$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9766e4b7-e178-3353-97a3-954a3fefaf6e.roa File: 9766e4b7-e178-3353-97a3-954a3fefaf6e.roa (raw, json) Hash identifier: i2sshdUrAbVtRirs7SxYNY73B6Q5LenXt/29ms8sszY= Subject key identifier: CB:9E:3F:9E:5A:F8:84:B2:ED:00:87:30:7F:76:DB:9F:CC:B5:50:31 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C444783013EA2F80F92F80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9766e4b7-e178-3353-97a3-954a3fefaf6e.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 199.232.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:44:78:30:13:ea:2f:80:f9:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=5ac620ed-acd5-4b34-9fc3-9ee4647856b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4a:56:ff:28:a4:d9:3f:99:6d:82:84:95:b8: 0e:2a:c5:a0:b7:63:31:63:a9:c5:68:6d:b8:77:e8: 3a:aa:d4:17:82:65:68:d3:21:f7:f7:4c:0d:70:86: 5d:7f:f3:3f:a1:3c:c1:20:a4:50:3b:33:6d:6f:38: 88:35:b5:d5:ce:7a:d6:f8:45:22:5e:01:7f:42:71: 50:df:1a:db:b5:6f:84:b8:50:d7:0a:bc:e9:e6:2d: 74:e8:f2:ad:cc:2b:67:cf:a3:d8:45:15:59:4a:44: 00:19:0f:7b:35:a3:0d:96:69:b7:80:0c:de:b7:32: 2f:22:f7:33:d6:35:04:e0:23:0f:1b:04:a4:a8:d6: 88:2f:4a:d0:ab:8b:b5:1b:37:24:8a:69:45:5d:cd: f1:06:ca:1b:d8:fe:6b:2c:b1:16:e6:1b:c8:9f:92: 5c:79:39:8e:14:82:05:da:7b:fe:a2:03:24:04:a1: aa:60:f2:56:3d:df:a7:9e:09:71:ba:36:bf:40:75: 9f:32:a2:06:92:aa:e5:c7:a8:67:68:f8:e1:1a:e5: 19:2a:c2:44:cc:7f:11:86:a7:49:84:7a:36:8d:d8: 5c:a4:39:96:9b:6d:0b:d4:5f:3f:dd:92:6b:99:42: 57:f9:24:fb:0c:9a:d7:78:ab:72:da:22:4d:2c:97: c8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9E:3F:9E:5A:F8:84:B2:ED:00:87:30:7F:76:DB:9F:CC:B5:50:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9766e4b7-e178-3353-97a3-954a3fefaf6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 199.232.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:df:e4:a1:0a:0e:d9:b7:ad:1f:3e:f8:bc:c5:3b:2f:8e:ee: 92:54:5e:96:07:f3:fa:a1:73:15:91:f6:69:08:e1:ff:df:fa: 92:34:da:e7:1e:24:c1:bd:aa:12:eb:67:f3:b6:8e:91:57:b2: 98:55:79:9e:bd:cc:91:1e:d4:6a:a0:51:6a:ed:af:47:a4:39: 8b:ee:c8:b8:3c:ee:fc:17:b5:f8:56:13:0f:0d:88:08:27:8a: a5:3c:b5:47:7f:75:9c:f0:b0:77:eb:65:5f:4e:7f:d2:b3:50: e5:b4:c9:32:c3:83:c3:c7:15:23:12:68:5f:3e:da:e3:32:3c: 5c:c3:01:44:f4:13:4e:5e:d9:90:d5:d7:98:0d:f1:e1:43:8b: 3a:a6:16:cc:84:b3:40:b0:1c:b1:e5:95:0f:6f:0e:e9:4d:6e: d0:b5:21:13:89:ae:b9:ab:31:91:3e:6c:b0:3f:6e:45:0c:29: 84:36:21:d9:3f:cf:bf:52:ee:d5:93:63:01:5c:26:de:49:80: c8:6e:54:a0:b1:a1:eb:f4:b2:46:8b:b5:e0:91:e8:c5:4a:80: 6c:06:6a:de:18:52:a6:57:44:60:41:a2:45:86:01:87:58:5d: 58:90:31:3d:c7:6f:9b:75:27:51:df:ba:82:f2:48:6e:58:fe: 91:a3:99:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxER4MBPqL4D5L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NWFjNjIwZWQtYWNkNS00YjM0LTlmYzMtOWVlNDY0Nzg1NmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkpW/yik2T+ZbYKElbgOKsWgt2MxY6nFaG24 d+g6qtQXgmVo0yH390wNcIZdf/M/oTzBIKRQOzNtbziINbXVznrW+EUiXgF/QnFQ 3xrbtW+EuFDXCrzp5i106PKtzCtnz6PYRRVZSkQAGQ97NaMNlmm3gAzetzIvIvcz 1jUE4CMPGwSkqNaIL0rQq4u1GzckimlFXc3xBsob2P5rLLEW5hvIn5JceTmOFIIF 2nv+ogMkBKGqYPJWPd+nnglxuja/QHWfMqIGkqrlx6hnaPjhGuUZKsJEzH8RhqdJ hHo2jdhcpDmWm20L1F8/3ZJrmUJX+ST7DJrXeKty2iJNLJfItQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMueP55a+ISy7QCHMH9225/MtVAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvOTc2NmU0YjctZTE3OC0z MzUzLTk3YTMtOTU0YTNmZWZhZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+jYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMbf5KEKDtm3rR8++LzFOy+O7pJUXpYH8/qhcxWR9mkI4f/f+pI02uce JMG9qhLrZ/O2jpFXsphVeZ69zJEe1GqgUWrtr0ekOYvuyLg87vwXtfhWEw8NiAgn iqU8tUd/dZzwsHfrZV9Of9KzUOW0yTLDg8PHFSMSaF8+2uMyPFzDAUT0E05e2ZDV 15gN8eFDizqmFsyEs0CwHLHllQ9vDulNbtC1IROJrrmrMZE+bLA/bkUMKYQ2Idk/ z79S7tWTYwFcJt5JgMhuVKCxoev0skaLteCR6MVKgGwGat4YUqZXRGBBokWGAYdY XViQMT3Hb5t1J1HfuoLySG5Y/pGjmVE= -----END CERTIFICATE-----Generated at Thu Apr 3 02:54:23 2025 by rpki-client