$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6311df43-7573-3728-a24a-2ed5c41a3398.roa File: 6311df43-7573-3728-a24a-2ed5c41a3398.roa (raw, json) Hash identifier: +4YmpbGe5wmaMG9d7X75khaF5lca2T9tSrJFoFO5vXA= Subject key identifier: 19:F7:B8:A4:89:41:E3:8A:8D:5D:AD:92:EC:A0:32:A8:7E:C7:E6:E7 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584922E8F66EFD49E4CDCE956C80 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6311df43-7573-3728-a24a-2ed5c41a3398.roa Signing time: Mon 10 Mar 2025 01:00:39 +0000 ROA not before: Mon 10 Mar 2025 01:00:39 +0000 ROA not after: Sun 08 Jun 2025 01:00:39 +0000 asID: 272891 IP address blocks: 200.229.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:22:e8:f6:6e:fd:49:e4:cd:ce:95:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 10 01:00:39 2025 GMT Not After : Jun 8 01:00:39 2025 GMT Subject: CN=3ac3acf0-ccc1-4dad-98e9-31c94a6da808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:45:f9:46:fc:57:41:1a:8b:e7:7e:7d:33:b2: 44:85:d8:bf:0c:bb:5e:f2:b5:cd:ec:df:75:ee:7f: f2:6a:f2:67:f6:69:c1:3e:83:69:16:e3:1e:48:a7: b2:bc:19:96:5c:2c:ca:c1:fc:fe:ee:25:94:1d:14: bd:17:55:8a:97:87:e7:71:4b:86:d5:02:d6:90:3b: 21:90:e8:35:c9:84:8a:25:9f:7e:a1:28:86:75:c8: 94:28:a3:1a:9d:81:25:1e:32:1d:d6:c2:42:32:31: 40:e1:26:72:87:76:57:1f:8f:e5:0e:3f:59:a0:55: 59:1c:55:f2:9d:fb:86:7b:c5:75:20:11:84:4f:67: 55:0f:f7:66:a3:7b:69:59:4e:65:0a:ee:14:3f:bb: 40:36:43:1f:ad:2f:6a:bd:c1:e6:04:56:14:04:ec: f2:c9:cc:e7:10:fb:be:fc:3f:3b:2d:af:10:d4:5d: c1:3c:a5:a2:ad:db:e7:67:a6:1d:7e:f9:4b:57:44: 3d:b5:da:7b:fb:31:33:90:36:d3:05:ed:44:13:80: cc:e9:e6:73:5c:14:0f:ff:0d:b2:32:bd:d1:77:62: 72:9b:27:00:90:05:5b:fe:b5:2f:94:1f:6b:e8:27: 73:86:17:d4:bc:4c:b2:bf:24:f7:f7:e8:27:9e:ed: 81:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F7:B8:A4:89:41:E3:8A:8D:5D:AD:92:EC:A0:32:A8:7E:C7:E6:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6311df43-7573-3728-a24a-2ed5c41a3398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:86:28:88:c8:e5:05:0a:7c:05:c6:75:e5:03:2e:3d:6f:7d: 78:fd:11:3a:ff:52:41:79:3f:76:f5:33:63:db:fa:a7:6f:f9: 8f:f3:24:d9:27:08:d0:b0:bf:b7:d5:35:46:74:f5:ec:02:ba: 50:2c:4e:88:7d:a5:ff:94:0d:44:54:fc:ef:40:f9:72:ab:1f: ea:7b:71:6b:88:59:d2:55:ec:2e:5e:1c:98:18:50:ba:b4:93: 11:a6:8a:fc:21:ec:2a:c9:05:b3:e0:70:07:49:c3:38:c6:72: dc:47:81:9d:fc:36:7e:e2:7e:9d:32:ad:d1:22:12:48:d6:00: 2e:67:b0:1a:51:d9:61:61:03:0a:f6:58:54:f8:db:39:28:bb: ae:b0:25:61:97:d1:15:9d:b6:fc:bf:cf:f0:82:ef:b5:f6:7c: 79:d6:ed:80:03:7b:7f:3b:4a:4f:4b:9e:91:bc:b9:6d:aa:72: dc:63:37:99:de:57:84:f3:cd:3d:fc:32:19:01:ce:83:68:c4: 66:94:ad:d2:30:86:c5:8b:ec:83:90:ca:48:3a:ce:3c:47:70: c2:3c:7d:fa:65:a7:c6:63:4d:a7:2f:6d:69:e6:4a:ee:85:f4: 83:89:1f:66:d5:65:35:cd:4a:72:9f:3f:d5:5b:48:22:bc:d7: 4c:5b:d2:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEki6PZu/Unkzc6VbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDMxMDAxMDAzOVoXDTI1MDYwODAxMDAzOVowLzEtMCsGA1UEAxMk M2FjM2FjZjAtY2NjMS00ZGFkLTk4ZTktMzFjOTRhNmRhODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUX5RvxXQRqL5359M7JEhdi/DLte8rXN7N91 7n/yavJn9mnBPoNpFuMeSKeyvBmWXCzKwfz+7iWUHRS9F1WKl4fncUuG1QLWkDsh kOg1yYSKJZ9+oSiGdciUKKManYElHjId1sJCMjFA4SZyh3ZXH4/lDj9ZoFVZHFXy nfuGe8V1IBGET2dVD/dmo3tpWU5lCu4UP7tANkMfrS9qvcHmBFYUBOzyycznEPu+ /D87La8Q1F3BPKWirdvnZ6YdfvlLV0Q9tdp7+zEzkDbTBe1EE4DM6eZzXBQP/w2y Mr3Rd2JymycAkAVb/rUvlB9r6CdzhhfUvEyyvyT39+gnnu2BSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn3uKSJQeOKjV2tkuygMqh+x+bnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNjMxMWRmNDMtNzU3My0z NzI4LWEyNGEtMmVkNWM0MWEzMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmGKIjI5QUKfAXGdeUDLj1vfXj9ETr/UkF5P3b1M2Pb+qdv+Y/zJNkn CNCwv7fVNUZ09ewCulAsToh9pf+UDURU/O9A+XKrH+p7cWuIWdJV7C5eHJgYULq0 kxGmivwh7CrJBbPgcAdJwzjGctxHgZ38Nn7ifp0yrdEiEkjWAC5nsBpR2WFhAwr2 WFT42zkou66wJWGX0RWdtvy/z/CC77X2fHnW7YADe387Sk9LnpG8uW2qctxjN5ne V4TzzT38MhkBzoNoxGaUrdIwhsWL7IOQykg6zjxHcMI8ffplp8ZjTacvbWnmSu6F 9IOJH2bVZTXNSnKfP9VbSCK810xb0pg= -----END CERTIFICATE-----Generated at Wed Apr 16 04:58:59 2025 by rpki-client