$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/4e7f35bb-a42c-3fde-87d6-a22b0cf331d1.roa File: 4e7f35bb-a42c-3fde-87d6-a22b0cf331d1.roa (raw, json) Hash identifier: cSh9i0GMpzLslxgl7MmEVfqZHkYjGfMzRUjjiSFx/SM= Subject key identifier: 36:2D:85:56:B2:18:68:FE:BC:E8:01:EF:A1:74:1E:77:04:DB:43:18 Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F43285849203C18FE6E0CAED99B3DB0C0 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/4e7f35bb-a42c-3fde-87d6-a22b0cf331d1.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 6079 IP address blocks: 199.187.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:18:fe:6e:0c:ae:d9:9b:3d:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=608b1d92-6c07-482c-8649-f6e45be3d692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8e:07:f5:d4:2a:32:a8:6c:f7:c6:66:2a:2a: 0c:01:98:76:96:81:9f:f5:09:3c:ca:3f:e0:46:e7: 0e:82:e0:a5:76:cb:04:07:b2:f3:c1:3d:ca:82:8d: 0c:0c:e0:ca:84:11:2d:3a:fc:67:68:95:50:ee:37: 4c:6f:a6:4e:9b:7a:02:76:66:fb:c4:12:33:59:47: e2:e7:3b:fa:27:3b:f7:29:b8:e5:4f:59:ee:47:c9: b3:bc:0f:15:9f:57:18:f1:9d:96:c3:e5:d7:eb:9b: 30:3d:dd:25:36:4f:9d:5a:d3:20:6e:29:97:d9:80: 86:44:20:9a:72:91:31:3d:e7:ee:62:6c:71:bb:12: 18:e4:57:96:1b:73:2a:f0:c1:42:2c:20:4d:5a:78: 9a:8d:64:58:fe:67:79:fd:e5:3b:50:4d:70:55:96: 91:df:5f:44:06:a6:b6:bf:83:15:fc:c5:0d:a7:be: 6f:7c:98:ba:84:55:b4:e7:7b:51:37:90:06:75:9a: 9b:7e:f6:26:a0:0f:81:56:0b:0e:4c:87:06:70:90: b1:ba:62:55:91:a0:aa:bd:a9:4b:1b:9b:7e:c4:4a: 20:31:67:2a:b9:d2:1f:53:c9:e4:0c:f2:a3:c4:1d: bf:f8:41:56:42:19:96:58:76:14:a8:18:38:49:81: ff:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2D:85:56:B2:18:68:FE:BC:E8:01:EF:A1:74:1E:77:04:DB:43:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/4e7f35bb-a42c-3fde-87d6-a22b0cf331d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 199.187.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:cc:3b:f8:fd:c3:0b:ac:b3:bb:28:1f:dc:eb:2f:89:73:db: bb:19:a5:64:d6:b0:7b:a1:8a:70:df:f4:ca:3d:b5:2b:c5:dc: 0e:d5:f0:4e:3d:6c:10:69:92:80:cd:7f:1f:83:c5:77:72:7e: 39:9e:ce:8b:a7:51:d7:a5:bf:1f:ea:d8:f9:4b:c4:c7:2a:27: 9c:92:a6:e4:fa:01:69:21:79:b6:a9:01:20:00:b4:5d:92:a5: 63:32:da:42:84:e0:b6:ce:5b:f4:b7:72:1a:e9:fe:ce:ac:6f: e7:dd:52:65:1e:05:fd:29:7c:cc:63:25:e1:0a:24:5a:f3:4c: d4:71:6d:63:27:9c:d4:c2:6c:eb:3d:12:3b:1e:35:2d:2a:e4: 8d:01:0a:1c:35:6f:08:9e:4c:57:48:9f:51:a1:d5:d5:c3:e1: ee:cd:6c:8e:d7:ad:bc:fc:e1:4c:65:0e:1c:5d:0a:03:26:65: 54:e7:6a:45:22:1f:5b:72:3a:29:0c:5e:54:d5:ff:b2:78:9c: 7b:a5:84:c3:30:c0:f7:fe:69:56:16:07:a8:94:9a:62:a2:29: ab:66:d3:5c:2e:0c:e2:b6:4f:a8:ea:26:e6:aa:b5:ac:5d:9a: 99:4c:2e:88:10:0a:a0:06:c7:32:4f:b7:2d:a1:ae:0b:1a:54: 6c:e6:0b:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBj+bgyu2Zs9sMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk NjA4YjFkOTItNmMwNy00ODJjLTg2NDktZjZlNDViZTNkNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI4H9dQqMqhs98ZmKioMAZh2loGf9Qk8yj/g RucOguCldssEB7LzwT3Kgo0MDODKhBEtOvxnaJVQ7jdMb6ZOm3oCdmb7xBIzWUfi 5zv6Jzv3KbjlT1nuR8mzvA8Vn1cY8Z2Ww+XX65swPd0lNk+dWtMgbimX2YCGRCCa cpExPefuYmxxuxIY5FeWG3Mq8MFCLCBNWniajWRY/md5/eU7UE1wVZaR319EBqa2 v4MV/MUNp75vfJi6hFW053tRN5AGdZqbfvYmoA+BVgsOTIcGcJCxumJVkaCqvalL G5t+xEogMWcqudIfU8nkDPKjxB2/+EFWQhmWWHYUqBg4SYH/lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYthVayGGj+vOgB76F0HncE20MYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvNGU3ZjM1YmItYTQyYy0z ZmRlLTg3ZDYtYTIyYjBjZjMzMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7u8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPMO/j9wwuss7soH9zrL4lz27sZpWTWsHuhinDf9Mo9tSvF3A7V8E49 bBBpkoDNfx+DxXdyfjmezounUdelvx/q2PlLxMcqJ5ySpuT6AWkhebapASAAtF2S pWMy2kKE4LbOW/S3chrp/s6sb+fdUmUeBf0pfMxjJeEKJFrzTNRxbWMnnNTCbOs9 EjseNS0q5I0BChw1bwieTFdIn1Gh1dXD4e7NbI7Xrbz84UxlDhxdCgMmZVTnakUi H1tyOikMXlTV/7J4nHulhMMwwPf+aVYWB6iUmmKiKatm01wuDOK2T6jqJuaqtaxd mplMLogQCqAGxzJPty2hrgsaVGzmC9s= -----END CERTIFICATE-----Generated at Fri Mar 14 10:17:52 2025 by rpki-client