$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/4116e98b-72e2-3f3b-9506-948edabc5cb7.roa File: 4116e98b-72e2-3f3b-9506-948edabc5cb7.roa (raw, json) Hash identifier: 8XA65k+zHjk5Xp9yjkYJ6Lxl734H3uFv8hBHfCHYNJc= Subject key identifier: 28:34:EF:98:8B:55:10:BD:1B:31:5E:5B:B9:A2:EF:E0:88:31:0B:67 Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Certificate serial: 010D0C9F432858493ED3CC4FE92DD53EDCC14380 Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/4116e98b-72e2-3f3b-9506-948edabc5cb7.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 393225 IP address blocks: 199.212.0.0/24 maxlen: 24 2001:500:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:cc:4f:e9:2d:d5:3e:dc:c1:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=52d65aa1-09a8-437b-bb94-5187388bd0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1f:a7:4f:2e:14:54:1d:96:76:cb:cf:d0:ee: d6:14:47:bf:fe:db:7d:25:b4:20:41:eb:fa:bb:42: 49:32:4d:fe:19:f8:37:2a:c7:1b:77:7a:6c:19:6e: fa:73:1b:2b:d4:86:cb:c5:c2:66:a9:9e:d8:f6:02: 64:dd:5b:0e:13:c0:36:8d:d9:fa:a0:29:ad:a9:b3: 46:1b:e8:6e:90:f5:05:ba:17:67:52:d0:1c:e4:36: 8e:3a:06:6d:5f:54:52:95:cc:df:eb:50:7d:6a:68: 39:32:92:f7:80:64:d5:47:33:38:10:de:a5:df:59: a5:14:43:61:9b:ec:1c:7e:f8:13:99:63:f7:ba:8f: 04:6a:a4:44:30:23:16:40:04:29:34:e4:dd:76:36: 75:0c:ee:df:3b:b2:3f:b3:1c:3f:f2:e4:77:9c:a0: 93:f9:3c:4a:ce:62:ea:da:80:3a:ad:63:6f:6f:32: fa:0e:1f:ea:65:34:da:2c:05:cc:c0:47:06:9c:e1: a5:6b:b4:f4:0a:8b:0f:8b:fd:d6:87:ee:64:76:6b: be:a6:37:64:d6:d3:31:13:39:17:ca:32:bf:4a:0f: fe:2d:e2:cf:70:3e:a9:0d:b0:6a:61:13:3a:05:ab: c6:60:7d:1a:1b:5d:3f:c3:d2:f4:7a:0e:20:78:e8: 1e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:34:EF:98:8B:55:10:BD:1B:31:5E:5B:B9:A2:EF:E0:88:31:0B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/4116e98b-72e2-3f3b-9506-948edabc5cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl X509v3 Authority Key Identifier: keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer sbgp-ipAddrBlock: critical IPv4: 199.212.0.0/24 IPv6: 2001:500:13::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:1d:ae:54:d6:0e:cc:a8:e1:57:f8:ef:20:06:47:12:1e:e1: f0:48:f6:4e:cc:d2:5f:1d:03:16:ec:2e:ba:37:d8:89:ff:da: 74:d3:06:a9:31:74:a0:42:9c:68:1f:63:62:2d:c4:ff:4c:ff: a8:a2:9c:73:ad:70:db:8d:9e:3f:41:4b:01:ee:14:01:92:83: e7:00:13:e3:cb:af:ce:db:26:6d:92:1b:5f:59:29:95:06:fc: cb:76:ae:ad:f2:f2:ad:9a:9a:8a:f8:94:12:3f:af:7c:ee:9a: c0:89:12:b5:77:28:e6:a4:e2:7b:c1:8a:b9:1b:45:f9:74:cf: 13:d4:bd:03:bf:8d:1c:f5:69:ef:c4:df:77:f0:3f:93:a3:09: 07:2b:f4:da:76:e3:85:6f:4f:66:fb:8d:0f:6a:64:cf:41:8c: e4:fb:db:3a:dc:53:89:66:92:bc:f8:71:4d:fb:80:d7:0f:b6: 15:2f:a7:5f:b2:fe:1c:b9:04:38:a9:a8:67:8c:0a:e9:fd:63: 2e:65:ea:bc:d5:68:07:3b:8a:10:5e:cf:c7:33:62:9b:61:57: 2a:8c:0f:a8:5b:55:4e:5d:dc:2b:86:e6:b8:ab:33:b3:10:66: b0:62:ad:e7:e6:fa:50:5d:0c:fa:43:6e:f2:e3:e7:f8:52:05: ae:63:08:d2 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEk+08xP6S3VPtzBQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2 ZDNlMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk NTJkNjVhYTEtMDlhOC00MzdiLWJiOTQtNTE4NzM4OGJkMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB+nTy4UVB2WdsvP0O7WFEe//tt9JbQgQev6 u0JJMk3+Gfg3Kscbd3psGW76cxsr1IbLxcJmqZ7Y9gJk3VsOE8A2jdn6oCmtqbNG G+hukPUFuhdnUtAc5DaOOgZtX1RSlczf61B9amg5MpL3gGTVRzM4EN6l31mlFENh m+wcfvgTmWP3uo8EaqREMCMWQAQpNOTddjZ1DO7fO7I/sxw/8uR3nKCT+TxKzmLq 2oA6rWNvbzL6Dh/qZTTaLAXMwEcGnOGla7T0CosPi/3Wh+5kdmu+pjdk1tMxEzkX yjK/Sg/+LeLPcD6pDbBqYRM6BavGYH0aG10/w9L0eg4geOgeqwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCg075iLVRC9GzFeW7mi7+CIMQtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1 NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvNDExNmU5OGItNzJlMi0z ZjNiLTk1MDYtOTQ4ZWRhYmM1Y2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5 NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm YjgzOTZkM2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAx9QAMA8E AgACMAkDBwAgAQUAABMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIR2uVNYOzKjhV/jvIAZHEh7h8Ej2TszS Xx0DFuwuujfYif/adNMGqTF0oEKcaB9jYi3E/0z/qKKcc61w242eP0FLAe4UAZKD 5wAT48uvztsmbZIbX1kplQb8y3aurfLyrZqaiviUEj+vfO6awIkStXco5qTie8GK uRtF+XTPE9S9A7+NHPVp78Tfd/A/k6MJByv02nbjhW9PZvuND2pkz0GM5PvbOtxT iWaSvPhxTfuA1w+2FS+nX7L+HLkEOKmoZ4wK6f1jLmXqvNVoBzuKEF7PxzNim2FX KowPqFtVTl3cK4bmuKszsxBmsGKt5+b6UF0M+kNu8uPn+FIFrmMI0g== -----END CERTIFICATE-----Generated at Fri Apr 11 23:13:20 2025 by rpki-client