$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/9ae2582e-294e-3281-bf09-2642a6663c7d.roa File: 9ae2582e-294e-3281-bf09-2642a6663c7d.roa (raw, json) Hash identifier: 8s8yB3slOLZuGt9lWjsUgxEzy/9wwaM7rvyTana86+Y= Subject key identifier: D2:27:99:19:00:84:7B:C7:1C:12:43:3A:3F:47:94:88:10:D0:2A:01 Certificate issuer: /CN=293fd22c-acf2-43f5-bbd1-2b63ea7128c7 Certificate serial: 010D0C9F43285848D0ABB2C05EAEE01B5F149860 Authority key identifier: 14:D6:F1:9E:F8:E5:BA:88:DB:08:5A:22:98:FE:68:86:61:1D:EB:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/9ae2582e-294e-3281-bf09-2642a6663c7d.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 399386 IP address blocks: 199.88.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b2:c0:5e:ae:e0:1b:5f:14:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293fd22c-acf2-43f5-bbd1-2b63ea7128c7 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=4ae75419-8d09-4199-bb62-eb6189374bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fe:db:cc:9c:86:18:32:54:11:18:f8:fb:85: 09:11:1f:b5:e8:b0:20:f2:d4:79:9d:c1:cd:e2:2e: 49:1f:3e:39:76:7e:b7:88:b6:20:8c:15:14:e5:b1: 29:26:25:9a:45:1b:33:67:a1:ba:53:0c:9f:32:c3: 66:b7:7b:e0:0b:8e:17:67:ed:17:b5:93:f5:3d:d5: be:a0:e5:49:da:33:6f:7e:18:45:a0:69:ce:ec:7d: 64:7a:66:94:04:43:00:c9:d4:66:d7:b1:ab:d4:2b: b9:2a:30:90:4f:bc:d0:cd:d5:18:2d:90:2e:bd:f9: c3:e1:4c:02:f8:cb:8f:fb:52:27:41:c0:47:97:94: 1c:8c:04:ca:9d:cd:94:31:ce:ba:7f:ed:87:05:94: 33:5a:99:ad:d9:00:f3:5d:cb:2f:6e:fd:1a:5e:f3: d0:81:71:9b:7c:c8:16:0e:aa:1c:c1:a7:5f:87:1b: e0:81:b1:d2:fc:b5:a0:97:6a:95:5e:56:71:62:29: 30:09:98:1f:41:a1:16:3e:fc:bc:5e:1b:52:46:a3: 3b:b1:75:05:37:b4:05:a9:55:ea:52:c5:bc:7d:26: 74:e2:68:01:66:ba:b9:f5:25:1e:1e:0b:47:31:35: 3f:b7:93:60:ac:11:0d:0d:ee:25:bf:00:2f:b9:d2: a9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:27:99:19:00:84:7B:C7:1C:12:43:3A:3F:47:94:88:10:D0:2A:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/9ae2582e-294e-3281-bf09-2642a6663c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.crl X509v3 Authority Key Identifier: keyid:14:D6:F1:9E:F8:E5:BA:88:DB:08:5A:22:98:FE:68:86:61:1D:EB:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.cer sbgp-ipAddrBlock: critical IPv4: 199.88.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b4:61:96:9e:dc:0f:6e:29:9a:78:c8:12:67:bf:04:07:27: e1:f3:9b:1f:23:e8:dc:ae:de:7d:c4:9e:eb:78:6a:87:7b:b2: c0:ed:2d:61:de:c4:06:6d:2e:00:f7:50:9a:01:50:5f:5b:4e: 0d:df:e0:3c:11:ee:e9:42:23:68:8a:40:f4:f0:39:21:ae:64: df:df:3e:65:14:cc:8b:50:d7:f9:1f:35:2f:99:83:1b:a3:c0: c1:b2:5d:39:52:57:5b:a2:7f:87:92:8b:d7:7a:b6:9d:d0:83: e6:4f:d2:d9:e2:74:90:53:a9:10:c5:2b:c2:12:0e:dc:7e:4a: c5:44:49:23:6d:51:31:8e:2b:d9:e6:78:ff:e7:40:e5:d7:33: 19:94:80:57:de:84:89:3d:65:51:39:24:d9:33:0a:e6:c9:f9: 06:4a:e5:7a:53:ec:a2:46:33:ab:89:75:5c:96:cc:24:71:ff: f0:35:c7:14:4a:04:d1:42:b3:a4:df:0f:0f:b0:6c:af:cf:6d: cb:64:05:6b:ca:87:f4:45:f1:b9:29:54:7a:32:d4:09:6b:9b: d0:17:c7:f4:c0:b7:d7:8f:ef:db:79:50:2d:ad:ea:8d:42:46: 30:16:ec:44:02:44:ce:d1:1d:8d:3d:91:58:08:e1:f1:51:31: ea:32:61:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7LAXq7gG18UmGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkzZmQyMmMtYWNmMi00M2Y1LWJiZDEtMmI2M2VhNzEy OGM3MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NGFlNzU0MTktOGQwOS00MTk5LWJiNjItZWI2MTg5Mzc0YmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv7bzJyGGDJUERj4+4UJER+16LAg8tR5ncHN 4i5JHz45dn63iLYgjBUU5bEpJiWaRRszZ6G6UwyfMsNmt3vgC44XZ+0XtZP1PdW+ oOVJ2jNvfhhFoGnO7H1kemaUBEMAydRm17Gr1Cu5KjCQT7zQzdUYLZAuvfnD4UwC +MuP+1InQcBHl5QcjATKnc2UMc66f+2HBZQzWpmt2QDzXcsvbv0aXvPQgXGbfMgW DqocwadfhxvggbHS/LWgl2qVXlZxYikwCZgfQaEWPvy8XhtSRqM7sXUFN7QFqVXq UsW8fSZ04mgBZrq59SUeHgtHMTU/t5NgrBENDe4lvwAvudKphQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNInmRkAhHvHHBJDOj9HlIgQ0CoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOTNm ZDIyYy1hY2YyLTQzZjUtYmJkMS0yYjYzZWE3MTI4YzcvOWFlMjU4MmUtMjk0ZS0z MjgxLWJmMDktMjY0MmE2NjYzYzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjkzZmQyMmMtYWNmMi00M2Y1LWJi ZDEtMmI2M2VhNzEyOGM3LzI5M2ZkMjJjLWFjZjItNDNmNS1iYmQxLTJiNjNlYTcx MjhjNy5jcmwwHwYDVR0jBBgwFoAUFNbxnvjluojbCFoimP5ohmEd65AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOTNmZDIyYy1hY2YyLTQzZjUtYmJkMS0yYjYz ZWE3MTI4YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1iDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJK0YZae3A9uKZp4yBJnvwQHJ+Hzmx8j6Nyu3n3Enut4aod7ssDtLWHe xAZtLgD3UJoBUF9bTg3f4DwR7ulCI2iKQPTwOSGuZN/fPmUUzItQ1/kfNS+Zgxuj wMGyXTlSV1uif4eSi9d6tp3Qg+ZP0tnidJBTqRDFK8ISDtx+SsVESSNtUTGOK9nm eP/nQOXXMxmUgFfehIk9ZVE5JNkzCubJ+QZK5XpT7KJGM6uJdVyWzCRx//A1xxRK BNFCs6TfDw+wbK/PbctkBWvKh/RF8bkpVHoy1Alrm9AXx/TAt9eP79t5UC2t6o1C RjAW7EQCRM7RHY09kVgI4fFRMeoyYfA= -----END CERTIFICATE-----Generated at Fri Apr 4 15:58:32 2025 by rpki-client