$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/df5c18b1-7d04-39af-97a4-da803d7e85ff.roa File: df5c18b1-7d04-39af-97a4-da803d7e85ff.roa (raw, json) Hash identifier: x6CITi2ubINJO+e4yHLHDKsXYIPmh6yg2gRFkdnFUw0= Subject key identifier: 5D:C6:2B:4C:57:F5:2C:AA:9D:29:52:74:0C:39:E4:D4:CA:A7:9B:58 Certificate issuer: /CN=e1a5b703-5dea-47f1-b708-67940244b847 Certificate serial: 010D0C9F432858496B7ED2317FFEF7E13015CB80 Authority key identifier: 5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/df5c18b1-7d04-39af-97a4-da803d7e85ff.roa Signing time: Sat 05 Apr 2025 01:00:47 +0000 ROA not before: Sat 05 Apr 2025 01:00:47 +0000 ROA not after: Fri 04 Jul 2025 01:00:47 +0000 asID: 40264 IP address blocks: 199.15.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:d2:31:7f:fe:f7:e1:30:15:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a5b703-5dea-47f1-b708-67940244b847 Validity Not Before: Apr 5 01:00:47 2025 GMT Not After : Jul 4 01:00:47 2025 GMT Subject: CN=bb85256e-0815-46f4-9074-7b68c917b7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:8c:ba:21:81:c0:93:1d:d1:37:fb:cb:10: 4d:87:dd:8f:8c:74:0d:d7:d2:44:a5:52:b4:a1:11: 0d:00:6b:50:ce:e7:68:6f:b6:81:d5:12:29:7b:31: c0:5b:ec:87:71:8d:55:68:87:3a:d7:6b:b7:a7:91: 3e:7d:3f:52:d8:63:a6:1c:17:34:4f:19:16:d7:2b: 2c:8c:7a:f9:f4:53:ae:f5:18:bb:30:dc:f5:d7:77: c3:f7:0d:26:40:96:8b:b9:bc:91:0a:1d:d1:7e:0c: 4a:f2:42:6b:9a:be:91:01:0b:d4:e7:46:bc:61:f3: 53:f4:4e:7f:94:57:32:e2:9e:53:c1:f6:b6:5c:ba: 09:b3:6a:be:8b:4e:80:d2:c3:f3:6b:c0:61:a4:29: 80:34:76:be:9a:15:e2:6e:3d:9d:df:73:50:34:5e: ba:6d:d0:55:83:be:ec:bc:1c:b9:ca:fc:8f:7f:ce: 21:5a:6f:f9:1d:a1:ec:6f:42:5d:08:79:e8:25:18: a0:09:f6:07:e1:6b:0d:16:62:f9:8d:8b:26:72:6c: 0f:fe:64:00:f3:f6:4b:2d:8f:a3:41:58:42:83:ec: 65:8f:59:6d:64:15:ba:93:05:5f:5e:f3:0a:15:2e: cd:bc:0d:a8:26:b9:bd:d9:49:ad:ee:d3:89:08:ba: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C6:2B:4C:57:F5:2C:AA:9D:29:52:74:0C:39:E4:D4:CA:A7:9B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/df5c18b1-7d04-39af-97a4-da803d7e85ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl X509v3 Authority Key Identifier: keyid:5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer sbgp-ipAddrBlock: critical IPv4: 199.15.