$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa File: 9b5be190-61be-3524-9a29-a7fac18f508a.roa (raw, json) Hash identifier: gy7HDOjYrqd0CxjUVr2S+LsOHKdOAHfOFq+jmp32SF0= Subject key identifier: B8:6C:AB:3A:87:11:51:1B:A6:39:8F:28:C0:02:6A:F4:38:AB:42:4C Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F43285848FD56B9B5551C90A175ECDF80 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 212384 IP address blocks: 199.48.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b9:b5:55:1c:90:a1:75:ec:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=4afc5c9e-d37b-4f74-9619-0ee37209263c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:56:a2:e5:b3:c2:b4:0a:27:3a:14:44:45: e4:1b:0c:c2:fe:3b:ef:92:c9:fa:93:be:bc:05:89: e1:2b:4e:d5:39:e1:23:36:b2:75:e5:d1:f8:be:ea: 50:13:df:8f:7a:f2:8c:ba:48:62:42:ec:08:3b:fa: e6:39:0e:67:76:8b:f3:55:f7:c6:a8:45:24:40:97: de:f3:52:e7:90:58:42:45:a8:9a:bc:1e:57:d7:af: 50:c3:e1:c1:b2:52:ff:5c:93:61:8e:13:a8:89:d6: 64:93:c6:4d:c5:c0:1b:74:6c:3f:df:71:e8:09:e7: 93:72:87:91:8c:8a:3e:5b:16:33:ec:1a:51:fe:01: 6c:3f:94:ad:bc:36:a0:64:d1:50:f2:60:c6:14:51: 00:8c:ea:88:48:fe:f2:c7:a4:d7:9c:de:ed:9f:f7: 74:b4:af:7e:05:0b:c0:46:5a:84:d5:67:a8:c2:a3: 13:a1:a7:d1:f3:39:cd:cc:cd:e9:ac:cc:e4:22:98: 30:f7:ea:f3:c6:70:d3:43:32:64:79:c3:68:a1:c5: c5:c5:77:ac:c5:5e:b8:1e:f8:9d:a2:12:67:6e:4e: e5:42:05:3b:98:ce:0f:81:c6:82:11:51:9d:df:68: f2:32:cc:4b:de:7d:1d:82:2d:ab:de:cf:f7:f7:65: 89:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6C:AB:3A:87:11:51:1B:A6:39:8F:28:C0:02:6A:F4:38:AB:42:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.48.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:3d:af:4d:9f:ff:43:fe:b9:d7:b3:85:a2:8e:80:e1:8b:19: f9:12:c3:38:5d:c6:d7:1b:5e:fe:15:b8:d4:eb:b2:8b:85:30: dc:6e:b8:c5:24:b9:4c:6d:41:48:7b:ce:eb:a0:da:bd:6a:c9: ea:a0:b2:23:f5:0a:a0:d5:7d:bf:75:1e:25:df:47:5c:ac:2d: 0c:b8:d3:c3:eb:3e:59:92:4f:da:59:d0:ca:96:50:20:87:99: b2:01:dd:dc:a5:64:c4:08:b9:0f:c0:2a:00:e9:a0:7e:da:6f: 02:8f:98:d0:99:7e:08:e0:92:15:b2:ad:55:45:ba:da:63:22: 12:95:56:6a:9f:36:4c:4b:b8:a2:9d:0a:a6:d1:13:06:7b:42: e0:25:f1:64:d0:ec:7e:7d:e9:d6:cb:f2:b9:40:f2:9f:53:d4: 2a:92:cb:56:5b:bf:31:d5:89:4d:c9:7f:de:1e:c2:79:fc:79: c1:67:ab:79:5b:99:ac:da:cb:41:dd:9a:88:a5:6e:27:61:f6: 7c:f0:18:37:05:67:64:a9:2f:8d:0f:7e:2b:15:3f:b4:af:0d: ad:32:b0:5a:09:b1:56:bf:48:16:8b:53:ab:e4:5a:a4:83:f5: 9c:ac:c1:9f:b6:db:57:3b:ed:59:4a:5f:97:06:17:bd:df:77: d0:73:21:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vrm1VRyQoXXs34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGFmYzVjOWUtZDM3Yi00Zjc0LTk2MTktMGVlMzcyMDkyNjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHNWouWzwrQKJzoUREXkGwzC/jvvksn6k768 BYnhK07VOeEjNrJ15dH4vupQE9+PevKMukhiQuwIO/rmOQ5ndovzVffGqEUkQJfe 81LnkFhCRaiavB5X169Qw+HBslL/XJNhjhOoidZkk8ZNxcAbdGw/33HoCeeTcoeR jIo+WxYz7BpR/gFsP5StvDagZNFQ8mDGFFEAjOqISP7yx6TXnN7tn/d0tK9+BQvA RlqE1WeowqMToafR8znNzM3prMzkIpgw9+rzxnDTQzJkecNoocXFxXesxV64Hvid ohJnbk7lQgU7mM4PgcaCEVGd32jyMsxL3n0dgi2r3s/392WJRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhsqzqHEVEbpjmPKMACavQ4q0JMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOWI1YmUxOTAtNjFiZS0z NTI0LTlhMjktYTdmYWMxOGY1MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABk9r02f/0P+udezhaKOgOGLGfkSwzhdxtcbXv4VuNTrsouFMNxuuMUk uUxtQUh7zuug2r1qyeqgsiP1CqDVfb91HiXfR1ysLQy408PrPlmST9pZ0MqWUCCH mbIB3dylZMQIuQ/AKgDpoH7abwKPmNCZfgjgkhWyrVVFutpjIhKVVmqfNkxLuKKd CqbREwZ7QuAl8WTQ7H596dbL8rlA8p9T1CqSy1ZbvzHViU3Jf94ewnn8ecFnq3lb mazay0Hdmoilbidh9nzwGDcFZ2SpL40PfisVP7SvDa0ysFoJsVa/SBaLU6vkWqSD 9ZyswZ+221c77VlKX5cGF73fd9BzIY8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:07:56 2025 by rpki-client