$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa File: 999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa (raw, json) Hash identifier: 9tRSC7Nf8iALagyx+r5kWEDtKh08SnKQMdBLC29Tjdw= Subject key identifier: E4:F9:C4:5B:4D:3D:6D:5A:73:F7:45:EA:9E:9B:22:17:1A:10:BE:06 Certificate issuer: /CN=9ac7679f-d727-44b3-9b13-6e689c3eff61 Certificate serial: 010D0C9F432858497DA46FF83B2BE9CACE677640 Authority key identifier: DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 399385 IP address blocks: 205.137.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:6f:f8:3b:2b:e9:ca:ce:67:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac7679f-d727-44b3-9b13-6e689c3eff61 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=11555b4f-02a0-4961-adbf-53c35e0676fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:22:c4:e3:c4:0f:b1:15:57:88:79:2e:8e:3f: f5:5e:35:03:61:72:be:0d:01:41:b8:08:7a:11:de: db:a4:31:1b:7d:70:ac:2a:c8:a8:71:77:8e:11:b2: 31:d4:ca:32:d0:24:6b:fd:f0:37:f3:94:16:20:75: e9:0c:17:df:70:a2:fc:bc:6b:e9:26:e7:c9:47:43: 22:12:63:cd:1f:b8:69:36:01:2f:0a:17:d3:92:41: 06:e4:e9:fb:4a:6f:6c:3e:87:62:c8:23:a7:b1:e2: e5:66:4f:d6:1a:06:ae:61:ad:b7:7f:7b:2f:fc:4a: f9:fb:65:83:28:e8:68:f1:45:fd:07:fb:46:d3:c0: 1e:a4:8c:3c:d2:f7:89:9a:d7:1c:31:18:cd:5c:ef: 33:06:b0:90:15:cb:4b:06:da:df:73:c7:60:dd:0d: 38:78:a3:37:8f:e6:2a:68:80:fe:e6:db:a1:42:a3: 08:6b:2d:33:ce:19:60:7a:92:70:df:50:d4:bd:61: 40:7d:7b:b2:d4:71:a7:2f:85:07:e0:8e:64:4c:30: 57:1b:66:a0:ed:24:53:e8:7d:c7:72:b2:be:05:c4: a7:02:74:e7:cc:56:96:37:f5:8d:29:02:5a:05:5e: e1:4e:ca:c5:bf:c4:15:4b:e2:3a:f9:ab:10:93:d4: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F9:C4:5B:4D:3D:6D:5A:73:F7:45:EA:9E:9B:22:17:1A:10:BE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.crl X509v3 Authority Key Identifier: keyid:DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer sbgp-ipAddrBlock: critical IPv4: 205.137.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8c:f5:05:8e:15:cf:f5:0e:9e:14:b0:26:41:ab:f8:36:71: b0:81:30:86:be:73:1d:1e:90:58:7d:4d:08:06:66:17:ff:a9: 72:fb:be:1d:d0:9f:97:29:c6:bc:5a:f8:41:95:85:8d:1d:68: 8a:e4:4f:26:c3:16:5d:89:5c:25:44:67:35:4d:57:f7:26:8a: f1:e9:09:e9:9c:07:ca:84:ca:89:25:41:6d:a4:35:a2:fc:de: 4d:96:29:60:a3:78:28:1a:48:3d:f0:da:04:25:67:bd:4e:60: 97:64:29:0b:84:8c:68:f1:6a:75:51:46:ae:e4:63:e5:ab:11: d1:07:da:88:3e:d5:71:a9:5f:4f:7c:1c:8e:f5:8d:18:b5:1c: 35:c6:e4:a0:0b:ed:d8:8a:e1:61:43:96:db:49:da:b5:91:e6: f9:f0:06:04:2e:c7:c5:7a:03:4d:77:af:df:2b:93:13:3d:4d: 32:e9:e4:f4:80:c6:5d:e4:52:eb:80:72:16:0d:fb:c7:c0:d6: c6:81:dc:de:76:2c:03:3b:83:fd:e4:db:df:fc:3d:35:de:3a: a3:42:27:3c:6b:33:d6:41:80:ba:3e:13:5a:45:0f:be:58:98: c8:0d:32:ad:90:fa:26:5d:55:c2:a5:35:8d:6d:25:5c:a5:fb: cd:29:e4:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pG/4Oyvpys5ndkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjNzY3OWYtZDcyNy00NGIzLTliMTMtNmU2ODljM2Vm ZjYxMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTE1NTViNGYtMDJhMC00OTYxLWFkYmYtNTNjMzVlMDY3NmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSLE48QPsRVXiHkujj/1XjUDYXK+DQFBuAh6 Ed7bpDEbfXCsKsiocXeOEbIx1Moy0CRr/fA385QWIHXpDBffcKL8vGvpJufJR0Mi EmPNH7hpNgEvChfTkkEG5On7Sm9sPodiyCOnseLlZk/WGgauYa23f3sv/Er5+2WD KOho8UX9B/tG08AepIw80veJmtccMRjNXO8zBrCQFctLBtrfc8dg3Q04eKM3j+Yq aID+5tuhQqMIay0zzhlgepJw31DUvWFAfXuy1HGnL4UH4I5kTDBXG2ag7SRT6H3H crK+BcSnAnTnzFaWN/WNKQJaBV7hTsrFv8QVS+I6+asQk9St7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOT5xFtNPW1ac/dF6p6bIhcaEL4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YWM3 Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4OWMzZWZmNjEvOTk5YmFmM2QtNThiNC0z ZmRmLTliNWYtNGMwZDI4MDFlM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWFjNzY3OWYtZDcyNy00NGIzLTli MTMtNmU2ODljM2VmZjYxLzlhYzc2NzlmLWQ3MjctNDRiMy05YjEzLTZlNjg5YzNl ZmY2MS5jcmwwHwYDVR0jBBgwFoAU3A46C13lZNtnXGsSagLFu2PXQWAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YWM3Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4 OWMzZWZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzYn5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiM9QWOFc/1Dp4UsCZBq/g2cbCBMIa+cx0ekFh9TQgGZhf/qXL7vh3Q n5cpxrxa+EGVhY0daIrkTybDFl2JXCVEZzVNV/cmivHpCemcB8qEyoklQW2kNaL8 3k2WKWCjeCgaSD3w2gQlZ71OYJdkKQuEjGjxanVRRq7kY+WrEdEH2og+1XGpX098 HI71jRi1HDXG5KAL7diK4WFDlttJ2rWR5vnwBgQux8V6A013r98rkxM9TTLp5PSA xl3kUuuAchYN+8fA1saB3N52LAM7g/3k29/8PTXeOqNCJzxrM9ZBgLo+E1pFD75Y mMgNMq2Q+iZdVcKlNY1tJVyl+80p5Ms= -----END CERTIFICATE-----Generated at Sat Apr 12 16:01:02 2025 by rpki-client