$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa File: a24dc796-a354-3534-8807-c7f4b3475218.roa (raw, json) Hash identifier: JG6ARTW46ewZPkDzAJcIuBWIfFYYDpkOaXPXbXS3yX4= Subject key identifier: 26:16:60:63:65:98:75:87:26:AF:FB:AF:BC:40:3F:07:76:D3:0A:AF Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F43285849203C14D16DE9B87A19D65780 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 11052 IP address blocks: 199.249.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:14:d1:6d:e9:b8:7a:19:d6:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=6c9aee76-b4f3-490c-85ed-b2b41c2db3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:29:ca:3f:f0:73:a1:e6:5a:69:49:aa:29:ff: 53:2c:5f:56:2e:52:e5:28:b8:17:35:41:d3:f5:0e: 58:be:17:cd:fa:8e:ba:f6:a6:d0:27:8f:69:18:10: 8b:ca:30:6e:07:5b:ed:21:a7:7e:31:d4:ce:df:3b: 43:d4:6d:2e:2f:0c:c6:1a:40:90:d9:ec:f1:0b:a0: ac:6b:39:2a:e1:0a:51:c9:0a:4e:ee:74:16:9d:d7: 4c:a7:1b:4c:6a:40:7e:ec:e6:0f:ec:f7:f4:e8:99: c0:ce:56:e7:c0:b1:d3:2a:f6:73:87:01:04:fe:14: fa:76:f7:c8:70:c8:2f:59:cb:ce:f6:c2:9b:16:61: 84:0d:50:11:eb:5c:a0:e3:84:55:3e:65:3e:3a:f5: f9:cb:f1:8f:c5:74:63:65:8b:fd:ba:d7:eb:03:d1: 8f:da:a2:35:2a:3c:ae:f4:68:98:10:fb:74:e0:16: fa:33:14:ed:04:c7:38:81:e9:c8:0d:c6:54:44:c9: e2:ed:84:83:33:8e:87:bf:80:a1:58:1f:97:0c:90: a8:05:5c:c2:51:f5:e2:ed:a0:e9:31:6a:34:a0:de: 65:a1:95:9e:3d:48:86:3f:20:52:e5:0e:e1:e5:26: ef:99:58:a0:b2:5a:55:20:4b:a7:dd:d8:29:bd:b0: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:16:60:63:65:98:75:87:26:AF:FB:AF:BC:40:3F:07:76:D3:0A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:5a:e2:27:b4:51:bc:c8:cb:a0:d4:1d:56:23:42:ba:e1:a8: 6a:40:1a:03:6e:59:d3:f9:98:b5:f4:a1:4d:b2:50:7f:55:44: e6:ef:3b:e8:36:31:cf:f2:4c:51:1a:c7:b1:9c:79:20:4f:ba: 3e:6e:08:3e:ce:f2:3f:60:c6:07:47:31:ce:05:6f:73:d8:c2: 0b:d3:1e:04:01:10:93:82:8b:6e:63:e3:31:bc:ac:16:ac:5b: b6:b7:59:01:4d:03:31:aa:8a:de:34:22:65:3a:43:eb:4d:f7: 17:82:8d:60:76:f2:05:85:78:29:45:08:27:00:d6:20:c2:02: 15:f2:0f:4b:fe:e2:1f:3b:52:2a:c5:2e:b6:1d:24:50:40:a0: 0a:c8:2b:99:60:99:7f:43:8d:7b:ed:00:b3:30:38:2d:c3:66: b3:b9:02:82:55:88:ca:8e:aa:22:46:30:3b:51:7f:05:ef:ef: 80:ea:a5:d9:93:27:85:ad:d2:f0:ec:65:4d:90:2e:b8:a0:05: 0b:fe:15:f5:51:59:88:8e:98:fe:9b:a9:cf:84:93:75:f4:03: e9:64:53:4c:a8:ca:df:a8:3c:ed:3d:f2:8b:34:db:ef:95:1f: 0f:ff:ea:a4:0e:17:8a:5c:b7:64:80:b2:51:52:4b:ca:98:80: 0f:29:d0:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBTRbem4ehnWV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk NmM5YWVlNzYtYjRmMy00OTBjLTg1ZWQtYjJiNDFjMmRiM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCnKP/BzoeZaaUmqKf9TLF9WLlLlKLgXNUHT 9Q5YvhfN+o669qbQJ49pGBCLyjBuB1vtIad+MdTO3ztD1G0uLwzGGkCQ2ezxC6Cs azkq4QpRyQpO7nQWnddMpxtMakB+7OYP7Pf06JnAzlbnwLHTKvZzhwEE/hT6dvfI cMgvWcvO9sKbFmGEDVAR61yg44RVPmU+OvX5y/GPxXRjZYv9utfrA9GP2qI1Kjyu 9GiYEPt04Bb6MxTtBMc4genIDcZURMni7YSDM46Hv4ChWB+XDJCoBVzCUfXi7aDp MWo0oN5loZWePUiGPyBS5Q7h5SbvmVigslpVIEun3dgpvbCgRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYWYGNlmHWHJq/7r7xAPwd20wqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYTI0ZGM3OTYtYTM1NC0z NTM0LTg4MDctYzdmNGIzNDc1MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJa4ie0UbzIy6DUHVYjQrrhqGpAGgNuWdP5mLX0oU2yUH9VRObvO+g2 Mc/yTFEax7GceSBPuj5uCD7O8j9gxgdHMc4Fb3PYwgvTHgQBEJOCi25j4zG8rBas W7a3WQFNAzGqit40ImU6Q+tN9xeCjWB28gWFeClFCCcA1iDCAhXyD0v+4h87UirF LrYdJFBAoArIK5lgmX9DjXvtALMwOC3DZrO5AoJViMqOqiJGMDtRfwXv74DqpdmT J4Wt0vDsZU2QLrigBQv+FfVRWYiOmP6bqc+Ek3X0A+lkU0yoyt+oPO098os02++V Hw//6qQOF4pct2SAslFSS8qYgA8p0LQ= -----END CERTIFICATE-----Generated at Sat Apr 12 15:23:13 2025 by rpki-client