$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa File: 5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa (raw, json) Hash identifier: yI27H7EqdaTxw6H85aGFa2z3sIeny52FM/lZbFFCzCI= Subject key identifier: 0B:CE:AA:8A:5F:9B:1C:25:33:D0:69:A8:CD:9A:2F:B6:77:50:56:6E Certificate issuer: /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Certificate serial: 010D0C9F432858492E13BD6C18BCE182695A5BC0 Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 399409 IP address blocks: 198.203.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:bd:6c:18:bc:e1:82:69:5a:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=aeffb3ef-dd99-496a-96c7-36bd1e693f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:53:16:80:f1:92:47:f2:b3:da:86:98:0a:93: 23:fa:eb:1c:b2:5d:02:84:82:8b:1f:89:c9:df:b2: d4:26:be:3b:1a:25:cf:bc:c7:31:8f:c6:97:1f:14: 3e:9a:fe:60:a1:a6:b4:ae:dc:1a:02:46:9a:24:43: bd:4b:35:ad:43:88:fe:67:e0:dc:90:ed:78:0f:ed: 9e:a0:ec:ec:15:a7:9d:d0:f9:cc:74:d7:9b:b7:02: d6:d6:78:cc:61:ac:87:14:77:c9:49:11:e3:4a:ac: ac:74:c4:b8:cc:1f:01:75:79:90:b1:34:81:60:37: d3:04:c2:26:9e:00:a8:e0:11:e0:50:48:89:e6:3a: 41:62:8c:fe:28:2d:59:b3:8c:cc:ce:9b:07:64:a2: ec:a5:4a:d1:3b:08:6c:70:81:ba:3e:c0:bd:95:63: 2d:50:ac:69:df:08:ae:c3:7d:00:dc:06:cd:2d:de: 33:77:e7:41:a1:a8:67:4e:e9:0b:21:8e:99:c5:29: 4f:26:3e:35:97:a1:51:a1:f6:eb:72:c1:2c:59:e7: e5:6f:d9:f4:2f:a3:7d:06:34:7e:cf:43:22:21:61: aa:b8:13:c3:fb:42:92:a6:72:e4:fc:11:c6:71:f5: ea:4a:a4:44:e9:9d:b1:79:23:2d:3a:93:a9:aa:24: f1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CE:AA:8A:5F:9B:1C:25:33:D0:69:A8:CD:9A:2F:B6:77:50:56:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl X509v3 Authority Key Identifier: keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer sbgp-ipAddrBlock: critical IPv4: 198.203.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:54:9a:33:af:bd:91:26:41:78:94:da:f2:88:46:60:c8:7c: c3:9c:46:db:01:67:af:ae:06:7a:ba:d0:01:92:a5:db:93:88: fa:02:4f:75:af:1b:93:8f:e9:b0:9b:62:d9:82:a6:af:63:55: f9:67:17:5b:75:f4:2f:1e:dd:57:22:d7:39:0d:4b:81:81:c9: 50:81:80:8b:19:00:b3:c4:2e:e6:e3:c7:e8:f9:78:17:09:64: 5b:24:8c:f0:50:f5:9b:07:97:a2:ed:6a:b7:06:38:47:ed:4e: b3:2f:14:41:12:05:ee:42:62:16:5b:82:72:40:76:a4:0e:32: cb:60:af:a4:97:82:a0:d0:1e:4c:2c:b0:22:ae:39:9f:d2:d4: 3b:0e:c7:0a:d8:ce:87:57:43:ba:14:e3:0a:fe:5a:ee:b0:fa: 89:54:ac:f4:39:3d:8d:8f:8b:88:78:5f:cb:63:cf:4e:bc:d9: 35:9e:19:3c:b2:c3:5b:1f:05:34:79:8f:7c:ee:4a:85:dd:3a: d6:1a:f3:ed:8f:e0:a1:86:cd:07:bd:1a:c4:35:1e:9b:e1:a8: 3f:78:ad:f2:b2:a4:14:20:60:4b:36:70:02:3b:a8:74:ae:9b: 3f:97:d6:46:90:e5:77:90:9b:1a:88:b1:ea:75:de:98:55:0a: 14:7c:05:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE71sGLzhgmlaW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5ZmJjYmEtNDEyYS00ZTRjLTg4NTYtZDg5M2QyM2Jk ZDdiMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk YWVmZmIzZWYtZGQ5OS00OTZhLTk2YzctMzZiZDFlNjkzZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1MWgPGSR/Kz2oaYCpMj+uscsl0ChIKLH4nJ 37LUJr47GiXPvMcxj8aXHxQ+mv5goaa0rtwaAkaaJEO9SzWtQ4j+Z+DckO14D+2e oOzsFaed0PnMdNebtwLW1njMYayHFHfJSRHjSqysdMS4zB8BdXmQsTSBYDfTBMIm ngCo4BHgUEiJ5jpBYoz+KC1Zs4zMzpsHZKLspUrROwhscIG6PsC9lWMtUKxp3wiu w30A3AbNLd4zd+dBoahnTukLIY6ZxSlPJj41l6FRofbrcsEsWeflb9n0L6N9BjR+ z0MiIWGquBPD+0KSpnLk/BHGcfXqSqRE6Z2xeSMtOpOpqiTxAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvOqopfmxwlM9BpqM2aL7Z3UFZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlm YmNiYS00MTJhLTRlNGMtODg1Ni1kODkzZDIzYmRkN2IvNTg2MWZjOGEtMmE3Ni0z NDdlLWFlYWEtZTlmOGQ4ZmQ4YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzk5ZmJjYmEtNDEyYS00ZTRjLTg4 NTYtZDg5M2QyM2JkZDdiLzM5OWZiY2JhLTQxMmEtNGU0Yy04ODU2LWQ4OTNkMjNi ZGQ3Yi5jcmwwHwYDVR0jBBgwFoAUVz4KYNYW+YnJpeiTWBr5Aj0g5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlmYmNiYS00MTJhLTRlNGMtODg1Ni1kODkz ZDIzYmRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsvrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxUmjOvvZEmQXiU2vKIRmDIfMOcRtsBZ6+uBnq60AGSpduTiPoCT3Wv G5OP6bCbYtmCpq9jVflnF1t19C8e3Vci1zkNS4GByVCBgIsZALPELubjx+j5eBcJ ZFskjPBQ9ZsHl6LtarcGOEftTrMvFEESBe5CYhZbgnJAdqQOMstgr6SXgqDQHkws sCKuOZ/S1DsOxwrYzodXQ7oU4wr+Wu6w+olUrPQ5PY2Pi4h4X8tjz0682TWeGTyy w1sfBTR5j3zuSoXdOtYa8+2P4KGGzQe9GsQ1HpvhqD94rfKypBQgYEs2cAI7qHSu mz+X1kaQ5XeQmxqIsep13phVChR8BV4= -----END CERTIFICATE-----Generated at Fri Apr 11 22:58:27 2025 by rpki-client