$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa File: d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa (raw, json) Hash identifier: 629cOEVPVfPPjaVO8ndc+bBLUmuaaVEhM0ig3mrHTbs= Subject key identifier: 00:79:31:E0:28:C2:C2:3F:82:4A:AC:2B:58:DD:7B:73:06:E5:23:AD Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F43285849287E5FFF80257596B30E9E80 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 199.255.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:5f:ff:80:25:75:96:b3:0e:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=f91d1b64-349e-4087-a60c-5da96295ad57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7b:b3:76:05:c6:50:d4:ae:4a:59:6d:33:cc: f6:39:e8:d9:e1:40:54:37:62:af:c5:70:6b:e2:25: 43:ca:00:7e:90:7f:79:0a:76:f8:b1:09:42:b1:75: 69:2c:9c:f3:6e:70:ad:87:6f:06:0d:7e:90:bc:86: 65:6d:74:7d:66:90:fc:54:d5:d9:d0:cb:43:fb:e7: 43:26:07:e9:38:44:35:97:dc:17:50:f1:6e:14:3b: 16:f2:7b:2b:61:f1:5a:5f:79:bd:61:19:92:ed:c1: 07:26:6e:e1:2a:63:a5:9c:66:e9:1f:63:7a:53:a7: 17:a8:47:a8:2a:e0:29:65:0c:df:3b:c1:83:b1:00: 76:06:60:bd:84:fc:2f:27:d0:f9:ae:f6:6f:db:95: da:27:60:01:0f:49:74:7a:f9:d7:da:70:fe:84:88: f9:da:52:5e:77:c5:17:c8:fd:7d:5d:fd:36:42:1f: 9b:76:64:12:73:98:a1:a2:4c:4d:de:51:1b:f9:a2: 04:20:16:1f:ec:17:d9:a5:79:6b:51:ea:c1:53:32: 88:46:4c:3e:ca:04:1e:b8:28:f3:73:ca:12:dc:50: 5c:5f:6e:10:bb:cc:6b:e7:98:f3:c4:76:c3:0a:81: f8:b7:86:37:1c:50:a4:17:60:c2:ef:89:16:91:72: b3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:79:31:E0:28:C2:C2:3F:82:4A:AC:2B:58:DD:7B:73:06:E5:23:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:fe:2d:71:33:b3:f4:b4:eb:e7:9a:b0:c5:d7:80:02:61:43: 01:45:32:1e:6e:ab:3d:59:18:05:ef:17:5b:22:96:71:a9:79: 3e:65:6b:3d:46:58:34:b7:7d:14:2e:77:07:04:63:da:31:3d: 17:eb:80:e9:09:76:23:04:c8:64:93:6b:2f:d6:b2:91:fe:8e: 23:5d:76:e0:6b:a3:51:0b:6b:0e:2c:29:14:ef:24:2b:2a:01: f2:a2:3e:15:33:d6:85:fa:db:a9:e4:93:9c:e0:7c:3c:c3:79: ea:6f:88:d1:e1:e6:22:59:e6:91:44:f2:f3:a9:f5:2b:1f:16: 11:65:d4:34:ee:d4:1c:de:94:b2:7b:a0:60:32:87:9e:67:f8: 84:8c:17:26:e8:b2:07:84:06:7e:21:a5:c5:6d:3b:42:c6:a4: 93:6e:6a:95:21:e4:30:2f:47:c8:5f:d8:f0:4d:a5:23:2a:41: 8f:8c:3c:65:77:4a:8b:e3:a5:38:81:f1:04:00:8a:9a:5d:6d: 42:09:34:87:51:f3:8f:4f:0f:8e:26:62:ee:11:32:79:fe:1c: 72:aa:76:9d:7c:75:f7:67:b6:a5:5d:52:77:1a:45:ef:f5:3c: 51:aa:b2:a6:6f:b2:b7:85:b1:4e:9a:b9:41:49:f5:cf:21:51: 45:1e:5c:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofl//gCV1lrMOnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjkxZDFiNjQtMzQ5ZS00MDg3LWE2MGMtNWRhOTYyOTVhZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHuzdgXGUNSuSlltM8z2OejZ4UBUN2KvxXBr 4iVDygB+kH95Cnb4sQlCsXVpLJzzbnCth28GDX6QvIZlbXR9ZpD8VNXZ0MtD++dD JgfpOEQ1l9wXUPFuFDsW8nsrYfFaX3m9YRmS7cEHJm7hKmOlnGbpH2N6U6cXqEeo KuApZQzfO8GDsQB2BmC9hPwvJ9D5rvZv25XaJ2ABD0l0evnX2nD+hIj52lJed8UX yP19Xf02Qh+bdmQSc5ihokxN3lEb+aIEIBYf7BfZpXlrUerBUzKIRkw+ygQeuCjz c8oS3FBcX24Qu8xr55jzxHbDCoH4t4Y3HFCkF2DC74kWkXKz2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAB5MeAowsI/gkqsK1jde3MG5SOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvZDViM2ZhNDctNDdjYi0z NWVjLTk4YTQtNGNiOWE0NmRhMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7+LXEzs/S06+easMXXgAJhQwFFMh5uqz1ZGAXvF1silnGpeT5laz1G WDS3fRQudwcEY9oxPRfrgOkJdiMEyGSTay/WspH+jiNdduBro1ELaw4sKRTvJCsq AfKiPhUz1oX626nkk5zgfDzDeepviNHh5iJZ5pFE8vOp9SsfFhFl1DTu1BzelLJ7 oGAyh55n+ISMFybosgeEBn4hpcVtO0LGpJNuapUh5DAvR8hf2PBNpSMqQY+MPGV3 SovjpTiB8QQAippdbUIJNIdR849PD44mYu4RMnn+HHKqdp18dfdntqVdUncaRe/1 PFGqsqZvsreFsU6auUFJ9c8hUUUeXEs= -----END CERTIFICATE-----Generated at Fri Mar 14 08:17:11 2025 by rpki-client