$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac67ce47-260e-3364-8e85-3ccf92a83113.roa File: ac67ce47-260e-3364-8e85-3ccf92a83113.roa (raw, json) Hash identifier: bXwQ1pnUQX4AXG0VKU+8hWF2mm6hrTDpWbhyTFtntQU= Subject key identifier: 19:BF:51:EF:33:B2:C0:84:03:8F:C5:50:8A:A5:74:C6:7F:85:EA:08 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E00660D5586634E87B2FE44C Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac67ce47-260e-3364-8e85-3ccf92a83113.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 17359 IP address blocks: 199.200.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:60:d5:58:66:34:e8:7b:2f:e4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=cfac5ff9-edd7-48c6-8010-14b1042c73d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:4e:5e:7f:86:e0:d3:6c:13:d7:70:f9:89: 87:ec:1a:07:65:03:8b:67:16:5b:ff:3c:07:8f:16: da:b9:b2:e8:83:90:a9:8b:02:65:18:27:46:62:c0: 19:f4:47:91:ab:97:e9:30:72:c8:1e:7f:7a:ad:27: ff:c9:8b:42:4b:f8:9c:53:3e:01:69:e4:de:fc:54: 34:95:1c:71:f8:27:2d:80:dc:c4:8f:73:6a:53:ab: 09:1f:10:96:e4:53:09:cd:9c:dc:d1:ff:75:1f:05: bb:c7:2f:4c:e8:aa:28:1f:24:b1:67:83:b5:e5:9f: 8c:84:ce:dd:2a:85:7d:54:db:54:d8:9c:e6:af:93: c7:ab:8a:45:10:08:15:7b:9c:38:42:ca:38:7d:66: a0:00:b2:9e:50:77:11:d1:b4:d8:23:49:6a:bf:ea: c1:79:74:db:3b:d1:4f:3d:1a:86:20:28:e0:d2:bb: b1:54:ec:ae:df:81:97:69:13:fd:32:38:3e:78:1b: 0a:fa:01:6d:86:7d:6f:c4:70:ca:48:b8:02:d3:eb: ce:39:7d:a8:68:61:68:68:3a:34:ea:9b:47:cf:ba: da:4f:3f:ac:28:72:16:a5:8f:79:96:e5:48:01:fc: 4e:c6:0c:2d:12:c2:3d:72:68:a5:fd:19:69:26:f2: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BF:51:EF:33:B2:C0:84:03:8F:C5:50:8A:A5:74:C6:7F:85:EA:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac67ce47-260e-3364-8e85-3ccf92a83113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 199.200.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:5d:0c:39:3a:33:7b:19:75:cb:08:63:df:6a:95:57:92:48: 72:c6:9b:9f:ab:9d:3b:17:b9:43:09:da:93:b0:1f:8e:b4:b1: 7e:22:ff:5a:2b:08:19:95:85:b7:fc:de:b6:b8:75:0f:ce:8a: d7:49:59:2b:1a:2d:e8:04:42:dc:82:52:1e:1e:f1:b6:1c:35: 65:6f:00:94:c4:e2:85:ad:dc:5a:39:bf:4d:ea:63:ec:e5:72: 49:ac:89:3b:86:87:50:76:18:8c:58:bb:d7:f7:d8:b6:b8:77: 55:99:34:ed:90:fe:e1:33:04:d3:a2:a4:75:06:6a:9c:7a:8a: cd:ca:19:81:fc:96:89:94:44:a0:07:cb:45:47:13:16:3b:31: 93:44:1f:6d:bd:70:42:73:24:8c:f5:0e:5a:df:0d:cf:90:f5: 89:01:a6:c1:0c:9f:1c:fa:1c:45:6e:b5:99:2d:f5:ac:8b:d2: d3:0d:9b:56:30:bd:c2:e8:f0:c7:2e:c0:70:e1:15:6d:83:a8: 66:ad:2d:8d:75:f9:bf:24:c7:aa:24:37:eb:39:68:53:8f:63: 65:9c:b3:69:d4:63:86:6f:f1:c8:a8:8f:97:78:e1:60:5d:4f: b1:c1:c1:71:d3:e8:a0:c6:6f:ad:67:5c:94:5a:2c:60:b8:99: 7a:de:cd:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBmDVWGY06Hsv5EwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk Y2ZhYzVmZjktZWRkNy00OGM2LTgwMTAtMTRiMTA0MmM3M2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3tOXn+G4NNsE9dw+YmH7BoHZQOLZxZb/zwH jxbaubLog5CpiwJlGCdGYsAZ9EeRq5fpMHLIHn96rSf/yYtCS/icUz4BaeTe/FQ0 lRxx+CctgNzEj3NqU6sJHxCW5FMJzZzc0f91HwW7xy9M6KooHySxZ4O15Z+MhM7d KoV9VNtU2Jzmr5PHq4pFEAgVe5w4Qso4fWagALKeUHcR0bTYI0lqv+rBeXTbO9FP PRqGICjg0ruxVOyu34GXaRP9Mjg+eBsK+gFthn1vxHDKSLgC0+vOOX2oaGFoaDo0 6ptHz7raTz+sKHIWpY95luVIAfxOxgwtEsI9cmil/RlpJvI3DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBm/Ue8zssCEA4/FUIqldMZ/heoIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYWM2N2NlNDctMjYwZS0z MzY0LThlODUtM2NjZjkyYTgzMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8hjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1dDDk6M3sZdcsIY99qlVeSSHLGm5+rnTsXuUMJ2pOwH460sX4i/1or CBmVhbf83ra4dQ/OitdJWSsaLegEQtyCUh4e8bYcNWVvAJTE4oWt3Fo5v03qY+zl ckmsiTuGh1B2GIxYu9f32La4d1WZNO2Q/uEzBNOipHUGapx6is3KGYH8lomURKAH y0VHExY7MZNEH229cEJzJIz1DlrfDc+Q9YkBpsEMnxz6HEVutZkt9ayL0tMNm1Yw vcLo8McuwHDhFW2DqGatLY11+b8kx6okN+s5aFOPY2Wcs2nUY4Zv8cioj5d44WBd T7HBwXHT6KDGb61nXJRaLGC4mXrezcI= -----END CERTIFICATE-----Generated at Sat Apr 5 03:48:49 2025 by rpki-client