$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c31c4613-8e00-3105-92eb-34eba8b9948a.roa File: c31c4613-8e00-3105-92eb-34eba8b9948a.roa (raw, json) Hash identifier: gqCT18fbkiGXpwoPzOYEuXeD2fTa8eD0W5pH4U2Oa70= Subject key identifier: 00:9C:1A:D1:8B:05:69:EC:C9:01:BE:8C:FC:9F:85:88:88:78:70:2B Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F432858492183FD6F9744203B2A97D340 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c31c4613-8e00-3105-92eb-34eba8b9948a.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 400039 IP address blocks: 199.101.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:fd:6f:97:44:20:3b:2a:97:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=7fe0781f-66a2-48f4-a1e0-7538dc167e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:e6:96:79:11:e1:59:c4:31:90:3e:aa:73: 3f:0b:af:96:52:15:3f:5c:0e:a5:18:37:43:59:0e: 18:d9:66:32:c1:5c:57:7b:ee:1d:60:d8:38:9a:56: dd:3b:71:15:f9:dc:9f:9a:b8:10:6b:82:55:cd:b6: 0f:ec:04:f4:c7:b5:c3:d2:32:10:0f:5b:65:f0:fc: ab:75:14:6b:d7:a8:29:78:9e:4a:c1:7a:36:35:6b: 7a:dc:dc:22:d5:79:67:6d:71:51:84:db:a3:8b:27: 62:7c:13:b7:bc:10:c1:71:24:1b:bd:c0:83:35:2c: ad:c0:fd:30:cb:fd:c0:a3:f1:6c:26:3a:01:ae:23: 8a:1d:ae:3a:35:13:fd:82:27:28:62:24:f5:c5:40: cb:4a:7c:e6:59:4f:5f:70:34:d9:01:87:e1:95:b3: ce:58:2a:d8:24:95:2e:a5:9d:3a:e5:e2:27:df:82: 95:e1:7e:ad:40:4e:5c:84:bd:02:ee:9d:37:74:56: 17:3b:43:47:71:e5:37:e2:d9:8a:f8:d6:f9:7d:f6: a8:03:55:40:70:43:43:82:e6:03:f8:30:40:31:35: 17:ac:75:97:d1:8c:6a:f4:a7:69:51:95:c3:00:de: 6c:67:38:1e:c7:b2:86:f5:40:1c:54:b5:f7:09:59: 94:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9C:1A:D1:8B:05:69:EC:C9:01:BE:8C:FC:9F:85:88:88:78:70:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c31c4613-8e00-3105-92eb-34eba8b9948a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ef:e4:be:8d:a6:f7:f7:f0:30:94:1a:96:1e:99:9d:2b:52: 73:36:09:b3:21:7d:c1:8f:32:62:19:4c:f3:26:12:a5:b6:78: e9:fb:20:3b:41:de:72:93:8d:cf:fb:55:6b:af:c6:1b:a7:d7: 63:f3:b8:75:cf:25:e4:ec:ab:06:fc:d2:e5:f6:b0:91:92:89: 6e:2b:14:88:54:21:03:e4:c4:66:87:e2:2c:d4:d9:66:7d:c0: b9:12:38:f0:c0:a5:99:22:2c:f8:01:b1:0c:06:a3:3b:14:06: d6:92:8f:47:48:76:91:0f:65:ff:bc:b7:3a:e5:d9:e7:4c:6f: f9:40:37:86:8f:88:73:92:e1:3b:4e:f5:55:b2:39:83:d0:92: e7:1f:ff:d2:f4:0c:02:b7:64:5e:6d:3f:b5:4f:cd:c3:f8:e8: 5e:44:6c:94:8b:a4:96:d6:58:aa:48:9b:16:a9:f7:0c:14:33: 5a:13:67:4d:89:b4:c5:cf:e1:0a:32:95:b6:c3:db:f2:f6:2f: c7:90:e7:28:2d:f6:8f:d7:c1:da:20:9d:24:a2:db:e7:91:ca: f6:8c:6d:69:cf:a5:3f:28:da:e0:af:09:7a:a1:07:8f:09:c8: 10:07:66:7e:27:04:78:73:c8:5a:b7:4c:c7:5b:26:f5:6d:dd: 75:df:13:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhg/1vl0QgOyqX00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk N2ZlMDc4MWYtNjZhMi00OGY0LWExZTAtNzUzOGRjMTY3ZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBPmlnkR4VnEMZA+qnM/C6+WUhU/XA6lGDdD WQ4Y2WYywVxXe+4dYNg4mlbdO3EV+dyfmrgQa4JVzbYP7AT0x7XD0jIQD1tl8Pyr dRRr16gpeJ5KwXo2NWt63Nwi1XlnbXFRhNujiydifBO3vBDBcSQbvcCDNSytwP0w y/3Ao/FsJjoBriOKHa46NRP9gicoYiT1xUDLSnzmWU9fcDTZAYfhlbPOWCrYJJUu pZ065eIn34KV4X6tQE5chL0C7p03dFYXO0NHceU34tmK+Nb5ffaoA1VAcENDguYD +DBAMTUXrHWX0Yxq9KdpUZXDAN5sZzgex7KG9UAcVLX3CVmU9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACcGtGLBWnsyQG+jPyfhYiIeHArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvYzMxYzQ2MTMtOGUwMC0z MTA1LTkyZWItMzRlYmE4Yjk5NDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPv5L6Npvf38DCUGpYemZ0rUnM2CbMhfcGPMmIZTPMmEqW2eOn7IDtB 3nKTjc/7VWuvxhun12PzuHXPJeTsqwb80uX2sJGSiW4rFIhUIQPkxGaH4izU2WZ9 wLkSOPDApZkiLPgBsQwGozsUBtaSj0dIdpEPZf+8tzrl2edMb/lAN4aPiHOS4TtO 9VWyOYPQkucf/9L0DAK3ZF5tP7VPzcP46F5EbJSLpJbWWKpImxap9wwUM1oTZ02J tMXP4QoylbbD2/L2L8eQ5ygt9o/XwdognSSi2+eRyvaMbWnPpT8o2uCvCXqhB48J yBAHZn4nBHhzyFq3TMdbJvVt3XXfE6E= -----END CERTIFICATE-----Generated at Fri Mar 14 10:26:35 2025 by rpki-client