$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa File: d99b025b-4b90-3aed-8469-1094c7405548.roa (raw, json) Hash identifier: g3FCbvn5pAcSmrfAyxMN5lxP/ZNgBfVGy50frDgKmhc= Subject key identifier: DC:DA:73:0C:D3:DF:F5:E8:AF:A5:86:0A:B9:5E:5B:52:B6:24:5C:FB Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584929E3D0ADEB755DEAB4098700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 9009 IP address blocks: 192.253.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:d0:ad:eb:75:5d:ea:b4:09:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=f6fce866-679a-47a1-a0fc-ea391268cbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:95:e1:03:5c:f6:58:8c:7c:e1:22:a8:9d: e7:e1:76:80:6c:da:e1:3e:9d:91:b7:40:0c:d8:42: e1:f3:0f:09:60:d3:b2:d7:7b:bf:86:83:72:72:67: 67:62:a2:b7:f7:6d:73:dc:79:05:2b:a7:0a:36:92: de:07:7b:75:da:56:af:2e:3b:e1:87:2b:d7:64:20: 0b:ee:f5:61:e5:0f:bd:5f:fa:81:62:07:be:9b:6f: 87:63:46:21:08:34:3c:54:d9:7c:8d:bd:cf:97:90: 81:0a:1e:20:ae:7e:14:0f:ac:3c:63:ed:23:6f:4e: 47:ec:a8:49:fb:a5:a7:8b:43:34:3f:bc:45:58:ea: 3e:36:db:c4:6b:88:4a:22:c8:4a:6f:ea:d6:67:b6: 36:6d:4f:be:7b:ed:84:fc:b9:f7:84:0c:27:72:81: 4f:74:c1:00:73:ed:0a:aa:da:49:fa:47:5a:e4:63: c5:9f:2d:e5:11:0b:c7:9d:b4:10:f0:e7:cf:c1:37: a6:b9:dd:8c:60:e5:e3:a8:bf:26:16:ef:bd:17:bf: 5f:ff:bd:8a:df:bf:5f:50:c0:04:bb:cf:36:70:f3: a6:86:3a:28:6f:d0:41:84:7c:f6:f6:67:08:81:17: 71:ee:2d:3a:62:10:de:87:9e:69:63:f8:59:2c:aa: 46:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DA:73:0C:D3:DF:F5:E8:AF:A5:86:0A:B9:5E:5B:52:B6:24:5C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c9:61:8a:1b:5a:e8:e4:60:5b:56:a3:46:b7:6a:af:0f:3f: 1d:7c:34:33:01:c4:b5:8f:5f:7a:18:20:b1:da:7a:c9:10:5c: f8:a7:67:63:c4:9f:a0:fb:3a:d7:5d:ba:07:d5:70:36:f3:a1: d5:fa:05:6e:50:80:69:3e:bb:44:20:c2:87:91:dd:76:ff:20: 74:b1:a3:eb:96:f3:6f:0a:82:10:4d:18:fe:14:50:bd:2f:24: 1e:60:e1:06:fc:4e:fb:c9:b0:ae:70:07:63:91:84:9b:24:0f: bd:47:6a:e3:c7:20:96:83:5e:4d:ea:86:54:fc:ea:2f:7a:00: 7f:f8:42:57:4c:aa:56:0e:5d:35:e3:91:4e:a9:6c:96:75:40: 71:8a:60:51:19:31:4f:1d:ff:d0:b7:b2:14:35:c2:2d:a4:00: 88:b7:83:d8:65:5f:f0:2d:aa:7a:7a:74:0b:be:83:23:54:0c: 42:63:9f:97:e9:80:e6:de:27:a2:34:8a:65:aa:ae:92:40:3f: aa:b5:e2:e8:b7:6e:df:39:cf:f4:90:27:47:f7:1c:d6:1d:cf: 5a:f4:01:1a:35:a7:87:ea:2f:13:e0:31:2a:94:a3:62:31:a0: c1:2b:af:a5:7b:43:53:db:b4:ea:07:3e:9e:ad:10:18:8a:04: 67:45:88:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp49Ct63Vd6rQJhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk ZjZmY2U4NjYtNjc5YS00N2ExLWEwZmMtZWEzOTEyNjhjYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy2V4QNc9liMfOEiqJ3n4XaAbNrhPp2Rt0AM 2ELh8w8JYNOy13u/hoNycmdnYqK3921z3HkFK6cKNpLeB3t12lavLjvhhyvXZCAL 7vVh5Q+9X/qBYge+m2+HY0YhCDQ8VNl8jb3Pl5CBCh4grn4UD6w8Y+0jb05H7KhJ +6Wni0M0P7xFWOo+NtvEa4hKIshKb+rWZ7Y2bU++e+2E/Ln3hAwncoFPdMEAc+0K qtpJ+kda5GPFny3lEQvHnbQQ8OfPwTemud2MYOXjqL8mFu+9F79f/72K379fUMAE u882cPOmhjoob9BBhHz29mcIgRdx7i06YhDeh55pY/hZLKpGRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzacwzT3/Xor6WGCrleW1K2JFz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDk5YjAyNWItNGI5MC0z YWVkLTg0NjktMTA5NGM3NDA1NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7JYYobWujkYFtWo0a3aq8PPx18NDMBxLWPX3oYILHaeskQXPinZ2PE n6D7OtddugfVcDbzodX6BW5QgGk+u0QgwoeR3Xb/IHSxo+uW828KghBNGP4UUL0v JB5g4Qb8TvvJsK5wB2ORhJskD71HauPHIJaDXk3qhlT86i96AH/4QldMqlYOXTXj kU6pbJZ1QHGKYFEZMU8d/9C3shQ1wi2kAIi3g9hlX/Atqnp6dAu+gyNUDEJjn5fp gObeJ6I0imWqrpJAP6q14ui3bt85z/SQJ0f3HNYdz1r0ARo1p4fqLxPgMSqUo2Ix oMErr6V7Q1PbtOoHPp6tEBiKBGdFiEg= -----END CERTIFICATE-----Generated at Fri Apr 11 23:04:57 2025 by rpki-client