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:cf:f2:35:c0:65:84:15:66:c0:14:39:2c:ce:6e:ab:bd:f2: f8:be:b6:39:b1:22:49:0e:f3:5e:0a:f3:38:22:24:8f:07:22: d8:16:bd:10:76:6f:eb:2e:c9:98:88:26:4d:0f:94:ea:f2:97: b4:d8:64:33:83:77:9d:c0:65:f2:26:9c:3d:a0:c1:5d:22:a5: af:3f:9d:d4:74:96:08:5d:c1:f5:ed:0a:26:81:44:69:c9:da: fe:82:ba:ce:42:93:61:a6:0a:a9:03:a8:c0:e3:de:13:03:29: 54:43:9e:a2:66:c3:af:65:26:74:54:8d:cb:14:b0:98:3c:1b: f7:56:ee:94:9b:92:6e:51:83:13:67:ef:f7:77:62:7d:4e:e9: 12:50:87:bb:1c:40:51:18:7b:de:07:0a:4a:da:5a:30:9b:4f: 2f:bf:c3:ae:39:66:21:e0:9c:82:09:06:72:be:fb:33:dd:9b: 88:04:41:b5:fa:ee:e4:ab:3a:07:b3:01:c7:7f:ba:e1:a0:7e: 42:e6:60:f8:5c:9f:2f:37:ed:9a:75:4e:2f:09:ee:e5:64:2b: 96:91:8a:c2:38:4d:d7:ea:20:ed:c5:b2:bc:74:5f:59:54:3c: 59:42:ee:e9:de:e4:45:90:24:4b:03:38:c1:4e:d1:c7:06:1c: 52:7c:33:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrftIxf/734TAVy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTFhNWI3MDMtNWRlYS00N2YxLWI3MDgtNjc5NDAyNDRi ODQ3MB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk YmI4NTI1NmUtMDgxNS00NmY0LTkwNzQtN2I2OGM5MTdiN2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX+MuiGBwJMd0Tf7yxBNh92PjHQN19JEpVK0 oRENAGtQzudob7aB1RIpezHAW+yHcY1VaIc612u3p5E+fT9S2GOmHBc0TxkW1yss jHr59FOu9Ri7MNz113fD9w0mQJaLubyRCh3RfgxK8kJrmr6RAQvU50a8YfNT9E5/ lFcy4p5Twfa2XLoJs2q+i06A0sPza8BhpCmANHa+mhXibj2d33NQNF66bdBVg77s vBy5yvyPf84hWm/5HaHsb0JdCHnoJRigCfYH4WsNFmL5jYsmcmwP/mQA8/ZLLY+j QVhCg+xlj1ltZBW6kwVfXvMKFS7NvA2oJrm92Umt7tOJCLpAPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3GK0xX9SyqnSlSdAw55NTKp5tYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMWE1 YjcwMy01ZGVhLTQ3ZjEtYjcwOC02Nzk0MDI0NGI4NDcvZGY1YzE4YjEtN2QwNC0z OWFmLTk3YTQtZGE4MDNkN2U4NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTFhNWI3MDMtNWRlYS00N2YxLWI3 MDgtNjc5NDAyNDRiODQ3L2UxYTViNzAzLTVkZWEtNDdmMS1iNzA4LTY3OTQwMjQ0 Yjg0Ny5jcmwwHwYDVR0jBBgwFoAUXoxDOPofuUOl7dK+p+GAarbQwv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMWE1YjcwMy01ZGVhLTQ3ZjEtYjcwOC02Nzk0 MDI0NGI4NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxw/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrP8jXAZYQVZsAUOSzObqu98vi+tjmxIkkO814K8zgiJI8HItgWvRB2 b+suyZiIJk0PlOryl7TYZDODd53AZfImnD2gwV0ipa8/ndR0lghdwfXtCiaBRGnJ 2v6Cus5Ck2GmCqkDqMDj3hMDKVRDnqJmw69lJnRUjcsUsJg8G/dW7pSbkm5RgxNn 7/d3Yn1O6RJQh7scQFEYe94HCkraWjCbTy+/w645ZiHgnIIJBnK++zPdm4gEQbX6 7uSrOgezAcd/uuGgfkLmYPhcny837Zp1Ti8J7uVkK5aRisI4TdfqIO3Fsrx0X1lU PFlC7une5EWQJEsDOMFO0ccGHFJ8M9Y= -----END CERTIFICATE-----Generated at Tue Apr 8 01:17:43 2025 by rpki-client