$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa File: 8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa (raw, json) Hash identifier: 1IidIA6w2P/ar7wcOApjHWMAgx5CDTUqZb2C1bHb7DI= Subject key identifier: 39:E4:4C:5E:84:FE:EF:0D:0E:BA:8A:92:37:E1:05:E9:B9:72:6C:AF Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F43285848E20876BEF5CFC6361B9C4FC0 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa Signing time: Fri 14 Feb 2025 19:16:38 +0000 ROA not before: Fri 14 Feb 2025 19:16:38 +0000 ROA not after: Thu 15 May 2025 18:16:38 +0000 asID: 398395 IP address blocks: 199.253.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:08:76:be:f5:cf:c6:36:1b:9c:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Feb 14 19:16:38 2025 GMT Not After : May 15 18:16:38 2025 GMT Subject: CN=e2d07838-f0e3-46bb-b138-7185752b2508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0d:98:66:85:98:b8:63:32:e1:4a:b1:d9:80: 13:98:9e:71:c7:96:ad:1f:49:b6:09:2e:46:b9:a7: b6:bf:41:61:42:3b:23:54:30:0e:f2:d0:0a:65:6d: 1a:54:10:5d:6a:86:57:a8:7a:fd:59:4b:2f:a2:fe: 9a:7f:f5:3a:17:9f:0a:62:d7:b4:77:07:62:3c:1a: 3b:67:28:1e:2b:fe:cb:03:2b:3d:73:b1:41:1f:24: 5a:84:40:b7:c6:bb:88:6e:26:f4:89:cc:6d:05:76: 6b:a0:13:6b:0c:cb:32:67:84:90:cc:6a:27:eb:a0: 4a:ca:14:8a:ba:60:40:7c:85:18:24:c1:69:ef:47: 6c:b9:e8:01:ac:6c:73:21:e1:85:54:37:7c:f8:f7: 7c:28:13:9d:ec:ac:19:19:82:5b:19:7b:61:34:e3: 30:37:b4:96:49:e6:5c:04:24:6c:eb:16:b5:b9:05: 10:bb:f1:a4:f8:6f:e8:75:0c:a2:06:30:7b:d9:52: 2f:d5:3c:7b:23:4e:60:b5:53:84:c0:be:80:2b:79: 53:9b:53:93:47:9f:f4:b1:3e:7a:00:f4:20:6b:bc: f1:9e:55:3b:9a:10:1f:a4:06:27:1a:f6:bc:5e:72: dd:3c:b6:47:67:e6:ee:4a:2f:00:04:e2:03:db:a8: 83:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E4:4C:5E:84:FE:EF:0D:0E:BA:8A:92:37:E1:05:E9:B9:72:6C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 199.253.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:53:72:26:bc:f1:0f:23:d0:cb:f8:46:49:f6:11:0a:e0:5f: 43:59:8e:76:3d:60:4d:38:5a:c6:11:ef:b6:28:04:d1:b0:41: ce:1d:2b:be:c6:fa:4e:4c:2d:b5:52:3d:df:aa:5a:b9:37:19: b4:53:2d:64:7a:10:cf:2b:08:8c:7a:8d:1f:11:6e:89:53:16: f1:c2:1d:b0:01:29:10:8c:29:76:61:b4:52:4d:9e:d3:0c:39: 5f:f9:a6:b3:2f:e2:e4:a2:83:c5:04:84:96:67:45:79:60:bd: c6:9c:c3:a9:1e:41:79:99:8f:99:07:a2:be:4f:66:82:49:14: 3c:ea:de:ae:23:4f:b9:4f:2d:1f:6f:19:2b:d0:1b:26:7d:9e: a9:b2:0f:cd:54:6a:a3:af:6e:73:15:1f:c4:a7:45:86:ee:b4: 5c:2b:a9:cc:f1:da:c7:f2:e2:30:e5:d6:da:2a:2e:b0:b7:1e: 13:5e:32:05:83:ea:94:84:00:50:04:01:d1:33:e8:af:f9:87: 33:1f:a9:0e:62:8c:ad:93:cb:1a:35:86:dc:7c:6a:c4:13:09: f3:ec:69:13:d3:01:30:d5:f5:18:26:30:01:f7:2c:d1:97:0a: 8a:d1:64:c0:bd:44:27:d3:7b:5d:64:12:e6:ab:aa:0b:d2:18: c2:f7:db:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjiCHa+9c/GNhucT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDIxNDE5MTYzOFoXDTI1MDUxNTE4MTYzOFowLzEtMCsGA1UEAxMk ZTJkMDc4MzgtZjBlMy00NmJiLWIxMzgtNzE4NTc1MmIyNTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw2YZoWYuGMy4Uqx2YATmJ5xx5atH0m2CS5G uae2v0FhQjsjVDAO8tAKZW0aVBBdaoZXqHr9WUsvov6af/U6F58KYte0dwdiPBo7 ZygeK/7LAys9c7FBHyRahEC3xruIbib0icxtBXZroBNrDMsyZ4SQzGon66BKyhSK umBAfIUYJMFp70dsuegBrGxzIeGFVDd8+Pd8KBOd7KwZGYJbGXthNOMwN7SWSeZc BCRs6xa1uQUQu/Gk+G/odQyiBjB72VIv1Tx7I05gtVOEwL6AK3lTm1OTR5/0sT56 APQga7zxnlU7mhAfpAYnGva8XnLdPLZHZ+buSi8ABOID26iDRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnkTF6E/u8NDrqKkjfhBem5cmyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOGQzNmEzY2EtNjYwYy0z N2I4LTkzMGItMDRiZDNiMjY3NWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVTcia88Q8j0Mv4Rkn2EQrgX0NZjnY9YE04WsYR77YoBNGwQc4dK77G +k5MLbVSPd+qWrk3GbRTLWR6EM8rCIx6jR8RbolTFvHCHbABKRCMKXZhtFJNntMM OV/5prMv4uSig8UEhJZnRXlgvcacw6keQXmZj5kHor5PZoJJFDzq3q4jT7lPLR9v GSvQGyZ9nqmyD81UaqOvbnMVH8SnRYbutFwrqczx2sfy4jDl1toqLrC3HhNeMgWD 6pSEAFAEAdEz6K/5hzMfqQ5ijK2Tyxo1htx8asQTCfPsaRPTATDV9RgmMAH3LNGX CorRZMC9RCfTe11kEuarqgvSGML32xA= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:49 2025 by rpki-client