$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/b4075263-5a25-377f-ac40-317be5b66415.roa File: b4075263-5a25-377f-ac40-317be5b66415.roa (raw, json) Hash identifier: qhufCnQeDvFQSO6JQu9M5K7TBw+9oIcUI8n5YcJNwIo= Subject key identifier: 40:EF:06:1D:77:D6:19:A7:EF:2D:0D:53:4D:82:04:16:F3:2A:79:A8 Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584953C40DDD050123F754B1AD40 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/b4075263-5a25-377f-ac40-317be5b66415.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 134521 IP address blocks: 199.27.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:0d:dd:05:01:23:f7:54:b1:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=b2ec1ccd-479a-4044-afcf-9a7ca3ad08dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:f6:05:30:ed:bd:e3:dd:ed:db:73:85:13: fc:ed:99:52:1f:3d:9b:31:48:14:a6:b5:47:de:48: c0:75:91:a6:14:aa:77:a2:cf:cd:07:7a:44:be:70: e4:c6:74:ff:3f:b3:16:71:56:15:f6:ad:a3:74:1f: a8:6e:1d:42:7c:36:f3:9e:9f:80:34:a8:89:17:77: d0:6e:0d:e5:2f:cc:73:84:ce:4d:55:1a:5b:e0:d0: 48:9f:ee:25:84:7c:2b:7a:8d:69:3e:ef:40:4a:87: 84:c9:7f:89:8c:12:bb:4d:41:17:59:43:fe:35:f1: 90:2b:dd:9a:62:6a:61:21:1b:2d:53:ec:78:04:20: 3c:41:e2:7f:3d:bd:3a:53:e2:c6:83:ba:e6:63:ee: 31:cd:79:3f:6c:87:32:55:5f:fb:bf:54:67:49:6e: d1:6a:af:13:7e:e0:bf:b8:eb:9b:8f:b4:9c:16:2b: bf:4f:a7:43:82:cc:83:54:2e:b2:ab:e7:c2:84:e5: 7d:96:bd:14:8d:16:63:d8:fd:4c:c6:bc:bf:23:c2: 2b:a8:81:52:55:bf:f5:c8:11:77:fd:48:26:33:f6: fa:8d:66:c1:60:d7:ad:2c:84:67:c1:7d:e7:5f:b9: 29:1d:d8:3c:77:84:35:a8:35:23:03:38:49:3d:5f: a3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EF:06:1D:77:D6:19:A7:EF:2D:0D:53:4D:82:04:16:F3:2A:79:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/b4075263-5a25-377f-ac40-317be5b66415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 199.27.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:ac:62:e7:cf:c3:3e:9d:69:da:67:5e:31:5d:95:54:61:29: 45:69:e7:13:13:4b:40:9f:4a:8f:92:27:d4:a6:db:2f:dd:d3: b4:4d:b8:ab:f7:62:20:3b:93:33:33:39:40:91:f3:6b:6b:4c: aa:5c:51:b7:c9:c3:cf:96:7f:f5:38:38:a3:c8:96:3d:1b:6e: 72:4d:db:0f:51:4c:ca:39:5a:a0:84:a8:c8:4d:d6:e9:f1:9b: 57:21:17:7d:68:20:be:4e:c6:14:d4:fa:e8:a9:3d:95:88:05: 91:e0:a7:bf:ab:98:98:dc:77:09:62:d4:01:0a:54:a6:30:09: fb:80:66:4c:d6:aa:76:50:57:a8:e6:32:1a:59:59:70:fd:43: 98:2f:2f:47:94:a7:24:77:36:e4:35:e7:88:e2:c9:b8:6c:df: 2c:0b:56:5d:0a:74:b6:36:ad:6f:81:d9:70:09:fd:bf:e1:74: ac:9b:da:f9:ba:f8:6b:5b:fc:19:b1:d0:77:97:b1:66:ae:c0: 0d:4e:5a:91:99:e4:3a:ea:f0:b4:5e:d2:5d:13:25:21:68:4a: 42:11:61:5f:a2:83:17:7f:02:7a:0e:89:a8:f3:4b:7f:7d:d7: ab:85:bd:81:1d:3e:f4:10:7a:06:2e:2d:84:18:59:b3:74:38: dd:71:7f:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxA3dBQEj91SxrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YjJlYzFjY2QtNDc5YS00MDQ0LWFmY2YtOWE3Y2EzYWQwOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurD2BTDtvePd7dtzhRP87ZlSHz2bMUgUprVH 3kjAdZGmFKp3os/NB3pEvnDkxnT/P7MWcVYV9q2jdB+obh1CfDbznp+ANKiJF3fQ bg3lL8xzhM5NVRpb4NBIn+4lhHwreo1pPu9ASoeEyX+JjBK7TUEXWUP+NfGQK92a YmphIRstU+x4BCA8QeJ/Pb06U+LGg7rmY+4xzXk/bIcyVV/7v1RnSW7Raq8TfuC/ uOubj7ScFiu/T6dDgsyDVC6yq+fChOV9lr0UjRZj2P1Mxry/I8IrqIFSVb/1yBF3 /UgmM/b6jWbBYNetLIRnwX3nX7kpHdg8d4Q1qDUjAzhJPV+jKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDvBh131hmn7y0NU02CBBbzKnmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvYjQwNzUyNjMtNWEyNS0z NzdmLWFjNDAtMzE3YmU1YjY2NDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxuXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqsYufPwz6dadpnXjFdlVRhKUVp5xMTS0CfSo+SJ9Sm2y/d07RNuKv3 YiA7kzMzOUCR82trTKpcUbfJw8+Wf/U4OKPIlj0bbnJN2w9RTMo5WqCEqMhN1unx m1chF31oIL5OxhTU+uipPZWIBZHgp7+rmJjcdwli1AEKVKYwCfuAZkzWqnZQV6jm MhpZWXD9Q5gvL0eUpyR3NuQ154jiybhs3ywLVl0KdLY2rW+B2XAJ/b/hdKyb2vm6 +Gtb/Bmx0HeXsWauwA1OWpGZ5Drq8LRe0l0TJSFoSkIRYV+igxd/AnoOiajzS399 16uFvYEdPvQQegYuLYQYWbN0ON1xfxc= -----END CERTIFICATE-----Generated at Sun Apr 6 03:33:59 2025 by rpki-client