$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/4d9dde79-a7a1-3002-99de-718c0934d901.roa File: 4d9dde79-a7a1-3002-99de-718c0934d901.roa (raw, json) Hash identifier: WkZwluhIzvR5lT6ZavI180WQYIQWDsosAZxg9MoN21w= Subject key identifier: AC:E4:B6:83:71:E2:CB:F5:66:1B:1D:B2:1B:57:4D:AD:51:5B:73:B6 Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F43285848E9CBEB70E41BB22CA8230000 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/4d9dde79-a7a1-3002-99de-718c0934d901.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 40628 IP address blocks: 199.27.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:eb:70:e4:1b:b2:2c:a8:23:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=9f4e2edb-031c-48ac-b5ff-75ee4d46da5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:da:5c:97:d4:13:e0:fd:e7:fe:fe:e0:8f:40: d1:0b:c4:59:5d:be:9a:90:58:c3:55:91:45:a3:b2: 60:b8:52:91:a8:a6:c0:ec:6b:5a:20:9e:08:c9:8d: 26:66:6b:53:b1:3c:cd:39:ed:47:10:ad:b7:6f:89: c1:d1:3d:13:f1:2c:11:cd:2d:42:f6:e2:36:ca:f2: 2b:53:b3:13:43:94:3e:bd:f4:12:3d:e9:0d:8b:ab: e0:4a:19:44:25:c9:05:69:ea:dd:bb:0c:1c:5e:4c: 89:63:e5:c8:d2:30:ac:c6:9f:cc:7a:70:cb:7b:a2: 53:ca:a8:5b:bc:1d:5a:29:b5:f8:43:5a:65:be:14: 83:c8:f2:2c:12:2f:87:48:20:3b:c1:b9:8e:b7:45: 28:89:bf:12:b0:c9:60:62:07:4a:16:eb:93:14:0d: bf:b7:da:42:50:46:f7:70:1e:c0:5f:76:dc:21:4d: 65:06:58:00:21:da:3e:d1:de:83:b3:6f:93:ec:9f: 27:c0:b1:f7:72:c7:15:5e:b8:f9:79:ee:b1:15:91: b6:bc:26:19:53:58:b4:98:e3:0d:53:37:85:91:23: f3:97:25:82:20:b9:06:4c:e3:4d:53:d2:24:ae:08: fa:ad:b4:4c:8d:26:15:cb:79:94:d3:c0:6a:3b:9c: 27:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E4:B6:83:71:E2:CB:F5:66:1B:1D:B2:1B:57:4D:AD:51:5B:73:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/4d9dde79-a7a1-3002-99de-718c0934d901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 199.27.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:57:b0:31:83:5b:85:8b:d1:d1:37:6b:47:66:38:14:8f:5a: ff:80:8b:5c:6e:bd:a0:a5:13:30:08:8d:27:88:44:3d:03:a3: b0:dc:34:4b:53:83:b6:a8:ef:86:a2:d7:33:7e:78:68:16:97: 44:ad:00:17:8e:df:95:0b:f1:2f:24:c5:c2:60:39:f1:ea:7d: ed:c4:ad:f7:df:ed:f9:e9:12:fd:b5:1b:60:a5:e0:73:2e:ac: 1e:57:46:3f:86:71:cf:94:ec:20:82:ce:d7:32:cc:bc:e6:d2: 30:de:b2:12:44:6b:7c:f0:24:c8:d2:3d:15:b5:d0:e5:76:5c: 31:75:19:51:fa:0f:46:3a:74:21:2d:4d:a6:46:ac:5e:84:f7: d3:f3:d9:34:25:96:6c:06:4b:b6:fb:33:ef:ef:8c:e7:25:64: c5:3f:c5:ff:09:92:1d:ef:29:f4:42:16:29:1a:5b:8f:39:74: 6d:85:07:3a:95:92:31:fe:eb:1a:39:f8:88:3f:4a:c5:77:06: ed:53:a9:c7:da:9f:c7:40:39:33:bc:31:e7:2c:fd:a5:2a:53: b2:76:60:5b:2d:e1:9c:ba:1b:9d:4b:78:82:d4:74:41:9f:32: e1:b0:cd:5a:f5:62:b6:72:c7:d4:36:b2:7a:74:9a:d7:dd:ac: 5c:09:5e:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+tw5BuyLKgjAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk OWY0ZTJlZGItMDMxYy00OGFjLWI1ZmYtNzVlZTRkNDZkYTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9pcl9QT4P3n/v7gj0DRC8RZXb6akFjDVZFF o7JguFKRqKbA7GtaIJ4IyY0mZmtTsTzNOe1HEK23b4nB0T0T8SwRzS1C9uI2yvIr U7MTQ5Q+vfQSPekNi6vgShlEJckFaerduwwcXkyJY+XI0jCsxp/MenDLe6JTyqhb vB1aKbX4Q1plvhSDyPIsEi+HSCA7wbmOt0Uoib8SsMlgYgdKFuuTFA2/t9pCUEb3 cB7AX3bcIU1lBlgAIdo+0d6Ds2+T7J8nwLH3cscVXrj5ee6xFZG2vCYZU1i0mOMN UzeFkSPzlyWCILkGTONNU9Ikrgj6rbRMjSYVy3mU08BqO5wnwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzktoNx4sv1ZhsdshtXTa1RW3O2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvNGQ5ZGRlNzktYTdhMS0z MDAyLTk5ZGUtNzE4YzA5MzRkOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNXsDGDW4WL0dE3a0dmOBSPWv+Ai1xuvaClEzAIjSeIRD0Do7DcNEtT g7ao74ai1zN+eGgWl0StABeO35UL8S8kxcJgOfHqfe3Erfff7fnpEv21G2Cl4HMu rB5XRj+Gcc+U7CCCztcyzLzm0jDeshJEa3zwJMjSPRW10OV2XDF1GVH6D0Y6dCEt TaZGrF6E99Pz2TQllmwGS7b7M+/vjOclZMU/xf8Jkh3vKfRCFikaW485dG2FBzqV kjH+6xo5+Ig/SsV3Bu1Tqcfan8dAOTO8Mecs/aUqU7J2YFst4Zy6G51LeILUdEGf MuGwzVr1YrZyx9Q2snp0mtfdrFwJXuc= -----END CERTIFICATE-----Generated at Sat Apr 5 10:28:00 2025 by rpki-client