$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f465a6e5-5591-34dd-a559-1c8626c17563.roa File: f465a6e5-5591-34dd-a559-1c8626c17563.roa (raw, json) Hash identifier: OVAp3gjpecj9gh6auJL7VMx1t3VWAft3BwIFXMYnDUc= Subject key identifier: 41:2A:35:17:98:CD:D2:EB:D2:17:0C:A4:54:79:CD:A1:28:BB:59:33 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642449BC12A151AB8D6280 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f465a6e5-5591-34dd-a559-1c8626c17563.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 199.189.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:24:49:bc:12:a1:51:ab:8d:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=38a039a9-093a-4f23-8882-b7887bf225e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:48:73:f2:70:3b:b0:98:fd:d0:1e:c1:69:93: e7:4d:96:52:35:73:2f:b1:de:cc:ad:d7:24:82:21: 50:a6:d6:11:29:20:98:92:da:42:82:3d:a0:03:22: 8a:5f:ae:f7:a9:5d:09:7b:8b:f8:55:39:52:85:0b: 93:18:c7:dc:61:de:f7:82:ea:cc:c1:ea:5f:a0:0f: d2:d1:f0:68:8e:0a:72:78:70:d4:7f:fe:d2:3d:e9: 09:e9:4d:f1:5f:d0:15:6b:51:d3:0e:de:63:5f:4b: e9:bd:25:77:7b:71:fd:da:6f:86:6f:8c:e2:e5:77: 13:41:43:1d:b6:d8:68:b8:33:ec:5e:6a:de:84:10: 5e:4a:c3:ef:5a:f9:d5:f9:67:d2:76:b1:5c:fd:72: 4a:02:41:dd:b7:c4:9c:96:f9:20:08:d3:c6:f1:17: 83:6c:5a:af:ca:b8:b4:66:61:2c:25:94:a6:c2:70: 70:14:50:a1:f5:8d:37:b2:54:98:02:17:8b:c5:a3: 42:a8:93:0a:79:bf:55:21:02:5c:ab:61:a3:41:83: ca:0d:16:5e:f1:94:09:69:cc:c6:51:c5:61:8b:06: 78:69:cb:df:f9:50:10:77:96:a7:09:04:c9:92:93: 2a:95:5a:cc:0d:8e:b2:34:e5:96:95:85:68:2a:fd: 69:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2A:35:17:98:CD:D2:EB:D2:17:0C:A4:54:79:CD:A1:28:BB:59:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f465a6e5-5591-34dd-a559-1c8626c17563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.189.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f6:b4:8a:f5:e4:0b:44:7e:cb:f8:82:89:ba:84:44:7c:57: 80:1f:fc:2a:af:00:55:8e:c8:03:67:07:22:82:a4:8f:1d:f0: e0:a4:a7:78:c5:a0:31:a2:53:4d:bd:7f:6c:2d:12:46:36:17: 63:6c:48:9f:c9:d5:91:c8:e4:46:08:ca:39:0a:5c:29:4c:ed: e7:5c:ea:f8:f8:fc:1e:f3:a2:ee:c2:d6:9c:91:06:6f:66:3b: 60:87:20:13:ff:91:92:77:69:d5:01:22:8c:df:ec:46:83:78: 7c:30:b2:f5:9e:17:53:87:6f:fc:60:57:7a:4a:24:1d:96:fc: d7:be:ac:1c:57:99:d6:eb:c0:79:ac:c5:d1:50:13:ca:f8:92: ae:f3:05:44:9a:b7:b1:8e:97:ae:df:39:d4:ec:29:d8:a4:2d: a2:99:01:2a:8e:74:fe:31:be:12:16:06:c9:65:4b:9d:21:ba: bd:ef:3f:56:c0:1c:8b:07:49:bc:ca:5b:94:a3:a2:d9:39:f3: 79:da:c3:7a:4b:cc:5e:cf:7d:66:29:ba:ad:aa:64:84:89:03: 88:34:ef:a4:26:a5:f7:81:ea:0a:f2:59:88:60:56:6f:78:e6: 57:ce:8f:20:43:f3:a4:3b:22:f7:79:89:09:4c:98:f6:81:bf: c1:64:85:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCRJvBKhUauNYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MzhhMDM5YTktMDkzYS00ZjIzLTg4ODItYjc4ODdiZjIyNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkhz8nA7sJj90B7BaZPnTZZSNXMvsd7Mrdck giFQptYRKSCYktpCgj2gAyKKX673qV0Je4v4VTlShQuTGMfcYd73gurMwepfoA/S 0fBojgpyeHDUf/7SPekJ6U3xX9AVa1HTDt5jX0vpvSV3e3H92m+Gb4zi5XcTQUMd tthouDPsXmrehBBeSsPvWvnV+WfSdrFc/XJKAkHdt8SclvkgCNPG8ReDbFqvyri0 ZmEsJZSmwnBwFFCh9Y03slSYAheLxaNCqJMKeb9VIQJcq2GjQYPKDRZe8ZQJaczG UcVhiwZ4acvf+VAQd5anCQTJkpMqlVrMDY6yNOWWlYVoKv1p2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEqNReYzdLr0hcMpFR5zaEou1kzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjQ2NWE2ZTUtNTU5MS0z NGRkLWE1NTktMWM4NjI2YzE3NTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx71gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr2tIr15AtEfsv4gom6hER8V4Af/CqvAFWOyANnByKCpI8d8OCkp3jF oDGiU029f2wtEkY2F2NsSJ/J1ZHI5EYIyjkKXClM7edc6vj4/B7zou7C1pyRBm9m O2CHIBP/kZJ3adUBIozf7EaDeHwwsvWeF1OHb/xgV3pKJB2W/Ne+rBxXmdbrwHms xdFQE8r4kq7zBUSat7GOl67fOdTsKdikLaKZASqOdP4xvhIWBsllS50hur3vP1bA HIsHSbzKW5Sjotk583naw3pLzF7PfWYpuq2qZISJA4g076QmpfeB6gryWYhgVm94 5lfOjyBD86Q7Ivd5iQlMmPaBv8FkhQY= -----END CERTIFICATE-----Generated at Sun Apr 13 03:00:24 2025 by rpki-client