$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e93effbb-1736-3ee1-a8ff-71584d7543c1.roa File: e93effbb-1736-3ee1-a8ff-71584d7543c1.roa (raw, json) Hash identifier: w1g1pZJnFtl+5KDJISFKDQUOR/5aSo13B27Fm3P/hs0= Subject key identifier: 77:D1:CA:31:46:AD:B5:35:2B:DB:06:EE:8A:D1:0D:F9:EF:D3:04:EB Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F432858496054129ED196BDF286B06980 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e93effbb-1736-3ee1-a8ff-71584d7543c1.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 22652 IP address blocks: 199.167.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:12:9e:d1:96:bd:f2:86:b0:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=f72c942a-344f-4665-a176-ed9e55edfe24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:01:63:b0:7d:c5:af:24:af:83:7c:56:75:50: 2e:5f:fc:46:50:d0:87:fe:95:cf:74:7b:59:d2:4a: 9f:63:f7:47:7b:8f:5a:3e:21:ba:5e:eb:4b:08:cb: 36:96:8c:9b:86:d7:e4:95:77:87:e0:b5:86:82:22: 63:da:f7:7d:c5:3b:d9:01:2f:9a:6e:16:bb:07:c6: b5:2a:0e:de:bd:9d:4f:08:78:62:eb:ce:c8:23:5c: b3:d8:e3:b6:df:5a:27:13:9a:24:20:91:db:57:a0: e3:8a:7d:20:da:88:1d:cc:df:2a:30:e8:91:23:69: 50:fb:7b:b3:07:84:e3:13:bf:56:29:6a:8c:ad:d0: 7a:25:dc:32:1a:68:d0:5e:93:15:0b:20:e9:d5:f9: 1c:37:6a:ab:bd:dc:de:6e:39:0e:2b:19:ae:86:c6: a8:26:73:c1:86:61:ad:c8:47:f4:cd:85:bb:7d:c9: f2:d5:2c:02:0a:d8:08:5b:ac:a6:7c:58:14:54:52: 3e:01:23:1f:b2:42:33:aa:aa:62:06:cb:3c:4a:d1: 3a:f2:3f:2c:9f:39:07:68:97:e2:c2:4e:6b:65:97: 35:f2:09:78:02:57:5d:9e:20:53:95:0b:2f:a0:7e: 87:75:0c:8e:d6:c5:67:cd:c8:17:cd:35:3d:27:df: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D1:CA:31:46:AD:B5:35:2B:DB:06:EE:8A:D1:0D:F9:EF:D3:04:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e93effbb-1736-3ee1-a8ff-71584d7543c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 199.167.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ab:6b:48:6e:6c:42:40:a2:12:b9:8a:e5:9d:e8:79:ee:32: 7c:2b:e2:6b:4e:7f:ca:25:f0:c8:d5:09:0c:4d:ce:d3:12:1d: 02:de:17:59:3d:18:bd:3e:48:5f:f9:2b:2a:2f:7b:61:a1:73: b4:6c:4f:c2:35:e1:b9:6f:68:af:5f:7c:ef:ac:b6:f4:e5:73: 42:26:f1:bb:c3:93:c1:4b:64:aa:31:71:13:6b:e5:ad:9e:91: 9a:09:6d:e6:d4:4e:70:86:b1:4f:f6:b1:e2:1f:13:5f:95:4e: f3:79:aa:76:62:10:ae:b1:b5:c5:03:eb:15:97:24:4a:4d:04: 3d:e3:8f:30:64:61:1a:7c:35:03:1f:03:db:a5:4c:2f:1e:3f: 62:78:d9:f8:07:df:de:b1:7b:27:eb:96:fd:8a:43:55:e3:5b: c3:c9:3b:5f:7b:e4:56:49:63:aa:a0:14:27:9a:81:73:8b:36: 82:38:a5:a2:47:9c:59:2e:69:ce:29:4e:53:de:ea:48:02:c2: 89:07:73:35:84:e6:c0:0c:f0:46:bf:c6:a6:5e:0a:49:1d:92: 0f:f9:3d:cb:9e:b7:6d:64:30:5b:52:db:af:bc:ad:48:24:bc: 72:c3:5c:58:74:69:51:02:68:18:75:4a:16:28:3b:3e:0a:e8: a8:0e:24:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBKe0Za98oawaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk ZjcyYzk0MmEtMzQ0Zi00NjY1LWExNzYtZWQ5ZTU1ZWRmZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQFjsH3FrySvg3xWdVAuX/xGUNCH/pXPdHtZ 0kqfY/dHe49aPiG6XutLCMs2loybhtfklXeH4LWGgiJj2vd9xTvZAS+abha7B8a1 Kg7evZ1PCHhi687II1yz2OO231onE5okIJHbV6Djin0g2ogdzN8qMOiRI2lQ+3uz B4TjE79WKWqMrdB6JdwyGmjQXpMVCyDp1fkcN2qrvdzebjkOKxmuhsaoJnPBhmGt yEf0zYW7fcny1SwCCtgIW6ymfFgUVFI+ASMfskIzqqpiBss8StE68j8snzkHaJfi wk5rZZc18gl4AlddniBTlQsvoH6HdQyO1sVnzcgXzTU9J98egwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfRyjFGrbU1K9sG7orRDfnv0wTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZTkzZWZmYmItMTczNi0z ZWUxLWE4ZmYtNzE1ODRkNzU0M2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6dsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+ra0hubEJAohK5iuWd6HnuMnwr4mtOf8ol8MjVCQxNztMSHQLeF1k9 GL0+SF/5Kyove2Ghc7RsT8I14blvaK9ffO+stvTlc0Im8bvDk8FLZKoxcRNr5a2e kZoJbebUTnCGsU/2seIfE1+VTvN5qnZiEK6xtcUD6xWXJEpNBD3jjzBkYRp8NQMf A9ulTC8eP2J42fgH396xeyfrlv2KQ1XjW8PJO1975FZJY6qgFCeagXOLNoI4paJH nFkuac4pTlPe6kgCwokHczWE5sAM8Ea/xqZeCkkdkg/5Pcuet21kMFtS26+8rUgk vHLDXFh0aVECaBh1ShYoOz4K6KgOJKU= -----END CERTIFICATE-----Generated at Fri Apr 11 22:29:27 2025 by rpki-client