$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa File: b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa (raw, json) Hash identifier: yZxiCYl5YLbkVqud87xLTF0tNcNofZIHYubQchh9ncU= Subject key identifier: F8:B0:82:EA:83:6B:63:88:C0:0C:43:47:9A:E6:AE:20:9D:EF:46:01 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285848F4F696BF1C3015C4C2AB6880 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 25649 IP address blocks: 199.187.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:96:bf:1c:30:15:c4:c2:ab:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=1fdfe3e1-0600-49b9-b711-cabf10a8e27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e1:47:05:ce:20:e5:c8:83:7a:62:78:43:73: d6:c8:ce:d2:f5:10:df:02:26:2f:28:98:6d:9a:9f: 8a:94:15:9d:aa:aa:90:d9:79:a9:aa:dc:b7:73:64: 75:36:2b:03:f1:fc:4c:5b:29:1e:17:dd:d0:43:37: 57:27:a6:a0:09:80:e4:a4:aa:bd:ea:1d:37:f5:6a: e5:7a:11:3d:aa:70:32:d4:e2:8c:fb:71:7b:41:61: 9d:24:ab:21:1f:ef:8f:dd:bd:ab:ef:82:13:47:cf: 06:b2:19:aa:a5:95:2d:b3:af:72:2b:54:81:ff:e9: 6a:12:0c:8e:00:6d:99:1a:7d:8a:5c:e9:ea:fd:be: f7:b4:2b:e2:39:c1:30:1b:3c:d5:57:b3:a8:49:56: 9e:32:b1:09:19:be:84:6d:8f:2b:fc:17:98:4b:35: a3:9b:fe:c1:d6:7f:0d:a5:3c:bb:83:b7:2e:98:0d: a6:a6:25:6d:ff:b7:bf:b6:aa:ff:a3:01:8d:57:25: 9b:25:a1:e7:12:e0:f8:40:e2:fa:17:4e:93:bc:76: 0c:39:86:d7:b7:aa:9c:f2:38:6c:3d:7d:28:93:dd: 31:e9:d2:b0:09:a3:ff:6d:f8:56:81:47:8e:ca:b0: c6:bf:eb:69:17:f7:b4:41:d8:ec:a0:0c:32:5b:ff: be:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B0:82:EA:83:6B:63:88:C0:0C:43:47:9A:E6:AE:20:9D:EF:46:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 199.187.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2b:a1:39:a3:03:55:0e:a5:3d:50:4c:34:80:30:58:7b:d5: 24:43:82:f7:8d:ef:b2:29:8e:ef:9f:0d:87:c1:ba:ad:7c:23: 4c:f1:46:c7:fa:f2:31:70:fb:38:27:f2:bd:13:66:ee:50:b2: a6:aa:03:1d:c9:4c:eb:0d:e0:03:ca:8c:02:18:e6:e5:5b:44: 81:2c:63:c7:8c:52:ec:64:be:e2:e6:5f:fc:e6:ed:8e:b7:cf: dd:e6:7e:c2:ef:d8:4f:a0:6f:54:1e:f2:81:4d:24:5e:d1:83: 2b:7b:84:ac:88:e8:bd:dd:a0:34:54:2c:cf:da:e8:96:0f:5e: 50:5f:88:2e:8c:0f:0f:18:6d:8f:d8:f1:f9:cd:99:da:f7:41: b9:8c:b0:ba:f2:3b:38:47:ff:1f:83:36:4e:df:fe:b1:12:5a: 96:30:c4:09:60:21:d4:a0:bf:2c:00:02:27:91:d7:69:6c:f3: 4b:4e:fe:0f:94:d1:b9:0f:b3:dd:51:20:0a:6f:68:58:06:c8: 86:07:49:dd:30:11:b4:1f:78:44:96:37:39:e6:7f:a0:ea:50: f9:87:5b:af:30:ad:ba:77:f8:0b:03:8d:86:25:3f:cc:38:0b: 94:d2:66:3a:e9:80:75:83:7e:1d:ec:17:a0:d5:01:9b:40:3a: 3a:01:6c:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pa/HDAVxMKraIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MWZkZmUzZTEtMDYwMC00OWI5LWI3MTEtY2FiZjEwYThlMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuFHBc4g5ciDemJ4Q3PWyM7S9RDfAiYvKJht mp+KlBWdqqqQ2Xmpqty3c2R1NisD8fxMWykeF93QQzdXJ6agCYDkpKq96h039Wrl ehE9qnAy1OKM+3F7QWGdJKshH++P3b2r74ITR88GshmqpZUts69yK1SB/+lqEgyO AG2ZGn2KXOnq/b73tCviOcEwGzzVV7OoSVaeMrEJGb6EbY8r/BeYSzWjm/7B1n8N pTy7g7cumA2mpiVt/7e/tqr/owGNVyWbJaHnEuD4QOL6F06TvHYMOYbXt6qc8jhs PX0ok90x6dKwCaP/bfhWgUeOyrDGv+tpF/e0QdjsoAwyW/++owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiwguqDa2OIwAxDR5rmriCd70YBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvYjllMDkxZDgtOGE0Yi0z YjRmLWJlNDQtYzgzODE4ZjE2YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7voMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkroTmjA1UOpT1QTDSAMFh71SRDgveN77Ipju+fDYfBuq18I0zxRsf6 8jFw+zgn8r0TZu5QsqaqAx3JTOsN4APKjAIY5uVbRIEsY8eMUuxkvuLmX/zm7Y63 z93mfsLv2E+gb1Qe8oFNJF7Rgyt7hKyI6L3doDRULM/a6JYPXlBfiC6MDw8YbY/Y 8fnNmdr3QbmMsLryOzhH/x+DNk7f/rESWpYwxAlgIdSgvywAAieR12ls80tO/g+U 0bkPs91RIApvaFgGyIYHSd0wEbQfeESWNznmf6DqUPmHW68wrbp3+AsDjYYlP8w4 C5TSZjrpgHWDfh3sF6DVAZtAOjoBbL4= -----END CERTIFICATE-----Generated at Fri Mar 14 09:57:51 2025 by rpki-client