$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4788dc36-a0f1-39c7-bc1a-13963488b00e.roa File: 4788dc36-a0f1-39c7-bc1a-13963488b00e.roa (raw, json) Hash identifier: fXEk6fPdA7Km8+jRQeE1GDlqyqYOshmnwLy7S/P2dWs= Subject key identifier: 91:00:46:32:8C:47:7F:94:9B:AA:C0:33:41:2B:DA:FE:50:79:2D:EA Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584940397BDCC524AF7DBCC86200 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4788dc36-a0f1-39c7-bc1a-13963488b00e.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 13414 IP address blocks: 199.96.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:7b:dc:c5:24:af:7d:bc:c8:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=f3adf31e-e0f8-4d8f-9188-79fe5fc465d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:41:cd:5c:00:f1:ef:b6:d1:db:2f:13:45:f6: d1:14:b8:53:fb:d5:aa:12:50:18:45:92:cb:ca:26: 99:fd:29:09:87:c3:c9:8b:f6:28:6b:63:6b:2c:1c: 15:c5:2e:59:3b:70:ff:a9:7c:02:53:ea:d4:72:d4: 2f:b6:3e:60:a6:ec:de:22:76:fe:87:a3:c0:5a:bd: 36:8e:cf:61:4d:12:a3:3b:b7:fa:2d:9b:14:24:31: dd:72:56:80:a4:4a:39:58:e4:d0:65:59:6b:ef:a6: f3:db:c0:e7:c8:82:24:95:68:a7:26:b9:85:38:e1: 14:ac:19:eb:15:87:84:b5:92:30:74:0f:dc:84:a8: d7:d1:f1:8c:2a:fc:e1:53:64:e1:3a:f6:b4:38:41: 9a:9b:f7:2c:28:e6:77:5b:c3:d9:1d:2c:20:6b:1a: 5b:df:67:c5:45:7d:eb:b3:37:0d:34:ce:18:7d:f3: dd:14:e3:16:d4:33:2b:13:6a:38:7d:d0:48:5c:d6: 7a:b2:ae:11:76:a7:74:c4:a3:09:09:5f:32:6a:58: fc:53:7d:95:99:f7:29:9b:55:1a:c7:18:71:70:12: 48:56:0f:f2:bf:41:3d:b3:8e:da:ea:6d:3d:68:b5: c3:3e:81:d3:2d:c4:46:4b:8e:53:b9:78:cd:06:4e: 64:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:00:46:32:8C:47:7F:94:9B:AA:C0:33:41:2B:DA:FE:50:79:2D:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4788dc36-a0f1-39c7-bc1a-13963488b00e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.96.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:18:61:4d:39:50:ea:df:38:b8:b6:0c:6a:37:f8:c1:a6:af: 09:cd:cf:95:0a:04:03:c0:69:09:af:1b:41:7f:28:1d:b6:d5: 19:af:45:f3:12:4b:a8:89:f6:57:51:a7:7a:7c:d9:0e:b6:14: 35:58:cc:11:e8:d8:4b:ce:97:d1:8f:8d:57:2d:22:6e:84:8f: dc:85:76:49:ee:e2:e1:8a:24:a9:3b:b4:5b:48:c8:8e:0e:09: 86:bc:30:c2:1c:22:14:ba:c2:73:b3:67:2e:ba:03:1a:c9:47: 36:a8:d6:b3:fa:56:d8:12:9b:1d:77:bb:4f:a2:c0:ca:47:9a: 47:01:71:8c:e3:97:db:8b:3e:0e:25:d9:65:00:9f:bf:ef:db: 91:cb:d5:0e:9f:ad:da:5d:10:c5:63:a0:54:4b:de:04:0c:33: 1d:a8:2d:4b:fe:57:18:a4:b2:42:f3:97:d4:3e:01:66:2a:86: e1:5c:94:29:59:87:c4:9a:ee:45:79:7e:8b:17:0c:97:39:15: cc:d7:6c:3b:95:f8:15:83:d1:b3:e7:ce:3d:96:3f:b7:09:e1: 89:a3:56:44:1c:94:62:3a:d6:c0:48:32:c0:6f:da:61:e1:50: 41:a3:83:06:f0:fb:7f:8a:6a:a8:6b:1b:b1:9b:02:c5:60:70: 46:30:55:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOXvcxSSvfbzIYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZjNhZGYzMWUtZTBmOC00ZDhmLTkxODgtNzlmZTVmYzQ2NWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkHNXADx77bR2y8TRfbRFLhT+9WqElAYRZLL yiaZ/SkJh8PJi/Yoa2NrLBwVxS5ZO3D/qXwCU+rUctQvtj5gpuzeInb+h6PAWr02 js9hTRKjO7f6LZsUJDHdclaApEo5WOTQZVlr76bz28DnyIIklWinJrmFOOEUrBnr FYeEtZIwdA/chKjX0fGMKvzhU2ThOva0OEGam/csKOZ3W8PZHSwgaxpb32fFRX3r szcNNM4YffPdFOMW1DMrE2o4fdBIXNZ6sq4Rdqd0xKMJCV8yalj8U32Vmfcpm1Ua xxhxcBJIVg/yv0E9s47a6m09aLXDPoHTLcRGS45TuXjNBk5k6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEARjKMR3+Um6rAM0Er2v5QeS3qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNDc4OGRjMzYtYTBmMS0z OWM3LWJjMWEtMTM5NjM0ODhiMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2A4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUYYU05UOrfOLi2DGo3+MGmrwnNz5UKBAPAaQmvG0F/KB221RmvRfMS S6iJ9ldRp3p82Q62FDVYzBHo2EvOl9GPjVctIm6Ej9yFdknu4uGKJKk7tFtIyI4O CYa8MMIcIhS6wnOzZy66AxrJRzao1rP6VtgSmx13u0+iwMpHmkcBcYzjl9uLPg4l 2WUAn7/v25HL1Q6frdpdEMVjoFRL3gQMMx2oLUv+VxikskLzl9Q+AWYqhuFclClZ h8Sa7kV5fosXDJc5FczXbDuV+BWD0bPnzj2WP7cJ4YmjVkQclGI61sBIMsBv2mHh UEGjgwbw+3+KaqhrG7GbAsVgcEYwVQo= -----END CERTIFICATE-----Generated at Sat Apr 5 05:22:17 2025 by rpki-client