$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa File: 67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa (raw, json) Hash identifier: Pr195YkiGa6FqcSxOZ0rWjbfVZBf07I9cTvU5rHnDPg= Subject key identifier: B7:6F:A9:A3:08:C9:0F:03:BE:14:AB:EA:80:90:5D:83:1D:E1:80:93 Certificate issuer: /CN=c743b329-2385-4bb0-899d-c1639569faa3 Certificate serial: 010D0C9F432858490021568BC0CD480B843CF0C0 Authority key identifier: 9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 399199 IP address blocks: 172.99.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:56:8b:c0:cd:48:0b:84:3c:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c743b329-2385-4bb0-899d-c1639569faa3 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=a3853435-ecb9-44c9-8108-1a5fc094160b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:00:cf:c5:a5:d0:d0:81:7e:cc:32:36:2d:d0: 12:d6:bc:77:be:62:64:78:50:97:28:89:82:13:25: 0f:ed:9c:01:d8:d0:20:05:4f:28:10:8b:a8:cd:b7: 62:6e:9b:29:34:ef:44:05:0b:1c:0b:00:b6:3e:28: cc:22:71:80:4a:58:3b:39:65:31:78:28:3e:9d:f0: 24:67:78:6c:e4:c4:1d:d5:32:d9:57:be:af:f6:9c: 4c:e7:70:80:9d:4e:cb:9b:93:00:a6:77:2c:e8:1d: b1:13:55:ff:de:b9:1d:fb:f5:6c:8e:5a:2c:27:24: e3:6b:c7:03:57:69:1b:cc:a8:ea:b3:0f:18:d6:36: 37:86:39:48:b7:53:df:1a:73:d5:22:6d:43:4f:d8: 68:2c:3b:86:bb:a7:e8:a2:66:01:ac:7e:77:5c:8d: ab:41:42:a6:c1:e7:1c:23:56:c7:99:33:6f:32:0e: 5c:a4:0b:4c:6b:f8:32:1e:e9:0d:8f:cc:d8:cc:37: 8b:af:32:0e:2a:21:8c:f3:c1:ca:9b:bd:26:db:0d: 55:70:98:e4:3a:5b:fb:a4:ec:a6:ab:50:01:13:39: c9:ce:d4:59:de:c7:1c:ce:38:24:23:bc:3e:42:05: 5c:06:50:79:b7:72:7d:6c:c1:97:18:23:4f:fc:91: fc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6F:A9:A3:08:C9:0F:03:BE:14:AB:EA:80:90:5D:83:1D:E1:80:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.crl X509v3 Authority Key Identifier: keyid:9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer sbgp-ipAddrBlock: critical IPv4: 172.99.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a9:31:80:84:01:28:07:9c:f4:29:20:dd:11:a0:ff:6a:0f: b8:13:9c:74:6d:85:d3:48:8e:02:9f:49:10:27:b3:6d:45:c6: 33:18:12:81:20:81:9b:ac:3e:2b:1d:c7:32:de:23:31:06:00: df:5d:f8:2c:ba:f6:2b:d7:62:84:2f:6c:fc:69:90:43:cf:ef: 33:6c:29:48:b0:2b:df:a6:1c:9e:bb:b6:35:42:44:9a:14:41: 84:a7:3e:1a:85:7b:7a:b0:43:6d:08:40:85:8d:3c:e2:cf:2f: 11:66:bb:ee:09:60:4e:12:4d:c3:63:75:1b:16:df:0e:aa:56: 68:cb:6f:53:f7:42:64:8d:b3:24:b7:46:20:57:35:1e:a5:87: 72:1f:de:04:49:c8:bf:12:fe:3e:b4:59:a2:20:d9:7a:cd:76: ad:d0:5a:ec:54:30:fb:78:1c:26:8b:4d:cc:1d:6e:57:0a:89: 18:4a:ed:d3:8c:96:25:fb:e4:94:6f:1d:ef:ba:a0:5b:f6:43: 7e:e4:12:4a:48:75:0f:40:ed:e2:cb:1f:01:c5:11:dc:10:15: 8c:ce:8d:1d:37:85:71:9a:a0:06:98:f8:9e:d0:66:c0:96:2d: 95:84:41:b7:15:9f:d6:87:88:7b:52:5e:12:97:fa:28:b4:5d: 4d:94:07:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVaLwM1IC4Q88MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc0M2IzMjktMjM4NS00YmIwLTg5OWQtYzE2Mzk1Njlm YWEzMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk YTM4NTM0MzUtZWNiOS00NGM5LTgxMDgtMWE1ZmMwOTQxNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowDPxaXQ0IF+zDI2LdAS1rx3vmJkeFCXKImC EyUP7ZwB2NAgBU8oEIuozbdibpspNO9EBQscCwC2PijMInGASlg7OWUxeCg+nfAk Z3hs5MQd1TLZV76v9pxM53CAnU7Lm5MApncs6B2xE1X/3rkd+/VsjlosJyTja8cD V2kbzKjqsw8Y1jY3hjlIt1PfGnPVIm1DT9hoLDuGu6foomYBrH53XI2rQUKmwecc I1bHmTNvMg5cpAtMa/gyHukNj8zYzDeLrzIOKiGM88HKm70m2w1VcJjkOlv7pOym q1ABEznJztRZ3scczjgkI7w+QgVcBlB5t3J9bMGXGCNP/JH8gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdvqaMIyQ8DvhSr6oCQXYMd4YCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNzQz YjMyOS0yMzg1LTRiYjAtODk5ZC1jMTYzOTU2OWZhYTMvNjdjODExYzQtYzJhYy0z MDQ4LTkxYTAtZTMzZGM5ZjQwNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzc0M2IzMjktMjM4NS00YmIwLTg5 OWQtYzE2Mzk1NjlmYWEzL2M3NDNiMzI5LTIzODUtNGJiMC04OTlkLWMxNjM5NTY5 ZmFhMy5jcmwwHwYDVR0jBBgwFoAUm9dfZrc8gIlJsko2W1fSWA/4OgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNzQzYjMyOS0yMzg1LTRiYjAtODk5ZC1jMTYz OTU2OWZhYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6pMYCEASgHnPQpIN0RoP9qD7gTnHRthdNIjgKfSRAns21FxjMYEoEg gZusPisdxzLeIzEGAN9d+Cy69ivXYoQvbPxpkEPP7zNsKUiwK9+mHJ67tjVCRJoU QYSnPhqFe3qwQ20IQIWNPOLPLxFmu+4JYE4STcNjdRsW3w6qVmjLb1P3QmSNsyS3 RiBXNR6lh3If3gRJyL8S/j60WaIg2XrNdq3QWuxUMPt4HCaLTcwdblcKiRhK7dOM liX75JRvHe+6oFv2Q37kEkpIdQ9A7eLLHwHFEdwQFYzOjR03hXGaoAaY+J7QZsCW LZWEQbcVn9aHiHtSXhKX+ii0XU2UB/g= -----END CERTIFICATE-----Generated at Fri Mar 14 08:35:47 2025 by rpki-client