$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ae7a96e5-dad7-3b90-8e0c-f6dc731c9a27.roa File: ae7a96e5-dad7-3b90-8e0c-f6dc731c9a27.roa (raw, json) Hash identifier: o8s295WO4+muOxKDHgEcjuw90cIfiP1BxDdipk8s7UE= Subject key identifier: D6:1A:59:57:AA:ED:D8:B5:7B:1C:A6:8A:46:33:82:76:4F:17:7C:22 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584921343C92A5F97E48588AF200 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ae7a96e5-dad7-3b90-8e0c-f6dc731c9a27.roa Signing time: Sun 09 Mar 2025 10:20:45 +0000 ROA not before: Sun 09 Mar 2025 10:20:45 +0000 ROA not after: Sat 07 Jun 2025 10:20:45 +0000 asID: 12132 IP address blocks: 199.243.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:34:3c:92:a5:f9:7e:48:58:8a:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Mar 9 10:20:45 2025 GMT Not After : Jun 7 10:20:45 2025 GMT Subject: CN=6ced0a32-19b4-4851-8511-a8e99b131712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:28:fc:31:4d:64:9c:c4:77:2a:19:cf:61: 50:ae:69:ee:c9:bd:df:b6:de:17:ca:cd:bf:80:74: 26:ea:41:ed:ea:ae:ed:14:02:53:26:25:f2:66:d0: 7b:76:d6:6c:dc:e3:08:6f:1d:0e:9d:f5:fe:92:53: cf:79:60:73:c1:bb:d7:f8:6d:e4:75:10:08:10:3c: 1e:50:a9:8a:c8:79:c4:af:7f:98:37:b2:99:af:56: 1e:3d:44:8d:e9:e5:80:6e:a1:5f:a5:d7:8f:af:bd: 90:7c:8a:7e:70:44:c8:7f:92:fd:16:d6:82:c4:dc: 93:03:29:75:44:41:97:f1:b4:50:79:21:17:e6:2a: db:62:13:33:f3:39:49:cc:da:44:b1:b5:6f:90:34: 97:95:8f:83:66:6f:06:2e:d1:a3:7e:50:db:dc:ce: 0c:99:ce:08:d4:9f:69:17:92:3b:81:2c:75:80:08: 10:87:55:14:fd:95:c6:58:84:ce:f8:e8:32:60:4b: 53:db:15:bc:5f:9e:08:2a:08:bd:52:c0:82:b4:be: 75:49:41:2b:51:49:48:67:49:34:f4:a3:96:6d:f5: ee:7c:53:ed:1d:20:a2:35:fb:34:5b:fa:cb:b4:31: 28:2f:39:8f:e0:90:e0:7d:3e:76:df:34:dc:5f:1d: f1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1A:59:57:AA:ED:D8:B5:7B:1C:A6:8A:46:33:82:76:4F:17:7C:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ae7a96e5-dad7-3b90-8e0c-f6dc731c9a27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 199.243.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:40:0e:6f:36:5c:19:36:5c:ff:11:2b:06:19:f3:f6:08:bc: 46:d0:b8:34:44:4d:47:ef:1b:e0:b4:56:ef:90:3d:ad:e2:64: e7:1e:bb:f7:48:0f:08:f6:40:27:fb:df:b8:cd:6d:5e:1e:12: 8c:9e:f1:47:e0:9c:49:95:76:ae:fb:56:45:0b:9e:e7:70:a1: 52:c2:e0:a0:1d:0a:4a:fa:97:32:f4:d0:e6:35:97:18:89:6b: fe:31:90:6c:1c:ac:46:36:6b:39:e9:26:94:5f:f4:c7:ef:07: 03:6b:a9:ff:f3:3f:dc:7a:48:5b:94:b4:db:e5:1e:19:45:5f: a1:73:8f:14:f2:2a:66:25:5e:86:7c:ba:87:9b:20:fb:09:62: 7d:a6:9e:b6:b9:37:16:62:18:d4:2c:e0:31:d8:13:25:8f:3e: 2e:52:28:78:b3:52:ad:98:e2:72:0d:19:5d:a6:12:c8:6f:ef: 34:d2:3d:37:31:c0:49:9f:a2:f2:88:e0:07:85:4b:cf:51:0b: 94:da:d4:af:20:fa:9c:38:4e:96:2b:32:1f:62:be:a3:e9:8f: fd:46:4d:9a:23:b8:9a:d3:09:81:b8:53:d1:81:5a:65:7d:c5: 7f:47:0f:58:a0:0b:00:89:bd:79:6b:a8:db:0c:c5:59:1c:88: 94:6e:4c:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNDySpfl+SFiK8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDMwOTEwMjA0NVoXDTI1MDYwNzEwMjA0NVowLzEtMCsGA1UEAxMk NmNlZDBhMzItMTliNC00ODUxLTg1MTEtYThlOTliMTMxNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4Mo/DFNZJzEdyoZz2FQrmnuyb3ftt4Xys2/ gHQm6kHt6q7tFAJTJiXyZtB7dtZs3OMIbx0OnfX+klPPeWBzwbvX+G3kdRAIEDwe UKmKyHnEr3+YN7KZr1YePUSN6eWAbqFfpdePr72QfIp+cETIf5L9FtaCxNyTAyl1 REGX8bRQeSEX5irbYhMz8zlJzNpEsbVvkDSXlY+DZm8GLtGjflDb3M4Mmc4I1J9p F5I7gSx1gAgQh1UU/ZXGWITO+OgyYEtT2xW8X54IKgi9UsCCtL51SUErUUlIZ0k0 9KOWbfXufFPtHSCiNfs0W/rLtDEoLzmP4JDgfT523zTcXx3xOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYaWVeq7di1exymikYzgnZPF3wiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYWU3YTk2ZTUtZGFkNy0z YjkwLThlMGMtZjZkYzczMWM5YTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/P9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVADm82XBk2XP8RKwYZ8/YIvEbQuDRETUfvG+C0Vu+QPa3iZOceu/dI Dwj2QCf737jNbV4eEoye8UfgnEmVdq77VkULnudwoVLC4KAdCkr6lzL00OY1lxiJ a/4xkGwcrEY2aznpJpRf9MfvBwNrqf/zP9x6SFuUtNvlHhlFX6FzjxTyKmYlXoZ8 uoebIPsJYn2mnra5NxZiGNQs4DHYEyWPPi5SKHizUq2Y4nINGV2mEshv7zTSPTcx wEmfovKI4AeFS89RC5Ta1K8g+pw4TpYrMh9ivqPpj/1GTZojuJrTCYG4U9GBWmV9 xX9HD1igCwCJvXlrqNsMxVkciJRuTMk= -----END CERTIFICATE-----Generated at Mon Apr 7 16:46:36 2025 by rpki-client