$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/494719a3-67fe-3c57-99e1-3e7c62672a3c.roa File: 494719a3-67fe-3c57-99e1-3e7c62672a3c.roa (raw, json) Hash identifier: 2NCpguQN3k4ySaOyPh4B6B/QD1gMUiNosEoxNMA/Qwg= Subject key identifier: DF:C8:75:90:C8:62:64:5F:0B:B9:52:A2:25:F6:DA:B0:92:4F:C6:CF Certificate issuer: /CN=a32aa006-ef22-4905-8c82-2651c19859b9 Certificate serial: 010D0C9F4328584960541B5FE1B0BEAEEB6A3C00 Authority key identifier: 1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/494719a3-67fe-3c57-99e1-3e7c62672a3c.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 19350 IP address blocks: 199.212.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:1b:5f:e1:b0:be:ae:eb:6a:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32aa006-ef22-4905-8c82-2651c19859b9 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=8768f7fd-afc0-4cc8-8803-0904549e2d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:53:d7:0e:d0:93:18:7e:64:21:d9:3d:2e:84: fd:15:f0:ef:41:59:ec:0a:4f:14:ec:69:d6:10:47: 4b:2e:ea:d9:d5:e2:47:69:71:91:d5:6d:4c:a8:58: ee:5f:3d:51:d6:6d:6d:2a:8c:5b:f8:05:0e:56:4e: a6:b6:d4:10:38:16:c3:16:2c:29:60:63:94:f0:b3: 19:16:b9:78:c1:90:f9:ca:b0:17:55:5a:ad:97:73: df:25:8b:a3:4b:bc:7f:68:f8:96:0f:2d:82:4b:88: 89:2d:1e:4f:80:0f:02:91:f2:0d:f4:0b:72:30:4e: a0:1e:56:76:a5:55:c4:8f:4e:20:6a:a8:1c:c9:e7: 25:00:bc:48:82:2c:95:bd:6c:c5:b6:79:88:46:31: 5d:34:f3:7e:83:bd:03:2a:95:99:e2:bb:59:a4:c4: 3e:bb:df:2a:b2:28:73:e3:3a:59:44:5a:e7:2a:c1: e7:09:31:4d:03:6a:42:b1:88:3b:48:e5:c0:01:7c: 1d:34:f2:66:c3:3e:7a:8a:d3:4a:b3:44:82:cc:f5: e0:26:05:99:c6:0c:5f:d3:e2:86:92:62:2e:2b:38: c6:a7:87:2d:c0:d4:ae:4f:d7:ea:b4:5d:e4:d4:7d: d0:2e:8c:18:e1:5e:99:80:0f:52:6f:e3:cf:77:69: 57:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C8:75:90:C8:62:64:5F:0B:B9:52:A2:25:F6:DA:B0:92:4F:C6:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/494719a3-67fe-3c57-99e1-3e7c62672a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl X509v3 Authority Key Identifier: keyid:1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer sbgp-ipAddrBlock: critical IPv4: 199.212.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:4b:3b:ee:d9:05:bb:53:75:8c:92:bd:a2:8f:e1:39:22:6a: e7:8e:71:d8:e0:01:27:f0:e3:fc:e1:21:04:ca:64:28:87:c6: 3d:5a:c6:5b:86:ea:b0:6c:91:66:1a:72:40:95:0c:57:70:c5: 98:98:0a:09:30:33:f1:33:39:c0:30:39:5b:a3:bc:9f:a7:aa: 7c:77:2b:90:46:10:2f:ae:8c:7e:e9:4b:1f:de:9c:cf:43:29: 03:c5:03:64:4c:7d:d1:35:b7:cf:e8:78:63:28:d4:5d:84:62: 6e:f5:c5:65:89:7d:c0:f2:a7:09:e5:de:83:da:cd:57:b2:b9: 00:f8:31:4d:3a:55:db:81:8b:93:a5:9c:b4:93:df:ca:d9:6b: 89:36:f5:3d:d2:9d:82:5d:0e:a9:06:4a:88:33:46:3d:ea:8f: 7b:fa:23:77:29:a0:0a:5b:48:27:56:03:91:db:70:33:5d:3a: 8c:b1:7b:a5:f2:63:6e:2f:61:0f:52:1e:23:17:87:a5:a4:fa: 9d:7d:47:48:d4:89:bf:81:08:33:55:87:f1:a1:44:c6:41:9b: c4:41:fc:0a:73:71:37:38:3f:c4:4f:2f:68:d5:a6:00:f2:21: 1d:9c:90:06:91:77:97:64:67:e2:77:e6:62:26:81:24:12:d9: f0:86:e0:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBtf4bC+rutqPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYWEwMDYtZWYyMi00OTA1LThjODItMjY1MWMxOTg1 OWI5MB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk ODc2OGY3ZmQtYWZjMC00Y2M4LTg4MDMtMDkwNDU0OWUyZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglPXDtCTGH5kIdk9LoT9FfDvQVnsCk8U7GnW EEdLLurZ1eJHaXGR1W1MqFjuXz1R1m1tKoxb+AUOVk6mttQQOBbDFiwpYGOU8LMZ Frl4wZD5yrAXVVqtl3PfJYujS7x/aPiWDy2CS4iJLR5PgA8CkfIN9AtyME6gHlZ2 pVXEj04gaqgcyeclALxIgiyVvWzFtnmIRjFdNPN+g70DKpWZ4rtZpMQ+u98qsihz 4zpZRFrnKsHnCTFNA2pCsYg7SOXAAXwdNPJmwz56itNKs0SCzPXgJgWZxgxf0+KG kmIuKzjGp4ctwNSuT9fqtF3k1H3QLowY4V6ZgA9Sb+PPd2lXcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/IdZDIYmRfC7lSoiX22rCST8bPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMzJh YTAwNi1lZjIyLTQ5MDUtOGM4Mi0yNjUxYzE5ODU5YjkvNDk0NzE5YTMtNjdmZS0z YzU3LTk5ZTEtM2U3YzYyNjcyYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTMyYWEwMDYtZWYyMi00OTA1LThj ODItMjY1MWMxOTg1OWI5L2EzMmFhMDA2LWVmMjItNDkwNS04YzgyLTI2NTFjMTk4 NTliOS5jcmwwHwYDVR0jBBgwFoAUGrFG1onIkxMYcuWM1qGomay6nk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMzJhYTAwNi1lZjIyLTQ5MDUtOGM4Mi0yNjUx YzE5ODU5YjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9QaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1LO+7ZBbtTdYySvaKP4TkiaueOcdjgASfw4/zhIQTKZCiHxj1axluG 6rBskWYackCVDFdwxZiYCgkwM/EzOcAwOVujvJ+nqnx3K5BGEC+ujH7pSx/enM9D KQPFA2RMfdE1t8/oeGMo1F2EYm71xWWJfcDypwnl3oPazVeyuQD4MU06VduBi5Ol nLST38rZa4k29T3SnYJdDqkGSogzRj3qj3v6I3cpoApbSCdWA5HbcDNdOoyxe6Xy Y24vYQ9SHiMXh6Wk+p19R0jUib+BCDNVh/GhRMZBm8RB/ApzcTc4P8RPL2jVpgDy IR2ckAaRd5dkZ+J35mImgSQS2fCG4F4= -----END CERTIFICATE-----Generated at Thu Apr 10 14:13:31 2025 by rpki-client