$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa File: ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa (raw, json) Hash identifier: LPAfE9trafM0mKWw7U3l2gSQZIlxrx0uxW5LZAQfabo= Subject key identifier: 23:BA:0B:53:6A:18:F8:17:2D:CA:61:F5:62:9C:C0:1C:94:8A:87:B0 Certificate issuer: /CN=7da3df33-ad97-4a08-81e8-054f28d035ed Certificate serial: 010D0C9F432858497279A59963B162F35B1FAF00 Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 13660 IP address blocks: 199.253.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:a5:99:63:b1:62:f3:5b:1f:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=cbdfb172-754d-43e0-8efe-19b86e31b0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cf:75:06:77:46:a5:8a:72:52:41:05:91:fe: 02:01:2a:23:eb:62:b4:02:83:3f:70:3a:42:b2:ef: ae:e0:9b:33:0d:db:9e:7b:dc:47:4a:b1:cf:7b:00: 90:fd:0f:60:10:6d:0d:cf:41:5b:67:28:ad:49:dd: e4:57:8a:72:29:38:8e:fa:c2:8b:38:d6:2f:e7:3b: 9c:d1:04:94:52:b9:cf:40:01:ac:a8:98:3c:f8:d3: e2:62:85:a4:a9:0b:4c:75:b5:90:a8:8b:c8:5a:dc: cd:9f:61:66:d5:d5:56:3c:ac:cf:f1:ed:03:be:f6: ff:f9:dc:14:68:e2:65:a1:5b:dd:c0:f9:b4:5a:5f: 21:d2:5f:c8:31:e3:5a:5b:c3:6c:84:f4:a1:79:80: 79:36:c6:6f:b6:c8:70:30:9a:78:49:b3:5d:66:86: dc:47:7b:2a:b5:e6:99:ce:51:7a:6d:0d:89:b2:41: 06:cd:bf:db:22:87:b3:ec:1c:27:c8:2a:e9:66:62: 99:07:a8:d5:cd:a0:ef:40:30:3f:6f:21:f9:74:29: 1a:06:79:bb:03:e9:22:94:68:16:11:8a:0a:69:97: 5a:f6:14:d8:b8:e4:4e:0d:ca:d7:c7:c0:8a:f8:be: 45:ac:2b:96:a0:06:6f:db:5c:7f:94:de:52:7c:55: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BA:0B:53:6A:18:F8:17:2D:CA:61:F5:62:9C:C0:1C:94:8A:87:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl X509v3 Authority Key Identifier: keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer sbgp-ipAddrBlock: critical IPv4: 199.253.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4c:ec:00:01:41:43:c7:19:ac:f4:63:a2:69:9d:b0:5c:87: 77:13:93:75:68:9d:bf:ee:63:07:00:e3:cb:f3:c7:0d:84:b5: 3b:e0:38:9d:9a:61:f4:b3:5a:3d:1e:ea:8c:eb:6f:02:42:bf: 9d:8b:24:09:6e:f2:51:06:8c:a1:f7:59:17:93:f1:1f:88:54: 13:e7:cc:5c:8a:fd:92:1d:4c:4f:09:9f:3c:58:ab:f1:d1:91: 48:fe:31:f7:d8:e8:6a:6e:5f:7f:61:74:40:bf:07:b8:16:06: 37:29:2c:f0:90:78:ad:0c:60:d0:2a:bb:46:8f:68:ba:09:76: a9:69:3c:02:62:45:1b:02:18:c3:49:2e:9f:15:56:f5:a3:e3: fe:cc:50:65:99:e1:e6:89:8d:bb:dc:83:cf:91:47:18:35:10: c3:72:5d:3e:5c:11:c6:fa:0f:53:07:6c:45:00:57:e3:b7:12: ba:b1:31:77:8d:40:42:54:46:1a:a2:39:12:0c:02:5b:5f:20: f1:58:66:d7:f4:10:41:de:f5:4c:7e:6c:da:a3:b8:6e:e7:9c: 4b:df:e8:5c:24:c2:99:d2:15:d3:74:26:ee:22:63:0d:c8:b1: 04:68:1b:03:af:51:b3:f9:fd:2f:cd:0f:7a:0e:e6:a5:a2:6f: 92:f5:30:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeaWZY7Fi81sfrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhM2RmMzMtYWQ5Ny00YTA4LTgxZTgtMDU0ZjI4ZDAz NWVkMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk Y2JkZmIxNzItNzU0ZC00M2UwLThlZmUtMTliODZlMzFiMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM91BndGpYpyUkEFkf4CASoj62K0AoM/cDpC su+u4JszDduee9xHSrHPewCQ/Q9gEG0Nz0FbZyitSd3kV4pyKTiO+sKLONYv5zuc 0QSUUrnPQAGsqJg8+NPiYoWkqQtMdbWQqIvIWtzNn2Fm1dVWPKzP8e0Dvvb/+dwU aOJloVvdwPm0Wl8h0l/IMeNaW8NshPSheYB5NsZvtshwMJp4SbNdZobcR3sqteaZ zlF6bQ2JskEGzb/bIoez7BwnyCrpZmKZB6jVzaDvQDA/byH5dCkaBnm7A+kilGgW EYoKaZda9hTYuORODcrXx8CK+L5FrCuWoAZv21x/lN5SfFV9RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCO6C1NqGPgXLcph9WKcwByUioewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEz ZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRmMjhkMDM1ZWQvY2UzNDBhZGEtZjVjNy0z NTZlLThmNmMtYzgxYTZjNzJjODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2RhM2RmMzMtYWQ5Ny00YTA4LTgx ZTgtMDU0ZjI4ZDAzNWVkLzdkYTNkZjMzLWFkOTctNGEwOC04MWU4LTA1NGYyOGQw MzVlZC5jcmwwHwYDVR0jBBgwFoAUm94pr6UJ6HVQdeBF8ykvsQ5kiF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEzZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRm MjhkMDM1ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBM7AABQUPHGaz0Y6JpnbBch3cTk3Vonb/uYwcA48vzxw2EtTvgOJ2a YfSzWj0e6ozrbwJCv52LJAlu8lEGjKH3WReT8R+IVBPnzFyK/ZIdTE8JnzxYq/HR kUj+MffY6GpuX39hdEC/B7gWBjcpLPCQeK0MYNAqu0aPaLoJdqlpPAJiRRsCGMNJ Lp8VVvWj4/7MUGWZ4eaJjbvcg8+RRxg1EMNyXT5cEcb6D1MHbEUAV+O3ErqxMXeN QEJURhqiORIMAltfIPFYZtf0EEHe9Ux+bNqjuG7nnEvf6FwkwpnSFdN0Ju4iYw3I sQRoGwOvUbP5/S/ND3oO5qWib5L1MCk= -----END CERTIFICATE-----Generated at Sun Apr 20 02:15:11 2025 by rpki-client