$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa File: ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa (raw, json) Hash identifier: oSGrLYo3bzwA/FWN0atsaXSh/O3swK6yJuNgtCoynlw= Subject key identifier: A5:84:8C:BE:B8:BA:41:BC:42:8C:F5:E5:B3:AE:C3:43:10:0F:A5:E6 Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F432858496A199B10D9C85CCB097F8100 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 16509 IP address blocks: 199.255.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:9b:10:d9:c8:5c:cb:09:7f:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=c4100a4d-2316-466c-819e-57de0e6a3624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:93:e4:68:69:d8:d9:23:d0:84:36:eb:4b: 31:52:f9:cc:31:18:e8:8e:6b:4d:d3:a0:d2:51:b6: 7c:77:a1:26:37:c1:18:6d:66:8b:8d:f6:92:10:e1: 32:78:7a:cb:67:94:8e:94:e1:b4:42:12:ee:a0:e1: 97:1f:2c:3e:64:1e:ce:35:c1:ed:d0:aa:5f:3b:4d: c8:eb:bc:e6:ff:a6:38:3d:67:dd:5d:fa:c6:3e:7d: 0d:64:fe:2c:08:0c:a5:eb:b1:a7:ca:44:f2:d9:db: 01:9d:da:14:b3:18:75:09:7b:1c:eb:28:ed:ae:7a: 41:7a:bd:25:39:18:13:cf:fc:d3:c9:fe:c8:ec:9d: be:0f:7f:5a:93:15:86:b2:74:af:c5:e1:10:64:04: 60:73:21:87:59:cb:5c:7b:14:47:8d:da:bc:26:d5: ce:4a:e2:e6:ef:76:c0:5b:d7:97:90:b0:59:68:8b: 5c:a9:1f:8d:84:10:f7:6f:4d:3f:48:5a:96:e0:6d: 5b:48:16:3f:1e:cf:97:15:85:e4:63:ac:9d:20:7e: 0f:4e:00:aa:cb:7a:c5:45:a3:76:5a:c9:27:66:0c: 65:9d:85:ab:c6:dc:a9:93:2b:1c:33:6c:5f:67:fd: 6d:d1:78:11:00:87:5e:f1:66:e0:38:87:f8:45:5b: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:84:8C:BE:B8:BA:41:BC:42:8C:F5:E5:B3:AE:C3:43:10:0F:A5:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3b:1d:13:c1:73:f0:48:dc:08:dc:84:11:c0:ae:da:97:3a: bb:a4:78:b6:57:67:61:df:d6:ea:e4:ec:37:60:86:8b:36:c0: 16:18:4e:4e:99:37:e8:cb:a4:b5:a5:63:69:b2:15:ac:b8:a0: ab:6d:51:51:9d:9f:50:a0:05:c6:2c:04:ef:0e:9a:a1:df:14: 22:1a:19:4d:c3:6a:07:ef:18:47:c2:f7:fd:56:33:84:b6:e8: 4b:ee:0b:4e:90:f8:1f:cd:ee:fd:ee:53:41:59:5f:49:df:ef: c3:32:d5:0e:52:9c:bf:4a:77:b9:4b:85:7b:93:62:50:08:49: 09:a7:ae:c0:47:0e:85:59:ac:f3:36:4b:37:8b:2c:24:bb:52: 98:1c:2c:28:3c:5c:3d:88:e6:55:0e:7d:69:bc:99:30:80:4b: 58:fb:a1:dd:d3:74:6e:ee:fd:f0:b9:c0:29:f0:95:9f:80:bf: c7:07:f4:fe:f1:27:76:a9:a8:1a:2c:d0:6a:2e:7c:bd:64:a0: 50:01:5c:60:b0:de:78:53:47:25:b4:b6:d6:90:8c:c3:a7:4c: 78:87:d0:36:2b:eb:14:0c:d2:93:67:6a:92:78:29:94:21:95: ef:1c:7b:e4:f2:34:70:8f:78:e3:88:24:16:50:48:50:ae:a7: 75:7a:ca:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZsQ2chcywl/gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk YzQxMDBhNGQtMjMxNi00NjZjLTgxOWUtNTdkZTBlNmEzNjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJeT5Ghp2Nkj0IQ260sxUvnMMRjojmtN06DS UbZ8d6EmN8EYbWaLjfaSEOEyeHrLZ5SOlOG0QhLuoOGXHyw+ZB7ONcHt0KpfO03I 67zm/6Y4PWfdXfrGPn0NZP4sCAyl67GnykTy2dsBndoUsxh1CXsc6yjtrnpBer0l ORgTz/zTyf7I7J2+D39akxWGsnSvxeEQZARgcyGHWctcexRHjdq8JtXOSuLm73bA W9eXkLBZaItcqR+NhBD3b00/SFqW4G1bSBY/Hs+XFYXkY6ydIH4PTgCqy3rFRaN2 WsknZgxlnYWrxtypkyscM2xfZ/1t0XgRAIde8WbgOIf4RVu9ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWEjL64ukG8Qoz15bOuw0MQD6XmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvY2E5NDM3YWItM2I0Ny0z YjI4LTliNzEtYjdmNGU0MjEzNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE47HRPBc/BI3AjchBHArtqXOrukeLZXZ2Hf1urk7Ddghos2wBYYTk6Z N+jLpLWlY2myFay4oKttUVGdn1CgBcYsBO8OmqHfFCIaGU3DagfvGEfC9/1WM4S2 6EvuC06Q+B/N7v3uU0FZX0nf78My1Q5SnL9Kd7lLhXuTYlAISQmnrsBHDoVZrPM2 SzeLLCS7UpgcLCg8XD2I5lUOfWm8mTCAS1j7od3TdG7u/fC5wCnwlZ+Av8cH9P7x J3apqBos0GoufL1koFABXGCw3nhTRyW0ttaQjMOnTHiH0DYr6xQM0pNnapJ4KZQh le8ce+TyNHCPeOOIJBZQSFCup3V6yt8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:27 2025 by rpki-client