$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/1bf7501c-bd8e-3acf-972f-792f0d551c6d.roa File: 1bf7501c-bd8e-3acf-972f-792f0d551c6d.roa (raw, json) Hash identifier: eIpjOtI2qq9xI8tmsCiYmYPmqrEjGH0WgjLRrxO9R0c= Subject key identifier: 6C:42:9C:61:F3:A0:AE:4F:13:14:D8:9D:29:82:B8:C3:D0:C6:34:13 Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F43285848F22C6E733802C57898B17000 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/1bf7501c-bd8e-3acf-972f-792f0d551c6d.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 46238 IP address blocks: 199.71.228.0/24 maxlen: 24 199.71.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6e:73:38:02:c5:78:98:b1:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=d21d3a6f-2622-4749-8959-22b4e3fd21e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:49:6d:a3:5b:dc:32:75:ae:c4:3b:67:0f:ac: f3:07:a6:ae:1f:f3:42:b1:e8:44:de:9b:46:0e:a4: 88:ec:ad:cf:1d:e3:9f:37:cd:11:3f:22:e8:89:ec: 6c:12:5f:9a:52:a7:63:0b:0d:72:ec:23:ed:06:1b: 63:b9:1b:6c:6f:f2:93:52:f1:5b:4d:9f:83:ef:31: c4:72:2c:4a:0e:54:76:f2:15:13:1e:7e:bf:5e:aa: 6e:c6:fc:eb:ab:bd:07:b3:34:42:5a:39:ca:4e:99: cb:26:42:1a:a2:22:83:6a:43:54:e6:5b:de:e0:f7: ab:0e:95:49:6c:26:89:11:3f:f2:c8:5e:55:db:cf: c3:f5:2d:96:bd:4d:eb:fd:74:f9:82:05:c4:b1:a6: 8b:c6:b3:22:d4:2c:51:2a:95:da:d3:f0:c4:ff:28: 99:0a:ab:65:72:5a:b4:c1:10:00:b6:a5:9c:93:cf: 51:39:4b:19:f5:1e:ec:d8:b1:29:d4:a6:f0:78:24: 6c:a6:9b:83:af:73:6a:48:a9:65:34:91:ef:58:ed: 4e:7e:d2:e7:25:c3:90:81:13:f0:27:4e:53:11:ad: 18:2b:6a:40:26:f5:5f:ca:13:a0:85:c8:1e:09:60: ac:c0:f2:d4:5b:60:af:c8:78:ec:db:a8:8b:29:08: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:42:9C:61:F3:A0:AE:4F:13:14:D8:9D:29:82:B8:C3:D0:C6:34:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/1bf7501c-bd8e-3acf-972f-792f0d551c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 199.71.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:33:71:1b:5d:ba:eb:be:b5:bd:de:1e:1c:02:cc:1e:55:b8: 9c:14:eb:f2:7d:e6:75:95:78:28:71:02:00:93:10:fb:72:5f: e6:54:36:00:77:37:9f:c5:f7:44:90:ff:72:2d:c2:ad:3e:1b: 6b:d0:24:62:e7:a1:5a:ae:93:49:e2:f8:a3:88:2c:48:5a:3a: 5f:03:d2:ba:99:93:08:8e:23:5b:20:2f:7a:32:d3:b5:57:b8: 09:80:66:cc:07:0a:51:6f:c2:89:89:72:a8:82:42:50:56:d0: 70:75:fd:e5:02:f4:05:70:59:ab:1b:a5:3c:4c:38:18:18:fa: 9e:d1:d4:a0:29:59:97:f1:e4:c9:a8:5e:cb:c9:da:50:77:73: ab:41:5e:a2:54:f0:04:1c:de:e1:6c:96:72:99:8a:a1:8b:fd: ab:c4:45:34:b1:ff:ad:fc:1d:20:0d:81:08:c3:6e:cf:4d:e2: 8a:77:d7:ae:f3:3f:59:d8:d1:e5:79:93:70:85:ec:cd:56:84: 23:9a:e5:92:90:60:ee:22:55:38:4f:b4:54:56:68:ec:af:09: 5a:1b:a3:83:33:7e:d2:f9:35:b3:22:35:24:96:18:ef:a8:a3: 9d:47:b8:be:40:2a:17:aa:19:4e:cc:24:51:2a:6b:e9:27:b7: bd:a1:60:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLG5zOALFeJixcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDIxZDNhNmYtMjYyMi00NzQ5LTg5NTktMjJiNGUzZmQyMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgElto1vcMnWuxDtnD6zzB6auH/NCsehE3ptG DqSI7K3PHeOfN80RPyLoiexsEl+aUqdjCw1y7CPtBhtjuRtsb/KTUvFbTZ+D7zHE cixKDlR28hUTHn6/Xqpuxvzrq70HszRCWjnKTpnLJkIaoiKDakNU5lve4PerDpVJ bCaJET/yyF5V28/D9S2WvU3r/XT5ggXEsaaLxrMi1CxRKpXa0/DE/yiZCqtlclq0 wRAAtqWck89ROUsZ9R7s2LEp1KbweCRsppuDr3NqSKllNJHvWO1OftLnJcOQgRPw J05TEa0YK2pAJvVfyhOghcgeCWCswPLUW2CvyHjs26iLKQgH7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxCnGHzoK5PExTYnSmCuMPQxjQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvMWJmNzUwMWMtYmQ4ZS0z YWNmLTk3MmYtNzkyZjBkNTUxYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0fkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKozcRtduuu+tb3eHhwCzB5VuJwU6/J95nWVeChxAgCTEPtyX+ZUNgB3 N5/F90SQ/3Itwq0+G2vQJGLnoVquk0ni+KOILEhaOl8D0rqZkwiOI1sgL3oy07VX uAmAZswHClFvwomJcqiCQlBW0HB1/eUC9AVwWasbpTxMOBgY+p7R1KApWZfx5Mmo XsvJ2lB3c6tBXqJU8AQc3uFslnKZiqGL/avERTSx/638HSANgQjDbs9N4op3167z P1nY0eV5k3CF7M1WhCOa5ZKQYO4iVThPtFRWaOyvCVobo4MzftL5NbMiNSSWGO+o o51HuL5AKheqGU7MJFEqa+knt72hYEc= -----END CERTIFICATE-----Generated at Fri Apr 11 21:35:22 2025 by rpki-client