$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b270954a-48c4-3971-aeb6-a89d93f59e0d.roa File: b270954a-48c4-3971-aeb6-a89d93f59e0d.roa (raw, json) Hash identifier: JOpVBVPXUG4WaGuL2AbmuEfY1sTT8tXU8uD+tBcZZGI= Subject key identifier: D4:A9:D9:C8:EC:C8:16:1B:32:8F:D3:8B:DD:15:CA:EC:1E:F2:C0:78 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F43285848C92E86EC512C2BB4E956DD80 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b270954a-48c4-3971-aeb6-a89d93f59e0d.roa Signing time: Wed 05 Feb 2025 21:38:07 +0000 ROA not before: Wed 05 Feb 2025 21:38:07 +0000 ROA not after: Tue 06 May 2025 20:38:07 +0000 asID: 23471 IP address blocks: 199.244.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:2e:86:ec:51:2c:2b:b4:e9:56:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Feb 5 21:38:07 2025 GMT Not After : May 6 20:38:07 2025 GMT Subject: CN=065fdc3a-e2d2-45c6-ade8-7f0c0009df92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ca:22:d4:78:23:ac:89:70:68:f7:38:39:22: 9e:da:7e:fc:21:97:cc:80:eb:0d:a1:c2:c5:59:c2: e3:59:ad:0c:5f:48:cb:6c:fc:ee:87:7e:c5:d3:78: 63:74:41:66:71:6f:3a:7b:6b:08:ef:64:71:74:ad: 93:b9:eb:8f:b6:40:63:51:6e:78:b7:bb:b7:f1:6a: 1e:ca:13:64:18:82:42:8f:7f:d0:0f:01:5e:cc:2a: 79:e6:7b:88:ce:74:c3:62:36:d4:eb:33:92:de:1e: 50:dd:73:7b:5b:24:46:a6:8b:ae:15:c9:69:76:26: 3f:42:a1:74:7f:41:d7:54:21:95:a8:1e:d5:be:1f: 8c:a6:54:8e:3e:cd:a5:23:64:a5:4d:4f:09:47:ce: 50:ad:36:3e:49:61:ab:46:40:78:db:c5:ee:d2:36: 7a:8c:5d:24:a6:f4:90:5c:e2:8e:6c:12:b1:82:d1: e0:1e:22:f4:c5:30:0e:88:22:f4:c2:f5:1c:9f:d1: 56:ca:29:c2:76:40:8e:e9:b6:37:82:f0:16:37:0b: c6:9e:17:26:51:79:c9:da:3c:ef:be:fe:7a:91:d4: 42:37:c0:88:c5:cd:10:f4:97:6b:1e:52:b6:bc:c4: 48:de:bc:bb:c2:b0:50:64:c7:f2:58:89:bd:9c:3e: df:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A9:D9:C8:EC:C8:16:1B:32:8F:D3:8B:DD:15:CA:EC:1E:F2:C0:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b270954a-48c4-3971-aeb6-a89d93f59e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 199.244.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:bd:4c:fd:73:b6:d9:1e:bc:d5:e8:8c:80:2e:d4:e6:45:53: fc:39:21:72:d8:fe:6a:48:7b:3d:ea:5c:0d:6b:01:c1:4f:99: 36:ee:04:00:ba:4e:9f:a8:7e:e2:ac:9f:4d:75:02:50:bf:79: b1:3a:90:c5:d1:dc:76:5e:ac:35:d7:ba:ba:cd:9d:c2:42:08: e2:51:64:4b:53:a0:e9:94:36:0e:90:be:3c:02:8f:d0:6c:02: 05:15:71:32:f0:d9:9e:41:4d:ce:35:b3:4c:6d:7e:ec:07:28: 93:1a:a3:b4:cb:9f:fd:db:77:66:e1:ec:e5:d5:a9:c7:af:89: 32:23:b2:90:d6:46:2c:05:f6:7f:00:b6:a1:b1:ac:33:ae:ac: ed:cf:70:66:1a:26:ea:4b:c1:f5:53:85:79:fa:58:d7:61:2a: e3:0a:44:91:bb:f6:0c:93:15:67:ca:4f:f5:01:15:62:73:ad: 0f:7a:b0:d5:1f:0b:e1:2e:3c:b5:68:4c:dd:e0:46:4d:ce:f6: 03:1c:d5:c7:6a:8d:f4:a4:97:31:a6:be:43:07:e3:64:b5:f4: 72:77:1e:6a:bc:9c:50:2a:db:02:85:57:f1:59:43:7d:dd:28: c4:e8:ab:49:da:c0:79:46:07:5e:dd:1d:5a:2c:4e:12:7f:f9: 9e:b8:2a:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJLobsUSwrtOlW3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDIwNTIxMzgwN1oXDTI1MDUwNjIwMzgwN1owLzEtMCsGA1UEAxMk MDY1ZmRjM2EtZTJkMi00NWM2LWFkZTgtN2YwYzAwMDlkZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8oi1HgjrIlwaPc4OSKe2n78IZfMgOsNocLF WcLjWa0MX0jLbPzuh37F03hjdEFmcW86e2sI72RxdK2TueuPtkBjUW54t7u38Woe yhNkGIJCj3/QDwFezCp55nuIznTDYjbU6zOS3h5Q3XN7WyRGpouuFclpdiY/QqF0 f0HXVCGVqB7Vvh+MplSOPs2lI2SlTU8JR85QrTY+SWGrRkB428Xu0jZ6jF0kpvSQ XOKObBKxgtHgHiL0xTAOiCL0wvUcn9FWyinCdkCO6bY3gvAWNwvGnhcmUXnJ2jzv vv56kdRCN8CIxc0Q9JdrHlK2vMRI3ry7wrBQZMfyWIm9nD7fDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSp2cjsyBYbMo/Ti90Vyuwe8sB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYjI3MDk1NGEtNDhjNC0z OTcxLWFlYjYtYTg5ZDkzZjU5ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/R7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK9TP1zttkevNXojIAu1OZFU/w5IXLY/mpIez3qXA1rAcFPmTbuBAC6 Tp+ofuKsn011AlC/ebE6kMXR3HZerDXXurrNncJCCOJRZEtToOmUNg6QvjwCj9Bs AgUVcTLw2Z5BTc41s0xtfuwHKJMao7TLn/3bd2bh7OXVqceviTIjspDWRiwF9n8A tqGxrDOurO3PcGYaJupLwfVThXn6WNdhKuMKRJG79gyTFWfKT/UBFWJzrQ96sNUf C+EuPLVoTN3gRk3O9gMc1cdqjfSklzGmvkMH42S19HJ3Hmq8nFAq2wKFV/FZQ33d KMToq0nawHlGB17dHVosThJ/+Z64KoE= -----END CERTIFICATE-----Generated at Sun Apr 13 01:00:28 2025 by rpki-client