$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f113059a-060f-34df-bf46-c5b3e720653a.roa File: f113059a-060f-34df-bf46-c5b3e720653a.roa (raw, json) Hash identifier: LL170kgKyKZmpipezlNlGwVG4CyartoXO6GsGii6rIc= Subject key identifier: 95:30:06:A6:34:C7:C4:16:2A:D6:C3:33:C9:68:C1:C9:20:6C:43:B0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BBBB7C18EF141B057FB07F00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f113059a-060f-34df-bf46-c5b3e720653a.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 99.199.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:7c:18:ef:14:1b:05:7f:b0:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=df77a13d-0e9d-4fdc-8e57-a332bf9428a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a7:ec:53:54:d7:2b:52:04:c5:62:8a:d1:05: d5:71:c3:76:2d:ca:40:78:64:d0:df:1f:18:17:ac: 5a:7a:d9:3e:91:22:37:13:99:e2:7b:57:d1:41:21: 3d:9d:8e:f9:71:b0:2d:9e:f1:e4:00:a7:96:cb:7e: dd:da:04:39:ec:5c:4a:92:ff:f7:8c:70:7b:6d:cb: b6:1d:45:1c:fc:2f:e0:e7:84:78:0b:65:39:1a:04: 3e:16:c7:fa:93:49:68:f2:06:e3:45:55:37:b7:49: 63:e4:d6:b0:2d:19:02:30:c5:e1:f0:14:93:c5:81: ef:ac:9c:8d:1f:28:32:e2:bc:d6:b9:db:9e:9e:35: 58:38:93:8b:16:7b:54:f3:1a:b3:d9:14:38:56:9d: ae:51:ba:a9:68:ce:ab:33:58:ce:58:00:40:05:78: b7:91:f9:2d:15:c8:1b:ec:de:3f:d1:1a:3a:23:86: b7:4f:c4:96:c2:7c:1c:90:9b:7c:e0:ea:39:e7:b3: ef:93:74:0f:70:e5:7c:ca:2b:64:c9:5e:f4:93:f8: 1c:a5:cd:ce:79:40:bd:15:26:06:4e:91:7c:6d:d5: b4:40:7b:18:b3:95:98:f1:a9:36:aa:75:76:d3:c3: f7:13:58:f1:bc:3a:e1:25:ee:8e:af:e2:bd:ea:d0: 1d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:30:06:A6:34:C7:C4:16:2A:D6:C3:33:C9:68:C1:C9:20:6C:43:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f113059a-060f-34df-bf46-c5b3e720653a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 99.199.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:13:8a:37:c5:fb:2e:22:08:07:88:6b:d8:97:43:c0:8c:66: dc:49:01:aa:13:6c:b8:d0:b8:c1:85:90:dc:fd:c5:fb:b2:3c: 9b:10:2d:89:fa:b1:9b:7a:3e:ff:7c:a9:8f:c4:c4:04:a9:c4: a2:7a:da:6d:30:88:79:d9:dc:93:63:10:ff:15:18:76:df:1a: 7f:2e:be:8e:09:c2:fb:27:3e:28:9b:75:3f:03:b2:9a:13:85: 99:db:fc:ab:8c:b6:b4:0c:43:c2:ce:8a:e0:d5:41:f4:d6:f4: cb:85:d6:7e:18:ad:8f:66:74:bf:7f:04:39:09:ab:30:fc:8d: 76:6a:1f:a0:b8:0d:db:75:13:75:e6:65:a6:48:a9:1d:fe:7c: c7:93:4f:6c:ba:6e:fe:6a:57:5c:9b:44:c1:86:b5:75:29:06: f3:c8:94:40:df:cc:d9:32:df:41:0e:4d:e1:b8:e4:25:41:f5: 9b:38:2c:d7:ad:db:97:e3:65:b0:11:2a:16:e8:26:0d:58:60: 77:b0:a1:79:0c:1e:e1:c6:11:94:48:e9:16:a6:2d:26:6f:76: c1:a3:da:5d:2d:1f:7f:e8:5f:29:c0:1e:20:ca:8f:84:ce:0e: 9a:9d:2a:d0:43:4f:f9:f7:28:dd:f6:00:5e:5c:8e:03:27:85: 94:47:82:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3wY7xQbBX+wfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZGY3N2ExM2QtMGU5ZC00ZmRjLThlNTctYTMzMmJmOTQyOGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqfsU1TXK1IExWKK0QXVccN2LcpAeGTQ3x8Y F6xaetk+kSI3E5nie1fRQSE9nY75cbAtnvHkAKeWy37d2gQ57FxKkv/3jHB7bcu2 HUUc/C/g54R4C2U5GgQ+Fsf6k0lo8gbjRVU3t0lj5NawLRkCMMXh8BSTxYHvrJyN Hygy4rzWuduenjVYOJOLFntU8xqz2RQ4Vp2uUbqpaM6rM1jOWABABXi3kfktFcgb 7N4/0Ro6I4a3T8SWwnwckJt84Oo557Pvk3QPcOV8yitkyV70k/gcpc3OeUC9FSYG TpF8bdW0QHsYs5WY8ak2qnV208P3E1jxvDrhJe6Or+K96tAdYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUwBqY0x8QWKtbDM8lowckgbEOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjExMzA1OWEtMDYwZi0z NGRmLWJmNDYtYzViM2U3MjA2NTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGY8eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMoTijfF+y4iCAeIa9iXQ8CMZtxJAaoTbLjQuMGFkNz9xfuyPJsQLYn6 sZt6Pv98qY/ExASpxKJ62m0wiHnZ3JNjEP8VGHbfGn8uvo4JwvsnPiibdT8DspoT hZnb/KuMtrQMQ8LOiuDVQfTW9MuF1n4YrY9mdL9/BDkJqzD8jXZqH6C4Ddt1E3Xm ZaZIqR3+fMeTT2y6bv5qV1ybRMGGtXUpBvPIlEDfzNky30EOTeG45CVB9Zs4LNet 25fjZbARKhboJg1YYHewoXkMHuHGEZRI6RamLSZvdsGj2l0tH3/oXynAHiDKj4TO DpqdKtBDT/n3KN32AF5cjgMnhZRHgpQ= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:54 2025 by rpki-client