$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/e6b3d63b-f0a2-39c0-a2f0-a64ee0f2732b.roa File: e6b3d63b-f0a2-39c0-a2f0-a64ee0f2732b.roa (raw, json) Hash identifier: nDl3zSvAPNzMIyJaI4GTsRtTBJI677ycMc6HgyYndM8= Subject key identifier: 8A:A5:3B:E2:06:15:47:3A:B4:3A:08:74:BA:6B:82:94:BF:04:7B:D9 Certificate issuer: /CN=cce65795-3b77-4225-98f0-89e8bfcf275c Certificate serial: 010D0C9F432858489340AC977E79E98E88388340 Authority key identifier: 3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/e6b3d63b-f0a2-39c0-a2f0-a64ee0f2732b.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 8070 IP address blocks: 199.15.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:ac:97:7e:79:e9:8e:88:38:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cce65795-3b77-4225-98f0-89e8bfcf275c Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=dcfd3579-583d-47fb-ba0c-9b01fc30a28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:17:cc:5e:c2:10:20:ba:b0:d9:1c:ce:3d: 8b:cf:ab:4b:62:44:48:65:d1:a3:ca:0a:e1:4f:c4: a7:90:31:f0:d2:e3:7a:62:62:e2:a2:2f:ed:01:a6: 44:46:14:b7:a7:7e:8c:34:50:95:09:8b:ea:ce:6b: e5:14:fa:77:ed:9c:c3:bf:30:0c:bc:80:ec:bb:96: f8:73:ba:98:6f:55:06:6b:ff:63:6b:41:d4:0e:7d: b2:ee:bf:43:f1:e4:20:54:c3:c7:71:de:9f:de:ab: 34:41:51:71:bd:29:83:9b:98:86:af:7f:92:e3:28: 4d:1b:1c:c5:11:8f:ec:9b:2b:b0:71:03:1a:e7:1c: 4e:63:08:6d:32:1e:5b:c4:b0:a6:a4:c8:13:10:cc: 2e:f4:a3:59:a7:8a:44:73:44:b9:ab:63:44:44:97: fc:57:c1:1d:8d:cc:91:f5:51:fc:02:02:00:b4:3d: 34:c4:de:d0:05:e7:5e:d2:15:0e:6e:6d:40:9f:5b: 7c:45:9d:87:22:d9:47:b8:01:41:bf:4c:c2:6c:78: bc:3b:80:2f:e7:fa:25:35:7a:3e:da:09:60:58:cd: 46:17:20:46:d7:fe:a9:64:65:cf:75:d3:04:7a:cf: e3:20:e8:c6:0a:14:69:77:4a:8c:13:bf:56:c3:e4: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A5:3B:E2:06:15:47:3A:B4:3A:08:74:BA:6B:82:94:BF:04:7B:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/e6b3d63b-f0a2-39c0-a2f0-a64ee0f2732b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl X509v3 Authority Key Identifier: keyid:3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer sbgp-ipAddrBlock: critical IPv4: 199.15.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:2c:ad:44:52:4a:19:15:17:e4:da:c6:45:df:9b:46:af:5f: f1:e8:19:11:7f:1f:bd:91:97:76:87:42:aa:46:34:e1:1f:0e: 36:f4:02:6f:66:99:91:e5:78:4d:c6:42:0a:23:12:9a:8f:85: 85:e1:03:21:19:b5:c0:2e:b8:ba:d2:8b:e2:fc:1f:8b:df:6d: 54:e0:9c:5f:3f:5f:72:21:23:f2:b1:6c:d6:21:72:5e:34:bf: 11:b2:6f:29:1f:ed:d1:57:92:f5:5e:70:c4:b5:05:e1:97:65: 1d:87:4f:61:f2:3f:7f:51:a9:0b:80:f2:51:b6:e1:8f:42:a4: 13:65:36:bb:e6:0b:54:86:db:cb:26:ed:78:25:4d:78:8e:82: 8a:5b:83:8f:b4:50:c9:53:5c:00:48:d3:50:ff:b7:ac:26:9c: c7:a5:7d:cc:1c:ab:3d:5f:fc:86:63:04:50:c5:22:8e:d5:38: 26:70:4d:ec:6f:11:97:64:9d:28:23:89:e1:1c:f5:5d:f3:d9: 33:a9:e5:50:bb:b0:12:e0:ed:35:37:0b:1d:de:a0:ef:da:36: db:ea:51:f9:62:88:f9:a0:33:d6:99:35:9e:2a:e8:33:a6:09: 85:62:af:fc:94:ba:34:ce:94:a2:f3:a4:6b:28:8c:73:ba:db: b2:4a:c6:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQKyXfnnpjog4g0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NlNjU3OTUtM2I3Ny00MjI1LTk4ZjAtODllOGJmY2Yy NzVjMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk ZGNmZDM1NzktNTgzZC00N2ZiLWJhMGMtOWIwMWZjMzBhMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgYXzF7CECC6sNkczj2Lz6tLYkRIZdGjygrh T8SnkDHw0uN6YmLioi/tAaZERhS3p36MNFCVCYvqzmvlFPp37ZzDvzAMvIDsu5b4 c7qYb1UGa/9ja0HUDn2y7r9D8eQgVMPHcd6f3qs0QVFxvSmDm5iGr3+S4yhNGxzF EY/smyuwcQMa5xxOYwhtMh5bxLCmpMgTEMwu9KNZp4pEc0S5q2NERJf8V8EdjcyR 9VH8AgIAtD00xN7QBede0hUObm1An1t8RZ2HItlHuAFBv0zCbHi8O4Av5/olNXo+ 2glgWM1GFyBG1/6pZGXPddMEes/jIOjGChRpd0qME79Ww+SPKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqlO+IGFUc6tDoIdLprgpS/BHvZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2U2 NTc5NS0zYjc3LTQyMjUtOThmMC04OWU4YmZjZjI3NWMvZTZiM2Q2M2ItZjBhMi0z OWMwLWEyZjAtYTY0ZWUwZjI3MzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NlNjU3OTUtM2I3Ny00MjI1LTk4 ZjAtODllOGJmY2YyNzVjL2NjZTY1Nzk1LTNiNzctNDIyNS05OGYwLTg5ZThiZmNm Mjc1Yy5jcmwwHwYDVR0jBBgwFoAUPcZcrflEVZKVwKVsknQ/AGpyi4swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jY2U2NTc5NS0zYjc3LTQyMjUtOThmMC04OWU4 YmZjZjI3NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxw+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUsrURSShkVF+TaxkXfm0avX/HoGRF/H72Rl3aHQqpGNOEfDjb0Am9m mZHleE3GQgojEpqPhYXhAyEZtcAuuLrSi+L8H4vfbVTgnF8/X3IhI/KxbNYhcl40 vxGybykf7dFXkvVecMS1BeGXZR2HT2HyP39RqQuA8lG24Y9CpBNlNrvmC1SG28sm 7XglTXiOgopbg4+0UMlTXABI01D/t6wmnMelfcwcqz1f/IZjBFDFIo7VOCZwTexv EZdknSgjieEc9V3z2TOp5VC7sBLg7TU3Cx3eoO/aNtvqUfliiPmgM9aZNZ4q6DOm CYVir/yUujTOlKLzpGsojHO627JKxoA= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:49 2025 by rpki-client