:98:11:09: 98:b2:9b:56:8f:b8:03:57:f9:71:45:a5:f4:ae:50:77:49:24: 07:4c:8b:63:23:bc:09:b6:ea:5b:99:39:c2:5a:da:f7:79:65: 3e:00:8a:42:72:19:43:5a:f6:72:29:25:f9:c1:39:aa:4d:ab: e5:61:5f:dc:9b:eb:80:a1:00:78:ec:48:27:c8:4a:c7:56:db: 88:eb:58:e9:2c:41:5d:f2:a8:05:54:c4:3b:f6:7a:14:51:f8: 94:d9:66:b6:e6:c8:36:a7:55:cf:b5:3c:ec:22:d0:e2:b4:0e: ad:fa:40:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09Zvs3iFJonxE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk OTE5N2NiMjktN2M4OC00YzkzLWFiNmItODRjOTEwNjkyZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI4gcSpVBtPP7IkkmeVDcAtZqI5VpRjnz6wI 9pxIRm2J4YCAQicZWWB0+R5rSyhgVb54YmmtNkxTllAEDC5fSwtVLJyD31bR2Or1 Oeo1K8pefmzsEOl0thp54OLw/mRDp2d8yrZ0AuP76enXwtNzH/45QuwLZztO/fGF KwRlMZAHCs8t68gXBxP3TTYmZ4pK4SNpHa2nZx6yp9Yw+/BcE6pvDXjicHDRP+Ym +blr6LSzqjEe4hrVCMDoQ863LtJzrTpfBIx5fqS8Y/sAOkCf5fi2l2S+IHSuOpz9 9jXJpDGaiUi346OkX+UIajl+raXeGBWdWtSnf3V8f0DV3/9RHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFuX2BL4IWWHDDOOje3QC+Y2fM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYTU1OTcyZDEtNTJiYi0z ZTc5LWI4ODMtMGY1NTNjNDFlMmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwTfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnRiy+u/2amjZxHOQLy4KajkliPGFWhXL+Iy4S8ZtLvCsmsOYMTB8vS n0srARSWCgShDhhP2wap/mF8YgTEerG3/1adVEpvWAmVapUU1GNLyRUajRuNjJTW +Nv4SxCwgwwtIUnJVg51Hn3UP5nxWnE87AMKZNDqxlmWGTpMp7grzN19w+mozc0Y XhO1cZgRCZiym1aPuANX+XFFpfSuUHdJJAdMi2MjvAm26luZOcJa2vd5ZT4AikJy GUNa9nIpJfnBOapNq+VhX9yb64ChAHjsSCfISsdW24jrWOksQV3yqAVUxDv2ehRR +JTZZrbmyDanVc+1POwi0OK0Dq36QHk= -----END CERTIFICATE-----Generated at Sat Apr 19 03:05:36 2025 by rpki-client