$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/cee5e224-e222-3e38-b4fe-225e5e2c6216.roa File: cee5e224-e222-3e38-b4fe-225e5e2c6216.roa (raw, json) Hash identifier: VYsX0Er4tLjrppxyhDO7ksx5oFZMVcT655OanUTwHe0= Subject key identifier: 64:9E:21:66:81:0F:AC:B2:89:65:C8:A6:FA:35:5A:B7:0B:A1:20:10 Certificate issuer: /CN=1a74d4fe-43d0-4bc2-83fe-f1908308e46c Certificate serial: 010D0C9F432858494E2EB22E041F4C9EC6826E80 Authority key identifier: B1:ED:9F:BD:D4:7E:67:B8:ED:9F:5B:BF:99:2B:78:41:F4:02:8C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/cee5e224-e222-3e38-b4fe-225e5e2c6216.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 226 IP address blocks: 192.124.99.0/24 maxlen: 24 192.124.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b2:2e:04:1f:4c:9e:c6:82:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a74d4fe-43d0-4bc2-83fe-f1908308e46c Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=4413627d-b8f7-48d4-9cc9-74bce8622f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:2e:ce:65:99:20:48:20:f1:e2:3e:b5:34: 79:67:cf:df:71:81:83:de:dc:17:f4:3d:ef:c1:ed: 66:1d:26:fb:29:4e:09:67:96:da:1c:51:39:67:44: 46:ff:6d:a5:c7:64:75:b8:ca:62:e2:3e:83:92:ec: e7:f1:f7:2f:71:d5:a8:b7:92:33:f6:69:13:6e:95: 05:57:1a:47:18:c7:ea:1a:55:3d:d5:35:cb:55:fc: 1c:ea:f8:28:cc:25:3f:05:53:58:5d:7e:d7:9a:45: 07:0d:de:9b:df:36:9c:2c:31:4e:62:d4:f4:b3:66: 5c:f6:b2:ea:60:44:77:07:d1:2f:6c:58:96:5b:75: 05:34:71:fe:ce:7b:73:44:de:fc:92:0e:69:4f:f4: b6:ab:55:3c:37:52:ab:59:75:1e:0e:bf:e2:56:18: 90:bb:e4:31:2a:57:7a:6f:6a:93:a4:08:99:e3:e8: ea:eb:0d:da:97:67:a4:3a:ff:d7:35:61:0b:ab:df: e7:92:7b:7c:06:70:06:48:42:fd:ca:18:69:9e:12: b8:41:30:8a:aa:56:6e:c6:e7:0b:8f:54:6c:d7:e9: 94:e6:cb:ab:b5:6e:e6:c7:1e:ca:cb:f5:fd:41:96: 73:b0:24:3d:b5:95:e5:66:ec:c4:52:82:f4:ab:fd: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9E:21:66:81:0F:AC:B2:89:65:C8:A6:FA:35:5A:B7:0B:A1:20:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/cee5e224-e222-3e38-b4fe-225e5e2c6216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.crl X509v3 Authority Key Identifier: keyid:B1:ED:9F:BD:D4:7E:67:B8:ED:9F:5B:BF:99:2B:78:41:F4:02:8C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer sbgp-ipAddrBlock: critical IPv4: 192.124.99.0-192.124.100.