$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/554b5153-bd14-3fa2-b11e-cd539e6e2916.roa File: 554b5153-bd14-3fa2-b11e-cd539e6e2916.roa (raw, json) Hash identifier: XqlV8tiktXNE4O/lHQWMXk5Go7ag1fI4iqGuUJuN1FQ= Subject key identifier: D3:DB:95:D5:A6:61:BE:A9:C7:7D:6B:96:5D:2E:E3:FF:02:14:17:72 Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458 Certificate serial: 010D0C9F43285848E59BCDED8D6D0DEFF22FEC00 Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/554b5153-bd14-3fa2-b11e-cd539e6e2916.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 65104 IP address blocks: 199.212.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:cd:ed:8d:6d:0d:ef:f2:2f:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=7b2c495c-0e6b-433c-91b1-020759ac200a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:21:7c:7a:25:11:3f:bf:93:d1:b7:41:b3:94: 6f:ec:f1:7b:41:b6:f1:33:b5:92:72:95:d4:48:58: ec:d4:ad:7f:fe:d5:f6:4a:f1:7b:ad:fd:5c:12:a3: c6:73:01:ea:64:5e:b7:44:b1:b5:c2:6b:f9:7f:8d: de:7d:b3:3f:fd:c8:d2:03:54:1c:7e:2e:ed:e2:46: 85:3f:3b:a2:56:29:a3:96:b9:d7:22:6d:4d:c5:0f: d4:5e:d9:be:36:a5:29:a1:45:41:f7:05:c6:66:34: 65:e4:20:aa:60:61:38:80:35:37:b4:14:76:b7:8f: 15:67:03:03:cd:d1:a2:85:2e:57:3c:15:a2:62:3e: ba:a6:c1:8b:e1:a4:18:a3:44:53:96:11:4b:a5:34: c1:75:ac:14:f5:cd:92:d9:d6:80:8d:52:2e:32:db: f8:78:57:14:36:1f:47:e8:1a:0d:c6:ba:1b:c5:c2: ac:68:19:9e:26:92:28:b0:96:df:a6:de:55:5d:22: 4e:fe:32:b4:1a:4f:87:14:ab:9e:d2:49:16:60:8e: a7:a0:ec:af:5b:5d:d3:9d:0a:15:57:d9:f0:d1:11: 72:09:09:4a:71:50:5a:6c:ae:e1:c5:6c:e6:d1:3e: 02:da:a6:26:9c:92:e4:5e:08:f8:f5:69:3d:75:0a: c6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DB:95:D5:A6:61:BE:A9:C7:7D:6B:96:5D:2E:E3:FF:02:14:17:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/554b5153-bd14-3fa2-b11e-cd539e6e2916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl X509v3 Authority Key Identifier: keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer sbgp-ipAddrBlock: critical IPv4: 199.212.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:0f:74:31:b5:90:28:93:d2:d6:72:54:b1:e9:b9:00:d6:00: 6f:c6:7b:6a:04:30:7e:72:35:2d:9f:65:44:24:cd:e9:5e:90: 42:36:b9:c8:da:22:16:ff:cd:e2:58:6a:4b:84:df:b7:58:e0: ae:2c:b2:7d:3e:73:77:ac:b5:20:79:32:9a:c1:26:94:bb:87: 75:54:86:89:8d:26:08:56:99:74:9d:d0:64:fb:85:d8:52:30: 8a:3c:1b:4e:bc:8d:4c:db:4c:1b:61:bc:50:80:c1:0c:19:7f: 5b:a8:e1:7e:ae:96:9f:c2:95:09:51:4a:60:70:d4:c4:28:20: 68:d8:aa:23:46:32:34:bb:ea:e8:c7:f9:9b:ae:2a:da:e5:0a: d3:fd:8d:41:56:91:2a:f4:d1:cc:95:94:f8:48:7b:7f:9a:d1: 5c:24:3f:a3:66:06:4b:81:7f:ac:dc:98:25:c5:a2:9a:01:75: 16:d0:91:c1:3b:c0:45:ce:3b:12:03:92:d8:5a:32:18:dc:ed: f7:92:4e:db:d6:d2:5f:39:85:89:02:9b:97:22:71:e7:b4:ca: a7:28:50:2b:ca:3e:40:0d:1d:e2:97:ad:24:17:77:33:dc:bc: 89:63:79:fd:4e:1f:e9:08:a7:be:9a:f6:09:ac:25:07:6e:37: b0:2f:57:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm83tjW0N7/Iv7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQx NDU4MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk N2IyYzQ5NWMtMGU2Yi00MzNjLTkxYjEtMDIwNzU5YWMyMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSF8eiURP7+T0bdBs5Rv7PF7QbbxM7WScpXU SFjs1K1//tX2SvF7rf1cEqPGcwHqZF63RLG1wmv5f43efbM//cjSA1Qcfi7t4kaF PzuiVimjlrnXIm1NxQ/UXtm+NqUpoUVB9wXGZjRl5CCqYGE4gDU3tBR2t48VZwMD zdGihS5XPBWiYj66psGL4aQYo0RTlhFLpTTBdawU9c2S2daAjVIuMtv4eFcUNh9H 6BoNxrobxcKsaBmeJpIosJbfpt5VXSJO/jK0Gk+HFKue0kkWYI6noOyvW13TnQoV V9nw0RFyCQlKcVBabK7hxWzm0T4C2qYmnJLkXgj49Wk9dQrGTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPbldWmYb6px31rll0u4/8CFBdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzNl ZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvNTU0YjUxNTMtYmQxNC0z ZmEyLWIxMWUtY2Q1MzllNmUyOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDMzZWY3YTctMWU1My00NDAxLTlk ZWMtMGRhMzM2NjQxNDU4LzQzM2VmN2E3LTFlNTMtNDQwMS05ZGVjLTBkYTMzNjY0 MTQ1OC5jcmwwHwYDVR0jBBgwFoAUFTCIyvk9B4N8aQIO08npMxuWMBgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEz MzY2NDE0NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9RUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcPdDG1kCiT0tZyVLHpuQDWAG/Ge2oEMH5yNS2fZUQkzelekEI2ucja Ihb/zeJYakuE37dY4K4ssn0+c3estSB5MprBJpS7h3VUhomNJghWmXSd0GT7hdhS MIo8G068jUzbTBthvFCAwQwZf1uo4X6ulp/ClQlRSmBw1MQoIGjYqiNGMjS76ujH +ZuuKtrlCtP9jUFWkSr00cyVlPhIe3+a0VwkP6NmBkuBf6zcmCXFopoBdRbQkcE7 wEXOOxIDkthaMhjc7feSTtvW0l85hYkCm5cicee0yqcoUCvKPkANHeKXrSQXdzPc vIljef1OH+kIp76a9gmsJQduN7AvVzE= -----END CERTIFICATE-----Generated at Sat Apr 5 09:45:08 2025 by rpki-client