$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa File: 4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa (raw, json) Hash identifier: PDfdl9oEdPL7rrh+lbwjKVa51bh8mJgnkcrvRQA8PF4= Subject key identifier: 44:DB:C3:5A:5E:E2:FF:C5:9A:BA:2A:D7:E6:02:28:05:4D:BE:24:3C Certificate issuer: /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0 Certificate serial: 010D0C9F432858496CE453E067D43782D372FAE0 Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 394840 IP address blocks: 199.34.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:53:e0:67:d4:37:82:d3:72:fa:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=6d280574-e0c4-4683-9343-40066cbe780b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fc:4f:95:de:7b:16:f5:cd:49:18:9c:0d:0e: 43:02:c0:a9:11:b6:10:34:ea:23:41:67:6b:d1:1c: b2:4f:f8:7f:e8:57:6d:ca:e0:4c:ec:82:9b:c9:59: 75:c7:7e:22:0f:ea:d7:f5:7c:eb:5a:8c:a8:07:c0: 19:bd:55:36:98:ce:02:43:59:11:5b:2b:0c:04:35: a2:30:e0:85:72:e4:48:54:63:f5:b5:e9:cd:d0:b7: cc:d8:a4:e9:59:3e:66:a2:2f:65:fe:62:45:b5:5c: 7b:50:06:b1:ef:1c:fc:f3:c0:ea:ad:9c:d4:6a:ae: 59:e1:9a:44:ec:c7:94:01:cb:12:31:ce:3e:a9:bc: 62:fb:2f:ba:6f:f5:04:b6:27:ca:23:06:0a:e4:0b: 11:bb:27:53:f9:b7:c8:41:ca:4c:0f:d1:a8:df:39: 19:2c:32:18:98:f1:f5:44:96:e1:34:1c:32:2f:31: a9:8b:8e:aa:ca:cf:43:37:c5:4b:aa:e3:b9:6f:1c: a9:27:8a:18:e7:94:8a:e3:4a:de:37:12:46:1b:8b: 1d:55:91:3a:8a:53:5d:64:3e:81:92:dc:f5:67:eb: 7b:99:c4:13:7e:7b:55:c2:94:02:d1:ea:bb:89:26: 2e:8f:2f:99:a7:cd:23:60:ec:c2:a5:eb:2c:cc:0c: fb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DB:C3:5A:5E:E2:FF:C5:9A:BA:2A:D7:E6:02:28:05:4D:BE:24:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl X509v3 Authority Key Identifier: keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer sbgp-ipAddrBlock: critical IPv4: 199.34.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:24:6b:08:ec:fe:88:f8:03:2f:bc:27:2b:8a:4e:e8:60:4c: 99:6e:40:26:fc:64:7b:a8:38:61:b2:a6:60:93:5a:86:17:4d: 66:2c:fc:9b:ab:f5:08:28:58:74:c7:d2:99:1a:5d:8d:81:72: 30:8c:1d:9f:7c:aa:10:33:85:40:ea:20:57:51:aa:cf:f1:a2: 8c:81:f1:96:27:b0:ac:dc:8a:0a:7b:39:c7:d0:0c:47:05:64: 66:b3:21:e4:03:d6:81:bd:e7:6e:81:ac:ab:78:97:32:f7:35: 8b:cf:14:32:60:1d:f5:68:06:2d:04:8e:43:ce:d6:3d:b0:a2: 3b:55:25:40:cd:18:43:e0:43:7b:33:fe:b4:de:3e:1b:74:98: 2b:fa:9d:7d:1b:e2:e3:f1:11:bc:ec:5d:3e:39:ef:21:6d:d2: 58:fa:a5:65:8d:7c:8b:36:1e:c8:c7:22:80:c0:a8:a9:fd:40: 39:1f:ea:92:9a:6a:45:2c:16:1e:8d:79:3d:02:a8:28:50:2d: f4:e1:f3:f5:15:cf:ba:0e:2c:bf:24:74:09:9f:e2:24:86:34: 1d:4b:3b:6d:34:be:43:85:14:4d:1c:2e:d4:47:a2:65:13:7b: 3f:a4:2b:bf:a7:02:b8:66:61:b2:12:d5:f0:61:96:43:86:a9: be:43:3b:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FPgZ9Q3gtNy+uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYwNDk2YTgtMGNhOS00NWVjLTgyMGYtOGU4OGMzNmU1 OGIwMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NmQyODA1NzQtZTBjNC00NjgzLTkzNDMtNDAwNjZjYmU3ODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/xPld57FvXNSRicDQ5DAsCpEbYQNOojQWdr 0RyyT/h/6FdtyuBM7IKbyVl1x34iD+rX9XzrWoyoB8AZvVU2mM4CQ1kRWysMBDWi MOCFcuRIVGP1tenN0LfM2KTpWT5moi9l/mJFtVx7UAax7xz888DqrZzUaq5Z4ZpE 7MeUAcsSMc4+qbxi+y+6b/UEtifKIwYK5AsRuydT+bfIQcpMD9Go3zkZLDIYmPH1 RJbhNBwyLzGpi46qys9DN8VLquO5bxypJ4oY55SK40reNxJGG4sdVZE6ilNdZD6B ktz1Z+t7mcQTfntVwpQC0eq7iSYujy+Zp80jYOzCpesszAz7LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETbw1pe4v/Fmroq1+YCKAVNviQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0 OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4YzM2ZTU4YjAvNGNjNjg3ZDEtYmJhYy0z MWE2LTljYzMtNGJhNDFmNzhlMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWYwNDk2YTgtMGNhOS00NWVjLTgy MGYtOGU4OGMzNmU1OGIwLzFmMDQ5NmE4LTBjYTktNDVlYy04MjBmLThlODhjMzZl NThiMC5jcmwwHwYDVR0jBBgwFoAUBdmyloInvfkN9+9ROqjQq8Wh1YwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4 YzM2ZTU4YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyIMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwkawjs/oj4Ay+8JyuKTuhgTJluQCb8ZHuoOGGypmCTWoYXTWYs/Jur 9QgoWHTH0pkaXY2BcjCMHZ98qhAzhUDqIFdRqs/xooyB8ZYnsKzcigp7OcfQDEcF ZGazIeQD1oG9526BrKt4lzL3NYvPFDJgHfVoBi0EjkPO1j2wojtVJUDNGEPgQ3sz /rTePht0mCv6nX0b4uPxEbzsXT457yFt0lj6pWWNfIs2HsjHIoDAqKn9QDkf6pKa akUsFh6NeT0CqChQLfTh8/UVz7oOLL8kdAmf4iSGNB1LO200vkOFFE0cLtRHomUT ez+kK7+nArhmYbIS1fBhlkOGqb5DO5I= -----END CERTIFICATE-----Generated at Sat Apr 12 12:39:15 2025 by rpki-client