$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/791d8725-8c6b-386c-aedf-32dc9425d834.roa File: 791d8725-8c6b-386c-aedf-32dc9425d834.roa (raw, json) Hash identifier: DwUdCq3fPB/o11RD3t8BOyP/ZO9OetVEWB4Vkg38ApQ= Subject key identifier: F5:47:F1:14:F5:3E:5B:6F:39:4F:2D:1F:72:FC:FC:CE:00:A8:F3:E6 Certificate issuer: /CN=aae4f0de-2296-435c-b411-b16981804498 Certificate serial: 010D0C9F432858494005B3ED0A572159A9358A80 Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/791d8725-8c6b-386c-aedf-32dc9425d834.roa Signing time: Thu 20 Mar 2025 11:17:03 +0000 ROA not before: Thu 20 Mar 2025 11:17:03 +0000 ROA not after: Wed 18 Jun 2025 11:17:03 +0000 asID: 9304 IP address blocks: 199.58.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:05:b3:ed:0a:57:21:59:a9:35:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae4f0de-2296-435c-b411-b16981804498 Validity Not Before: Mar 20 11:17:03 2025 GMT Not After : Jun 18 11:17:03 2025 GMT Subject: CN=aaf2a3b4-4be9-4b11-bf52-f32ca8593a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:6d:5e:bf:85:ca:7a:55:c4:83:d1:77:5b: dd:62:1c:7d:30:b6:c8:4b:da:d1:c5:80:83:18:b3: 9d:3f:98:72:62:e3:85:9e:05:e1:8e:7b:eb:ad:c4: 64:c1:2a:f4:7f:38:95:30:92:68:06:2d:8e:be:71: 84:8f:21:b0:c2:c0:cf:8f:54:57:c7:96:48:2f:e5: 09:c5:11:7d:8f:f1:b5:c1:74:ed:f0:de:20:41:72: c1:7e:18:16:87:ac:a7:57:90:76:19:db:53:f4:43: e5:0e:52:5c:78:52:f2:05:f0:87:f6:8b:7c:da:e8: 92:3e:22:5d:98:56:9c:35:bd:b2:3c:6f:52:37:0a: 96:cc:27:bd:84:75:a0:cc:8c:3f:5a:69:69:31:dd: c6:9f:fb:b0:80:e6:4d:00:c9:57:38:79:fa:d1:83: a1:39:66:44:45:99:78:31:00:06:4c:3c:4f:ac:4d: 1b:c0:60:35:e9:20:f0:8e:69:dd:ee:68:17:a1:97: 73:2d:f8:12:5f:a7:9b:39:59:37:65:1f:67:88:45: 47:d7:8a:96:eb:52:6f:81:15:87:f7:35:0d:94:16: 53:8c:cd:41:94:db:d4:9d:33:e6:c4:f6:95:ef:aa: 3c:38:f4:2e:d1:68:d4:4a:0f:59:c1:7f:4f:be:9f: 21:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:47:F1:14:F5:3E:5B:6F:39:4F:2D:1F:72:FC:FC:CE:00:A8:F3:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/791d8725-8c6b-386c-aedf-32dc9425d834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl X509v3 Authority Key Identifier: keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer sbgp-ipAddrBlock: critical IPv4: 199.58.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a8:1d:cf:f6:a0:7b:60:88:c4:cb:c2:3a:e6:13:00:14:6a: 89:c0:71:e1:fb:52:78:21:a2:37:f1:0c:53:47:dd:a8:26:86: 40:9a:93:8d:cd:ee:e0:53:46:83:e7:28:3c:f6:43:77:d6:6e: 4e:c9:b8:8d:db:1a:9b:17:25:b6:c8:42:84:74:dc:71:4a:6b: 56:84:92:0d:59:e6:ae:7b:5b:8f:36:11:7e:98:98:d5:1c:ea: db:1e:76:df:e8:80:5e:c3:c6:39:eb:28:84:c0:b6:50:5b:b7: 8a:67:96:51:ef:94:d1:89:e0:15:e4:ff:33:9e:cd:48:16:6c: 71:04:fb:54:0a:4f:06:8b:6c:cb:e4:ce:e9:4a:e4:b8:68:9a: 56:e8:0b:e2:c5:58:2b:52:88:ca:3d:6a:64:65:d9:fd:e2:22: 7c:3b:e9:94:34:83:6e:74:7b:61:f3:bd:3a:f9:0c:74:9c:f3: df:ed:84:e9:b2:ac:be:09:46:7b:57:2d:00:fd:34:d4:f9:18: 62:27:2b:e6:fd:1c:e4:45:89:57:c1:71:7c:ce:0b:cf:2d:65: df:09:a0:16:c9:72:62:3c:96:6c:78:23:dc:ec:4e:c6:77:51: 63:a2:6f:13:1d:09:c8:31:90:96:09:5d:dd:a5:a3:3f:4d:05: 86:bc:d1:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElABbPtClchWak1ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0 NDk4MB4XDTI1MDMyMDExMTcwM1oXDTI1MDYxODExMTcwM1owLzEtMCsGA1UEAxMk YWFmMmEzYjQtNGJlOS00YjExLWJmNTItZjMyY2E4NTkzYTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hFtXr+FynpVxIPRd1vdYhx9MLbIS9rRxYCD GLOdP5hyYuOFngXhjnvrrcRkwSr0fziVMJJoBi2OvnGEjyGwwsDPj1RXx5ZIL+UJ xRF9j/G1wXTt8N4gQXLBfhgWh6ynV5B2GdtT9EPlDlJceFLyBfCH9ot82uiSPiJd mFacNb2yPG9SNwqWzCe9hHWgzIw/WmlpMd3Gn/uwgOZNAMlXOHn60YOhOWZERZl4 MQAGTDxPrE0bwGA16SDwjmnd7mgXoZdzLfgSX6ebOVk3ZR9niEVH14qW61JvgRWH 9zUNlBZTjM1BlNvUnTPmxPaV76o8OPQu0WjUSg9ZwX9Pvp8hdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVH8RT1PltvOU8tH3L8/M4AqPPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0 ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvNzkxZDg3MjUtOGM2Yi0z ODZjLWFlZGYtMzJkYzk0MjVkODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFlNGYwZGUtMjI5Ni00MzVjLWI0 MTEtYjE2OTgxODA0NDk4L2FhZTRmMGRlLTIyOTYtNDM1Yy1iNDExLWIxNjk4MTgw NDQ5OC5jcmwwHwYDVR0jBBgwFoAUH9MnZE1Yua/Ff0SCTfuPtx4Yz20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5 ODE4MDQ0OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzpYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWoHc/2oHtgiMTLwjrmEwAUaonAceH7UnghojfxDFNH3agmhkCak43N 7uBTRoPnKDz2Q3fWbk7JuI3bGpsXJbbIQoR03HFKa1aEkg1Z5q57W482EX6YmNUc 6tsedt/ogF7DxjnrKITAtlBbt4pnllHvlNGJ4BXk/zOezUgWbHEE+1QKTwaLbMvk zulK5LhomlboC+LFWCtSiMo9amRl2f3iInw76ZQ0g250e2HzvTr5DHSc89/thOmy rL4JRntXLQD9NNT5GGInK+b9HORFiVfBcXzOC88tZd8JoBbJcmI8lmx4I9zsTsZ3 UWOibxMdCcgxkJYJXd2loz9NBYa80f8= -----END CERTIFICATE-----Generated at Sat Apr 5 03:56:54 2025 by rpki-client