$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa File: 89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa (raw, json) Hash identifier: uS4OZAuEC4rchulRX9jN68ODfnskonklnz7P4UmweQY= Subject key identifier: 37:3D:1A:B8:1B:59:23:73:77:AE:91:78:E4:2C:C3:35:2F:DE:68:7E Certificate issuer: /CN=7b430551-8bf9-4310-8a7f-b2233e29affd Certificate serial: 010D0C9F43285848E16BE9E504D59D365949E180 Authority key identifier: 6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 17456 IP address blocks: 199.127.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e9:e5:04:d5:9d:36:59:49:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b430551-8bf9-4310-8a7f-b2233e29affd Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=1a0a7898-a976-463c-a6bc-7554e1bd63c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:90:95:49:36:22:0f:2d:15:99:25:46:7b: 67:de:4d:84:ed:26:37:28:e6:50:c3:91:fe:a2:ab: de:af:26:da:ab:b8:7d:d1:1a:ee:5e:bf:0c:cf:15: 34:f6:3e:c2:61:e9:9d:95:78:22:53:da:dc:e6:b9: fc:d7:63:fd:c5:fa:11:81:6f:53:8f:65:dc:32:ab: a2:64:25:05:8b:99:2f:3a:23:32:81:86:a1:2c:38: df:a7:94:3a:fb:b8:31:af:88:81:0e:67:e2:95:ab: 22:2a:f1:c8:6b:5a:8d:92:32:5a:b1:ea:8d:8a:27: be:a1:bf:b5:44:75:d0:17:f9:81:ac:27:68:05:7c: ca:28:55:d4:cd:9a:97:10:11:28:26:14:ad:71:94: 75:93:0f:8b:ac:e7:5f:fc:b4:03:c0:5e:7f:ee:27: 5d:42:7e:f5:b3:d2:0d:e1:72:0b:76:10:d9:df:4f: 80:82:cd:d0:e1:da:e5:47:e2:69:83:24:19:d2:fd: d5:ba:2d:24:e7:02:9b:85:13:5f:80:cc:82:17:61: 9b:7e:27:8e:24:fe:8b:94:92:f4:38:58:47:2c:b3: 99:b1:74:ac:01:97:75:f1:5b:d2:f7:cf:27:db:f5: bd:da:90:a9:49:1d:52:ed:d6:06:8f:5c:2e:9f:c8: 1d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3D:1A:B8:1B:59:23:73:77:AE:91:78:E4:2C:C3:35:2F:DE:68:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl X509v3 Authority Key Identifier: keyid:6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer sbgp-ipAddrBlock: critical IPv4: 199.127.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ff:bb:c2:b0:7b:f4:fa:88:8e:c9:6e:b8:79:24:bd:7e:0a: 72:1a:d9:24:ec:c3:f3:79:3a:99:45:ae:b5:ff:fb:bd:37:81: 7f:21:24:d3:6e:d0:03:70:c6:28:80:f7:9e:3c:1e:71:14:e8: b6:da:81:41:be:a9:1c:f3:56:29:8d:d4:fb:21:d6:5f:b0:4a: 64:17:be:3f:58:4f:ac:77:10:eb:da:ec:6b:36:76:47:5b:37: 8b:88:cb:43:38:d0:e4:70:db:42:0e:c4:79:1f:85:c0:85:de: 78:2c:65:91:ca:65:c8:96:cf:ba:95:84:04:7e:ef:dd:92:fb: 59:1b:94:4f:5a:0e:d5:d9:b0:2a:dd:4a:8a:f8:76:c4:a8:14: e0:2d:af:11:79:f4:b3:0a:2f:37:bc:ba:eb:db:c4:d1:e7:bf: f1:96:1e:71:14:e5:c7:5f:a3:b5:6b:e3:42:4d:39:f4:cb:6a: 4f:c3:8b:4a:f0:7c:c3:ac:ad:a6:6a:39:b4:4c:72:fe:38:30: 3c:3e:e7:9d:a5:de:dd:65:5a:5c:9f:ff:51:b7:9d:8a:ec:34: 92:55:d5:5a:9c:a1:b2:7a:c1:85:40:85:4e:f3:90:60:2c:38: 36:ae:01:a8:6e:e8:8a:8f:52:95:a1:3a:33:a4:93:68:a0:35: 7d:ea:67:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+nlBNWdNllJ4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I0MzA1NTEtOGJmOS00MzEwLThhN2YtYjIyMzNlMjlh ZmZkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MWEwYTc4OTgtYTk3Ni00NjNjLWE2YmMtNzU1NGUxYmQ2M2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7yQlUk2Ig8tFZklRntn3k2E7SY3KOZQw5H+ oqverybaq7h90RruXr8MzxU09j7CYemdlXgiU9rc5rn812P9xfoRgW9Tj2XcMqui ZCUFi5kvOiMygYahLDjfp5Q6+7gxr4iBDmfilasiKvHIa1qNkjJaseqNiie+ob+1 RHXQF/mBrCdoBXzKKFXUzZqXEBEoJhStcZR1kw+LrOdf/LQDwF5/7iddQn71s9IN 4XILdhDZ30+Ags3Q4drlR+JpgyQZ0v3Vui0k5wKbhRNfgMyCF2GbfieOJP6LlJL0 OFhHLLOZsXSsAZd18VvS988n2/W92pCpSR1S7dYGj1wun8gdaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDc9GrgbWSNzd66ReOQswzUv3mh+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YjQz MDU1MS04YmY5LTQzMTAtOGE3Zi1iMjIzM2UyOWFmZmQvODljZTY4ODYtNWEzYy0z ZTFiLWE4ZTctMjExOTc3MDg5YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2I0MzA1NTEtOGJmOS00MzEwLThh N2YtYjIyMzNlMjlhZmZkLzdiNDMwNTUxLThiZjktNDMxMC04YTdmLWIyMjMzZTI5 YWZmZC5jcmwwHwYDVR0jBBgwFoAUbr7Zho9mxgc1b6ez51AXjdgifCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YjQzMDU1MS04YmY5LTQzMTAtOGE3Zi1iMjIz M2UyOWFmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFL/u8Kwe/T6iI7Jbrh5JL1+CnIa2STsw/N5OplFrrX/+703gX8hJNNu 0ANwxiiA9548HnEU6LbagUG+qRzzVimN1Psh1l+wSmQXvj9YT6x3EOva7Gs2dkdb N4uIy0M40ORw20IOxHkfhcCF3ngsZZHKZciWz7qVhAR+792S+1kblE9aDtXZsCrd Sor4dsSoFOAtrxF59LMKLze8uuvbxNHnv/GWHnEU5cdfo7Vr40JNOfTLak/Di0rw fMOsraZqObRMcv44MDw+552l3t1lWlyf/1G3nYrsNJJV1VqcobJ6wYVAhU7zkGAs ODauAahu6IqPUpWhOjOkk2igNX3qZxI= -----END CERTIFICATE-----Generated at Fri Apr 4 16:03:38 2025 by rpki-client