$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/609cd494-e3b8-3d2c-8810-48e0e1b1a4e6.roa File: 609cd494-e3b8-3d2c-8810-48e0e1b1a4e6.roa (raw, json) Hash identifier: VEytYBy95BrayPbCE3btAsKYa1I3wf0nzz1OC/8m1IU= Subject key identifier: 57:F3:EA:1D:EE:C9:3F:32:5C:4E:90:9A:90:E6:B2:53:78:5E:06:05 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C581FF537449730B24A44480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/609cd494-e3b8-3d2c-8810-48e0e1b1a4e6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 199.223.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:ff:53:74:49:73:0b:24:a4:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=11eea71d-19c4-495a-8ec1-fedd98fbed00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:ac:32:67:08:34:c4:57:0a:f7:26:f4:8f: 42:6e:15:f4:e3:30:3b:ce:f4:9a:2f:c3:50:cc:9d: b8:f1:36:cd:39:2b:a6:6f:42:7a:31:49:65:09:f2: 93:4d:d2:37:42:51:ed:f2:6f:4d:fa:e9:80:75:c5: 2a:e1:5b:be:e4:da:fd:4d:91:b9:f1:cf:c9:c1:e8: c6:5f:f0:01:e6:aa:67:c6:ac:03:00:7f:43:b0:51: 66:9b:b9:a7:c3:4a:42:f5:9e:e2:b1:82:aa:c4:10: c5:ae:cb:10:37:1a:17:50:1e:82:d5:5c:e3:43:d9: a0:bc:43:3f:e7:72:8c:b1:b7:d9:33:2d:8c:d1:39: d4:03:db:9c:5d:bf:55:09:a3:68:f2:e3:74:ea:52: 85:2d:9a:d3:9f:79:f2:d3:16:a5:25:f2:36:b5:88: 89:47:11:85:13:92:ee:f7:8d:90:80:79:61:a8:91: 37:5b:c7:cb:72:cd:ca:90:e7:67:3c:16:bd:0c:e5: 54:d8:00:60:9c:c9:dc:45:ad:3d:77:30:04:9b:6b: 49:1e:d5:2c:73:25:3a:f3:fe:6a:77:dc:6e:cf:77: ec:aa:0d:57:d5:d7:ef:a0:ca:d4:20:1b:be:32:7d: 7d:22:16:6d:3e:50:6d:a7:ed:2d:32:ee:ca:2d:d1: 7a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F3:EA:1D:EE:C9:3F:32:5C:4E:90:9A:90:E6:B2:53:78:5E:06:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/609cd494-e3b8-3d2c-8810-48e0e1b1a4e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 199.223.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ec:b5:48:6d:ab:b6:4f:35:19:00:c1:13:fd:4e:be:4f:7d: 6b:09:8b:70:04:3a:12:d3:5b:a8:67:66:34:e5:60:19:af:79: c7:81:79:06:b7:b6:da:35:96:bf:37:b4:2f:16:95:c8:87:6d: 53:07:1b:a0:b8:99:24:bc:ee:23:5f:fc:67:83:9c:b2:a8:cc: ff:35:3b:67:06:e2:44:a4:22:04:6c:b6:01:64:20:9f:d4:58: 5f:a3:d7:34:37:f8:4b:40:e0:bd:d2:a5:4a:b8:51:1a:37:03: 95:d2:e5:94:f6:3c:6d:01:6e:ea:e4:e8:58:7c:f6:81:46:63: e0:43:9b:a7:5b:55:70:ae:fb:9a:50:5f:20:10:98:86:d9:dd: cf:a5:f4:48:28:f1:4b:96:96:ea:0c:bd:1f:ab:3f:7d:37:ad: 50:06:8d:73:6d:09:3e:6b:f1:6b:4b:9e:be:29:a9:c7:77:e4: f6:7d:a8:45:e0:54:33:c2:09:e1:53:63:53:6f:de:b7:55:ac: ec:0d:92:35:7a:1c:ac:29:d0:5e:6c:4f:00:5a:5c:85:f6:57: 38:dd:c5:b4:78:cc:88:2d:60:6d:c2:3f:1d:e5:33:b2:e8:f3: 22:c9:79:71:2f:a1:7e:80:fb:8a:18:a1:32:d6:14:9e:45:55: 1c:a2:f5:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgf9TdElzCySkRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTFlZWE3MWQtMTljNC00OTVhLThlYzEtZmVkZDk4ZmJlZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVasMmcINMRXCvcm9I9CbhX04zA7zvSaL8NQ zJ248TbNOSumb0J6MUllCfKTTdI3QlHt8m9N+umAdcUq4Vu+5Nr9TZG58c/JwejG X/AB5qpnxqwDAH9DsFFmm7mnw0pC9Z7isYKqxBDFrssQNxoXUB6C1VzjQ9mgvEM/ 53KMsbfZMy2M0TnUA9ucXb9VCaNo8uN06lKFLZrTn3ny0xalJfI2tYiJRxGFE5Lu 942QgHlhqJE3W8fLcs3KkOdnPBa9DOVU2ABgnMncRa09dzAEm2tJHtUscyU68/5q d9xuz3fsqg1X1dfvoMrUIBu+Mn19IhZtPlBtp+0tMu7KLdF66QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfz6h3uyT8yXE6QmpDmslN4XgYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjA5Y2Q0OTQtZTNiOC0z ZDJjLTg4MTAtNDhlMGUxYjFhNGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALstUhtq7ZPNRkAwRP9Tr5PfWsJi3AEOhLTW6hnZjTlYBmveceBeQa3 tto1lr83tC8WlciHbVMHG6C4mSS87iNf/GeDnLKozP81O2cG4kSkIgRstgFkIJ/U WF+j1zQ3+EtA4L3SpUq4URo3A5XS5ZT2PG0Bburk6Fh89oFGY+BDm6dbVXCu+5pQ XyAQmIbZ3c+l9Ego8UuWluoMvR+rP303rVAGjXNtCT5r8WtLnr4pqcd35PZ9qEXg VDPCCeFTY1Nv3rdVrOwNkjV6HKwp0F5sTwBaXIX2VzjdxbR4zIgtYG3CPx3lM7Lo 8yLJeXEvoX6A+4oYoTLWFJ5FVRyi9XA= -----END CERTIFICATE-----Generated at Fri Apr 4 21:43:14 2025 by rpki-client