$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fe040942-c808-38d5-8883-6e17e25019d8.roa File: fe040942-c808-38d5-8883-6e17e25019d8.roa (raw, json) Hash identifier: Lpx+wPGIGZTTclgjUMyrJb5WSl8sujcn0ZDR89o+eTA= Subject key identifier: 23:A0:C7:63:7D:78:3A:6F:40:5D:FD:EA:A9:87:A2:69:AF:BE:DF:85 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F432858492CAE8C091284A7450BB75740 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fe040942-c808-38d5-8883-6e17e25019d8.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 19905 IP address blocks: 162.254.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:8c:09:12:84:a7:45:0b:b7:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=38277f05-9db5-4cad-8c8e-88a207e1a25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fb:2e:bc:e4:78:46:9a:ef:a5:e4:fd:5d:43: 4f:f1:7c:c7:df:fb:43:87:21:1f:56:17:e9:6e:30: 8f:53:3d:2b:1c:fa:7f:0f:86:2b:38:af:93:0c:a6: e6:d7:41:ae:95:a7:73:a4:75:70:84:d4:3c:b9:4e: f3:d9:dc:46:5e:7e:b6:df:9c:ec:8d:d8:e2:30:7f: 4a:99:b7:5e:bd:04:cf:23:78:1d:c8:d7:c5:c8:17: bc:54:46:6f:7c:37:e8:70:d2:08:ad:c5:b8:93:4d: 08:c6:ae:36:2a:07:c3:e2:76:0c:92:ab:11:4a:a8: a0:d7:99:b6:38:cf:82:d3:41:cf:eb:d4:73:75:30: ea:ff:dd:fe:d7:5b:95:d7:5d:42:2d:b4:3d:49:69: 6e:29:7c:40:f4:ba:7a:21:70:e0:be:a8:84:87:72: ca:23:26:9a:5b:63:03:f1:8e:4e:88:2b:a3:93:a1: 98:d0:69:d5:ff:4c:b3:c9:3e:d2:3d:bb:ae:71:d0: 0a:f1:ae:48:4c:73:f5:0e:47:2a:0e:44:4d:50:4f: 41:8f:4e:68:28:40:4f:81:28:29:83:4b:20:7a:ac: b9:ee:f5:cf:66:0f:42:67:a4:c1:c1:9a:e7:93:27: 5e:e8:e1:9c:26:9b:1e:31:ce:0d:1f:3f:ce:f2:91: 13:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A0:C7:63:7D:78:3A:6F:40:5D:FD:EA:A9:87:A2:69:AF:BE:DF:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fe040942-c808-38d5-8883-6e17e25019d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 162.254.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:6a:ca:ea:fd:4e:7c:64:38:6a:cc:bb:cc:c8:83:b8:12:4f: f1:ed:99:1e:cd:5d:bc:51:62:f1:db:34:57:c1:3e:1c:8f:4b: 27:93:32:3e:e3:b3:98:be:c8:36:5c:01:75:46:80:9c:51:1c: 97:c4:44:cc:b9:8a:f5:d1:1b:23:30:15:b5:6a:d1:d7:61:8b: 60:d5:22:2d:9d:73:d0:5c:70:32:3f:6c:e9:15:47:23:94:e3: 1f:8b:bb:58:70:30:ac:e6:9a:32:4b:a6:4f:a2:ab:67:19:a0: de:54:fb:d7:18:54:c3:c4:90:97:4b:20:2e:c1:dd:e2:a9:2f: d5:49:74:e7:d6:90:de:15:c2:41:92:bf:b9:29:d4:92:f2:18: cf:c0:eb:e7:db:75:32:78:a3:8f:a9:43:5d:d4:00:bd:9b:51: 11:97:5c:d0:a6:af:83:02:d6:c1:a6:4c:93:99:44:ee:c4:6f: 78:2b:ac:9a:7b:78:90:42:a3:ed:89:d2:31:66:48:80:77:c4: de:78:39:be:a2:49:62:fe:b4:85:db:c3:8d:31:c6:05:84:d3: 36:fb:fa:ff:11:b8:b6:f2:9d:6a:bf:b9:21:3c:61:15:29:b1: ae:70:51:68:02:38:2b:41:19:28:20:26:a9:05:d3:52:1e:6b: d3:42:71:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrowJEoSnRQu3V0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MzgyNzdmMDUtOWRiNS00Y2FkLThjOGUtODhhMjA3ZTFhMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/suvOR4RprvpeT9XUNP8XzH3/tDhyEfVhfp bjCPUz0rHPp/D4YrOK+TDKbm10GuladzpHVwhNQ8uU7z2dxGXn6235zsjdjiMH9K mbdevQTPI3gdyNfFyBe8VEZvfDfocNIIrcW4k00Ixq42KgfD4nYMkqsRSqig15m2 OM+C00HP69RzdTDq/93+11uV111CLbQ9SWluKXxA9Lp6IXDgvqiEh3LKIyaaW2MD 8Y5OiCujk6GY0GnV/0yzyT7SPbuucdAK8a5ITHP1DkcqDkRNUE9Bj05oKEBPgSgp g0sgeqy57vXPZg9CZ6TBwZrnkyde6OGcJpseMc4NHz/O8pETbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOgx2N9eDpvQF396qmHommvvt+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvZmUwNDA5NDItYzgwOC0z OGQ1LTg4ODMtNmUxN2UyNTAxOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVqyur9TnxkOGrMu8zIg7gST/HtmR7NXbxRYvHbNFfBPhyPSyeTMj7j s5i+yDZcAXVGgJxRHJfERMy5ivXRGyMwFbVq0ddhi2DVIi2dc9BccDI/bOkVRyOU 4x+Lu1hwMKzmmjJLpk+iq2cZoN5U+9cYVMPEkJdLIC7B3eKpL9VJdOfWkN4VwkGS v7kp1JLyGM/A6+fbdTJ4o4+pQ13UAL2bURGXXNCmr4MC1sGmTJOZRO7Eb3grrJp7 eJBCo+2J0jFmSIB3xN54Ob6iSWL+tIXbw40xxgWE0zb7+v8RuLbynWq/uSE8YRUp sa5wUWgCOCtBGSggJqkF01Iea9NCcVU= -----END CERTIFICATE-----Generated at Fri Apr 11 21:28:03 2025 by rpki-client