$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa File: 3a897dcb-8200-3442-a76b-4fec09f925ce.roa (raw, json) Hash identifier: zQAMiMCBWXlexp167c7wF0tRDzIa4VsO78ScUXirZGY= Subject key identifier: 43:3A:45:22:39:CB:B7:E4:10:27:0A:5E:03:04:2B:7B:94:3D:9E:DB Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848B8F0D14FA77B6A24A916AA40 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 199.192.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d1:4f:a7:7b:6a:24:a9:16:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=57568396-0582-493e-893b-9f90b5b96328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0f:6d:db:3c:7f:97:06:69:3b:80:66:e6:1a: 77:41:f9:1e:af:39:3f:78:e0:fe:d9:49:29:44:20: 0b:a8:1d:50:9f:6d:e8:5d:db:bc:c7:57:15:65:a1: 19:48:9e:a9:6c:42:90:ac:88:2d:be:e7:ad:b6:60: 43:60:13:61:b5:ba:9c:a5:14:90:8b:c9:41:b8:9f: 7a:c8:ab:f0:7e:ca:c7:63:aa:34:2a:ac:69:2d:75: 99:cc:8d:54:83:9b:d7:a6:c0:90:56:1c:07:08:3f: 3b:0d:95:ac:5c:4f:58:6d:de:ed:49:99:0a:74:6b: cd:64:4d:c9:08:fb:8d:d4:59:54:eb:97:43:7c:9e: 25:20:9b:b8:cd:85:a3:d1:f4:bf:fb:ec:04:18:96: 6e:c0:e0:80:1d:ad:55:05:4e:83:71:56:13:e0:97: 67:85:ac:2a:a2:d0:0e:19:0f:8a:b1:23:6c:cc:cf: 69:b6:e3:a2:53:8a:b5:d2:27:0e:d1:1d:3b:d1:ba: bd:d4:18:14:ed:bb:56:e5:79:61:0f:f8:2d:ba:06: d4:56:78:d8:81:6b:f2:dd:4f:ba:76:e1:bb:ed:10: 0f:1b:69:55:6c:c1:89:f1:92:af:63:a5:82:ae:60: 67:e7:ad:26:34:33:b2:81:0f:51:8d:60:30:8a:97: 8b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3A:45:22:39:CB:B7:E4:10:27:0A:5E:03:04:2B:7B:94:3D:9E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 199.192.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c8:54:ce:75:9e:1c:8e:b5:ee:96:b9:b8:76:7e:70:3f:16: ee:03:03:66:1d:ee:0d:7b:35:30:35:dd:db:4f:c6:01:56:31: 57:e1:8c:8f:ee:47:0a:72:bd:70:69:74:31:74:90:c2:27:a6: f9:08:f5:c2:cf:2b:cb:b0:62:29:32:7b:0a:a2:0a:87:03:2c: 95:fc:fa:dc:99:21:47:c5:15:1d:db:b9:72:d9:6e:85:fb:54: fe:fd:ea:e9:de:8d:f4:1d:54:7b:0a:12:c4:5c:65:ba:e3:47: 47:76:ab:56:1f:b2:de:3d:23:39:67:66:de:50:e8:01:85:6c: c1:e9:b0:41:4e:29:9f:89:3e:d7:37:ed:95:37:03:e3:35:3b: 0d:8f:c9:ef:a5:63:1a:41:e5:cc:83:d1:4b:25:5c:ab:f9:e1: 2f:c6:ff:3b:8a:ea:a3:86:c8:11:8b:f2:39:32:fa:7d:51:69: ca:7b:ce:0f:d5:c6:4d:b7:11:20:8b:bc:eb:b6:f6:4a:38:2f: dd:15:c9:bc:26:01:20:06:c6:ae:7e:d9:97:a2:5c:18:c5:b6: 68:1c:da:2f:a0:84:6b:0b:4e:73:75:9c:21:a1:f0:7f:19:fa: 76:a1:f0:a5:41:0d:54:5e:8f:b2:05:58:db:25:09:02:0a:9d: 86:8d:07:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NFPp3tqJKkWqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk NTc1NjgzOTYtMDU4Mi00OTNlLTg5M2ItOWY5MGI1Yjk2MzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA9t2zx/lwZpO4Bm5hp3Qfkerzk/eOD+2Ukp RCALqB1Qn23oXdu8x1cVZaEZSJ6pbEKQrIgtvuettmBDYBNhtbqcpRSQi8lBuJ96 yKvwfsrHY6o0KqxpLXWZzI1Ug5vXpsCQVhwHCD87DZWsXE9Ybd7tSZkKdGvNZE3J CPuN1FlU65dDfJ4lIJu4zYWj0fS/++wEGJZuwOCAHa1VBU6DcVYT4JdnhawqotAO GQ+KsSNszM9ptuOiU4q10icO0R070bq91BgU7btW5XlhD/gtugbUVnjYgWvy3U+6 duG77RAPG2lVbMGJ8ZKvY6WCrmBn560mNDOygQ9RjWAwipeLUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM6RSI5y7fkECcKXgMEK3uUPZ7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2E4OTdkY2ItODIwMC0z NDQyLWE3NmItNGZlYzA5ZjkyNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbIVM51nhyOte6Wubh2fnA/Fu4DA2Yd7g17NTA13dtPxgFWMVfhjI/u RwpyvXBpdDF0kMInpvkI9cLPK8uwYikyewqiCocDLJX8+tyZIUfFFR3buXLZboX7 VP796unejfQdVHsKEsRcZbrjR0d2q1Yfst49IzlnZt5Q6AGFbMHpsEFOKZ+JPtc3 7ZU3A+M1Ow2Pye+lYxpB5cyD0UslXKv54S/G/zuK6qOGyBGL8jky+n1Racp7zg/V xk23ESCLvOu29ko4L90VybwmASAGxq5+2ZeiXBjFtmgc2i+ghGsLTnN1nCGh8H8Z +nah8KVBDVRej7IFWNslCQIKnYaNB/Q= -----END CERTIFICATE-----Generated at Sun Apr 6 04:32:57 2025 by rpki-client