$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa File: 5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa (raw, json) Hash identifier: 1kCeml3emQfE+whKYsv1m2aqfyewEqh2a9qggDdgdas= Subject key identifier: 3A:83:A5:49:F0:65:56:65:32:A2:2D:44:11:6F:8B:D1:E0:EE:03:2D Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584902EC090D80354CADDC5482F0 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 11260 IP address blocks: 199.255.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:09:0d:80:35:4c:ad:dc:54:82:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=4de7680a-6a1d-4cdd-a9a9-efb1e22c5c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:39:9d:3f:c8:83:29:17:1f:d3:0f:c7:1d:fc: 68:10:e7:4d:1d:bc:04:74:3d:cf:90:47:e4:c9:9b: 88:5a:ab:61:a5:17:47:78:84:07:71:04:3a:84:9e: bb:20:da:62:51:5b:6c:60:4e:cf:67:4d:34:5d:01: 47:0a:d6:3d:b5:da:02:e1:dd:9b:91:0e:cd:a2:c5: 12:91:79:bc:c1:d4:7e:4d:b2:89:2a:12:ed:88:76: d9:c1:a3:ee:a6:3e:9b:33:0b:ed:8a:bf:6a:00:fa: e0:a9:f9:67:79:b0:04:aa:dd:47:72:ef:71:ff:31: 5f:cd:c3:96:63:1f:2b:29:84:82:90:7c:37:e7:ce: 1d:c9:d7:5a:bb:ab:2b:cc:36:e4:c8:90:0a:10:43: 50:e3:f8:13:24:fb:52:ce:a9:7c:a5:9c:e6:85:63: 37:ae:68:2d:7f:52:02:d0:ef:f5:b7:fd:80:86:f7: 8c:97:e5:5f:9e:db:a6:eb:7e:29:d6:d3:48:00:a5: f8:b9:0b:42:d8:a4:2a:88:ac:fa:c2:8e:52:79:68: 27:b4:3a:a1:e3:59:51:5d:2b:e2:7d:9f:bc:22:a7: de:ca:5f:9f:23:66:eb:84:c2:8d:a8:0b:c4:9f:62: a5:7a:7d:9f:c8:94:39:bb:74:aa:bd:07:9a:b2:0f: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:83:A5:49:F0:65:56:65:32:A2:2D:44:11:6F:8B:D1:E0:EE:03:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5f86ea44-7735-380c-986a-0ad1ba7cb1c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:3d:dc:f6:57:2b:58:05:72:95:0f:a8:a0:29:d2:8b:10:c4: 42:43:18:25:c6:88:71:09:f8:18:e2:8e:2f:f8:03:69:f8:68: 81:da:20:20:e4:68:26:d2:55:ec:b8:3c:80:ae:e2:99:24:d8: 74:03:ba:a1:b7:0e:39:ff:48:8c:1b:8d:87:af:a2:cc:cf:74: 12:17:34:1e:d8:94:ca:59:b0:85:d3:51:3b:bc:71:08:ad:1f: 9e:2d:95:4f:9e:c5:e1:8b:65:5d:84:07:76:3d:eb:04:0f:61: 04:65:3c:4a:72:de:54:cd:ab:6c:e2:ad:62:bb:b8:75:18:fc: 08:e2:11:b4:d1:c3:a1:b2:b5:3e:98:28:00:b1:33:bc:1b:64: e7:99:a4:f6:1a:56:76:f0:0e:f0:57:bc:ae:29:5c:e4:ac:bd: 7b:be:48:09:f5:57:41:4b:4a:cf:03:0d:1c:c0:be:fa:7e:a8: 34:6e:4d:31:fa:2b:d3:e0:27:e5:d4:77:e7:d9:74:f6:0d:5f: e9:9b:74:a9:2e:a1:16:a3:7d:19:bd:d3:99:e1:5e:91:ab:fa: a7:a8:26:ce:e9:20:2d:b7:b0:27:2e:05:24:f3:dc:9c:f6:86: 62:e6:4c:51:83:9c:40:36:78:09:aa:af:28:c5:f4:1c:f9:7b: 23:d6:68:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7AkNgDVMrdxUgvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NGRlNzY4MGEtNmExZC00Y2RkLWE5YTktZWZiMWUyMmM1YzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDmdP8iDKRcf0w/HHfxoEOdNHbwEdD3PkEfk yZuIWqthpRdHeIQHcQQ6hJ67INpiUVtsYE7PZ000XQFHCtY9tdoC4d2bkQ7NosUS kXm8wdR+TbKJKhLtiHbZwaPupj6bMwvtir9qAPrgqflnebAEqt1Hcu9x/zFfzcOW Yx8rKYSCkHw3584dyddau6srzDbkyJAKEENQ4/gTJPtSzql8pZzmhWM3rmgtf1IC 0O/1t/2AhveMl+Vfntum634p1tNIAKX4uQtC2KQqiKz6wo5SeWgntDqh41lRXSvi fZ+8Iqfeyl+fI2brhMKNqAvEn2Klen2fyJQ5u3SqvQeasg+3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqDpUnwZVZlMqItRBFvi9Hg7gMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvNWY4NmVhNDQtNzczNS0z ODBjLTk4NmEtMGFkMWJhN2NiMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx//YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ893PZXK1gFcpUPqKAp0osQxEJDGCXGiHEJ+Bjiji/4A2n4aIHaICDk aCbSVey4PICu4pkk2HQDuqG3Djn/SIwbjYevoszPdBIXNB7YlMpZsIXTUTu8cQit H54tlU+exeGLZV2EB3Y96wQPYQRlPEpy3lTNq2zirWK7uHUY/AjiEbTRw6GytT6Y KACxM7wbZOeZpPYaVnbwDvBXvK4pXOSsvXu+SAn1V0FLSs8DDRzAvvp+qDRuTTH6 K9PgJ+XUd+fZdPYNX+mbdKkuoRajfRm905nhXpGr+qeoJs7pIC23sCcuBSTz3Jz2 hmLmTFGDnEA2eAmqryjF9Bz5eyPWaF4= -----END CERTIFICATE-----Generated at Sun Apr 6 12:02:10 2025 by rpki-client