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:3e:6f:8e:3c:a3:26:02:4b:f7:52:f7:71:7e:a8:d9:91:17: 66:ae:47:2e:c7:8a:96:eb:4b:7e:17:7c:13:a1:5c:ae:04:41: 8c:01:5c:c0:32:b7:c3:6c:40:04:9f:cd:83:db:b0:b4:13:77: 61:b4:13:8b:84:7b:56:9b:fb:a4:fa:2c:20:85:fd:0a:e7:7c: 71:8d:cd:66:4d:30:f2:65:f4:e7:54:ee:fc:ef:2a:a5:6c:56: 82:37:be:6f:76:03:b5:35:9b:37:c1:36:bf:21:ff:24:44:e4: c0:cf:ac:17:cc:18:ba:52:84:a8:5e:ec:3a:f5:a8:3b:ab:27: 24:93:7a:11:8d:88:aa:c9:06:02:1e:e7:c5:09:96:e5:94:af: 2a:15:3a:33:07:23:b8:aa:31:5b:7d:ac:03:e9:8d:9d:95:0e: 9a:e5:89:6c:7b:cf:f7:76:b7:c7:4a:b5:c1:c2:a7:a1:0f:d4: bd:83:75:48:f3:a8:2d:58:09:66:05:bf:97:ce:2f:6f:06:34: 5e:28:eb:0b:50:af:91:b8:a3:24:05:66:e1:c9:30:f2:25:cb: fd:fb:71:4b:1f:a6:fa:b4:0d:76:fe:d9:c1:d3:da:34:68:70: c2:a7:4a:5f:87:9b:13:df:8e:f5:9f:26:ba:36:44:71:ae:4b: 36:1c:86:2f -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElOLrIuBB9MnsaCboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3NGQ0ZmUtNDNkMC00YmMyLTgzZmUtZjE5MDgzMDhl NDZjMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NDQxMzYyN2QtYjhmNy00OGQ0LTljYzktNzRiY2U4NjIyZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJIuzmWZIEgg8eI+tTR5Z8/fcYGD3twX9D3v we1mHSb7KU4JZ5baHFE5Z0RG/22lx2R1uMpi4j6Dkuzn8fcvcdWot5Iz9mkTbpUF VxpHGMfqGlU91TXLVfwc6vgozCU/BVNYXX7XmkUHDd6b3zacLDFOYtT0s2Zc9rLq YER3B9EvbFiWW3UFNHH+zntzRN78kg5pT/S2q1U8N1KrWXUeDr/iVhiQu+QxKld6 b2qTpAiZ4+jq6w3al2ekOv/XNWELq9/nknt8BnAGSEL9yhhpnhK4QTCKqlZuxucL j1Rs1+mU5surtW7mxx7Ky/X9QZZzsCQ9tZXlZuzEUoL0q/3mlwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGSeIWaBD6yyiWXIpvo1WrcLoSAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYTc0 ZDRmZS00M2QwLTRiYzItODNmZS1mMTkwODMwOGU0NmMvY2VlNWUyMjQtZTIyMi0z ZTM4LWI0ZmUtMjI1ZTVlMmM2MjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWE3NGQ0ZmUtNDNkMC00YmMyLTgz ZmUtZjE5MDgzMDhlNDZjLzFhNzRkNGZlLTQzZDAtNGJjMi04M2ZlLWYxOTA4MzA4 ZTQ2Yy5jcmwwHwYDVR0jBBgwFoAUse2fvdR+Z7jtn1u/mSt4QfQCjJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYTc0ZDRmZS00M2QwLTRiYzItODNmZS1mMTkw ODMwOGU0NmMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAfGMD BADAfGQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAUT5vjjyjJgJL91L3cX6o2ZEXZq5HLseKlutLfhd8E6Fc rgRBjAFcwDK3w2xABJ/Ng9uwtBN3YbQTi4R7Vpv7pPosIIX9Cud8cY3NZk0w8mX0 51Tu/O8qpWxWgje+b3YDtTWbN8E2vyH/JETkwM+sF8wYulKEqF7sOvWoO6snJJN6 EY2IqskGAh7nxQmW5ZSvKhU6MwcjuKoxW32sA+mNnZUOmuWJbHvP93a3x0q1wcKn oQ/UvYN1SPOoLVgJZgW/l84vbwY0XijrC1CvkbijJAVm4ckw8iXL/ftxSx+m+rQN dv7ZwdPaNGhwwqdKX4ebE9+O9Z8mujZEca5LNhyGLw== -----END CERTIFICATE-----Generated at Mon Apr 7 04:41:22 2025 by rpki-client