$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb/99a5a58a-f6e7-3a31-9683-a428bf9a4fd3.roa File: 99a5a58a-f6e7-3a31-9683-a428bf9a4fd3.roa (raw, json) Hash identifier: eCOxY61Tem6SrWzbsggCb3nwSFv/Gm6p87VdqKjmMas= Subject key identifier: B3:D8:BA:14:46:CB:7B:93:6B:1C:85:3B:23:59:D2:F2:AA:09:11:60 Certificate issuer: /CN=858dcc0e-c668-41bd-874f-1be5c6d712fb Certificate serial: 010D0C9F432858494469320765D66506E8FB2740 Authority key identifier: 59:0B:34:C3:D0:A8:CD:7D:D6:73:F0:10:6D:72:34:08:E0:1C:D7:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb/99a5a58a-f6e7-3a31-9683-a428bf9a4fd3.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 398927 IP address blocks: 192.77.182.0/23 maxlen: 24 204.87.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb/858dcc0e-c668-41bd-874f-1be5c6d712fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb/858dcc0e-c668-41bd-874f-1be5c6d712fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:32:07:65:d6:65:06:e8:fb:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858dcc0e-c668-41bd-874f-1be5c6d712fb Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=ea28d007-79b6-47e1-b078-14b234f8f232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4e:c4:5a:e5:0d:c0:e3:d2:a0:fc:7e:04:6f: 3b:db:70:cd:4a:4b:ff:e5:9c:cf:7a:e1:49:15:35: 65:bb:85:66:01:a7:6c:98:84:fb:7c:29:8d:7f:26: a1:0f:67:11:43:dd:65:7c:08:99:79:e9:d0:fc:1d: 44:7f:74:48:f7:a2:72:5d:97:6d:f4:4d:47:48:1d: e0:55:51:a7:c5:45:e0:e3:23:12:cd:d7:79:dd:5c: 00:45:4f:69:d2:22:e4:49:bb:8d:c2:f0:dd:7a:9e: d4:b1:5f:69:36:54:bb:eb:96:ae:ed:a8:d6:d0:83: b1:f8:66:43:3b:e5:63:38:1c:67:f9:84:9e:80:e6: 7d:ec:88:0c:1d:61:5d:5a:4e:c3:a1:61:b7:2d:4e: 51:ac:04:48:16:92:95:86:71:d6:41:c7:77:0f:0f: 50:da:d0:e3:79:5c:7a:2c:dc:c2:1c:8c:af:f7:01: b1:71:50:3d:ca:9e:32:a3:ed:da:3b:2e:86:b4:e0: 9e:1b:9b:da:82:d2:75:eb:50:aa:6f:6d:45:22:5e: dd:fc:58:43:fc:03:c6:b3:df:86:b1:dc:2c:2e:ce: 55:be:21:86:fe:3e:d9:43:2b:58:bf:a8:e5:17:78: 4b:2f:b0:61:05:9e:47:09:61:fb:33:3e:9a:88:c9: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D8:BA:14:46:CB:7B:93:6B:1C:85:3B:23:59:D2:F2:AA:09:11:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb/99a5a58a-f6e7-3a31-9683-a428bf9a4fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb/858dcc0e-c668-41bd-874f-1be5c6d712fb.crl X509v3 Authority Key Identifier: keyid:59:0B:34:C3:D0:A8:CD:7D:D6:73:F0:10:6D:72:34:08:E0:1C:D7:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb.cer sbgp-ipAddrBlock: critical IPv4: 192.77.182.0/23 204.87.