$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d/30e83002-8a0a-3c06-a7ba-7c04ffcc068a.roa File: 30e83002-8a0a-3c06-a7ba-7c04ffcc068a.roa (raw, json) Hash identifier: yoK0SmylVSzBFoee3hudGzErTJSSoS4CRTXko3DCZlY= Subject key identifier: 3B:3D:7A:AE:75:AD:B6:6C:5F:4A:D9:BC:35:20:89:F9:37:C2:F6:FC Certificate issuer: /CN=a54174a7-95e9-428c-8a48-46da270ae20d Certificate serial: 010D0C9F43285849002158CC0813C0DD2560F480 Authority key identifier: 19:DD:95:69:3F:8E:59:9B:FE:33:1B:79:77:8E:01:3E:D1:32:24:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d/30e83002-8a0a-3c06-a7ba-7c04ffcc068a.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 399211 IP address blocks: 199.83.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d/a54174a7-95e9-428c-8a48-46da270ae20d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d/a54174a7-95e9-428c-8a48-46da270ae20d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:58:cc:08:13:c0:dd:25:60:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a54174a7-95e9-428c-8a48-46da270ae20d Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=a1754b29-7b56-4caf-aa63-1f8b283f4c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:44:e5:78:50:bf:d8:23:fe:d9:a5:96:b9: cf:a5:a4:1c:22:22:9c:e4:be:8f:87:4e:c7:26:09: c3:a4:85:6d:80:5b:a5:c3:84:24:96:dc:bf:25:29: 5c:bf:d5:9e:ea:eb:a4:85:bb:8b:1a:ed:b8:0c:8e: a4:54:00:0b:5b:af:25:f3:60:02:5e:1e:0d:a2:91: 0a:03:6a:bf:95:f7:aa:00:3c:4e:7a:30:fa:7d:6b: 39:85:6b:dc:81:f4:d1:81:78:c9:a3:1c:f6:58:75: ac:e8:24:97:de:f2:2e:ce:c0:9d:64:4a:b7:8c:6f: 76:fb:08:7d:dc:09:56:71:42:bf:c5:12:93:f7:72: 6d:21:43:2f:53:5f:97:3e:8a:aa:79:44:57:b2:6c: 36:86:37:44:33:31:3a:38:3c:28:76:9d:5b:02:19: 93:03:02:45:93:c3:00:46:a2:97:32:6b:a8:5a:be: 91:1c:b9:e2:2a:74:ba:d4:be:31:c2:0d:7f:c8:c3: ad:d8:b4:5b:2f:91:67:05:47:66:b4:3a:28:41:ce: 27:6e:0b:9c:22:61:ef:ba:22:e1:44:61:cf:ad:c7: df:63:2d:f7:cb:6e:62:2d:bf:f2:a6:76:12:d1:97: e5:ce:a7:4d:29:0a:1c:58:c5:d2:26:b0:d2:00:0b: a3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3D:7A:AE:75:AD:B6:6C:5F:4A:D9:BC:35:20:89:F9:37:C2:F6:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d/30e83002-8a0a-3c06-a7ba-7c04ffcc068a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d/a54174a7-95e9-428c-8a48-46da270ae20d.crl X509v3 Authority Key Identifier: keyid:19:DD:95:69:3F:8E:59:9B:FE:33:1B:79:77:8E:01:3E:D1:32:24:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d.cer sbgp-ipAddrBlock: critical IPv4: 199.83.