$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa File: 68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa (raw, json) Hash identifier: MwEYnEeb+4HTnrCFkQQJmTU9hO9xQjslxcFXSyF23iI= Subject key identifier: AE:31:8E:E4:4D:18:F6:EC:2B:F2:44:5B:94:95:89:06:A8:E7:1E:40 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F43285848EC96987AECBE08DA0F869940 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 9009 IP address blocks: 162.254.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:98:7a:ec:be:08:da:0f:86:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=35e33fc0-730a-4a82-8b4d-e1bb9e6f5726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a7:d8:fb:69:1e:b8:79:bf:46:ec:23:75:fc: 08:5b:0b:35:02:50:4d:e6:5c:5c:1e:83:f9:10:1c: 58:e9:08:db:67:20:bb:11:a4:86:72:a7:f2:69:f1: ca:60:c2:b3:57:66:88:1f:3f:86:27:70:f2:ab:a8: 06:3e:7d:85:ef:93:3f:57:ec:eb:4a:93:41:9e:b5: 5c:b5:18:58:2a:10:f0:20:c2:db:7d:25:91:42:06: 32:91:5f:a2:82:63:ce:a8:cb:a2:b2:c4:8e:89:8a: 9d:42:21:a3:44:81:ae:f8:a5:62:89:e5:c2:4b:81: 1c:f4:0c:4e:22:6c:ac:f2:6e:85:3f:93:15:e1:66: 9b:e0:63:92:93:24:82:b7:3d:4c:32:b8:e6:56:79: b9:25:5b:e8:c0:7c:f4:d7:e8:fb:20:4d:e9:d0:59: fa:2c:63:c1:20:72:c7:2e:91:64:6b:1b:f4:e6:1c: 80:87:8d:5e:62:ab:bb:20:f6:33:10:9a:39:1b:85: 12:43:db:2d:5b:90:43:a9:c7:88:b9:36:ca:74:a5: 44:66:1c:d1:f8:79:17:23:53:53:b5:59:c8:88:ce: 2c:c3:4d:fb:d6:95:1b:62:ce:7a:9d:d5:06:d5:4b: e7:fc:22:7b:57:17:94:8c:40:cd:73:cf:04:8f:9a: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:31:8E:E4:4D:18:F6:EC:2B:F2:44:5B:94:95:89:06:A8:E7:1E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:bb:76:a7:83:4c:04:ab:85:bb:ce:b2:d5:89:6c:38:81:4e: 5d:a2:a0:c3:74:92:2a:1e:3e:13:41:35:ee:67:8f:92:2a:fc: ef:0b:b5:84:cf:17:44:6d:32:b7:99:15:d5:78:27:6d:7c:16: d0:c7:b5:c3:2a:23:63:97:e2:7d:d9:2b:9b:bc:46:6f:80:ae: fa:77:30:d8:7d:cc:81:29:c2:e6:5a:0e:3c:91:2f:4f:72:c9: 90:44:bf:31:50:97:06:76:d8:3d:fa:3a:d3:b2:40:8a:43:f8: 06:35:ee:88:e4:f7:68:d7:d5:e3:31:e9:99:88:88:1b:39:c2: fa:81:81:39:16:d8:2a:b9:3a:26:09:b4:d1:9a:33:83:d2:c2: d0:21:ec:4d:c3:ed:92:7f:bc:5f:89:a2:29:06:32:4f:a4:49: 8c:b7:c0:b8:8b:08:fd:36:63:46:3c:8f:0f:2e:1e:38:ec:1a: ba:d4:b9:25:2a:5c:93:2d:2b:8f:20:aa:4c:e5:db:4a:75:38: ed:69:83:ef:c5:49:1b:dc:73:f5:75:ce:e9:00:0d:c7:6c:57: 32:df:b0:84:3e:69:51:73:5c:0a:b6:35:28:d5:bd:17:af:f3: 4f:7c:99:76:5d:98:af:93:70:55:a8:c0:fa:12:a5:f7:be:7a: d8:0c:c3:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslph67L4I2g+GmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MzVlMzNmYzAtNzMwYS00YTgyLThiNGQtZTFiYjllNmY1NzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26fY+2keuHm/RuwjdfwIWws1AlBN5lxcHoP5 EBxY6QjbZyC7EaSGcqfyafHKYMKzV2aIHz+GJ3Dyq6gGPn2F75M/V+zrSpNBnrVc tRhYKhDwIMLbfSWRQgYykV+igmPOqMuissSOiYqdQiGjRIGu+KViieXCS4Ec9AxO Imys8m6FP5MV4Wab4GOSkySCtz1MMrjmVnm5JVvowHz01+j7IE3p0Fn6LGPBIHLH LpFkaxv05hyAh41eYqu7IPYzEJo5G4USQ9stW5BDqceIuTbKdKVEZhzR+HkXI1NT tVnIiM4sw0371pUbYs56ndUG1Uvn/CJ7VxeUjEDNc88Ej5pZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4xjuRNGPbsK/JEW5SViQao5x5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvNjhlNGM2M2MtZjNkOC0z NzYyLWJhMWQtYTAyMDUzYTA2YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW7dqeDTASrhbvOstWJbDiBTl2ioMN0kioePhNBNe5nj5Iq/O8LtYTP F0RtMreZFdV4J218FtDHtcMqI2OX4n3ZK5u8Rm+Arvp3MNh9zIEpwuZaDjyRL09y yZBEvzFQlwZ22D36OtOyQIpD+AY17ojk92jX1eMx6ZmIiBs5wvqBgTkW2Cq5OiYJ tNGaM4PSwtAh7E3D7ZJ/vF+JoikGMk+kSYy3wLiLCP02Y0Y8jw8uHjjsGrrUuSUq XJMtK48gqkzl20p1OO1pg+/FSRvcc/V1zukADcdsVzLfsIQ+aVFzXAq2NSjVvRev 8098mXZdmK+TcFWowPoSpfe+etgMwz0= -----END CERTIFICATE-----Generated at Sat Apr 12 00:07:17 2025 by rpki-client