$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1177ede-8b37-3546-8f7d-b55cb7af42e6.roa File: d1177ede-8b37-3546-8f7d-b55cb7af42e6.roa (raw, json) Hash identifier: 9BPiTueEYdJp5YSoYQ504t3dJVM0nlsoK9PSOTtD6uo= Subject key identifier: 92:CE:59:C2:03:1D:52:9D:2C:3A:47:F1:45:FF:4E:00:78:BC:6A:75 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858496B7ED85D2DFB37067485C380 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1177ede-8b37-3546-8f7d-b55cb7af42e6.roa Signing time: Sat 05 Apr 2025 01:00:47 +0000 ROA not before: Sat 05 Apr 2025 01:00:47 +0000 ROA not after: Fri 04 Jul 2025 01:00:47 +0000 asID: 62390 IP address blocks: 199.115.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:d8:5d:2d:fb:37:06:74:85:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 5 01:00:47 2025 GMT Not After : Jul 4 01:00:47 2025 GMT Subject: CN=d1f4c2fb-31f3-45c1-ab1a-da0b872d9f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fa:20:b2:c9:0c:3e:5d:cc:0c:34:e1:da:e5: 68:dc:a9:89:7c:40:59:f8:e8:1e:38:e1:c6:5d:42: f8:78:3d:64:20:e0:ed:b0:72:0d:96:1a:b4:5e:d9: f6:92:25:de:87:eb:9e:cb:13:f7:0f:4f:97:1e:06: 32:99:98:84:78:21:d7:96:22:d4:63:6b:5c:0d:a0: d7:44:e0:6e:bc:39:aa:8a:d1:b6:cd:87:02:bf:8f: 5c:5b:e2:0c:29:1e:e7:d0:0b:ff:73:5a:50:38:9e: 68:57:08:3b:78:de:b7:0f:32:05:8e:e0:36:31:45: 78:f4:eb:3e:c4:57:68:07:21:bc:65:13:da:63:06: 3a:4b:10:50:fc:99:08:86:63:46:05:1e:4d:3b:3c: 78:56:a6:99:39:30:f9:de:2c:f9:f9:84:6c:84:88: 52:60:e1:5e:87:b1:bb:ee:37:ac:3c:87:17:53:95: 09:f1:51:ab:d2:69:1d:94:b1:c6:f4:83:9a:26:5e: 96:0e:87:e4:5b:ac:1c:09:9d:b2:4f:53:5a:97:4c: 2c:69:f9:98:dd:93:51:b4:28:98:50:cf:5d:84:15: 7b:0d:fc:ec:08:4a:f8:c7:22:4b:fe:45:15:ce:fa: eb:76:89:eb:f9:55:0a:cd:ac:7b:0a:3a:94:dd:36: ec:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CE:59:C2:03:1D:52:9D:2C:3A:47:F1:45:FF:4E:00:78:BC:6A:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1177ede-8b37-3546-8f7d-b55cb7af42e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 199.115.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4a:39:99:77:2c:85:94:d9:0d:82:3d:a1:d2:49:83:3d:e4: 97:35:80:a5:05:48:b5:9d:5c:62:4e:d7:18:26:fd:42:e7:42: f5:97:a0:34:cd:de:0a:49:48:57:aa:6a:ef:3b:b0:19:7d:36: 05:c7:78:4c:28:44:d7:31:37:4a:84:22:70:cb:e0:99:d1:ca: 59:6c:18:7b:31:b7:0d:a5:88:29:65:b6:58:51:61:45:3f:a2: f4:8f:27:a4:37:a6:a5:6f:11:96:7c:e4:2e:d9:3b:af:bf:69: 85:33:85:68:04:00:fb:db:e6:ee:87:bf:70:44:28:22:26:83: c1:86:1f:22:ff:f5:62:bd:c9:10:a3:0f:59:9d:b9:7c:75:b2: 3b:4d:f3:f9:2d:ad:8c:37:cc:b3:82:41:5d:cb:2f:39:d3:04: 09:a4:aa:0b:dc:22:01:04:b2:bc:f7:7c:e3:5a:08:40:ea:14: ea:6c:11:6e:e0:25:51:c0:28:21:64:0b:b9:34:11:89:fe:5d: f3:16:d9:35:58:92:3c:16:d3:bb:5d:73:29:ab:d7:4a:b2:09: fa:3d:da:5a:3d:09:4f:43:f8:85:b3:e6:fb:ef:03:df:b6:c4: 92:b7:5d:b8:ce:30:74:1a:ca:08:0e:a6:d4:93:56:39:5f:08: e4:66:66:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrfthdLfs3BnSFw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZDFmNGMyZmItMzFmMy00NWMxLWFiMWEtZGEwYjg3MmQ5ZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPogsskMPl3MDDTh2uVo3KmJfEBZ+OgeOOHG XUL4eD1kIODtsHINlhq0Xtn2kiXeh+ueyxP3D0+XHgYymZiEeCHXliLUY2tcDaDX ROBuvDmqitG2zYcCv49cW+IMKR7n0Av/c1pQOJ5oVwg7eN63DzIFjuA2MUV49Os+ xFdoByG8ZRPaYwY6SxBQ/JkIhmNGBR5NOzx4VqaZOTD53iz5+YRshIhSYOFeh7G7 7jesPIcXU5UJ8VGr0mkdlLHG9IOaJl6WDofkW6wcCZ2yT1Nal0wsafmY3ZNRtCiY UM9dhBV7DfzsCEr4xyJL/kUVzvrrdonr+VUKzax7CjqU3TbsqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLOWcIDHVKdLDpH8UX/TgB4vGp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDExNzdlZGUtOGIzNy0z NTQ2LThmN2QtYjU1Y2I3YWY0MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3PBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZKOZl3LIWU2Q2CPaHSSYM95Jc1gKUFSLWdXGJO1xgm/ULnQvWXoDTN 3gpJSFeqau87sBl9NgXHeEwoRNcxN0qEInDL4JnRyllsGHsxtw2liClltlhRYUU/ ovSPJ6Q3pqVvEZZ85C7ZO6+/aYUzhWgEAPvb5u6Hv3BEKCImg8GGHyL/9WK9yRCj D1mduXx1sjtN8/ktrYw3zLOCQV3LLznTBAmkqgvcIgEEsrz3fONaCEDqFOpsEW7g JVHAKCFkC7k0EYn+XfMW2TVYkjwW07tdcymr10qyCfo92lo9CU9D+IWz5vvvA9+2 xJK3XbjOMHQayggOptSTVjlfCORmZqk= -----END CERTIFICATE-----Generated at Sat Apr 12 04:55:01 2025 by rpki-client