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e8:fe:8f:df:69:98:c4:bb:87:75:0e:f0:8b:c1:0b:57:aa: 26:77:6b:58:7e:29:8d:17:b2:bb:8a:e5:d5:5e:3f:e3:e0:29: 5c:20:a0:5e:82:60:c0:d5:25:9f:c6:6e:69:9a:7b:86:9a:ff: 17:f5:a9:80:e1:15:46:be:09:dd:62:f7:c4:0c:fc:4f:6e:1b: 80:f0:2d:a3:9d:76:a3:56:bb:e3:6f:61:6d:da:14:be:1a:d8: 6e:00:ef:f0:80:44:de:e2:de:27:89:27:f3:6e:8f:18:62:69: 6f:4f:cf:af:7e:c4:40:66:75:4a:5d:26:22:bd:ef:58:66:92: 47:54:e0:b4:e4:8f:d6:09:34:d5:7a:ed:9e:24:47:cc:7f:1f: 61:3d:cf:34:97:7c:43:bc:24:6d:17:3c:ee:79:fd:ad:15:fb: 32:f3:65:fc:da:14:44:ed:25:db:ee:6a:49:29:c8:42:b2:91: 4e:c5:13:ca:c7:ae:d5:97:8f:8e:bd:80:20:31:81:ce:e1:2e: 52:97:25:f6:f9:e1:e6:99:2e:91:d0:43:bc:ba:a3:1d:94:5d: 43:ac:98:09:e8:2e:54:d0:b7:93:e5:ac:24:d9:d2:90:67:86: cc:c4:2a:b6:d7:26:f2:7d:e5:15:28:e4:23:2d:99:95:78:bb: 38:78:c1:4c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElEaTIHZdZlBuj7J0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU4ZGNjMGUtYzY2OC00MWJkLTg3NGYtMWJlNWM2ZDcx MmZiMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZWEyOGQwMDctNzliNi00N2UxLWIwNzgtMTRiMjM0ZjhmMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k7EWuUNwOPSoPx+BG8723DNSkv/5ZzPeuFJ FTVlu4VmAadsmIT7fCmNfyahD2cRQ91lfAiZeenQ/B1Ef3RI96JyXZdt9E1HSB3g VVGnxUXg4yMSzdd53VwARU9p0iLkSbuNwvDdep7UsV9pNlS765au7ajW0IOx+GZD O+VjOBxn+YSegOZ97IgMHWFdWk7DoWG3LU5RrARIFpKVhnHWQcd3Dw9Q2tDjeVx6 LNzCHIyv9wGxcVA9yp4yo+3aOy6GtOCeG5vagtJ161Cqb21FIl7d/FhD/APGs9+G sdwsLs5VviGG/j7ZQytYv6jlF3hLL7BhBZ5HCWH7Mz6aiMm/gwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLPYuhRGy3uTaxyFOyNZ0vKqCRFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NThk Y2MwZS1jNjY4LTQxYmQtODc0Zi0xYmU1YzZkNzEyZmIvOTlhNWE1OGEtZjZlNy0z YTMxLTk2ODMtYTQyOGJmOWE0ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODU4ZGNjMGUtYzY2OC00MWJkLTg3 NGYtMWJlNWM2ZDcxMmZiLzg1OGRjYzBlLWM2NjgtNDFiZC04NzRmLTFiZTVjNmQ3 MTJmYi5jcmwwHwYDVR0jBBgwFoAUWQs0w9CozX3Wc/AQbXI0COAc12owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NThkY2MwZS1jNjY4LTQxYmQtODc0Zi0xYmU1 YzZkNzEyZmIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwE22AwQA zFeqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACDo/o/faZjEu4d1DvCLwQtXqiZ3a1h+KY0XsruK5dVeP+Pg KVwgoF6CYMDVJZ/Gbmmae4aa/xf1qYDhFUa+Cd1i98QM/E9uG4DwLaOddqNWu+Nv YW3aFL4a2G4A7/CARN7i3ieJJ/NujxhiaW9Pz69+xEBmdUpdJiK971hmkkdU4LTk j9YJNNV67Z4kR8x/H2E9zzSXfEO8JG0XPO55/a0V+zLzZfzaFETtJdvuakkpyEKy kU7FE8rHrtWXj469gCAxgc7hLlKXJfb54eaZLpHQQ7y6ox2UXUOsmAnoLlTQt5Pl rCTZ0pBnhszEKrbXJvJ95RUo5CMtmZV4uzh4wUw= -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:12 2025 by rpki-client