$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa File: e5028175-5311-307b-b633-50ccd9ee601e.roa (raw, json) Hash identifier: TCLLKU8417dKLR46QIrT1Ds7qrpdreJCxPCgr0Pc9VY= Subject key identifier: 75:DC:A5:C3:47:2A:7F:FE:88:D1:01:D9:B1:57:60:88:3D:57:57:04 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584902EC11BF63DB484FBE701800 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 16696 IP address blocks: 199.249.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:11:bf:63:db:48:4f:be:70:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=5c689810-6c5b-4ea1-a7a4-3111f2f4dc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:21:a4:e5:35:5d:4e:6f:a3:cc:19:16:83: e6:6e:4e:1b:37:f7:0d:b7:4c:f6:1e:b6:a1:2c:0e: 95:53:9d:2c:0a:90:f4:98:9a:49:8a:04:d0:f5:fb: 25:ef:bf:9d:b0:1e:86:f5:c2:22:45:27:97:60:4d: 04:07:3e:77:7c:b5:07:3c:28:40:5d:86:1a:1c:88: 22:26:54:2c:44:bf:fe:e9:10:49:a6:cb:8e:bc:aa: 65:45:d6:27:cf:ab:00:5f:b6:01:93:c3:f2:e2:c8: 8e:40:d6:15:18:4e:9f:96:b2:6a:1b:7c:27:88:7b: c8:20:42:70:d5:81:89:79:35:bd:dd:7d:bc:3b:e7: ed:7f:1e:d2:16:b7:b8:8d:de:fe:ba:11:6e:d3:bb: aa:11:07:0e:23:08:89:ee:f2:06:22:27:ad:79:be: 2c:0e:d1:09:99:a1:d2:bc:1e:ae:5e:f1:91:ec:91: c1:fb:6a:dd:aa:ba:85:c3:b1:f9:b5:1b:90:ef:4d: 91:5a:d1:f3:23:5e:ec:ef:a5:07:38:b5:2a:78:7f: 2a:b8:30:73:ae:a9:bd:11:d2:32:fd:88:6b:91:6e: 4a:d5:a0:b6:34:0b:80:e7:a7:48:79:e4:9e:61:0b: d6:97:a9:c7:df:ff:3e:0c:f4:46:dd:25:3d:6c:da: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DC:A5:C3:47:2A:7F:FE:88:D1:01:D9:B1:57:60:88:3D:57:57:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 199.249.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ef:8f:d0:82:a7:16:35:c9:8e:41:24:6a:32:2e:bf:e9:c7: fb:2d:05:e3:33:0e:d8:32:dd:95:e6:cd:8e:2a:df:01:3f:5c: 8f:8c:aa:ee:46:62:e2:9d:0d:75:34:ea:77:aa:89:63:01:c2: 4e:d4:64:14:14:b6:ed:53:12:67:e2:80:02:84:5e:6c:8a:3b: 6a:4f:4c:6b:a1:e4:94:a0:4e:a6:5c:68:a6:b8:5d:e9:34:93: 21:b6:cb:fc:16:c7:d7:f0:df:94:c7:61:17:a0:a4:0c:3f:85: 60:56:de:6c:fd:e2:61:7a:24:8f:42:76:d7:65:4c:ba:4f:eb: 49:e1:0c:f7:31:bb:34:59:a1:43:f5:29:ce:70:36:ac:2c:5e: 69:df:da:75:99:ea:b1:7a:5e:eb:b4:4d:75:f3:36:68:4b:ba: 63:79:ac:5d:8b:38:b5:6e:c4:5c:ab:77:63:0f:b9:95:8e:99: 55:a5:2b:e3:55:1b:f3:b7:16:13:83:d3:c8:41:33:38:b0:b8: 8d:8e:b0:ec:b2:68:c8:f1:18:1c:12:35:86:c1:c1:db:89:ff: 62:0b:4c:87:4c:66:4c:98:d1:a9:6b:bf:52:12:8d:83:11:6b: 25:f7:41:34:9f:e5:11:93:24:6b:d0:31:ad:c3:0d:a6:9c:7b: 9a:7f:6c:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BG/Y9tIT75wGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NWM2ODk4MTAtNmM1Yi00ZWExLWE3YTQtMzExMWYyZjRkYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrchpOU1XU5vo8wZFoPmbk4bN/cNt0z2Hrah LA6VU50sCpD0mJpJigTQ9fsl77+dsB6G9cIiRSeXYE0EBz53fLUHPChAXYYaHIgi JlQsRL/+6RBJpsuOvKplRdYnz6sAX7YBk8Py4siOQNYVGE6flrJqG3wniHvIIEJw 1YGJeTW93X28O+ftfx7SFre4jd7+uhFu07uqEQcOIwiJ7vIGIieteb4sDtEJmaHS vB6uXvGR7JHB+2rdqrqFw7H5tRuQ702RWtHzI17s76UHOLUqeH8quDBzrqm9EdIy /YhrkW5K1aC2NAuA56dIeeSeYQvWl6nH3/8+DPRG3SU9bNqTYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXcpcNHKn/+iNEB2bFXYIg9V1cEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZTUwMjgxNzUtNTMxMS0z MDdiLWI2MzMtNTBjY2Q5ZWU2MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXvj9CCpxY1yY5BJGoyLr/px/stBeMzDtgy3ZXmzY4q3wE/XI+Mqu5G YuKdDXU06neqiWMBwk7UZBQUtu1TEmfigAKEXmyKO2pPTGuh5JSgTqZcaKa4Xek0 kyG2y/wWx9fw35THYRegpAw/hWBW3mz94mF6JI9CdtdlTLpP60nhDPcxuzRZoUP1 Kc5wNqwsXmnf2nWZ6rF6Xuu0TXXzNmhLumN5rF2LOLVuxFyrd2MPuZWOmVWlK+NV G/O3FhOD08hBMziwuI2OsOyyaMjxGBwSNYbBwduJ/2ILTIdMZkyY0alrv1ISjYMR ayX3QTSf5RGTJGvQMa3DDaace5p/bFA= -----END CERTIFICATE-----Generated at Sat Apr 5 07:31:35 2025 by rpki-client