$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ad869242-ee05-3a41-bf24-d40d51963bc0.roa File: ad869242-ee05-3a41-bf24-d40d51963bc0.roa (raw, json) Hash identifier: yU+ja9Y1RX/hTxcKFeh2uKJUygq9q8Pqflo5lMrrpLQ= Subject key identifier: 8B:90:B4:0C:05:2B:1C:2F:F8:7A:90:5E:35:11:37:2C:49:F4:42:1C Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F43285848BA56400E147BA3E6F0CB4900 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ad869242-ee05-3a41-bf24-d40d51963bc0.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 399509 IP address blocks: 199.96.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:40:0e:14:7b:a3:e6:f0:cb:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=80a479e8-89f4-46cb-bd47-c8ec95bf8203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:bd:24:56:e1:8c:7b:b9:69:00:08:e2:b8: 37:dc:d9:d0:08:27:bd:17:eb:e2:38:56:3f:20:88: 1b:39:44:36:26:f7:60:21:9d:ae:22:c0:d0:d7:3d: 89:02:a7:9a:15:c6:75:10:33:5e:5b:96:ec:3c:8d: e3:72:b1:49:3c:9e:58:5b:a4:de:d7:5f:0a:3b:88: 28:d2:a6:0c:d4:4b:bf:8d:40:38:33:61:a9:31:0f: 00:16:a5:79:78:80:55:1b:2e:76:0c:ad:ff:c4:34: 93:61:b7:ff:7c:41:cc:94:0f:ee:a3:9b:64:fd:ff: ec:9a:e3:b5:5a:3f:42:93:e8:ad:00:4e:02:99:73: a1:24:27:90:89:c7:61:0c:ce:5c:26:95:e4:82:d7: 87:f1:93:39:c5:99:b6:ed:67:5d:08:7f:da:66:ed: 2c:ab:25:e4:6b:a6:62:a4:44:fb:64:88:be:94:f0: 3a:c7:cc:30:95:c3:4b:71:68:8b:25:bd:19:69:01: e4:2e:0f:4c:5a:c1:ba:f1:d9:4d:60:e5:6d:a3:e1: 32:94:4b:59:7b:9d:94:88:b4:dd:74:7d:b2:64:3d: 5a:2a:b3:77:9b:b6:f3:d1:15:63:61:87:75:70:7d: 2f:31:b3:c0:6b:94:08:29:20:4b:55:a0:6e:50:e6: 16:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:90:B4:0C:05:2B:1C:2F:F8:7A:90:5E:35:11:37:2C:49:F4:42:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ad869242-ee05-3a41-bf24-d40d51963bc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 199.96.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9e:be:79:7f:f8:a1:37:70:59:9d:4e:9b:9f:ee:df:20:4d: 33:e0:8f:85:de:25:88:fc:3f:2a:f7:2a:b3:64:bb:9c:2a:be: a7:2e:75:af:5a:2e:ec:cc:34:66:ca:b2:98:f1:b8:ad:67:32: a9:d7:61:d4:ec:b0:fb:dc:dc:de:ea:ae:82:e5:cc:5e:c7:c1: 53:fa:35:16:f1:d8:30:f7:1c:9e:47:d3:41:fa:ed:37:13:ad: fc:c9:d5:ac:cd:9d:f2:be:bc:51:1a:0d:62:c8:11:dd:1b:db: cd:83:7f:55:2e:e0:94:c3:65:fa:77:97:c6:4d:32:c6:91:86: 63:30:4c:6a:a6:f2:db:2f:0f:50:a6:3f:e7:9b:fb:9e:51:b7: 4c:93:13:2c:d1:1e:58:f2:2b:6b:b0:86:82:95:64:c7:bc:f6: 12:ee:09:29:5c:11:4d:43:70:46:9a:58:9d:fd:af:d3:4a:18: 2a:61:50:96:b2:2b:64:a2:71:5b:0c:bc:64:40:0d:e1:3b:ef: b7:21:91:a5:48:5b:0d:13:64:cc:bb:ae:19:bd:b7:1c:f6:ba: 4b:75:41:0e:40:dc:18:b7:72:c5:6c:8b:50:6d:09:6e:d7:0b: cc:fa:dd:27:32:d7:84:4a:74:ba:f3:5c:62:c9:fb:84:46:0b: fb:6e:ac:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VkAOFHuj5vDLSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk ODBhNDc5ZTgtODlmNC00NmNiLWJkNDctYzhlYzk1YmY4MjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwa9JFbhjHu5aQAI4rg33NnQCCe9F+viOFY/ IIgbOUQ2JvdgIZ2uIsDQ1z2JAqeaFcZ1EDNeW5bsPI3jcrFJPJ5YW6Te118KO4go 0qYM1Eu/jUA4M2GpMQ8AFqV5eIBVGy52DK3/xDSTYbf/fEHMlA/uo5tk/f/smuO1 Wj9Ck+itAE4CmXOhJCeQicdhDM5cJpXkgteH8ZM5xZm27WddCH/aZu0sqyXka6Zi pET7ZIi+lPA6x8wwlcNLcWiLJb0ZaQHkLg9MWsG68dlNYOVto+EylEtZe52UiLTd dH2yZD1aKrN3m7bz0RVjYYd1cH0vMbPAa5QIKSBLVaBuUOYWtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuQtAwFKxwv+HqQXjURNyxJ9EIcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvYWQ4NjkyNDItZWUwNS0z YTQxLWJmMjQtZDQwZDUxOTYzYmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuevnl/+KE3cFmdTpuf7t8gTTPgj4XeJYj8Pyr3KrNku5wqvqcuda9a LuzMNGbKspjxuK1nMqnXYdTssPvc3N7qroLlzF7HwVP6NRbx2DD3HJ5H00H67TcT rfzJ1azNnfK+vFEaDWLIEd0b282Df1Uu4JTDZfp3l8ZNMsaRhmMwTGqm8tsvD1Cm P+eb+55Rt0yTEyzRHljyK2uwhoKVZMe89hLuCSlcEU1DcEaaWJ39r9NKGCphUJay K2SicVsMvGRADeE777chkaVIWw0TZMy7rhm9txz2ukt1QQ5A3Bi3csVsi1BtCW7X C8z63Scy14RKdLrzXGLJ+4RGC/turHQ= -----END CERTIFICATE-----Generated at Mon Apr 7 20:03:02 2025 by rpki-client