$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa File: 9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa (raw, json) Hash identifier: ohDmwULvvL8mn5RxQNc6qBOJSJtiFbG7WZa3MJeeISE= Subject key identifier: 45:7C:9E:72:3D:68:20:2E:AD:B2:3C:92:08:64:90:F0:0C:30:1D:11 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F432858496FAF12B0DB68EC1205679B40 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 32771 IP address blocks: 199.247.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:12:b0:db:68:ec:12:05:67:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=13494db8-0e6f-4451-8825-3a811c7e6672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:19:0c:fc:f4:ce:18:44:9c:1a:1e:c4:eb: e3:d9:8e:41:4c:4c:38:1e:c5:bb:01:4a:a5:9e:92: ae:6d:59:df:64:59:05:0a:5e:46:f4:c2:95:3c:14: 3b:3e:2b:3e:6d:ea:35:3b:b6:d3:e1:72:3f:0d:d2: f4:08:1c:55:d6:a6:27:73:ac:6b:c7:ad:5f:ba:b0: 2c:87:d4:1c:94:70:60:2d:e6:11:4a:12:f1:42:0e: 81:05:64:b5:6f:4c:58:1d:92:ea:4d:ef:5e:16:f9: 42:de:c8:dc:65:90:c3:69:95:2e:44:b7:f2:22:7a: 29:84:6e:e2:cf:8d:37:8f:56:84:dd:e1:1d:e1:1d: e8:5c:68:ec:8d:b1:54:92:b5:41:71:cd:4d:0a:c7: 5a:c4:9d:b5:d6:00:e1:66:2f:06:33:2a:d2:96:4a: 90:dc:d2:80:65:75:58:47:32:b9:52:d8:a7:38:dd: d2:4e:a2:69:ab:da:27:3d:b9:db:e1:bd:71:8c:cb: 77:27:fc:30:87:fd:0e:91:01:be:8b:6a:3c:9b:28: 33:e0:e0:4b:22:d1:5a:d6:73:26:26:d1:16:3a:4f: c3:20:d4:0c:45:8e:c7:28:c4:2f:b0:82:9a:fe:9d: e6:ff:2a:92:96:ed:cd:cd:4c:24:57:81:49:90:65: 72:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7C:9E:72:3D:68:20:2E:AD:B2:3C:92:08:64:90:F0:0C:30:1D:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv4: 199.247.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ee:31:5e:88:93:8a:e6:ea:4e:de:5a:ab:8b:da:8a:4d:fa: 18:92:74:71:83:07:24:fd:47:a7:96:ab:f2:45:9c:9f:5c:1d: 33:64:f3:15:24:44:56:f0:76:a6:23:ad:68:32:61:19:56:ea: 0a:d0:52:f2:1c:8e:b4:1d:54:2a:d9:fe:86:58:cb:99:f7:42: ef:f5:f5:6d:45:03:8f:82:34:f8:43:e2:9d:65:64:4e:d5:6f: cb:67:9a:2e:ee:27:23:55:d8:4b:93:15:91:02:4c:7e:3a:de: 8b:cf:81:5a:65:ad:04:47:5b:89:df:f0:85:2a:e2:61:a1:35: fc:95:d8:1d:a0:ea:47:17:28:40:af:81:8f:53:ca:0f:5f:19: e4:63:4c:6e:0f:98:75:7a:28:67:52:ad:9f:f2:84:dd:af:2c: 8b:a6:83:8d:b9:e1:53:1a:60:05:ec:d6:fc:38:a3:37:9c:38: d7:39:19:a0:8e:d4:e5:1f:e3:69:6b:cd:a8:b1:c0:d3:40:ee: 6b:e7:5b:98:08:a8:f1:bc:9d:fa:12:9d:86:2d:45:95:7e:19: 9c:8f:c2:94:1a:c9:02:03:81:a3:8e:e1:67:cd:93:87:02:c1: a2:3a:7b:4d:f0:49:39:bc:dc:db:09:f4:e4:53:ca:62:35:59: be:71:ad:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxKw22jsEgVnm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk MTM0OTRkYjgtMGU2Zi00NDUxLTg4MjUtM2E4MTFjN2U2NjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmgZDPz0zhhEnBoexOvj2Y5BTEw4HsW7AUql npKubVnfZFkFCl5G9MKVPBQ7Pis+beo1O7bT4XI/DdL0CBxV1qYnc6xrx61furAs h9QclHBgLeYRShLxQg6BBWS1b0xYHZLqTe9eFvlC3sjcZZDDaZUuRLfyInophG7i z403j1aE3eEd4R3oXGjsjbFUkrVBcc1NCsdaxJ211gDhZi8GMyrSlkqQ3NKAZXVY RzK5UtinON3STqJpq9onPbnb4b1xjMt3J/wwh/0OkQG+i2o8mygz4OBLItFa1nMm JtEWOk/DINQMRY7HKMQvsIKa/p3m/yqSlu3NzUwkV4FJkGVyhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV8nnI9aCAurbI8kghkkPAMMB0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvOWJhOWVmNmMtODVlNy0z YjcxLTg5ZTctNDFiMmJkMzE0ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/eZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnuMV6Ik4rm6k7eWquL2opN+hiSdHGDByT9R6eWq/JFnJ9cHTNk8xUk RFbwdqYjrWgyYRlW6grQUvIcjrQdVCrZ/oZYy5n3Qu/19W1FA4+CNPhD4p1lZE7V b8tnmi7uJyNV2EuTFZECTH463ovPgVplrQRHW4nf8IUq4mGhNfyV2B2g6kcXKECv gY9Tyg9fGeRjTG4PmHV6KGdSrZ/yhN2vLIumg4254VMaYAXs1vw4ozecONc5GaCO 1OUf42lrzaixwNNA7mvnW5gIqPG8nfoSnYYtRZV+GZyPwpQayQIDgaOO4WfNk4cC waI6e03wSTm83NsJ9ORTymI1Wb5xrdg= -----END CERTIFICATE-----Generated at Fri Apr 18 14:49:46 2025 by rpki-client