$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa File: f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa (raw, json) Hash identifier: U1IDCQRG00lu+nOj2PjbNgr5KCwo5JpFR8G4l3sgQGg= Subject key identifier: A0:39:79:28:0B:40:A8:18:86:F5:75:15:EF:84:D0:3F:1D:FE:B8:D9 Certificate issuer: /CN=9179e4ff-328d-4753-b8f9-9149f799cfec Certificate serial: 010D0C9F4328584955294D0807EF8C4341F54500 Authority key identifier: 65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 400298 IP address blocks: 172.99.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:4d:08:07:ef:8c:43:41:f5:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9179e4ff-328d-4753-b8f9-9149f799cfec Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=0c25b612-2d9a-4163-9654-3f4cf7fefbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:f6:a3:b2:68:3f:1d:6d:73:be:d3:17:ab: 4e:78:8a:17:44:6e:11:68:5e:2a:39:f2:90:6e:cc: 91:bc:34:4b:d9:78:ec:fd:39:d6:aa:c1:b7:93:71: 9e:26:8f:ef:e8:14:ad:e3:29:0c:e9:cc:a9:9c:f3: 06:f5:a0:82:4b:2b:c9:9e:7a:3c:d7:d1:6d:c9:0b: d6:77:fc:a6:75:3a:e2:88:01:81:cc:5f:03:54:4a: 48:a4:4c:c6:d2:6c:20:7e:85:76:75:9d:f3:a5:70: e1:8d:c8:56:96:4a:c8:71:31:f2:d5:dd:ba:45:37: 1e:1b:25:5d:d8:a6:05:74:ca:c2:1c:57:1c:b5:0e: b1:00:9a:d9:06:c3:f6:36:b6:bc:5f:67:32:ed:41: 82:33:21:7e:7d:19:8e:3e:62:f2:ae:63:9d:65:3a: 2e:2b:e1:90:96:44:81:42:1c:01:48:62:d6:06:93: 1f:2f:f0:1a:66:c0:1a:9d:6f:a1:fc:19:c4:a1:25: e2:f7:31:c8:6b:c4:62:92:67:a7:6a:ae:fc:6c:d4: ff:f3:e1:1b:7f:20:3b:ef:20:68:47:95:3c:bc:d1: 34:0e:1c:0b:66:fe:1c:f7:59:00:c3:33:39:e2:3f: 49:2b:d5:c0:92:13:f3:a7:83:68:eb:26:54:e4:48: 98:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:39:79:28:0B:40:A8:18:86:F5:75:15:EF:84:D0:3F:1D:FE:B8:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl X509v3 Authority Key Identifier: keyid:65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer sbgp-ipAddrBlock: critical IPv4: 172.99.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7e:6a:97:a7:48:ce:00:78:12:10:e7:7f:9e:bc:97:21:8a: 98:a0:94:9a:27:65:61:e1:20:dd:f7:5a:ef:39:eb:57:e4:8f: a3:7d:b2:22:8b:bf:60:2c:97:2a:7e:5d:df:57:d1:b6:bc:a7: 9d:6d:b4:73:5b:f7:33:0f:b7:56:ee:0a:24:99:2d:3f:74:fa: 5d:5f:38:3b:74:75:66:7d:9b:3e:92:ec:57:65:87:5b:18:b4: 87:86:f2:92:bb:ae:5b:87:9d:90:c7:54:5a:b7:32:fc:2d:fa: c7:9c:76:f7:ce:53:08:26:72:13:01:22:a4:c5:47:04:89:60: f1:72:18:dc:5d:53:a6:b4:f0:b3:c9:7a:9d:d0:63:8d:af:35: f9:99:17:b8:3e:7f:79:35:11:4e:63:a3:e2:ab:f2:f6:10:e7: 5e:61:03:ff:93:d0:e1:8f:61:0d:3c:1c:58:52:03:72:44:ef: bd:e6:80:f1:91:93:14:a1:74:2e:e1:f6:0c:e8:3e:e3:94:78: f0:db:93:4e:c1:f5:94:b1:4a:54:1e:c3:02:01:a9:e1:44:d3: 09:59:97:57:bb:b9:82:ca:35:47:7e:8e:9f:77:f4:b9:23:f8: f9:9f:b6:cd:66:e4:7a:4c:ae:c1:fe:a8:78:23:18:b9:da:79: de:92:2f:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKU0IB++MQ0H1RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3OWU0ZmYtMzI4ZC00NzUzLWI4ZjktOTE0OWY3OTlj ZmVjMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk MGMyNWI2MTItMmQ5YS00MTYzLTk2NTQtM2Y0Y2Y3ZmVmYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9z2o7JoPx1tc77TF6tOeIoXRG4RaF4qOfKQ bsyRvDRL2Xjs/TnWqsG3k3GeJo/v6BSt4ykM6cypnPMG9aCCSyvJnno819FtyQvW d/ymdTriiAGBzF8DVEpIpEzG0mwgfoV2dZ3zpXDhjchWlkrIcTHy1d26RTceGyVd 2KYFdMrCHFcctQ6xAJrZBsP2Nra8X2cy7UGCMyF+fRmOPmLyrmOdZTouK+GQlkSB QhwBSGLWBpMfL/AaZsAanW+h/BnEoSXi9zHIa8Rikmenaq78bNT/8+EbfyA77yBo R5U8vNE0DhwLZv4c91kAwzM54j9JK9XAkhPzp4No6yZU5EiY4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKA5eSgLQKgYhvV1Fe+E0D8d/rjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MTc5 ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5Zjc5OWNmZWMvZjhmYzhlYWItZWM2ZC0z YmE3LWI0NDYtZmQxM2MyYWNmM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTE3OWU0ZmYtMzI4ZC00NzUzLWI4 ZjktOTE0OWY3OTljZmVjLzkxNzllNGZmLTMyOGQtNDc1My1iOGY5LTkxNDlmNzk5 Y2ZlYy5jcmwwHwYDVR0jBBgwFoAUZXVcqxvYwbQyDbfnvitAqdeXtxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MTc5ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5 Zjc5OWNmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5+apenSM4AeBIQ53+evJchipiglJonZWHhIN33Wu8561fkj6N9siKL v2Aslyp+Xd9X0ba8p51ttHNb9zMPt1buCiSZLT90+l1fODt0dWZ9mz6S7Fdlh1sY tIeG8pK7rluHnZDHVFq3Mvwt+secdvfOUwgmchMBIqTFRwSJYPFyGNxdU6a08LPJ ep3QY42vNfmZF7g+f3k1EU5jo+Kr8vYQ515hA/+T0OGPYQ08HFhSA3JE773mgPGR kxShdC7h9gzoPuOUePDbk07B9ZSxSlQewwIBqeFE0wlZl1e7uYLKNUd+jp939Lkj +Pmfts1m5HpMrsH+qHgjGLnaed6SL9M= -----END CERTIFICATE-----Generated at Mon Apr 7 07:04:20 2025 by rpki-client