$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa File: 1d5b64a0-14ba-398c-be22-b579612157ce.roa (raw, json) Hash identifier: 9NZndR9igTqE2qn5nBJ05oz2N2AvX0yguuBPL4+HkrQ= Subject key identifier: 2D:ED:01:18:36:03:5A:2E:D4:9D:B7:53:44:83:FD:0F:47:BF:8E:50 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858493C0939EB2487594048055680 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 21949 IP address blocks: 199.167.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:39:eb:24:87:59:40:48:05:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=3acd9268-a047-4f7a-b5c7-0a25afc74a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9e:0b:b8:6c:4d:76:03:3e:5f:e7:53:e8:94: bd:35:e4:7e:00:a6:a6:64:26:ef:74:01:af:cd:3b: ae:e1:d7:8c:48:f8:2f:b0:0a:b1:fd:88:1d:d3:f9: 86:94:62:82:0a:02:e1:4a:09:5b:fa:c2:f0:f0:65: e7:73:cc:06:07:85:47:6b:1a:2b:49:ac:28:bd:94: b6:44:6b:fc:39:a4:95:07:4f:68:6c:fa:0f:5d:08: 1b:cf:68:1a:d3:11:b1:d2:e5:55:ff:b1:33:d8:75: 44:c1:96:94:f7:9d:7d:0b:17:5e:01:c8:02:8c:ce: 78:81:77:44:a0:dc:38:a3:00:13:4c:e0:ac:55:c7: 9e:d3:71:a8:26:11:0d:24:77:e3:bc:60:9f:75:1c: 1e:be:fe:80:78:e7:50:42:da:f1:da:62:b3:fc:fa: 52:3b:5c:78:b4:30:6a:80:16:3b:67:51:f9:63:97: 05:f7:91:96:d6:e6:5b:a6:b4:6c:90:1f:9c:1b:30: e9:63:34:4c:9d:29:f9:98:77:68:98:92:6d:cc:1a: 59:bb:f3:3a:fd:b8:73:c8:aa:5a:4e:fb:5d:6a:4c: 01:81:31:62:92:f4:48:8a:9a:b4:eb:37:c1:68:a6: b9:91:d6:3b:90:e9:41:91:fc:75:01:a5:cc:06:96: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:ED:01:18:36:03:5A:2E:D4:9D:B7:53:44:83:FD:0F:47:BF:8E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.167.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b5:7b:d2:0d:a7:f4:60:37:ff:30:59:88:03:52:32:04:90: c5:86:16:6b:50:ee:c1:fb:f1:dc:e4:8f:c6:7d:d2:f3:64:43: 50:cd:de:63:74:29:38:bd:b2:df:7b:09:b7:35:0a:5a:a2:cb: a1:47:59:74:d0:d1:23:90:5e:31:6d:92:7a:d3:37:a6:41:05: ec:92:81:16:4e:ad:49:0b:94:78:95:ff:bc:0f:d5:40:ce:f8: 0c:2b:e1:31:32:02:ac:1b:bd:a5:33:98:ae:a2:5d:15:a2:a6: ee:45:42:63:20:45:86:fc:03:9e:2b:92:6e:cf:5e:c1:ad:5d: 2b:17:17:7f:86:5a:dd:09:aa:10:8b:a8:85:d5:63:da:24:a1: 2f:ff:c4:94:77:e4:7a:19:d0:bf:14:25:35:d1:24:c4:77:d7: f5:4d:d5:69:df:84:ab:27:8b:b4:c6:7c:05:d9:b7:3e:8e:3b: 1e:5a:05:6f:03:50:ec:87:97:50:ad:ab:dd:f9:d1:8e:ef:69: 8b:16:22:5b:2a:cc:3d:92:55:b5:17:24:de:e7:5e:39:51:65: a7:e5:03:66:58:af:62:35:7c:ae:c1:7d:99:02:02:87:c4:af: 30:e0:02:9d:f1:76:ea:8a:57:7f:21:1f:f9:b2:76:9f:b6:c8: ab:90:7f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTnrJIdZQEgFVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk M2FjZDkyNjgtYTA0Ny00ZjdhLWI1YzctMGEyNWFmYzc0YTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9J4LuGxNdgM+X+dT6JS9NeR+AKamZCbvdAGv zTuu4deMSPgvsAqx/Ygd0/mGlGKCCgLhSglb+sLw8GXnc8wGB4VHaxorSawovZS2 RGv8OaSVB09obPoPXQgbz2ga0xGx0uVV/7Ez2HVEwZaU9519CxdeAcgCjM54gXdE oNw4owATTOCsVcee03GoJhENJHfjvGCfdRwevv6AeOdQQtrx2mKz/PpSO1x4tDBq gBY7Z1H5Y5cF95GW1uZbprRskB+cGzDpYzRMnSn5mHdomJJtzBpZu/M6/bhzyKpa TvtdakwBgTFikvRIipq06zfBaKa5kdY7kOlBkfx1AaXMBpZ5aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3tARg2A1ou1J23U0SD/Q9Hv45QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMWQ1YjY0YTAtMTRiYS0z OThjLWJlMjItYjU3OTYxMjE1N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6eYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG1e9INp/RgN/8wWYgDUjIEkMWGFmtQ7sH78dzkj8Z90vNkQ1DN3mN0 KTi9st97Cbc1Clqiy6FHWXTQ0SOQXjFtknrTN6ZBBeySgRZOrUkLlHiV/7wP1UDO +Awr4TEyAqwbvaUzmK6iXRWipu5FQmMgRYb8A54rkm7PXsGtXSsXF3+GWt0JqhCL qIXVY9okoS//xJR35HoZ0L8UJTXRJMR31/VN1WnfhKsni7TGfAXZtz6OOx5aBW8D UOyHl1Ctq9350Y7vaYsWIlsqzD2SVbUXJN7nXjlRZaflA2ZYr2I1fK7BfZkCAofE rzDgAp3xduqKV38hH/mydp+2yKuQf/w= -----END CERTIFICATE-----Generated at Tue Apr 8 10:12:47 2025 by rpki-client