$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa File: ba0578d9-926a-35fa-a460-8eae2d199b7f.roa (raw, json) Hash identifier: 4Lix8DvRG1V7xWNglRFiawav11YvijlRwbZRzoC4BZE= Subject key identifier: 34:8B:31:CD:FA:88:8D:B8:68:87:E7:AE:BB:EE:EB:CA:13:DA:5A:32 Certificate issuer: /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Certificate serial: 010D0C9F4328584919417E176625E810B81A8180 Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 53589 IP address blocks: 199.59.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:7e:17:66:25:e8:10:b8:1a:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=2077d921-61a9-4b29-81d3-8875f7ae90a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:10:78:63:e1:0f:55:fa:38:a2:ee:cf:f3: 6f:8a:ad:3f:17:06:ff:12:ff:08:bd:4a:ac:8a:18: a5:77:c7:10:92:bd:ea:ab:84:24:cc:96:dc:70:53: 6d:bd:2b:12:b2:25:66:20:72:fd:e3:8c:45:d5:25: 3f:25:f1:a3:aa:98:98:6d:e1:c9:f7:b2:fb:cf:78: fa:ba:f8:a1:35:ca:4f:4c:59:32:1c:3d:4d:73:96: f9:2e:5f:b3:65:d7:f0:3b:68:90:f1:2d:47:78:f3: 12:b6:f8:62:be:58:2d:28:0b:db:99:d9:45:a3:93: 81:e4:f0:74:f1:46:71:21:5b:f1:e3:d2:32:e7:39: f6:f2:d7:3f:99:28:49:67:0e:40:78:43:50:3c:19: 71:f1:45:50:ed:e5:bf:1e:b9:a0:e0:0f:c5:73:2f: 4e:e2:bf:89:42:54:08:49:12:6e:64:20:fc:8c:2f: 38:53:cc:d5:de:7c:7d:22:0f:32:a4:78:a2:56:0f: e7:ac:72:c6:9f:2f:66:2c:45:a0:fa:a0:d9:e1:a2: 39:7a:00:83:4a:69:a0:dc:91:ce:20:12:7b:b5:cb: 21:15:b1:6a:bd:36:c3:d1:3b:38:ba:a2:dd:c2:b0: 3e:ce:47:cb:a5:14:05:a2:07:0e:11:8a:4d:d7:b7: 19:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8B:31:CD:FA:88:8D:B8:68:87:E7:AE:BB:EE:EB:CA:13:DA:5A:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl X509v3 Authority Key Identifier: keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer sbgp-ipAddrBlock: critical IPv4: 199.59.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:38:53:38:77:73:7c:88:f2:0a:a7:b8:68:84:c8:70:b2:01: 37:a1:3e:7a:41:8b:3e:d1:d6:58:a8:0b:59:e4:7a:16:73:3d: 2b:49:5b:33:c9:5c:8e:9f:8f:f2:a0:32:1a:b1:34:85:f3:e5: 6e:33:b1:b7:b0:1d:3b:2a:a9:32:ad:33:33:2d:40:52:f9:91: a6:b3:77:14:20:c7:eb:9e:2e:1a:9c:de:3b:bd:0a:e6:f2:81: 3a:b7:e3:e6:0f:e7:e8:03:b6:05:1d:80:26:a3:d5:17:8d:81: 7d:14:2c:ca:00:f6:a9:01:f0:9a:a4:dd:48:bf:be:ea:41:a3: 91:d8:45:cd:e6:bc:c1:e3:23:49:c7:72:fe:fe:d2:95:d7:da: 16:d0:b9:91:f1:35:12:b6:76:23:7e:54:51:2f:0c:7f:a1:9c: b4:d5:b4:cf:55:06:ef:e8:04:9e:d7:eb:bb:f5:c7:f2:61:0b: 55:de:7a:a5:44:2d:38:d5:dd:7b:c2:d7:c4:9c:d4:f1:04:c0: 3a:40:e4:96:6b:66:71:c5:57:34:2b:d2:b4:96:cf:a2:d2:29: 48:c1:46:79:29:24:b5:21:fa:69:c4:ea:f2:32:f0:e6:ba:95: 01:61:e9:e8:02:e0:94:72:61:ad:d7:9d:cb:9e:b1:12:b1:4a: 74:66:3f:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQX4XZiXoELgagYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlNTFlODItN2NjNS00NTAwLWEwZmYtY2MzYTlkNWUz ZmI3MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk MjA3N2Q5MjEtNjFhOS00YjI5LTgxZDMtODg3NWY3YWU5MGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmIQeGPhD1X6OKLuz/Nviq0/Fwb/Ev8IvUqs ihild8cQkr3qq4QkzJbccFNtvSsSsiVmIHL944xF1SU/JfGjqpiYbeHJ97L7z3j6 uvihNcpPTFkyHD1Nc5b5Ll+zZdfwO2iQ8S1HePMStvhivlgtKAvbmdlFo5OB5PB0 8UZxIVvx49Iy5zn28tc/mShJZw5AeENQPBlx8UVQ7eW/Hrmg4A/Fcy9O4r+JQlQI SRJuZCD8jC84U8zV3nx9Ig8ypHiiVg/nrHLGny9mLEWg+qDZ4aI5egCDSmmg3JHO IBJ7tcshFbFqvTbD0Ts4uqLdwrA+zkfLpRQFogcOEYpN17cZzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSLMc36iI24aIfnrrvu68oT2loyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YmU1 MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNhOWQ1ZTNmYjcvYmEwNTc4ZDktOTI2YS0z NWZhLWE0NjAtOGVhZTJkMTk5YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGJlNTFlODItN2NjNS00NTAwLWEw ZmYtY2MzYTlkNWUzZmI3LzRiZTUxZTgyLTdjYzUtNDUwMC1hMGZmLWNjM2E5ZDVl M2ZiNy5jcmwwHwYDVR0jBBgwFoAU98hG8db+BGjqrEDnC0HKKPgl2lkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YmU1MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNh OWQ1ZTNmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxzv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM4Uzh3c3yI8gqnuGiEyHCyATehPnpBiz7R1lioC1nkehZzPStJWzPJ XI6fj/KgMhqxNIXz5W4zsbewHTsqqTKtMzMtQFL5kaazdxQgx+ueLhqc3ju9Cuby gTq34+YP5+gDtgUdgCaj1ReNgX0ULMoA9qkB8Jqk3Ui/vupBo5HYRc3mvMHjI0nH cv7+0pXX2hbQuZHxNRK2diN+VFEvDH+hnLTVtM9VBu/oBJ7X67v1x/JhC1XeeqVE LTjV3XvC18Sc1PEEwDpA5JZrZnHFVzQr0rSWz6LSKUjBRnkpJLUh+mnE6vIy8Oa6 lQFh6egC4JRyYa3XncuesRKxSnRmPys= -----END CERTIFICATE-----Generated at Fri Apr 4 19:05:45 2025 by rpki-client