$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa File: 3fae15e1-900a-373e-b386-d052905c9332.roa (raw, json) Hash identifier: pDH/IkUAOHSAjQRN1eqz0BIhed9ntHq9HnEOmc62qm8= Subject key identifier: 5E:55:B4:98:07:5B:00:61:DE:7E:5E:88:0B:2B:B4:76:ED:7B:3C:D4 Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F4328584902EC23F8292D32D2CAE74280 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 30097 IP address blocks: 199.87.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:23:f8:29:2d:32:d2:ca:e7:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=ab6444cf-35c2-4351-b98f-78514028e286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:36:92:9d:27:bb:be:84:05:98:14:50:76: 10:37:80:fc:d9:3f:39:fe:2e:5d:af:0c:b3:c0:99: 55:7c:f8:9b:60:68:0e:91:47:e7:21:35:17:7d:91: f3:18:d9:76:d1:cc:b3:34:95:c8:1f:17:ce:f9:42: ac:e7:72:8c:8f:d3:c6:42:11:32:ed:c2:dd:bc:58: c8:8d:af:fd:7b:b4:29:1f:85:64:c9:2d:f6:56:3f: 17:e5:25:b4:53:91:f9:7c:91:3f:96:9f:34:ee:db: 07:6d:07:0d:d2:80:55:e2:04:c6:e2:6f:a8:d7:5c: 64:02:84:3a:16:7e:50:31:95:9a:50:f6:e6:cd:7b: 1d:6a:4f:6d:88:87:c4:75:a5:27:86:32:d6:23:4c: 7c:60:54:3d:9d:b4:75:98:3b:bd:db:c7:45:7f:1b: 3a:eb:1a:cf:ba:6a:9d:7e:1b:9a:27:c1:7e:0b:3d: 7e:15:6b:4c:56:00:41:a6:a6:24:9c:f4:57:c6:a0: 67:97:21:87:bb:32:92:ad:b2:fe:ea:58:e3:39:85: bc:6c:68:8e:40:a0:d5:38:89:9f:9d:6c:2b:9b:66: 3c:69:5b:05:b9:3e:cc:28:fc:6a:0e:80:1f:6c:d3: 1e:e0:3f:72:99:a4:4b:ba:e1:10:70:cd:3f:2e:04: 30:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:55:B4:98:07:5B:00:61:DE:7E:5E:88:0B:2B:B4:76:ED:7B:3C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 199.87.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f0:19:e8:da:17:22:12:5e:16:17:5f:5f:6e:0c:28:24:76: ee:0c:75:22:f8:f2:00:b1:77:2d:e3:94:a0:b0:da:53:e9:08: b3:5e:93:74:50:90:90:60:01:5c:67:e5:4a:f4:19:d8:16:bf: 3a:63:76:e3:c0:79:96:9f:d5:00:e0:e9:44:28:69:6b:16:97: a6:0e:06:25:3f:40:8c:42:ce:44:8c:8e:5c:72:8c:06:25:73: ff:2e:d8:11:a2:ab:35:86:52:85:51:af:96:2e:9b:cf:a3:50: df:3f:8c:cf:1c:e7:83:4e:e8:72:85:a8:73:b4:9f:16:b9:99: 42:35:5c:8a:0b:89:e4:a2:12:70:fd:5f:f6:ce:70:a4:a8:ac: e0:71:ed:68:ef:14:a4:2f:2d:36:63:78:6e:26:11:f0:e6:bf: 92:31:63:6c:59:42:61:83:a7:1a:4f:d1:af:c1:d0:b4:c2:46: ef:35:79:26:d0:aa:fc:31:cd:a3:d5:be:f7:8f:a3:7d:5b:66: 75:e7:f0:ef:3c:da:ed:2d:6e:47:3f:c3:7c:cc:a0:02:d8:7a: 76:08:0a:54:3f:55:e6:63:cd:4e:ae:fc:e0:86:56:ff:2f:07: 85:e1:85:47:01:53:fd:ca:24:ac:10:5d:9e:f6:19:05:ab:b1: ee:d1:b5:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CP4KS0y0srnQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YWI2NDQ0Y2YtMzVjMi00MzUxLWI5OGYtNzg1MTQwMjhlMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ82kp0nu76EBZgUUHYQN4D82T85/i5drwyz wJlVfPibYGgOkUfnITUXfZHzGNl20cyzNJXIHxfO+UKs53KMj9PGQhEy7cLdvFjI ja/9e7QpH4VkyS32Vj8X5SW0U5H5fJE/lp807tsHbQcN0oBV4gTG4m+o11xkAoQ6 Fn5QMZWaUPbmzXsdak9tiIfEdaUnhjLWI0x8YFQ9nbR1mDu928dFfxs66xrPumqd fhuaJ8F+Cz1+FWtMVgBBpqYknPRXxqBnlyGHuzKSrbL+6ljjOYW8bGiOQKDVOImf nWwrm2Y8aVsFuT7MKPxqDoAfbNMe4D9ymaRLuuEQcM0/LgQwaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5VtJgHWwBh3n5eiAsrtHbtezzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvM2ZhZTE1ZTEtOTAwYS0z NzNlLWIzODYtZDA1MjkwNWM5MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1csMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITwGejaFyISXhYXX19uDCgkdu4MdSL48gCxdy3jlKCw2lPpCLNek3RQ kJBgAVxn5Ur0GdgWvzpjduPAeZaf1QDg6UQoaWsWl6YOBiU/QIxCzkSMjlxyjAYl c/8u2BGiqzWGUoVRr5Yum8+jUN8/jM8c54NO6HKFqHO0nxa5mUI1XIoLieSiEnD9 X/bOcKSorOBx7WjvFKQvLTZjeG4mEfDmv5IxY2xZQmGDpxpP0a/B0LTCRu81eSbQ qvwxzaPVvvePo31bZnXn8O882u0tbkc/w3zMoALYenYIClQ/VeZjzU6u/OCGVv8v B4XhhUcBU/3KJKwQXZ72GQWrse7RtXc= -----END CERTIFICATE-----Generated at Sat Apr 12 15:37:07 2025 by rpki-client