$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa File: 06c9f9a0-fe01-38c9-bbdf-309da400287e.roa (raw, json) Hash identifier: grP8MgIHD5JqXDNJw1/sMMjjV4YQCB5d3A91VBwjGkk= Subject key identifier: 7F:79:7D:B0:F7:E1:FD:33:F7:73:EB:68:75:24:2E:E1:DF:82:9E:5A Certificate issuer: /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Certificate serial: 010D0C9F4328584902EC1896EDCFC310C5657C80 Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 209 IP address blocks: 199.191.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:18:96:ed:cf:c3:10:c5:65:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=b7894af6-0815-426e-8891-871d1d66742d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:10:81:38:3a:73:71:e0:a0:b6:38:40:85: e5:1a:4a:d0:f0:25:bf:a9:6a:7e:b0:0a:b7:d4:f6: 07:0d:74:2f:f3:ea:7d:52:5e:bc:73:04:ef:a1:1d: 0f:cd:9a:5e:cd:f6:4a:c6:93:2c:fb:f7:75:32:05: 27:87:20:b5:ba:39:65:58:56:de:39:c4:b7:dc:a9: 4f:cf:d3:1d:51:c8:77:06:2c:c7:d1:a5:26:72:59: 46:e7:e0:53:c0:72:bc:6d:4d:fd:5e:72:f0:d5:42: 85:8d:42:13:08:9e:ad:50:bd:a4:bd:5d:82:0d:01: 3a:a7:55:ff:88:6f:d2:e3:6a:e5:b1:4f:be:2f:e6: 70:37:05:d6:47:46:57:75:77:81:a2:c6:bb:71:59: d1:ce:e3:0c:3d:e3:20:30:1d:40:7c:06:50:2f:da: 1f:ae:82:64:1a:77:6f:67:1b:34:fb:be:9a:b0:2c: 00:88:cf:cc:a3:42:42:a1:77:29:6e:02:77:25:56: fb:d9:50:b7:cf:0e:d8:69:ce:46:ec:53:a0:9e:fb: fe:db:76:e4:7b:ea:e4:c9:11:f4:8c:ba:47:3c:b4: da:a5:85:65:4d:22:92:65:f4:0d:00:01:73:43:1e: 96:2c:68:0e:eb:c6:3c:e1:40:54:3b:a2:0d:a8:83: 95:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:79:7D:B0:F7:E1:FD:33:F7:73:EB:68:75:24:2E:E1:DF:82:9E:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl X509v3 Authority Key Identifier: keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer sbgp-ipAddrBlock: critical IPv4: 199.191.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:73:1d:99:15:69:a8:c6:f5:80:ec:9d:e2:ac:80:ba:36:44: e9:09:b2:de:fe:0d:8e:07:44:fd:3e:d7:50:ac:4f:a2:8a:3a: fb:38:fd:34:f8:54:d7:79:b5:42:09:69:03:c5:81:a4:cb:f8: 5e:79:d1:b6:7b:e6:69:69:a3:bb:ee:d4:cf:c2:89:b1:57:91: f0:1f:03:1b:c9:5b:52:60:1d:ea:ed:98:d6:ec:99:7c:17:bf: 4e:26:ff:4a:49:15:3e:40:0e:b2:49:4b:c8:de:e4:5c:4c:38: c6:9b:3a:5b:1f:8b:f6:29:a7:63:61:b5:28:25:e0:b4:8e:b8: 1b:bb:7e:b2:c8:3e:66:2b:a0:80:74:b2:6e:e1:cd:1a:85:5f: 89:e6:9e:ba:4f:74:34:8b:79:86:10:02:af:6a:c7:e2:b3:ac: d8:1e:a2:de:3b:74:50:d5:97:95:bc:92:ed:3f:c4:a2:d8:5e: 86:49:4d:46:69:a0:7d:1a:a8:ad:0d:0d:81:47:b5:d6:14:3a: b7:d4:3e:55:4e:64:32:1f:b4:54:30:eb:66:dc:8d:1c:b4:3f: c8:67:a0:17:61:c9:a5:44:64:71:a5:71:b0:10:12:07:66:52: 3d:f6:2c:4f:a0:85:be:9e:70:96:51:f0:a0:26:ec:32:6c:6c: f6:db:04:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BiW7c/DEMVlfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiNzQ3YjItYjQ2ZS00YWMxLWI2YTEtOTRjMjczZDBj ODI4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk Yjc4OTRhZjYtMDgxNS00MjZlLTg4OTEtODcxZDFkNjY3NDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplkQgTg6c3HgoLY4QIXlGkrQ8CW/qWp+sAq3 1PYHDXQv8+p9Ul68cwTvoR0PzZpezfZKxpMs+/d1MgUnhyC1ujllWFbeOcS33KlP z9MdUch3BizH0aUmcllG5+BTwHK8bU39XnLw1UKFjUITCJ6tUL2kvV2CDQE6p1X/ iG/S42rlsU++L+ZwNwXWR0ZXdXeBosa7cVnRzuMMPeMgMB1AfAZQL9ofroJkGndv Zxs0+76asCwAiM/Mo0JCoXcpbgJ3JVb72VC3zw7Yac5G7FOgnvv+23bke+rkyRH0 jLpHPLTapYVlTSKSZfQNAAFzQx6WLGgO68Y84UBUO6INqIOVVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH95fbD34f0z93PraHUkLuHfgp5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3 NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMyNzNkMGM4MjgvMDZjOWY5YTAtZmUwMS0z OGM5LWJiZGYtMzA5ZGE0MDAyODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2RiNzQ3YjItYjQ2ZS00YWMxLWI2 YTEtOTRjMjczZDBjODI4L2NkYjc0N2IyLWI0NmUtNGFjMS1iNmExLTk0YzI3M2Qw YzgyOC5jcmwwHwYDVR0jBBgwFoAUt4HA3Yy+hO4OdZPQjMbPhjvxVDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMy NzNkMGM4MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx79BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVzHZkVaajG9YDsneKsgLo2ROkJst7+DY4HRP0+11CsT6KKOvs4/TT4 VNd5tUIJaQPFgaTL+F550bZ75mlpo7vu1M/CibFXkfAfAxvJW1JgHertmNbsmXwX v04m/0pJFT5ADrJJS8je5FxMOMabOlsfi/Ypp2NhtSgl4LSOuBu7frLIPmYroIB0 sm7hzRqFX4nmnrpPdDSLeYYQAq9qx+KzrNgeot47dFDVl5W8ku0/xKLYXoZJTUZp oH0aqK0NDYFHtdYUOrfUPlVOZDIftFQw62bcjRy0P8hnoBdhyaVEZHGlcbAQEgdm Uj32LE+ghb6ecJZR8KAm7DJsbPbbBKQ= -----END CERTIFICATE-----Generated at Mon Apr 7 01:08:15 2025 by rpki-client