$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa File: a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa (raw, json) Hash identifier: pUc4BAQz9cg1GziyqKO9xUA/XxoUp2sCgLFXbF7ld90= Subject key identifier: DC:6F:D4:90:B5:3D:88:88:9B:65:5C:FB:CF:67:77:11:87:73:0C:C7 Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F43285849287E6067986696041C7E6B80 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 53542 IP address blocks: 199.255.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:60:67:98:66:96:04:1c:7e:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=1e60f7e8-5dbc-4ad5-9a77-fa33aca54e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:b7:28:ed:56:35:8e:67:7d:75:1c:b2:13: 0b:fd:9e:53:64:9c:a2:f8:cc:33:d1:c3:cf:92:93: 5f:d9:bc:2b:39:99:7e:8b:67:c6:86:0a:f3:ad:5f: 18:95:d4:b3:51:af:dc:9f:b0:cb:c5:30:0d:97:1d: db:39:cb:7e:be:50:54:e0:ac:ad:7c:6f:0b:a0:a5: 8b:31:da:16:28:16:90:a5:c5:98:39:63:3e:8c:ce: 37:79:66:d1:67:f0:88:b5:4e:7d:6c:15:b8:ea:31: ee:d1:28:e9:7a:8b:f1:58:16:fb:15:5f:f0:e4:ef: 5b:8c:02:ce:20:b1:0e:3c:fc:ee:0f:b8:24:38:76: 37:3a:77:4f:b4:9b:c7:60:cc:ec:31:dd:6d:76:ac: 11:e7:c4:4b:fd:22:6b:3b:c1:37:c0:2c:e2:78:fd: a8:ed:7f:88:a8:9e:e1:59:86:22:0d:05:13:99:59: cc:96:6b:29:6a:aa:63:1b:ec:eb:7f:c6:fc:a2:97: cc:c5:e7:fe:a6:80:32:66:ad:0e:f7:fd:5d:95:5e: 13:99:1c:3e:0c:1e:7f:51:2d:3f:95:46:7e:b7:af: 41:08:06:9b:e2:db:ae:4b:66:18:f5:96:e6:24:ad: 0d:07:7e:6e:24:2c:49:d4:93:d7:cd:1c:ca:61:92: b9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6F:D4:90:B5:3D:88:88:9B:65:5C:FB:CF:67:77:11:87:73:0C:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:43:5f:a1:47:b0:e4:32:52:ee:3f:ab:63:5e:24:0c:c9:f8: b0:54:65:90:6d:74:66:df:4f:7d:98:2c:95:87:ae:ff:22:6a: 9e:1c:78:03:44:2f:c4:68:ff:33:ac:d0:7d:76:e0:2a:5e:b2: d0:e3:c3:09:4c:c7:02:1c:dd:fb:7d:30:1f:e0:85:58:ec:6f: 62:ed:77:56:bf:2b:a9:88:bd:5b:e2:03:6c:89:22:16:78:32: 17:dc:60:19:bc:e0:98:bf:e0:31:56:11:ab:5b:79:2b:1d:0b: ac:9b:7f:c4:87:89:9e:57:aa:0b:c0:62:9a:05:a2:a1:b1:9c: d2:16:cb:fb:fa:9c:da:5f:4d:96:53:4c:83:a7:98:5f:e0:72: f2:83:33:65:8e:c9:d2:70:52:3a:d5:f7:10:f5:fb:9f:06:22: 77:90:63:c1:30:d8:78:d0:52:5c:93:dc:ba:71:2e:c7:2d:6a: ba:a3:c5:02:b7:32:ce:75:2e:0a:29:25:90:76:a4:52:b7:3d: 9e:bf:70:99:c2:2c:75:e9:c7:b3:2e:70:87:f0:55:ce:cc:67: 96:ea:59:43:68:d6:23:2e:bb:14:67:a2:66:e5:cf:c5:54:9c: 3f:c2:1b:bd:17:42:1d:65:04:77:69:39:63:a8:43:bb:2b:b1: 9c:e7:1c:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmBnmGaWBBx+a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk MWU2MGY3ZTgtNWRiYy00YWQ1LTlhNzctZmEzM2FjYTU0ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweO3KO1WNY5nfXUcshML/Z5TZJyi+Mwz0cPP kpNf2bwrOZl+i2fGhgrzrV8YldSzUa/cn7DLxTANlx3bOct+vlBU4KytfG8LoKWL MdoWKBaQpcWYOWM+jM43eWbRZ/CItU59bBW46jHu0SjpeovxWBb7FV/w5O9bjALO ILEOPPzuD7gkOHY3OndPtJvHYMzsMd1tdqwR58RL/SJrO8E3wCzieP2o7X+IqJ7h WYYiDQUTmVnMlmspaqpjG+zrf8b8opfMxef+poAyZq0O9/1dlV4TmRw+DB5/US0/ lUZ+t69BCAab4tuuS2YY9ZbmJK0NB35uJCxJ1JPXzRzKYZK5CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxv1JC1PYiIm2Vc+89ndxGHcwzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvYTNhNTc5ZmEtYTlkZC0z MmEzLTliODUtZDE4NzVjZjFkOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhDX6FHsOQyUu4/q2NeJAzJ+LBUZZBtdGbfT32YLJWHrv8iap4ceANE L8Ro/zOs0H124CpestDjwwlMxwIc3ft9MB/ghVjsb2Ltd1a/K6mIvVviA2yJIhZ4 MhfcYBm84Ji/4DFWEatbeSsdC6ybf8SHiZ5XqgvAYpoFoqGxnNIWy/v6nNpfTZZT TIOnmF/gcvKDM2WOydJwUjrV9xD1+58GIneQY8Ew2HjQUlyT3LpxLsctarqjxQK3 Ms51LgopJZB2pFK3PZ6/cJnCLHXpx7MucIfwVc7MZ5bqWUNo1iMuuxRnomblz8VU nD/CG70XQh1lBHdpOWOoQ7srsZznHE4= -----END CERTIFICATE-----Generated at Sun Apr 6 23:20:51 2025 by rpki-client