$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/022d8668-8d9c-3e68-ab12-b11f5cd1c97a.roa File: 022d8668-8d9c-3e68-ab12-b11f5cd1c97a.roa (raw, json) Hash identifier: CuHoVOhxCJCLn72ZoQpv5FE/Lb9ErUNn5WYbF4Gt/ww= Subject key identifier: 05:40:49:1B:56:70:69:76:5A:D7:89:C9:09:2E:73:24:03:E2:38:EF Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285848F65BCEF4374B16A844AD27C0 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/022d8668-8d9c-3e68-ab12-b11f5cd1c97a.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 30133 IP address blocks: 199.253.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ce:f4:37:4b:16:a8:44:ad:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=ce2d3524-59c5-42fb-a56e-88797e652ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:7f:cd:bc:01:36:8f:51:ad:14:7f:b5:32: 07:63:ad:99:60:5c:ef:b6:d3:67:7d:5b:1b:b4:00: 63:ae:f7:e8:be:e1:a5:4f:06:3b:a6:22:29:79:5e: 37:5c:6e:cc:ba:c8:71:8f:1f:8a:df:b2:b1:05:a9: 1a:11:1d:a2:94:54:a7:d0:25:2b:3a:6d:1a:db:46: bc:80:53:fd:1f:66:77:15:f0:02:8b:aa:d8:bd:14: 72:d3:e2:07:20:ce:58:db:2c:f3:36:cb:9f:de:20: 74:6a:e8:6f:20:18:da:bf:77:31:6c:6e:eb:8d:c5: ea:ae:77:40:43:dc:35:fc:07:6a:f7:43:a9:7b:77: d0:31:73:1d:67:50:6b:28:0f:46:ac:7f:de:3c:da: df:a9:0d:e0:f9:a4:6d:0e:ca:5a:43:b1:27:0a:97: bb:f4:b8:8c:0e:97:7c:04:68:b3:22:40:cd:57:97: 99:aa:70:0f:6b:5b:97:0a:49:1e:ff:05:52:e3:6a: 79:37:97:e6:40:bf:55:f2:9a:14:36:77:81:0c:b3: 15:8f:27:c1:b2:50:78:50:c0:e2:5a:53:6b:64:5d: c0:0b:e3:9e:e4:04:32:80:34:25:0e:d1:45:7b:c6: 2f:34:ef:58:6d:8e:ef:1e:37:17:27:17:38:58:6b: 61:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:40:49:1B:56:70:69:76:5A:D7:89:C9:09:2E:73:24:03:E2:38:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/022d8668-8d9c-3e68-ab12-b11f5cd1c97a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 199.253.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:03:bb:2e:30:1c:e1:49:1e:00:9c:c5:ab:dd:c7:8c:fe:f6: 4b:22:bf:b9:40:6d:37:cb:72:c6:4e:68:94:ca:d4:f7:75:2d: 94:0e:39:25:64:cf:53:e6:57:ca:fd:f4:46:10:12:8a:4d:7b: 66:4d:ff:4c:72:05:80:79:19:24:80:c1:65:58:68:5e:6b:a3: 97:94:e8:20:f8:a5:31:af:30:f9:2d:c0:32:00:41:16:73:f8: 3b:45:6c:9b:ba:6d:7d:1f:af:45:e6:36:f4:cf:79:67:5d:5a: 72:ae:7d:e7:71:53:c3:9e:ad:7e:9c:02:77:c9:89:bf:f3:9a: 5c:52:55:5d:5a:10:b9:b6:b5:1a:58:09:17:05:81:62:bf:52: 42:a8:96:47:ce:b9:12:a8:29:1c:d7:eb:f8:2a:5b:f6:fa:4e: c2:3b:ff:c4:c2:7b:93:97:d6:76:06:0e:05:55:c1:3c:78:40: 75:4c:3d:73:a2:c6:87:46:6c:89:4c:69:41:0b:19:5b:2f:00: 84:8d:50:cf:6b:37:cf:ed:36:8a:e6:11:86:94:c4:7a:fd:36: c5:a6:35:4c:b8:80:e8:8f:13:be:76:ed:f3:a6:9a:5f:04:aa: 0f:4c:39:a6:71:e2:e4:6d:cd:fb:c3:14:2a:75:79:e9:4b:28: 8d:21:6f:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W870N0sWqEStJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk Y2UyZDM1MjQtNTljNS00MmZiLWE1NmUtODg3OTdlNjUyY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/V/zbwBNo9RrRR/tTIHY62ZYFzvttNnfVsb tABjrvfovuGlTwY7piIpeV43XG7Mushxjx+K37KxBakaER2ilFSn0CUrOm0a20a8 gFP9H2Z3FfACi6rYvRRy0+IHIM5Y2yzzNsuf3iB0auhvIBjav3cxbG7rjcXqrndA Q9w1/Adq90Ope3fQMXMdZ1BrKA9GrH/ePNrfqQ3g+aRtDspaQ7EnCpe79LiMDpd8 BGizIkDNV5eZqnAPa1uXCkke/wVS42p5N5fmQL9V8poUNneBDLMVjyfBslB4UMDi WlNrZF3AC+Oe5AQygDQlDtFFe8YvNO9YbY7vHjcXJxc4WGthgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVASRtWcGl2WteJyQkucyQD4jjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMDIyZDg2NjgtOGQ5Yy0z ZTY4LWFiMTItYjExZjVjZDFjOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYDuy4wHOFJHgCcxavdx4z+9ksiv7lAbTfLcsZOaJTK1Pd1LZQOOSVk z1PmV8r99EYQEopNe2ZN/0xyBYB5GSSAwWVYaF5ro5eU6CD4pTGvMPktwDIAQRZz +DtFbJu6bX0fr0XmNvTPeWddWnKufedxU8OerX6cAnfJib/zmlxSVV1aELm2tRpY CRcFgWK/UkKolkfOuRKoKRzX6/gqW/b6TsI7/8TCe5OX1nYGDgVVwTx4QHVMPXOi xodGbIlMaUELGVsvAISNUM9rN8/tNormEYaUxHr9NsWmNUy4gOiPE7527fOmml8E qg9MOaZx4uRtzfvDFCp1eelLKI0hb0Y= -----END CERTIFICATE-----Generated at Fri Mar 14 10:05:56 2025 by rpki-client