$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa File: 8f41887f-e02f-3b1f-9011-a36a71b35c82.roa (raw, json) Hash identifier: zUn3EJo9ZL9iTfhIn3q3QwxJf9AYtZPs5LzmU3Lp7OE= Subject key identifier: D3:2F:C7:7F:B0:02:9F:52:4F:47:04:FC:34:14:2B:E6:83:6C:52:0A Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F43285849002150AEADC0F69949F7CD40 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 58580 IP address blocks: 199.101.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:50:ae:ad:c0:f6:99:49:f7:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=0ffec62c-27fc-424f-b997-553014b4a9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:14:79:5d:7a:67:05:f1:f2:8e:64:40:23: dc:8a:e1:79:ae:37:e3:94:c9:0c:02:2c:11:5a:44: a3:a6:f4:f3:ca:4c:c6:64:4d:79:11:65:c2:05:de: 8d:0b:62:d9:19:80:8c:62:db:46:0c:2e:9b:11:5d: a2:f0:f7:48:85:fa:c9:8b:b7:cc:9a:f4:04:14:ac: 15:a6:62:40:67:e5:5b:fd:63:aa:91:74:c9:d0:bf: aa:ef:ef:b6:6e:40:f4:b7:1f:18:36:20:7f:f1:29: ff:3f:93:3d:e1:04:8b:40:7e:67:7b:b7:25:71:4a: 23:b4:2e:6e:39:33:08:3c:47:53:b6:5e:0f:72:b7: 3c:3c:b7:9e:74:63:20:db:d1:8b:36:f0:a6:bf:17: 6e:ac:96:2f:fb:a1:99:4b:51:1e:a2:45:6c:a6:82: 2f:0c:c8:3d:56:3b:3a:da:34:01:7e:20:7d:28:48: 5b:6d:82:85:5e:83:c6:9b:cf:33:7a:54:09:cb:a8: 05:24:d8:0c:ee:d1:88:db:11:af:d5:4b:d4:24:bc: 3a:24:81:29:1f:62:23:0b:30:64:4c:c9:ba:11:cc: 2d:4e:c5:2a:c6:b2:fc:dc:f6:84:90:ba:fb:6a:67: 30:b3:0f:e3:2e:2c:08:2e:03:27:2a:5e:30:4e:f2: 3b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2F:C7:7F:B0:02:9F:52:4F:47:04:FC:34:14:2B:E6:83:6C:52:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 199.101.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6e:51:38:56:cc:87:36:8f:83:e7:5a:b6:30:ed:ac:c1:f2: 62:ea:30:df:87:79:0a:fa:79:cb:70:63:3b:75:28:3f:74:33: 79:e0:d9:ba:3c:61:19:45:12:d5:dd:6b:40:e0:0c:fb:f8:ce: a8:b4:6a:bf:16:0a:7e:6e:fb:e8:25:5c:88:eb:a9:ec:c9:bb: be:8e:d9:d2:6a:83:67:f8:3a:10:59:03:8a:d4:df:d9:73:f9: b9:ab:54:e7:f9:4e:13:24:05:43:58:08:7d:c0:cb:95:8c:d5: 1a:60:74:56:67:99:ed:65:7e:04:8c:0a:61:f4:18:96:8b:ef: ab:e6:5f:69:b0:02:14:b1:9d:2b:7f:7d:b9:b8:a5:c9:79:0b: a6:2a:c7:77:19:53:36:4d:a2:99:3f:51:2f:f9:4a:d5:10:06: 68:4e:10:f0:61:ff:42:b3:9b:30:f4:b2:50:a6:69:a6:26:85: 1c:dc:c8:ae:79:1c:9a:0a:f5:56:19:bc:7b:9f:f1:57:73:aa: 77:cd:f8:e4:38:5e:69:fe:16:4d:f0:f3:fd:e9:09:f3:ed:a5: 92:66:fc:c2:97:85:e3:06:31:3e:06:0b:41:87:29:f2:08:93: 12:16:0e:47:4b:fd:6e:d1:eb:83:e7:98:c4:97:30:a4:d4:59: 17:83:d4:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVCurcD2mUn3zUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MGZmZWM2MmMtMjdmYy00MjRmLWI5OTctNTUzMDE0YjRhOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniUUeV16ZwXx8o5kQCPciuF5rjfjlMkMAiwR WkSjpvTzykzGZE15EWXCBd6NC2LZGYCMYttGDC6bEV2i8PdIhfrJi7fMmvQEFKwV pmJAZ+Vb/WOqkXTJ0L+q7++2bkD0tx8YNiB/8Sn/P5M94QSLQH5ne7clcUojtC5u OTMIPEdTtl4Pcrc8PLeedGMg29GLNvCmvxdurJYv+6GZS1EeokVspoIvDMg9Vjs6 2jQBfiB9KEhbbYKFXoPGm88zelQJy6gFJNgM7tGI2xGv1UvUJLw6JIEpH2IjCzBk TMm6EcwtTsUqxrL83PaEkLr7amcwsw/jLiwILgMnKl4wTvI7vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMvx3+wAp9ST0cE/DQUK+aDbFIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvOGY0MTg4N2YtZTAyZi0z YjFmLTkwMTEtYTM2YTcxYjM1YzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVuUThWzIc2j4PnWrYw7azB8mLqMN+HeQr6ectwYzt1KD90M3ng2bo8 YRlFEtXda0DgDPv4zqi0ar8WCn5u++glXIjrqezJu76O2dJqg2f4OhBZA4rU39lz +bmrVOf5ThMkBUNYCH3Ay5WM1RpgdFZnme1lfgSMCmH0GJaL76vmX2mwAhSxnSt/ fbm4pcl5C6Yqx3cZUzZNopk/US/5StUQBmhOEPBh/0KzmzD0slCmaaYmhRzcyK55 HJoK9VYZvHuf8VdzqnfN+OQ4Xmn+Fk3w8/3pCfPtpZJm/MKXheMGMT4GC0GHKfII kxIWDkdL/W7R64PnmMSXMKTUWReD1GU= -----END CERTIFICATE-----Generated at Sat Apr 5 20:52:04 2025 by rpki-client