$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/980c27f1-7286-33e6-b287-f2eaef87b326.roa File: 980c27f1-7286-33e6-b287-f2eaef87b326.roa (raw, json) Hash identifier: MboZzYWfwSxTYuWt7979Fg9eR3Bl1xAYrXGSTt/IgO0= Subject key identifier: D0:EA:DB:7E:66:80:43:86:5B:B7:81:0C:AA:5F:7B:2D:BC:75:64:AF Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285848C6E6347E6AF74A2D8EF82C80 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/980c27f1-7286-33e6-b287-f2eaef87b326.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 22885 IP address blocks: 199.0.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:34:7e:6a:f7:4a:2d:8e:f8:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=276c20a9-2bb4-47be-9cbd-1c6c48b451b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:74:21:eb:09:28:93:5c:28:94:37:56:76:bc: 7c:55:1c:d9:d9:20:0e:fa:75:58:80:2d:4a:14:32: f6:55:8f:cf:e6:48:24:55:55:64:4d:cf:f4:84:d9: b5:a3:c3:3d:db:ea:31:c4:5c:59:ae:09:d3:6f:0d: da:7f:2a:73:ce:cf:b2:a8:63:a6:bd:7a:bd:7b:9c: 7f:6f:d7:30:0f:31:89:e9:56:02:d0:29:df:68:61: 06:7b:e8:1f:06:e5:4e:15:a3:24:ca:db:1f:4e:6f: 0e:e1:8e:1c:59:e7:4d:9c:c4:df:ce:67:57:bc:2f: 16:d7:d7:e9:f4:50:34:1b:ef:85:65:1a:f9:8c:99: da:0d:e2:20:2c:c6:41:21:04:1c:7a:82:f1:84:b3: 93:82:d1:89:7e:d8:3f:c6:17:c9:25:01:75:26:9f: 15:43:91:7e:c8:f5:a6:b4:51:97:6c:9a:cf:94:5d: 49:14:f9:f4:5f:32:a4:74:24:a7:66:7e:7d:d7:e6: 2f:42:e9:9d:b4:96:5b:03:89:8a:17:d0:94:a0:fc: 54:cc:4e:60:0c:5f:74:76:1b:8d:61:61:18:a2:59: 95:e4:71:f7:52:4a:04:e6:8b:65:e7:c0:ee:a1:c1: 6b:8b:fa:d6:24:e0:95:d9:a8:84:f7:68:d3:0b:82: 44:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EA:DB:7E:66:80:43:86:5B:B7:81:0C:AA:5F:7B:2D:BC:75:64:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/980c27f1-7286-33e6-b287-f2eaef87b326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.0.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:29:e5:ab:e7:33:c0:a9:cc:b4:5b:b0:aa:04:88:5a:57:ff: 15:90:2e:fa:bc:8f:41:55:4e:20:0c:2d:c6:dc:e9:c4:15:e8: 44:6d:91:5e:3e:2a:67:98:b1:12:ca:56:f1:ce:75:67:95:5e: 78:20:88:5f:bc:04:8c:17:ad:89:2b:86:b1:48:20:fa:be:d0: 7a:54:93:4d:d9:69:83:b4:37:cd:0b:5e:30:07:05:96:ac:dd: 85:ab:23:b6:1c:64:63:30:09:49:72:2f:ff:4b:04:96:af:6e: 10:68:eb:66:5b:c5:2a:e0:b4:b2:95:a8:2b:b0:12:d2:86:2a: 42:e8:f1:27:5e:43:d7:7e:ae:1a:3d:44:60:46:b6:f1:8c:1e: 34:a0:54:ce:96:bc:a1:27:29:ba:d8:58:b3:22:e5:47:e7:53: fa:02:e1:01:b7:d4:07:8a:42:38:04:b5:9b:ec:0a:2e:14:47: 73:77:d8:47:e2:1e:cc:8b:33:74:b7:7c:50:b2:58:d9:41:6d: 96:55:56:a8:aa:69:7c:fb:7e:54:b1:62:86:1f:20:d4:63:71: d2:b6:c9:e1:18:1f:3d:7d:c6:28:c2:95:e7:4a:95:93:0c:38: 87:91:69:61:9b:e4:d3:c7:3b:32:70:4f:a5:05:65:c1:45:e7: ad:d7:0e:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jR+avdKLY74LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk Mjc2YzIwYTktMmJiNC00N2JlLTljYmQtMWM2YzQ4YjQ1MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnQh6wkok1wolDdWdrx8VRzZ2SAO+nVYgC1K FDL2VY/P5kgkVVVkTc/0hNm1o8M92+oxxFxZrgnTbw3afypzzs+yqGOmvXq9e5x/ b9cwDzGJ6VYC0CnfaGEGe+gfBuVOFaMkytsfTm8O4Y4cWedNnMTfzmdXvC8W19fp 9FA0G++FZRr5jJnaDeIgLMZBIQQceoLxhLOTgtGJftg/xhfJJQF1Jp8VQ5F+yPWm tFGXbJrPlF1JFPn0XzKkdCSnZn591+YvQumdtJZbA4mKF9CUoPxUzE5gDF90dhuN YWEYolmV5HH3UkoE5otl58DuocFri/rWJOCV2aiE92jTC4JEiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDq235mgEOGW7eBDKpfey28dWSvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvOTgwYzI3ZjEtNzI4Ni0z M2U2LWIyODctZjJlYWVmODdiMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIop5avnM8CpzLRbsKoEiFpX/xWQLvq8j0FVTiAMLcbc6cQV6ERtkV4+ KmeYsRLKVvHOdWeVXnggiF+8BIwXrYkrhrFIIPq+0HpUk03ZaYO0N80LXjAHBZas 3YWrI7YcZGMwCUlyL/9LBJavbhBo62ZbxSrgtLKVqCuwEtKGKkLo8SdeQ9d+rho9 RGBGtvGMHjSgVM6WvKEnKbrYWLMi5UfnU/oC4QG31AeKQjgEtZvsCi4UR3N32Efi HsyLM3S3fFCyWNlBbZZVVqiqaXz7flSxYoYfINRjcdK2yeEYHz19xijCledKlZMM OIeRaWGb5NPHOzJwT6UFZcFF563XDvg= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:20 2025 by rpki-client