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:36:65:be:a8:d9:4b:d3:41:52:95:61:11:0f:0d:f9:d2:17: 27:d0:da:65:03:17:f8:82:c1:4e:10:80:82:5c:56:65:8c:10: db:1c:34:a7:55:d2:10:a7:45:da:05:58:14:ce:f1:07:b2:c1: b3:2b:59:f4:59:1a:7c:0d:e5:47:9b:b2:18:f6:d9:67:95:4d: e4:87:6c:fc:50:99:e2:31:22:8c:9d:09:0f:1a:23:ca:00:e6: a0:68:4f:0d:e5:9a:90:cd:44:e0:47:ef:10:3c:7a:c7:db:5e: 6f:ca:29:ce:ea:60:50:83:03:60:ef:d5:e6:eb:95:27:c1:0a: f1:bb:75:88:a7:5d:e7:af:25:f6:65:d1:d1:eb:39:d2:2b:52: 2b:7f:cd:96:47:cc:a7:b3:cd:60:18:b1:f5:75:5c:52:4b:8c: e7:39:72:fe:90:48:92:e2:24:4b:71:4c:36:94:1f:cf:7b:b7: ad:24:94:f5:c1:53:1a:51:69:2c:ec:71:d9:3f:ab:24:73:f0: 9e:69:d5:af:48:1f:21:d6:9a:30:fa:f8:9b:1c:bd:ad:2a:2b: ae:e8:eb:47:0c:02:d9:92:fd:21:9a:13:ca:70:44:b9:9b:ef: d1:14:64:8a:65:a5:a7:09:a9:a0:00:7d:46:28:7f:43:47:8f: dc:b1:11:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVjMCBPA3SVg9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU0MTc0YTctOTVlOS00MjhjLThhNDgtNDZkYTI3MGFl MjBkMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk YTE3NTRiMjktN2I1Ni00Y2FmLWFhNjMtMWY4YjI4M2Y0YzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovBE5XhQv9gj/tmllrnPpaQcIiKc5L6Ph07H JgnDpIVtgFulw4Qklty/JSlcv9We6uukhbuLGu24DI6kVAALW68l82ACXh4NopEK A2q/lfeqADxOejD6fWs5hWvcgfTRgXjJoxz2WHWs6CSX3vIuzsCdZEq3jG92+wh9 3AlWcUK/xRKT93JtIUMvU1+XPoqqeURXsmw2hjdEMzE6ODwodp1bAhmTAwJFk8MA RqKXMmuoWr6RHLniKnS61L4xwg1/yMOt2LRbL5FnBUdmtDooQc4nbgucImHvuiLh RGHPrcffYy33y25iLb/ypnYS0ZflzqdNKQocWMXSJrDSAAuj4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDs9eq51rbZsX0rZvDUgifk3wvb8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNTQx NzRhNy05NWU5LTQyOGMtOGE0OC00NmRhMjcwYWUyMGQvMzBlODMwMDItOGEwYS0z YzA2LWE3YmEtN2MwNGZmY2MwNjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTU0MTc0YTctOTVlOS00MjhjLThh NDgtNDZkYTI3MGFlMjBkL2E1NDE3NGE3LTk1ZTktNDI4Yy04YTQ4LTQ2ZGEyNzBh ZTIwZC5jcmwwHwYDVR0jBBgwFoAUGd2VaT+OWZv+Mxt5d44BPtEyJC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNTQxNzRhNy05NWU5LTQyOGMtOGE0OC00NmRh MjcwYWUyMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1OoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc2Zb6o2UvTQVKVYREPDfnSFyfQ2mUDF/iCwU4QgIJcVmWMENscNKdV 0hCnRdoFWBTO8QeywbMrWfRZGnwN5Uebshj22WeVTeSHbPxQmeIxIoydCQ8aI8oA 5qBoTw3lmpDNROBH7xA8esfbXm/KKc7qYFCDA2Dv1ebrlSfBCvG7dYinXeevJfZl 0dHrOdIrUit/zZZHzKezzWAYsfV1XFJLjOc5cv6QSJLiJEtxTDaUH897t60klPXB UxpRaSzscdk/qyRz8J5p1a9IHyHWmjD6+Jscva0qK67o60cMAtmS/SGaE8pwRLmb 79EUZIplpacJqaAAfUYof0NHj9yxEa4= -----END CERTIFICATE-----Generated at Sat Apr 12 16:05:34 2025 by rpki-client