$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/ec248683-6ef1-3211-9a3f-8ed26d34a7a1.roa File: ec248683-6ef1-3211-9a3f-8ed26d34a7a1.roa (raw, json) Hash identifier: GhTEF9jNcmYFpyLEcFvMAj25lGPtreslnB1R/xMu5MM= Subject key identifier: 3F:74:8D:39:DF:F3:5B:F3:5E:FD:B3:AC:D9:E5:0F:62:DC:37:9E:F1 Certificate issuer: /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0 Certificate serial: 010D0C9F43285848EF6142F7C3C4A5B43668EA00 Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/ec248683-6ef1-3211-9a3f-8ed26d34a7a1.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 19471 IP address blocks: 199.47.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:42:f7:c3:c4:a5:b4:36:68:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=b56dce23-0205-46a3-9feb-e27489cb0a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:24:0c:4a:e5:3c:9e:a1:d0:92:00:c8:0d:98: c5:6b:7d:18:47:54:d7:a0:c2:49:c7:db:ca:03:9a: b7:41:8c:4b:90:1d:3e:4a:71:0e:99:0f:e5:32:ea: 1d:a0:08:ec:57:db:f8:39:51:50:97:87:42:84:d6: f5:f5:6a:38:5e:3f:fa:2d:26:ed:52:ae:0a:d2:c6: 54:97:e0:ab:65:c6:8b:9b:8a:a7:2e:7d:85:a9:e3: ef:66:36:dc:0c:4d:ec:61:17:ca:92:30:4a:6e:22: d7:be:80:7a:c8:5d:c5:6b:fc:02:50:61:6a:62:e6: 2b:43:57:39:ad:72:28:41:77:85:c0:44:58:8b:e4: 2d:38:51:16:d7:2f:bd:28:27:c1:72:e1:ff:9b:71: f2:42:86:cf:ef:60:ea:fc:c5:6b:1b:31:bc:92:f6: ac:de:3d:58:35:d9:22:01:f3:63:a8:2f:48:96:2d: f3:57:41:6f:79:f4:8f:56:a5:f5:eb:80:8a:f3:da: 1d:89:79:1b:92:3c:2e:0d:2d:34:80:54:9a:3d:32: e5:86:43:30:82:72:a2:d6:fc:d0:82:e4:20:e4:1d: 7c:c8:49:d6:6c:5d:b3:df:06:28:28:3a:ec:ee:3e: 4b:f1:3d:fe:34:23:f5:43:88:b1:36:e7:e3:89:68: 39:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:74:8D:39:DF:F3:5B:F3:5E:FD:B3:AC:D9:E5:0F:62:DC:37:9E:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/ec248683-6ef1-3211-9a3f-8ed26d34a7a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl X509v3 Authority Key Identifier: keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer sbgp-ipAddrBlock: critical IPv4: 199.47.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:34:f0:65:2b:dc:bb:02:21:7b:53:1a:72:cc:bc:f1:74:b8: 8b:d2:62:c0:ec:01:c2:c1:0b:d9:26:b7:0e:14:23:9b:b9:92: f5:43:12:e4:5e:0b:bd:52:8a:f1:7c:7a:41:1f:63:a0:cd:0d: 54:91:00:d0:b2:0a:41:88:66:e7:13:67:79:60:bc:e9:50:75: 89:9d:78:32:34:8c:ec:f4:16:b7:3b:d4:e5:bd:56:77:22:e0: 58:8d:f7:74:21:a9:9f:95:ba:d8:50:41:7b:89:f6:dd:5d:83: 7f:57:8a:27:73:b7:4a:2c:5b:01:cb:62:ba:a8:4c:f7:bc:e2: 72:d7:a7:80:1d:37:86:7b:ad:f7:d9:d7:0e:50:70:67:fa:64: 64:58:19:1a:b5:89:64:a6:f5:90:d6:68:c5:99:39:29:3a:ed: 6d:29:9d:9b:a3:bb:e8:30:2a:45:81:c4:50:fd:61:4f:54:d3: cb:cc:68:95:f7:3e:ea:57:22:3d:94:ff:58:6c:07:50:de:c8: c0:ee:ce:6c:ed:22:54:40:6a:e7:99:7f:c8:69:29:97:b0:42: ab:ce:7f:27:ea:42:c4:17:04:c4:d7:a4:c9:27:17:5e:95:68: dc:bf:ff:44:9c:0a:ba:9d:f8:77:c0:24:ec:fa:05:cd:30:12: d4:93:d1:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUL3w8SltDZo6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ5ZWFhMDctOTNiZC00ZjJiLWI5YzYtYWMxZDQxMDZj NWIwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YjU2ZGNlMjMtMDIwNS00NmEzLTlmZWItZTI3NDg5Y2IwYTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSQMSuU8nqHQkgDIDZjFa30YR1TXoMJJx9vK A5q3QYxLkB0+SnEOmQ/lMuodoAjsV9v4OVFQl4dChNb19Wo4Xj/6LSbtUq4K0sZU l+CrZcaLm4qnLn2FqePvZjbcDE3sYRfKkjBKbiLXvoB6yF3Fa/wCUGFqYuYrQ1c5 rXIoQXeFwERYi+QtOFEW1y+9KCfBcuH/m3HyQobP72Dq/MVrGzG8kvas3j1YNdki AfNjqC9Ili3zV0FvefSPVqX164CK89odiXkbkjwuDS00gFSaPTLlhkMwgnKi1vzQ guQg5B18yEnWbF2z3wYoKDrs7j5L8T3+NCP1Q4ixNufjiWg54QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD90jTnf81vzXv2zrNnlD2LcN57xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDll YWEwNy05M2JkLTRmMmItYjljNi1hYzFkNDEwNmM1YjAvZWMyNDg2ODMtNmVmMS0z MjExLTlhM2YtOGVkMjZkMzRhN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ5ZWFhMDctOTNiZC00ZjJiLWI5 YzYtYWMxZDQxMDZjNWIwL2U0OWVhYTA3LTkzYmQtNGYyYi1iOWM2LWFjMWQ0MTA2 YzViMC5jcmwwHwYDVR0jBBgwFoAUDTlc4w0fvbZ5ih1QYOz8YldDgDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDllYWEwNy05M2JkLTRmMmItYjljNi1hYzFk NDEwNmM1YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxy9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs08GUr3LsCIXtTGnLMvPF0uIvSYsDsAcLBC9kmtw4UI5u5kvVDEuRe C71SivF8ekEfY6DNDVSRANCyCkGIZucTZ3lgvOlQdYmdeDI0jOz0Frc71OW9Vnci 4FiN93QhqZ+VuthQQXuJ9t1dg39Xiidzt0osWwHLYrqoTPe84nLXp4AdN4Z7rffZ 1w5QcGf6ZGRYGRq1iWSm9ZDWaMWZOSk67W0pnZuju+gwKkWBxFD9YU9U08vMaJX3 PupXIj2U/1hsB1DeyMDuzmztIlRAaueZf8hpKZewQqvOfyfqQsQXBMTXpMknF16V aNy//0ScCrqd+HfAJOz6Bc0wEtST0ZE= -----END CERTIFICATE-----Generated at Fri Apr 4 19:03:20 2025 by rpki-client