$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8e45914f-51e5-3e68-a302-1375b40ef034.roa File: 8e45914f-51e5-3e68-a302-1375b40ef034.roa (raw, json) Hash identifier: IvLpTum3pgkzoNFMLz6bmFKlXdSy9Jk5KkUD+Ia7hgo= Subject key identifier: 5E:7B:9E:CB:8A:D3:EE:80:5B:F3:F3:1F:0B:4B:79:AB:0A:6B:6F:0D Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F43285848C9381F67C8135C2975B15180 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8e45914f-51e5-3e68-a302-1375b40ef034.roa Signing time: Wed 05 Feb 2025 21:57:27 +0000 ROA not before: Wed 05 Feb 2025 21:57:27 +0000 ROA not after: Tue 06 May 2025 20:57:27 +0000 asID: 22652 IP address blocks: 199.244.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:38:1f:67:c8:13:5c:29:75:b1:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Feb 5 21:57:27 2025 GMT Not After : May 6 20:57:27 2025 GMT Subject: CN=c6370e53-5e06-4ef4-ac4e-04b3c09e4f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:27:79:03:ea:cc:f9:75:46:10:92:02:93:2f: 94:69:32:3d:4e:a5:52:f3:c6:83:9d:1d:3f:94:aa: 27:ae:84:a9:44:fe:0b:63:11:04:c4:a0:21:c6:d6: 0c:e5:9a:4f:1e:2b:7d:67:33:0a:a3:c7:fe:89:67: 9e:b0:10:69:21:d3:46:d6:17:5a:ff:cb:64:43:32: a8:25:4a:33:45:d7:3a:5f:82:91:d2:eb:8b:dd:5b: f5:d2:7e:d4:65:66:aa:e0:6b:f7:05:14:40:ce:03: 34:87:11:fe:8c:88:dc:0f:8c:fc:68:ea:1b:fb:ad: 9f:21:dd:2d:71:5c:19:55:75:52:40:3e:22:2a:ad: 0b:48:5b:70:0b:70:29:79:39:ae:25:cf:52:ae:17: 8d:6f:ba:bd:12:1f:94:e1:9c:bd:4f:18:2b:dd:af: 3a:be:28:bd:8f:1d:22:8b:13:4f:d1:69:75:e2:30: 32:20:19:f4:10:8f:b5:fb:4d:8f:c8:cd:da:57:16: a8:96:26:60:e9:ff:eb:59:a0:9b:f3:d5:73:0d:89: 64:a6:5d:4e:98:ab:87:b3:02:52:e4:7f:27:83:4c: 85:34:a2:29:ba:f7:46:13:40:51:3e:b1:92:b3:cf: 81:27:74:05:b1:e3:d9:e6:eb:36:92:ef:07:2b:cd: 2b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7B:9E:CB:8A:D3:EE:80:5B:F3:F3:1F:0B:4B:79:AB:0A:6B:6F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8e45914f-51e5-3e68-a302-1375b40ef034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 199.244.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6c:9c:ae:ec:53:ba:2f:14:8f:01:e9:19:1c:ab:da:c5:9c: 49:c9:41:00:5d:1f:4f:8e:27:dc:fb:93:36:ec:1e:9e:94:07: f6:ff:9f:df:8d:63:1a:10:a0:7f:08:4f:0d:03:4d:2a:38:60: 37:d8:e8:4e:06:d8:1b:68:86:d4:24:92:2d:3c:11:8f:82:1b: 63:e5:b2:b3:dc:cd:aa:c9:a4:08:d4:5d:7e:fd:fe:91:52:67: aa:29:af:45:34:75:19:aa:63:f3:bb:4b:02:1f:6a:3d:1a:e5: 52:a5:7e:1c:60:1b:bb:7b:b1:5a:eb:48:09:3d:0f:1a:33:38: d0:be:59:af:f4:14:e3:2f:11:48:42:63:9c:39:4e:b0:4e:ec: 48:05:10:c8:b5:99:b4:b4:91:c4:8a:09:d5:39:24:6c:ba:39: 92:88:15:b5:fe:9c:f5:62:01:bd:fd:3b:91:6f:55:26:a9:2b: be:66:5a:5f:19:ad:c5:82:2c:a3:d2:51:db:f1:90:e6:92:b0: 6c:45:fa:56:3e:4f:ec:e4:20:15:e6:de:ef:14:56:f6:bb:94: dd:99:d7:31:34:8a:c4:59:9a:2c:de:07:b8:15:85:3c:22:77: f0:a3:9b:c6:ba:0e:3e:61:ae:aa:7b:b7:60:f6:be:2e:69:8a: 87:6d:3c:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJOB9nyBNcKXWxUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDIwNTIxNTcyN1oXDTI1MDUwNjIwNTcyN1owLzEtMCsGA1UEAxMk YzYzNzBlNTMtNWUwNi00ZWY0LWFjNGUtMDRiM2MwOWU0ZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgid5A+rM+XVGEJICky+UaTI9TqVS88aDnR0/ lKonroSpRP4LYxEExKAhxtYM5ZpPHit9ZzMKo8f+iWeesBBpIdNG1hda/8tkQzKo JUozRdc6X4KR0uuL3Vv10n7UZWaq4Gv3BRRAzgM0hxH+jIjcD4z8aOob+62fId0t cVwZVXVSQD4iKq0LSFtwC3ApeTmuJc9SrheNb7q9Eh+U4Zy9Txgr3a86vii9jx0i ixNP0Wl14jAyIBn0EI+1+02PyM3aVxaoliZg6f/rWaCb89VzDYlkpl1OmKuHswJS 5H8ng0yFNKIpuvdGE0BRPrGSs8+BJ3QFsePZ5us2ku8HK80rUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF57nsuK0+6AW/PzHwtLeasKa28NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvOGU0NTkxNGYtNTFlNS0z ZTY4LWEzMDItMTM3NWI0MGVmMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdsnK7sU7ovFI8B6Rkcq9rFnEnJQQBdH0+OJ9z7kzbsHp6UB/b/n9+N YxoQoH8ITw0DTSo4YDfY6E4G2BtohtQkki08EY+CG2PlsrPczarJpAjUXX79/pFS Z6opr0U0dRmqY/O7SwIfaj0a5VKlfhxgG7t7sVrrSAk9DxozONC+Wa/0FOMvEUhC Y5w5TrBO7EgFEMi1mbS0kcSKCdU5JGy6OZKIFbX+nPViAb39O5FvVSapK75mWl8Z rcWCLKPSUdvxkOaSsGxF+lY+T+zkIBXm3u8UVva7lN2Z1zE0isRZmizeB7gVhTwi d/Cjm8a6Dj5hrqp7t2D2vi5piodtPFI= -----END CERTIFICATE-----Generated at Sat Apr 12 00:26:12 2025 by rpki-client