$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa File: b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa (raw, json) Hash identifier: weXlvGu4NAnFYwNn0sL7CKcETtq/8Ogsu1DnFijUzmc= Subject key identifier: 4E:B1:1A:76:9E:CF:7C:0C:8A:DD:5D:44:AB:9B:33:1C:41:4E:FF:9A Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F4328584919418D9A476E94B4D06D1630 Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 32435 IP address blocks: 199.189.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:8d:9a:47:6e:94:b4:d0:6d:16:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=e38990fd-1d99-439f-8a30-f26098718e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:15:e5:6c:dd:0b:91:0d:a1:35:df:45:04: ae:0a:2f:c8:17:c1:29:6a:c2:63:81:ea:9b:24:ef: d6:0e:3c:66:2f:0e:c5:55:68:15:a0:75:5a:a1:21: da:ea:13:99:80:c7:1a:42:ee:4e:b0:69:5f:e3:3f: 36:41:af:47:1c:b3:64:8d:ae:86:13:cd:7f:74:29: d8:24:1b:df:b0:0d:d1:74:c9:50:c2:e5:ff:d4:89: 59:ea:74:94:14:aa:f0:32:cf:10:a4:ad:f7:62:58: 45:f8:09:78:9e:c5:47:98:ab:7d:78:9a:a2:81:37: 4a:83:2d:ea:94:ca:3d:38:27:9e:bd:d0:b3:72:a4: 42:31:34:78:95:22:19:fa:61:23:07:52:93:ec:69: e2:66:c0:64:b3:f9:65:2a:b7:e4:a8:b8:40:e6:75: 4e:a4:1b:c9:79:3e:8f:58:d5:9a:06:3a:13:c5:e2: 18:67:24:4e:2d:58:b8:2f:b5:5b:9c:70:10:a9:fd: 59:f3:29:89:cb:63:19:58:b9:04:d1:65:8f:91:4e: dc:f5:54:3b:14:9c:da:ee:4d:c5:ec:cc:1a:07:cd: 1e:25:4e:cd:87:f3:ea:19:2f:24:a8:56:d8:6c:fa: 70:c5:9d:a5:35:59:a4:9c:92:0f:22:ea:4f:d6:5c: 65:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B1:1A:76:9E:CF:7C:0C:8A:DD:5D:44:AB:9B:33:1C:41:4E:FF:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: 199.189.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:08:24:af:89:8e:7d:26:e1:26:67:83:59:ec:73:d5:8d:9f: 61:b8:d7:49:fb:a1:82:45:ba:25:2a:75:b1:91:d3:07:ab:34: 94:2a:b0:70:1b:a1:a6:c3:40:a4:29:76:39:7c:15:81:35:9d: 8e:ed:fa:37:bb:02:4f:88:61:3a:2a:a9:3a:8a:7a:00:cc:f0: 61:82:d9:f9:ac:10:24:69:4e:48:aa:f6:2b:cc:64:de:5a:64: 2e:eb:25:5f:d6:b8:27:a1:84:bb:8d:ee:0b:69:0e:08:6e:e1: 5a:98:45:e3:dc:cc:49:20:26:a4:11:ad:6a:26:d6:47:50:12: 98:fd:e2:f6:41:cc:7d:b9:c9:09:1d:9a:db:f0:ea:6e:9d:49: 96:0e:61:f4:13:76:1e:72:92:c9:0a:b9:b4:15:a6:2f:53:6a: 56:d7:11:69:99:e3:f4:51:5d:63:e2:fc:4a:02:47:08:03:7e: 68:7d:e2:8a:7f:38:55:f1:6a:3a:32:34:5c:91:3a:f3:12:50: a2:43:24:66:2e:5d:b7:30:4a:00:91:c7:7f:d1:3a:03:f0:f6: 79:35:66:3f:24:f8:0d:d3:4e:74:cf:15:21:3f:49:f0:4b:53: 4c:5c:da:ae:4d:24:36:07:4a:84:4d:10:27:36:fe:01:3e:9b: 70:d5:8e:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQY2aR26UtNBtFjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZTM4OTkwZmQtMWQ5OS00MzlmLThhMzAtZjI2MDk4NzE4ZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHoV5WzdC5ENoTXfRQSuCi/IF8EpasJjgeqb JO/WDjxmLw7FVWgVoHVaoSHa6hOZgMcaQu5OsGlf4z82Qa9HHLNkja6GE81/dCnY JBvfsA3RdMlQwuX/1IlZ6nSUFKrwMs8QpK33YlhF+Al4nsVHmKt9eJqigTdKgy3q lMo9OCeevdCzcqRCMTR4lSIZ+mEjB1KT7GniZsBks/llKrfkqLhA5nVOpBvJeT6P WNWaBjoTxeIYZyROLVi4L7VbnHAQqf1Z8ymJy2MZWLkE0WWPkU7c9VQ7FJza7k3F 7MwaB80eJU7Nh/PqGS8kqFbYbPpwxZ2lNVmknJIPIupP1lxlxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6xGnaez3wMit1dRKubMxxBTv+aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvYjdjZmM5NGUtMzg2OC0z YzZkLWFjMDktNWJjZDEyZjBjZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx73LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgIJK+Jjn0m4SZng1nsc9WNn2G410n7oYJFuiUqdbGR0werNJQqsHAb oabDQKQpdjl8FYE1nY7t+je7Ak+IYToqqTqKegDM8GGC2fmsECRpTkiq9ivMZN5a ZC7rJV/WuCehhLuN7gtpDghu4VqYRePczEkgJqQRrWom1kdQEpj94vZBzH25yQkd mtvw6m6dSZYOYfQTdh5ykskKubQVpi9TalbXEWmZ4/RRXWPi/EoCRwgDfmh94op/ OFXxajoyNFyROvMSUKJDJGYuXbcwSgCRx3/ROgPw9nk1Zj8k+A3TTnTPFSE/SfBL U0xc2q5NJDYHSoRNECc2/gE+m3DVjg8= -----END CERTIFICATE-----Generated at Fri Mar 14 13:42:42 2025 by rpki-client