$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/04b2c7af-e188-3fdd-81f2-ac0ed18551da.roa File: 04b2c7af-e188-3fdd-81f2-ac0ed18551da.roa (raw, json) Hash identifier: MgJkAcgJmluyWs59H5ZqtbUzrqRuAwoXwA37UdQHOLU= Subject key identifier: B2:FE:A4:FA:CC:D9:5A:43:DC:BE:E7:8A:C2:E2:3D:2B:1E:A9:76:A0 Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Certificate serial: 010D0C9F432858492E13C112B448F35F1416CA80 Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/04b2c7af-e188-3fdd-81f2-ac0ed18551da.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 400400 IP address blocks: 199.250.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:c1:12:b4:48:f3:5f:14:16:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=ff88e9ba-885b-475c-b1bd-e4b4e957d3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0f:d7:96:84:35:93:84:1d:ae:d4:7b:e1:cc: e7:4d:21:25:81:19:59:49:2f:fe:9f:c7:7f:a1:1a: 73:ff:da:72:84:80:de:8f:3c:1c:59:df:11:f0:07: f4:96:29:ca:61:06:af:22:25:2d:a3:b8:7c:de:eb: 00:5c:03:a6:37:76:06:a5:6a:3a:8a:a3:c7:ca:b2: 92:b4:04:86:38:be:f4:1b:cb:ec:b6:f8:9d:84:2c: 80:f9:c7:d8:95:c7:ca:a1:9d:c0:33:12:f6:48:88: 0e:33:b4:56:59:1d:9c:58:93:b2:da:fa:dd:fc:f7: a7:09:10:12:b8:2e:b3:3e:c5:51:45:35:08:f9:4c: ee:e8:37:a9:19:22:5a:00:08:1d:cf:9f:a9:a4:58: bc:56:a7:f4:50:01:a4:a8:8a:8a:03:f7:45:d6:26: 4c:92:10:cd:72:b3:03:d3:fc:13:8e:05:0f:d2:ad: d1:e0:b1:29:28:f6:80:dd:b0:52:ad:f7:71:81:39: ef:96:47:50:9b:8b:16:16:04:dc:7e:89:a6:4e:a3: 54:e8:25:2a:c0:97:05:f4:b3:3b:7c:44:b9:4f:2a: 65:9e:2d:ab:16:e8:f8:32:c6:dc:8b:a2:3c:d9:d6: cf:79:9c:5f:7d:80:8b:7d:e2:12:6b:0d:6c:71:9e: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FE:A4:FA:CC:D9:5A:43:DC:BE:E7:8A:C2:E2:3D:2B:1E:A9:76:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/04b2c7af-e188-3fdd-81f2-ac0ed18551da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl X509v3 Authority Key Identifier: keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer sbgp-ipAddrBlock: critical IPv4: 199.250.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:16:b6:06:89:db:3e:98:5d:18:58:2f:dc:46:6a:11:e7:5f: c4:df:52:e5:b7:44:7b:37:b6:ab:3a:1b:e5:8c:05:70:d2:5d: 1b:c3:cd:d3:60:01:3e:57:ce:11:a5:32:18:51:2e:d1:28:79: c6:97:b9:17:eb:d5:a2:a1:ca:30:c4:8a:f9:f3:92:eb:5f:52: c4:22:8b:02:10:b3:fa:e8:5a:4d:18:10:d9:dd:4a:26:94:59: 6e:13:cc:55:ca:c7:b0:55:c1:4c:18:f5:8f:7d:2f:cf:b8:36: c6:12:f6:00:5b:c4:d0:45:a0:0a:10:65:03:72:40:12:b1:cc: 8a:6f:1f:69:3d:8d:e7:03:99:d7:69:ed:15:12:19:67:da:7c: ef:95:23:34:7b:34:99:22:49:6d:a1:3d:be:9e:77:f6:05:17: 74:a1:3f:29:74:7a:de:c1:41:cf:b9:77:30:ee:84:25:6d:94: 29:36:d4:8b:45:5f:5b:eb:61:2a:ef:cd:c5:db:4d:fe:16:9c: 05:e6:f0:9f:9d:51:be:79:9f:76:e8:9c:7b:23:84:76:ce:b7: 0b:7c:21:3e:05:86:f2:c5:e1:8b:d4:62:fa:33:24:8e:4c:00: 37:21:d5:a1:c9:a4:bb:68:e8:2a:72:66:a7:c4:05:bd:6f:c5: 7a:ed:ec:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE8EStEjzXxQWyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl ZGI0MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk ZmY4OGU5YmEtODg1Yi00NzVjLWIxYmQtZTRiNGU5NTdkM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ/XloQ1k4QdrtR74cznTSElgRlZSS/+n8d/ oRpz/9pyhIDejzwcWd8R8Af0linKYQavIiUto7h83usAXAOmN3YGpWo6iqPHyrKS tASGOL70G8vstvidhCyA+cfYlcfKoZ3AMxL2SIgOM7RWWR2cWJOy2vrd/PenCRAS uC6zPsVRRTUI+Uzu6DepGSJaAAgdz5+ppFi8Vqf0UAGkqIqKA/dF1iZMkhDNcrMD 0/wTjgUP0q3R4LEpKPaA3bBSrfdxgTnvlkdQm4sWFgTcfommTqNU6CUqwJcF9LM7 fES5Typlni2rFuj4Msbci6I82dbPeZxffYCLfeISaw1scZ6yNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLL+pPrM2VpD3L7nisLiPSseqXagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvMDRiMmM3YWYtZTE4OC0z ZmRkLTgxZjItYWMwZWQxODU1MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/r6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoWtgaJ2z6YXRhYL9xGahHnX8TfUuW3RHs3tqs6G+WMBXDSXRvDzdNg AT5XzhGlMhhRLtEoecaXuRfr1aKhyjDEivnzkutfUsQiiwIQs/roWk0YENndSiaU WW4TzFXKx7BVwUwY9Y99L8+4NsYS9gBbxNBFoAoQZQNyQBKxzIpvH2k9jecDmddp 7RUSGWfafO+VIzR7NJkiSW2hPb6ed/YFF3ShPyl0et7BQc+5dzDuhCVtlCk21ItF X1vrYSrvzcXbTf4WnAXm8J+dUb55n3bonHsjhHbOtwt8IT4FhvLF4YvUYvozJI5M ADch1aHJpLto6CpyZqfEBb1vxXrt7O4= -----END CERTIFICATE-----Generated at Fri Apr 11 23:07:30 2025 by rpki-client