$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa File: acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa (raw, json) Hash identifier: gKVl4H1ePqQyfPmaVpmzMm+jKWuHlmQD7sAUcqx1GZM= Subject key identifier: 79:08:26:D9:8A:FB:EA:5C:55:C1:7E:A9:98:7E:1C:2A:45:83:CF:24 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F43285848CB1654E86C06BE2F30E65840 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 55293 IP address blocks: 198.100.44.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:54:e8:6c:06:be:2f:30:e6:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=21ac9d5b-e19a-4cda-ae0e-24513bdb19c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:af:f8:92:22:70:04:d1:38:e9:a6:ce:10:43: 3f:87:75:b1:b4:f2:c5:5c:9b:a8:23:f3:e7:de:9d: 79:cc:f7:8c:30:0b:5b:70:f8:56:e1:14:45:b9:7b: 77:9e:11:95:17:63:a2:14:70:7a:77:fb:21:5a:af: e8:2b:fa:90:62:f5:23:6b:f2:c9:6f:e7:87:9e:5c: 1c:17:72:63:f7:e7:ae:53:88:bf:24:d5:54:67:d4: f2:13:3b:87:0b:b7:c0:25:9c:ca:20:30:9d:4b:4f: 44:11:55:99:37:e6:e2:42:51:c4:8a:eb:22:cd:0b: 00:ed:6e:a2:3f:e0:c7:9d:30:d5:0d:1c:a9:01:0d: e0:ae:ee:32:8a:fb:2c:7f:52:ac:cb:c6:d5:01:fe: 02:1d:31:15:99:9c:d4:75:48:8b:17:44:ba:97:5c: 6d:3e:5f:5a:9d:3a:db:4d:b5:62:05:44:b0:32:7f: 48:4a:de:ea:f3:d0:79:45:c6:e3:3a:8e:56:76:c1: 34:fa:82:79:08:4b:56:05:74:6b:c8:de:2b:54:93: 9a:16:32:92:0f:b2:92:b1:84:8d:80:eb:fe:68:39: 7e:ba:a0:1b:50:8e:db:45:87:f0:b5:4f:bd:33:39: 53:36:61:be:f5:93:be:4c:2f:3b:d3:8d:59:65:8c: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:08:26:D9:8A:FB:EA:5C:55:C1:7E:A9:98:7E:1C:2A:45:83:CF:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 198.100.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:96:f1:91:f9:66:9f:9d:43:89:8c:66:e1:e2:85:3d:1e:2d: d2:06:35:81:a5:73:81:2d:53:57:47:9b:9c:ee:39:c2:c4:62: 5b:a8:f3:f8:bc:12:94:10:aa:78:1a:ba:06:b6:0a:fd:70:0e: f6:9b:36:1c:70:ee:3b:b4:be:18:1e:7c:54:76:e1:af:e8:65: d7:90:8a:c3:3e:a6:f6:62:7f:5f:41:07:7b:7f:2b:29:b9:4b: 77:11:80:52:41:c3:b4:88:c3:4d:9d:bf:75:0b:42:bb:a0:a7: 73:11:23:3b:9c:5a:3c:ff:38:d6:6d:fd:8b:34:c4:03:b3:ae: 9a:0f:e2:2c:d2:0e:ca:7c:ee:d5:32:64:52:8c:87:3a:a5:43: c1:e3:f8:10:27:eb:82:86:31:89:1b:0a:cb:d7:d6:4c:3e:eb: db:fc:ba:df:6c:c3:3a:db:47:a3:d6:86:57:36:61:11:39:1e: 31:ed:8c:33:73:8d:e9:81:72:eb:75:0c:c9:ba:c8:a3:9d:25: 05:cd:b9:13:0c:90:88:24:fb:66:0a:17:81:57:fd:a7:86:31: 31:eb:af:73:4b:8b:af:1f:54:5d:da:10:15:aa:1a:b1:7b:c0: 60:a7:12:21:c1:16:1e:be:fc:80:aa:2f:b3:88:33:a6:78:1d: 1a:0a:23:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFlTobAa+LzDmWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk MjFhYzlkNWItZTE5YS00Y2RhLWFlMGUtMjQ1MTNiZGIxOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6/4kiJwBNE46abOEEM/h3WxtPLFXJuoI/Pn 3p15zPeMMAtbcPhW4RRFuXt3nhGVF2OiFHB6d/shWq/oK/qQYvUja/LJb+eHnlwc F3Jj9+euU4i/JNVUZ9TyEzuHC7fAJZzKIDCdS09EEVWZN+biQlHEiusizQsA7W6i P+DHnTDVDRypAQ3gru4yivssf1Ksy8bVAf4CHTEVmZzUdUiLF0S6l1xtPl9anTrb TbViBUSwMn9ISt7q89B5RcbjOo5WdsE0+oJ5CEtWBXRryN4rVJOaFjKSD7KSsYSN gOv+aDl+uqAbUI7bRYfwtU+9MzlTNmG+9ZO+TC87041ZZYxfTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkIJtmK++pcVcF+qZh+HCpFg88kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYWNmYTk5Y2UtY2MzNS0z MDY2LTllNjAtMDJhMmU0YTlkYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxmQsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiW8ZH5Zp+dQ4mMZuHihT0eLdIGNYGlc4EtU1dHm5zuOcLEYluo8/i8 EpQQqngauga2Cv1wDvabNhxw7ju0vhgefFR24a/oZdeQisM+pvZif19BB3t/Kym5 S3cRgFJBw7SIw02dv3ULQrugp3MRIzucWjz/ONZt/Ys0xAOzrpoP4izSDsp87tUy ZFKMhzqlQ8Hj+BAn64KGMYkbCsvX1kw+69v8ut9swzrbR6PWhlc2YRE5HjHtjDNz jemBcut1DMm6yKOdJQXNuRMMkIgk+2YKF4FX/aeGMTHrr3NLi68fVF3aEBWqGrF7 wGCnEiHBFh6+/ICqL7OIM6Z4HRoKI9s= -----END CERTIFICATE-----Generated at Fri Apr 11 21:27:08 2025 by rpki-client