$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7fafc48a-67c4-3f2b-b12b-26df3b394690.roa File: 7fafc48a-67c4-3f2b-b12b-26df3b394690.roa (raw, json) Hash identifier: 4fH/IiopxnRjjA0fuzHKcdowJOtrcTH46S5zHyqVWBs= Subject key identifier: 54:7A:96:1C:7B:3E:4C:1B:9D:D4:5E:AC:56:40:55:44:2F:20:F2:1D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6430A829562600C3125700 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7fafc48a-67c4-3f2b-b12b-26df3b394690.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 199.127.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:30:a8:29:56:26:00:c3:12:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=f76b5e7f-ae4a-42b8-aa4d-bccd2f8805b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:70:f9:85:f2:29:7b:cb:2f:4e:61:27:e9: 9e:4e:13:54:52:0b:82:3b:b3:97:98:e5:cd:0b:26: b3:50:34:06:20:13:87:b9:f8:44:a4:95:a2:9e:8e: ea:56:97:08:e4:19:f2:c3:9c:45:1d:4f:9b:18:25: 05:18:1f:16:a7:25:15:26:f2:a2:9b:c9:0e:ab:67: 77:2a:21:5a:da:d2:68:7f:46:ec:93:b9:57:bb:ab: b5:aa:92:8a:67:39:cf:00:c6:40:0e:26:1c:65:cf: 90:c7:33:92:11:38:8a:cf:df:23:b4:12:dc:1d:0e: b2:08:19:65:df:4a:62:10:b3:db:8c:d8:36:2d:83: 50:bb:9c:ff:4f:62:3b:a5:7c:6a:80:48:af:8f:0c: 15:e5:d8:61:d0:cf:d2:58:6c:78:fc:6d:43:29:10: d9:d4:92:10:00:fe:04:ee:ea:aa:cc:85:36:dd:d3: 96:e8:44:d7:25:b8:3c:f6:70:7a:15:6f:97:f2:4f: 5d:9f:a8:96:5b:8a:39:67:d9:81:1d:1b:45:fa:a5: 2b:1c:0c:02:79:d4:42:e7:89:fd:e7:7f:c1:11:81: 81:ac:10:b0:c4:87:af:94:38:2c:2e:b9:85:fc:61: 8a:42:ad:77:22:00:15:d6:d8:1b:57:f6:cc:37:76: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7A:96:1C:7B:3E:4C:1B:9D:D4:5E:AC:56:40:55:44:2F:20:F2:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7fafc48a-67c4-3f2b-b12b-26df3b394690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.127.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:da:38:fa:d7:98:37:a3:e5:fc:71:9d:85:ee:ec:2d:51:84: 80:71:9b:94:26:cb:0f:38:7a:02:c7:2d:00:01:6a:4a:94:60: 49:99:68:6f:b4:04:80:19:63:78:84:1d:3b:2a:75:f7:58:f5: 2b:4f:26:0f:d4:68:a6:f2:a5:e6:88:bf:22:03:94:f9:29:09: fc:88:a6:aa:b0:67:b0:28:4d:ad:0a:8f:10:e0:16:99:a1:f6: 46:a0:d9:c7:89:8f:39:a2:ce:17:7e:15:80:83:b8:a2:36:7d: e5:60:38:17:dc:36:ed:de:8f:cd:65:6c:de:a9:65:e9:60:59: e6:5c:c5:86:a7:e6:5d:c5:fb:1f:26:b3:65:25:bf:99:90:e2: 27:a5:a2:c0:29:eb:35:e9:02:e1:0b:3d:eb:34:cf:3f:41:42: c5:d0:8f:5f:c0:37:09:79:a5:49:f2:6c:66:e4:f2:66:a3:90: e5:9b:c1:52:45:30:88:46:d0:e9:0f:34:cc:1c:52:59:4c:04: 96:b6:c7:d7:00:39:83:38:ac:a9:61:e2:f6:df:35:86:b6:d9: 2b:24:8e:9d:bb:26:e5:b1:7a:d2:4d:76:48:4e:49:ea:e0:68: 80:67:8b:ad:04:39:52:d5:91:c0:e0:d4:73:33:c9:d2:05:aa: 02:f7:aa:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZDCoKVYmAMMSVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk Zjc2YjVlN2YtYWU0YS00MmI4LWFhNGQtYmNjZDJmODgwNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsFw+YXyKXvLL05hJ+meThNUUguCO7OXmOXN CyazUDQGIBOHufhEpJWino7qVpcI5Bnyw5xFHU+bGCUFGB8WpyUVJvKim8kOq2d3 KiFa2tJof0bsk7lXu6u1qpKKZznPAMZADiYcZc+QxzOSETiKz98jtBLcHQ6yCBll 30piELPbjNg2LYNQu5z/T2I7pXxqgEivjwwV5dhh0M/SWGx4/G1DKRDZ1JIQAP4E 7uqqzIU23dOW6ETXJbg89nB6FW+X8k9dn6iWW4o5Z9mBHRtF+qUrHAwCedRC54n9 53/BEYGBrBCwxIevlDgsLrmF/GGKQq13IgAV1tgbV/bMN3Z/lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFR6lhx7PkwbndRerFZAVUQvIPIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2ZhZmM0OGEtNjdjNC0z ZjJiLWIxMmItMjZkZjNiMzk0NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx39oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInaOPrXmDej5fxxnYXu7C1RhIBxm5Qmyw84egLHLQABakqUYEmZaG+0 BIAZY3iEHTsqdfdY9StPJg/UaKbypeaIvyIDlPkpCfyIpqqwZ7AoTa0KjxDgFpmh 9kag2ceJjzmizhd+FYCDuKI2feVgOBfcNu3ej81lbN6pZelgWeZcxYan5l3F+x8m s2Ulv5mQ4ielosAp6zXpAuELPes0zz9BQsXQj1/ANwl5pUnybGbk8majkOWbwVJF MIhG0OkPNMwcUllMBJa2x9cAOYM4rKlh4vbfNYa22Sskjp27JuWxetJNdkhOSerg aIBni60EOVLVkcDg1HMzydIFqgL3qkg= -----END CERTIFICATE-----Generated at Sat Apr 12 13:06:54 2025 by rpki-client