$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/02651ac1-004c-3a1b-a0a5-2e9e4e0fd095.roa File: 02651ac1-004c-3a1b-a0a5-2e9e4e0fd095.roa (raw, json) Hash identifier: ulR9So0bvwu8tslvOOB/RxM3oL01HnrrG44wV5eRX8s= Subject key identifier: 51:92:A2:47:2F:58:45:0D:4A:90:39:65:B2:60:28:7C:33:02:E7:F8 Certificate issuer: /CN=56b96151-8a90-41ad-aefc-1091ab214a92 Certificate serial: 010D0C9F43285848F22C6EB0FC8E01A741F5C400 Authority key identifier: DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/02651ac1-004c-3a1b-a0a5-2e9e4e0fd095.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 199.91.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6e:b0:fc:8e:01:a7:41:f5:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b96151-8a90-41ad-aefc-1091ab214a92 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=8df52dc1-b54d-4280-bd68-f49d4427b78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:60:1e:ad:a7:3f:c8:e6:7d:bb:b9:c6:4d: 60:6f:b2:1a:c1:5d:bd:aa:0b:61:71:fd:06:4d:ba: 1e:b7:cf:35:e8:96:c4:2d:41:e0:60:67:e2:8e:3e: a3:f5:2d:7a:73:3b:ac:4f:c5:22:d3:ac:32:16:df: 4a:1c:42:99:04:1d:08:cc:9a:14:27:0e:9a:6b:bf: db:4c:fc:7d:a1:ec:57:32:a1:52:d0:b7:cf:55:64: 0f:56:e2:da:7b:d3:38:b7:61:74:b2:1b:2f:33:4d: fe:21:b1:b6:09:87:e7:39:df:94:5b:d2:d1:20:f8: 25:11:aa:bf:14:e4:38:75:28:35:3d:22:a3:b0:22: 30:b2:9e:e9:a9:9c:3a:a6:d6:57:77:2f:e9:c9:4e: 48:64:af:c7:5e:74:16:01:5b:2f:bd:48:ba:77:83: 4b:72:81:0b:f4:87:25:5f:48:dc:13:8c:15:21:9a: 32:ec:0a:5f:98:6c:dd:8e:9c:77:8d:28:67:6a:eb: 3e:d8:9d:e7:cb:93:bc:7f:76:c6:19:42:58:6d:b9: 3c:48:21:58:bb:85:56:0d:3b:70:72:70:8b:f7:4b: ed:e8:14:9a:ad:f1:36:76:9d:33:a3:7c:ec:a0:e3: e3:6e:83:09:05:ca:7c:9f:ec:9b:85:3d:94:6c:f1: ea:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:92:A2:47:2F:58:45:0D:4A:90:39:65:B2:60:28:7C:33:02:E7:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/02651ac1-004c-3a1b-a0a5-2e9e4e0fd095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl X509v3 Authority Key Identifier: keyid:DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer sbgp-ipAddrBlock: critical IPv4: 199.91.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:eb:bd:59:86:37:e6:67:b1:2c:71:6a:52:d3:54:e0:18:00: 4c:1d:4c:0a:28:78:6e:a7:86:b3:a5:9c:ef:81:c7:c3:f5:cd: a5:f8:6e:88:7e:e4:46:56:70:d6:a1:f2:64:e8:54:b2:da:42: bc:a0:56:53:4c:3d:1a:42:66:51:67:fb:3e:fc:3d:9f:91:7e: 0d:87:f5:87:f7:6c:97:8e:ea:a5:85:d0:83:75:6a:23:23:49: 64:1b:9b:2e:3d:ab:49:95:ed:bd:12:e8:a7:a1:48:f7:f6:39: 0f:ae:cc:13:6a:0f:d5:b7:b5:6d:79:7c:1e:00:08:af:df:05: 26:0d:e9:d8:e3:7a:37:5a:9f:23:84:79:b8:67:f7:eb:db:8c: 5f:27:ff:ae:95:47:7a:f9:c2:9f:60:2e:8c:0f:4f:08:e6:9f: ee:b1:1d:30:b9:d6:db:5e:01:a3:6b:7d:8b:d8:db:82:46:83: c8:83:ba:24:94:1c:88:f5:c1:44:19:20:a5:43:f7:1f:64:e7: 26:e4:a6:6a:64:7a:c1:22:cb:0d:d2:4f:44:84:39:9c:47:ec: 02:bc:7e:8f:43:92:25:bb:8f:28:d9:48:8b:c1:14:96:3a:d6: b3:35:92:4f:8c:e1:3f:40:db:91:95:1e:a7:56:59:02:1a:44: 01:9a:71:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLG6w/I4Bp0H1xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZiOTYxNTEtOGE5MC00MWFkLWFlZmMtMTA5MWFiMjE0 YTkyMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk OGRmNTJkYzEtYjU0ZC00MjgwLWJkNjgtZjQ5ZDQ0MjdiNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJxgHq2nP8jmfbu5xk1gb7IawV29qgthcf0G Tboet8816JbELUHgYGfijj6j9S16czusT8Ui06wyFt9KHEKZBB0IzJoUJw6aa7/b TPx9oexXMqFS0LfPVWQPVuLae9M4t2F0shsvM03+IbG2CYfnOd+UW9LRIPglEaq/ FOQ4dSg1PSKjsCIwsp7pqZw6ptZXdy/pyU5IZK/HXnQWAVsvvUi6d4NLcoEL9Icl X0jcE4wVIZoy7ApfmGzdjpx3jShnaus+2J3ny5O8f3bGGUJYbbk8SCFYu4VWDTtw cnCL90vt6BSarfE2dp0zo3zsoOPjboMJBcp8n+ybhT2UbPHqJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGSokcvWEUNSpA5ZbJgKHwzAuf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NmI5 NjE1MS04YTkwLTQxYWQtYWVmYy0xMDkxYWIyMTRhOTIvMDI2NTFhYzEtMDA0Yy0z YTFiLWEwYTUtMmU5ZTRlMGZkMDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTZiOTYxNTEtOGE5MC00MWFkLWFl ZmMtMTA5MWFiMjE0YTkyLzU2Yjk2MTUxLThhOTAtNDFhZC1hZWZjLTEwOTFhYjIx NGE5Mi5jcmwwHwYDVR0jBBgwFoAU3Py9gXmsF/Ffsd0NchX69k8bld8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NmI5NjE1MS04YTkwLTQxYWQtYWVmYy0xMDkx YWIyMTRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1u8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrrvVmGN+ZnsSxxalLTVOAYAEwdTAooeG6nhrOlnO+Bx8P1zaX4boh+ 5EZWcNah8mToVLLaQrygVlNMPRpCZlFn+z78PZ+Rfg2H9Yf3bJeO6qWF0IN1aiMj SWQbmy49q0mV7b0S6KehSPf2OQ+uzBNqD9W3tW15fB4ACK/fBSYN6djjejdanyOE ebhn9+vbjF8n/66VR3r5wp9gLowPTwjmn+6xHTC51tteAaNrfYvY24JGg8iDuiSU HIj1wUQZIKVD9x9k5ybkpmpkesEiyw3ST0SEOZxH7AK8fo9DkiW7jyjZSIvBFJY6 1rM1kk+M4T9A25GVHqdWWQIaRAGacc0= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:18 2025 by rpki-client