$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa File: 87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa (raw, json) Hash identifier: MbRb/Iwg0EZPqE0+a882s2nwZtX4xqnxpWrwc/wwyyc= Subject key identifier: E8:61:E2:B3:FC:0B:72:0F:92:65:D7:B5:FC:89:6B:91:95:0E:CB:39 Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F43285848E9CBF3C7A868EF9B41A57C40 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 4226 IP address blocks: 199.192.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:f3:c7:a8:68:ef:9b:41:a5:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=4c23afab-e1c4-4120-ba80-6fcb5cbee968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:02:60:53:6a:8b:5d:1b:a1:3e:62:a5:8a:6c: 43:8b:75:07:be:d5:51:27:63:f9:3a:ae:2a:66:ce: 2f:a4:4c:2a:04:ae:56:68:78:fb:7d:69:47:86:41: 94:ab:6b:45:00:94:fc:20:37:55:02:b0:3b:4f:fc: 81:6b:59:fc:a1:eb:ba:23:3a:82:93:c4:8c:dd:45: 80:8a:c6:0c:98:73:0e:13:f4:5f:23:7b:04:78:c5: 70:bd:fe:05:ba:2c:40:8f:f7:70:a9:be:5d:b2:53: da:69:1c:29:b8:b7:19:ee:e9:8b:92:37:b6:b0:70: 19:b4:5f:89:b5:15:ca:3f:d9:50:18:28:15:70:bf: 80:8d:c6:c5:6f:38:25:b7:ac:ce:40:96:b6:86:b5: 40:d6:19:ac:da:0f:23:51:08:ff:41:e8:5f:ef:cc: 6b:4d:20:5f:27:0f:bc:8e:a3:7b:a7:30:10:96:a5: ef:d1:03:61:cd:48:60:0e:ad:95:65:f7:24:e2:5b: 2d:ff:c9:95:76:10:07:be:e4:72:cd:ee:6a:84:38: a0:17:2d:6d:42:05:b0:01:a8:f4:a0:cc:36:a3:2c: 3e:53:99:7c:c5:d3:13:b9:13:c4:fc:13:c4:40:84: 87:2c:43:65:6d:3c:40:7a:6c:99:d5:54:b6:b9:c7: 82:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:61:E2:B3:FC:0B:72:0F:92:65:D7:B5:FC:89:6B:91:95:0E:CB:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv4: 199.192.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:89:cd:ae:30:33:ca:4d:e1:fa:fa:ee:9a:48:9d:2e:0b:fb: c9:4d:bc:07:02:a9:d4:8e:23:fe:11:44:87:15:ef:47:68:69: ca:b1:f3:78:be:e8:ef:60:f0:9d:b0:d6:b3:a9:62:84:54:5a: d9:bd:f3:1a:8a:1e:bc:37:11:36:13:b1:de:4d:17:a6:0e:03: ce:43:ba:44:98:c1:c4:ba:a5:60:c5:40:68:26:dc:59:5b:73: 4a:5f:c3:93:be:3d:73:f6:74:d1:a8:68:52:94:d1:f4:5e:7d: db:91:3d:91:25:4b:fe:bd:4f:e6:cf:51:28:8e:ea:65:2a:41: 2b:22:ce:77:fe:c8:dd:75:fe:fc:70:91:75:80:62:cf:55:bb: c3:59:9d:f5:53:b8:22:ee:42:07:a0:5c:0b:ee:59:a4:ac:80: ad:8c:7d:45:7c:4b:28:f8:c0:2e:68:93:81:db:08:65:64:49: c4:80:9c:b3:98:1b:63:a3:d0:54:8f:6b:61:9e:aa:d3:c0:ed: fb:98:d2:8a:bc:03:95:61:62:f8:09:eb:8f:5c:9c:6a:7f:2a: d6:c4:ff:a0:12:b5:24:fa:50:03:64:a9:f8:d6:18:51:e3:86: 70:21:44:d7:e5:ea:53:b6:0b:f9:6e:f5:84:85:0f:f8:13:66: c6:66:00:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy/PHqGjvm0GlfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk NGMyM2FmYWItZTFjNC00MTIwLWJhODAtNmZjYjVjYmVlOTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigJgU2qLXRuhPmKlimxDi3UHvtVRJ2P5Oq4q Zs4vpEwqBK5WaHj7fWlHhkGUq2tFAJT8IDdVArA7T/yBa1n8oeu6IzqCk8SM3UWA isYMmHMOE/RfI3sEeMVwvf4FuixAj/dwqb5dslPaaRwpuLcZ7umLkje2sHAZtF+J tRXKP9lQGCgVcL+AjcbFbzglt6zOQJa2hrVA1hms2g8jUQj/Qehf78xrTSBfJw+8 jqN7pzAQlqXv0QNhzUhgDq2VZfck4lst/8mVdhAHvuRyze5qhDigFy1tQgWwAaj0 oMw2oyw+U5l8xdMTuRPE/BPEQISHLENlbTxAemyZ1VS2uceCLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhh4rP8C3IPkmXXtfyJa5GVDss5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvODdjOWM4NjYtZmFhMi0z ZDJiLThjNmEtOTQ3ZmJiYjU3NzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8BgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmJza4wM8pN4fr67ppInS4L+8lNvAcCqdSOI/4RRIcV70doacqx83i+ 6O9g8J2w1rOpYoRUWtm98xqKHrw3ETYTsd5NF6YOA85DukSYwcS6pWDFQGgm3Flb c0pfw5O+PXP2dNGoaFKU0fRefduRPZElS/69T+bPUSiO6mUqQSsiznf+yN11/vxw kXWAYs9Vu8NZnfVTuCLuQgegXAvuWaSsgK2MfUV8Syj4wC5ok4HbCGVkScSAnLOY G2Oj0FSPa2GeqtPA7fuY0oq8A5VhYvgJ649cnGp/KtbE/6AStST6UANkqfjWGFHj hnAhRNfl6lO2C/lu9YSFD/gTZsZmAFg= -----END CERTIFICATE-----Generated at Fri Apr 4 16:11:00 2025 by rpki-client