$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5aa2b6e2-03f3-3bfb-be2b-de257658ed9d.roa File: 5aa2b6e2-03f3-3bfb-be2b-de257658ed9d.roa (raw, json) Hash identifier: QDz+1C5CIuWb23DPi3EjjnIIbfQUKcCYztSRyKOQQJo= Subject key identifier: 7C:E3:FA:C8:74:81:9C:70:98:42:A7:D6:D3:7F:52:56:97:20:23:C5 Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F43285848BA563FA08F78FF151445A180 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5aa2b6e2-03f3-3bfb-be2b-de257658ed9d.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 845 IP address blocks: 199.96.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:3f:a0:8f:78:ff:15:14:45:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=a23316e5-9234-495c-a37d-130c2e8553aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8b:4e:3c:fb:3d:68:8e:c5:dc:ef:ea:9a:15: d8:49:58:54:57:30:03:12:19:36:5e:90:65:a0:aa: b4:d6:6e:e0:80:80:2c:24:64:3d:02:62:2c:7b:82: 35:e5:90:8d:2c:bb:86:27:bf:92:03:4f:4a:80:be: 72:39:f3:c2:72:ce:5f:1c:98:de:07:3d:78:61:8f: ee:e6:64:c7:6a:cf:80:f9:f5:67:ef:73:9c:41:29: ce:50:6a:81:80:64:c5:85:52:f5:20:60:98:7f:1a: be:7a:3f:56:26:56:54:7a:f4:04:41:0f:8b:93:6b: 2e:b4:27:88:a3:c2:4f:d3:34:73:63:1b:bd:2e:02: 01:71:a4:e8:21:0b:d9:01:24:4c:7c:db:6d:5a:58: f9:55:d4:0a:31:98:71:b9:e6:8b:36:ba:2e:51:a9: ba:0f:82:8a:f9:e7:da:ee:f9:88:ce:10:8d:d3:89: 3f:13:31:4d:cc:53:92:4e:62:fc:2f:bb:8f:de:a2: a5:e7:32:6a:fa:04:ee:f3:ab:0d:ee:dc:37:39:f5: 92:7b:30:b4:7b:46:af:6d:32:f0:49:9a:b9:a1:87: 29:04:5c:e6:85:e3:be:bf:4d:62:44:91:79:51:c0: 97:e4:2a:b5:3b:29:d7:42:e2:99:07:8e:f6:e1:a3: 93:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E3:FA:C8:74:81:9C:70:98:42:A7:D6:D3:7F:52:56:97:20:23:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5aa2b6e2-03f3-3bfb-be2b-de257658ed9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 199.96.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:22:ff:09:18:31:cf:33:0e:0b:f6:5b:55:c7:9c:09:5d:e6: 65:08:55:bb:f6:c5:0f:b1:0e:c9:35:73:9f:30:eb:88:58:af: 02:a9:ac:21:39:7d:a2:ec:ef:ef:4d:83:08:93:f2:24:07:6b: 0a:32:b4:d5:9b:3d:cc:dc:ce:c5:84:26:51:c3:f5:d0:18:40: c6:a4:8d:01:fa:da:e8:6c:cf:c9:24:12:08:c0:d8:bb:27:b4: 7e:bb:b9:b5:86:ac:ef:5c:c1:0a:36:4f:f3:2e:4e:f1:99:37: c8:28:a3:a0:91:9f:c8:3c:18:2c:6b:d3:c2:32:b8:5f:8b:5b: 0e:f9:a6:b9:1a:ba:80:6d:c1:fd:18:4c:68:be:82:e5:ff:f0: 87:83:a4:b9:5d:73:aa:7a:3d:34:cd:27:35:5a:3a:ac:3f:03: 12:db:ef:4b:5b:3e:19:6e:77:1d:2f:b6:53:9e:7e:05:6c:c2: 5a:30:71:40:26:2e:e5:0d:37:2a:ad:f7:3d:cb:96:34:fa:66: fd:c1:4d:ee:90:9c:ec:b7:c7:03:89:0e:5d:58:c4:d3:60:d4: 48:a7:90:d9:4b:b0:26:7e:40:ab:5b:da:19:6b:4b:a2:79:ae: 26:63:07:b4:96:d9:15:42:d1:e2:04:38:97:0e:99:4a:0e:39: 43:ab:6d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6Vj+gj3j/FRRFoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk YTIzMzE2ZTUtOTIzNC00OTVjLWEzN2QtMTMwYzJlODU1M2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgItOPPs9aI7F3O/qmhXYSVhUVzADEhk2XpBl oKq01m7ggIAsJGQ9AmIse4I15ZCNLLuGJ7+SA09KgL5yOfPCcs5fHJjeBz14YY/u 5mTHas+A+fVn73OcQSnOUGqBgGTFhVL1IGCYfxq+ej9WJlZUevQEQQ+Lk2sutCeI o8JP0zRzYxu9LgIBcaToIQvZASRMfNttWlj5VdQKMZhxueaLNrouUam6D4KK+efa 7vmIzhCN04k/EzFNzFOSTmL8L7uP3qKl5zJq+gTu86sN7tw3OfWSezC0e0avbTLw SZq5oYcpBFzmheO+v01iRJF5UcCX5Cq1OynXQuKZB4724aOTowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzj+sh0gZxwmEKn1tN/UlaXICPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvNWFhMmI2ZTItMDNmMy0z YmZiLWJlMmItZGUyNTc2NThlZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2BWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUi/wkYMc8zDgv2W1XHnAld5mUIVbv2xQ+xDsk1c58w64hYrwKprCE5 faLs7+9NgwiT8iQHawoytNWbPczczsWEJlHD9dAYQMakjQH62uhsz8kkEgjA2Lsn tH67ubWGrO9cwQo2T/MuTvGZN8goo6CRn8g8GCxr08IyuF+LWw75prkauoBtwf0Y TGi+guX/8IeDpLldc6p6PTTNJzVaOqw/AxLb70tbPhludx0vtlOefgVswlowcUAm LuUNNyqt9z3LljT6Zv3BTe6QnOy3xwOJDl1YxNNg1EinkNlLsCZ+QKtb2hlrS6J5 riZjB7SW2RVC0eIEOJcOmUoOOUOrbZ4= -----END CERTIFICATE-----Generated at Mon Apr 7 20:07:35 2025 by rpki-client