$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa File: 8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa (raw, json) Hash identifier: wvbHqvDBfuXLZQyxvyI2tT5Py/kRXMTp46m7lUpzURU= Subject key identifier: DE:5F:63:D1:B7:F5:1C:AB:93:AF:24:A0:C0:A2:7F:AB:9D:83:7A:00 Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F43285848D7A64A7F2452820916341E40 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 54054 IP address blocks: 199.168.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:4a:7f:24:52:82:09:16:34:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=1f22377c-ad88-4119-901b-0ead34668551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ab:44:24:78:3d:6f:d1:12:38:72:6b:4d:fc: 4c:da:28:ea:48:49:f7:58:a1:71:30:85:9c:de:f2: a8:c2:d1:c6:9e:ad:ad:97:a2:2c:8d:b1:bf:e1:fd: ef:b1:72:f8:aa:cc:ae:6d:87:4a:21:65:58:de:30: 54:f1:6a:a1:18:e9:f2:1d:8b:80:dd:e5:dd:a5:a4: 85:6a:49:99:2e:80:a0:eb:af:5b:ca:02:3d:34:d2: c8:79:8b:e0:62:7f:33:1a:d6:cb:88:e4:92:6a:72: 9c:9c:59:6f:a4:5d:3a:88:83:b5:7e:96:2e:35:c8: 55:80:93:c8:fe:cd:74:93:00:23:35:5d:35:8b:a9: 56:42:63:d2:62:e6:8f:41:36:99:ca:00:91:0c:49: 6e:12:26:67:ed:a3:5b:2c:75:4f:0e:57:03:69:68: d2:90:6c:f6:73:2f:25:6c:a2:ab:18:11:87:45:64: 74:0f:56:0c:39:88:84:a3:0c:40:b6:68:95:cc:21: 66:b3:6d:3c:ca:2c:96:d8:7b:04:74:26:5c:2c:a9: 07:62:00:60:50:e8:8e:ba:e7:b0:0f:10:a9:37:b6: 05:43:fb:ef:32:f5:da:9e:6a:0b:32:01:30:cf:ab: b2:58:d8:ad:7c:5e:e3:56:77:4e:36:4e:63:c8:cb: 39:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5F:63:D1:B7:F5:1C:AB:93:AF:24:A0:C0:A2:7F:AB:9D:83:7A:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv4: 199.168.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ba:32:ce:b1:44:e4:e9:79:6c:5b:da:91:c8:05:8a:3c:38: 14:1d:75:80:a0:bb:0a:c7:b9:a7:56:be:b4:10:b0:96:12:36: e0:5b:7a:a8:45:cd:52:dc:25:24:7e:62:99:3b:1a:65:8a:c7: 5f:7b:43:3d:3a:75:70:2c:d6:d2:82:a7:6c:ec:10:1b:70:4c: 74:b5:eb:c3:05:17:2c:35:a8:e0:e3:14:de:94:05:30:67:3d: d1:e1:e1:12:04:da:08:ce:35:6a:d3:53:3d:ed:fb:d6:81:35: 6a:25:39:5c:c5:b0:12:4b:bc:1b:0d:b4:33:32:10:78:21:5b: 44:25:1f:6a:c2:72:c5:7b:c3:e5:68:74:08:f8:f7:b3:07:e9: f4:87:15:82:46:1f:7d:44:73:c0:86:db:c9:56:b3:34:29:11: 08:52:1b:73:6d:9d:bc:25:d1:c4:f1:16:0e:ad:e8:4f:e4:cb: c5:e1:a8:6b:9f:61:0d:b1:4c:0f:86:32:24:ff:56:21:3b:a7: 02:8d:cf:79:1d:b2:4a:6d:0f:0b:dc:20:1e:4f:d0:ec:5c:46: 62:34:26:a2:a2:ae:8b:c7:dc:91:f2:9e:fc:52:78:e0:aa:67: 1e:d5:6d:9c:65:14:0c:2e:a2:93:a2:e8:29:e5:7d:03:a0:33: 76:8c:cd:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpkp/JFKCCRY0HkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk MWYyMjM3N2MtYWQ4OC00MTE5LTkwMWItMGVhZDM0NjY4NTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6tEJHg9b9ESOHJrTfxM2ijqSEn3WKFxMIWc 3vKowtHGnq2tl6IsjbG/4f3vsXL4qsyubYdKIWVY3jBU8WqhGOnyHYuA3eXdpaSF akmZLoCg669bygI9NNLIeYvgYn8zGtbLiOSSanKcnFlvpF06iIO1fpYuNchVgJPI /s10kwAjNV01i6lWQmPSYuaPQTaZygCRDEluEiZn7aNbLHVPDlcDaWjSkGz2cy8l bKKrGBGHRWR0D1YMOYiEowxAtmiVzCFms208yiyW2HsEdCZcLKkHYgBgUOiOuuew DxCpN7YFQ/vvMvXanmoLMgEwz6uyWNitfF7jVndONk5jyMs5/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5fY9G39Ryrk68koMCif6udg3oAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvOGMzOWU5ZTUtYmZmOS0z YmY5LWIwODItYTc4ZGI3OTdkN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF26Ms6xROTpeWxb2pHIBYo8OBQddYCguwrHuadWvrQQsJYSNuBbeqhF zVLcJSR+Ypk7GmWKx197Qz06dXAs1tKCp2zsEBtwTHS168MFFyw1qODjFN6UBTBn PdHh4RIE2gjONWrTUz3t+9aBNWolOVzFsBJLvBsNtDMyEHghW0QlH2rCcsV7w+Vo dAj497MH6fSHFYJGH31Ec8CG28lWszQpEQhSG3Ntnbwl0cTxFg6t6E/ky8XhqGuf YQ2xTA+GMiT/ViE7pwKNz3kdskptDwvcIB5P0OxcRmI0JqKirovH3JHynvxSeOCq Zx7VbZxlFAwuopOi6CnlfQOgM3aMzWs= -----END CERTIFICATE-----Generated at Fri Apr 11 23:40:50 2025 by rpki-client