$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa File: dc4b07de-971f-380d-8210-c351918b260b.roa (raw, json) Hash identifier: HdYzxD5E2j+82iRb/wpP1EGQ2kxHY1kXqsQEwoSWCzA= Subject key identifier: EA:EF:72:21:23:DA:CF:25:50:77:52:07:3A:01:BE:6D:F4:FB:69:9E Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F43285848A99629C428D066BA25B92480 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 26512 IP address blocks: 199.119.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:29:c4:28:d0:66:ba:25:b9:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=b3601ef3-525c-4bb4-b9c7-164fe20c53f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:44:32:3f:b7:90:32:e2:6b:3f:b8:2e:1e: a8:43:89:75:17:1d:a2:1d:fe:93:61:be:a1:ac:66: 17:2f:d2:c6:d1:fe:35:b3:75:05:5b:a7:ba:5a:ac: 9a:b0:41:ee:11:98:79:6b:f5:16:50:fd:2d:04:a0: 25:fb:b6:2c:25:e3:0e:cd:3e:56:47:b9:d5:56:d6: 42:f2:b1:a8:ef:f6:c0:1a:c8:ec:c3:b5:75:6a:b4: 20:d8:8e:bc:a2:ee:1d:a0:c9:18:16:58:bc:c1:3e: 1e:19:85:83:bc:a8:7b:eb:aa:89:36:3c:68:ac:20: ec:db:89:88:56:48:25:9c:0d:88:79:7c:8c:4e:13: ce:4b:d4:0d:a8:23:9f:17:37:d9:ad:e0:a3:4c:0a: 65:cf:ac:7a:99:ec:09:6e:39:68:f0:29:92:db:c2: af:1e:04:d6:d8:72:25:31:30:53:48:3f:ac:df:6f: b8:9f:01:aa:ea:ff:61:36:92:57:7c:b8:9e:94:48: f4:5b:89:fa:9d:80:5b:bb:ad:77:19:d6:af:c8:d7: 3e:23:fb:68:b4:88:a7:9e:15:39:26:bb:81:e6:2d: 60:22:2e:cc:4c:59:d1:f5:05:db:14:09:1b:ba:c3: bf:82:c4:f7:94:9e:f5:92:59:62:0d:b9:7f:b2:64: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EF:72:21:23:DA:CF:25:50:77:52:07:3A:01:BE:6D:F4:FB:69:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 199.119.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9a:6c:82:ce:e6:31:37:64:b8:c5:f7:60:ef:18:a9:8d:62: f7:54:12:a7:6a:51:86:40:04:5e:79:76:10:56:07:06:7a:16: e1:11:d7:87:83:e2:44:75:6e:26:fb:86:02:1b:45:3c:bc:22: 52:79:7b:39:a6:9a:b7:02:b1:1a:12:42:4a:8e:ac:d1:27:59: f6:99:df:fc:2c:c0:37:f8:a0:53:5e:25:87:44:b6:84:24:af: e5:9f:b6:b6:29:85:4a:87:1e:9f:ad:77:04:e9:be:f9:60:bd: e1:2b:c0:24:bb:52:73:9d:f1:2a:4e:ae:4f:3a:04:a6:9d:a2: 7d:a0:88:dc:e6:cd:30:29:89:88:6e:3a:2f:0e:9e:cf:7f:b3: 4b:a5:cf:1e:78:3d:a6:c1:b2:c1:fb:b0:62:76:7c:b0:fe:5a: b7:5e:8b:d5:60:f7:8d:17:f7:4a:ed:1b:df:66:30:92:08:cf: 6b:fb:2d:2e:05:31:35:8d:15:2b:54:11:25:dc:7a:2b:e3:cb: dc:01:41:66:68:bb:7c:6c:ed:26:83:a8:ce:d3:b7:af:cc:9d: 14:af:9b:3d:90:70:08:fe:89:8a:f2:08:34:86:1d:ce:9f:ec: 60:72:5d:78:73:a9:af:dd:d0:ee:7f:f7:f1:07:e1:93:59:31: ee:2d:77:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplinEKNBmuiW5JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YjM2MDFlZjMtNTI1Yy00YmI0LWI5YzctMTY0ZmUyMGM1M2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoNEMj+3kDLiaz+4Lh6oQ4l1Fx2iHf6TYb6h rGYXL9LG0f41s3UFW6e6WqyasEHuEZh5a/UWUP0tBKAl+7YsJeMOzT5WR7nVVtZC 8rGo7/bAGsjsw7V1arQg2I68ou4doMkYFli8wT4eGYWDvKh766qJNjxorCDs24mI VkglnA2IeXyMThPOS9QNqCOfFzfZreCjTAplz6x6mewJbjlo8CmS28KvHgTW2HIl MTBTSD+s32+4nwGq6v9hNpJXfLielEj0W4n6nYBbu613GdavyNc+I/totIinnhU5 JruB5i1gIi7MTFnR9QXbFAkbusO/gsT3lJ71klliDbl/smRBUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrvciEj2s8lUHdSBzoBvm30+2meMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvZGM0YjA3ZGUtOTcxZi0z ODBkLTgyMTAtYzM1MTkxOGIyNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2abILO5jE3ZLjF92DvGKmNYvdUEqdqUYZABF55dhBWBwZ6FuER14eD 4kR1bib7hgIbRTy8IlJ5ezmmmrcCsRoSQkqOrNEnWfaZ3/wswDf4oFNeJYdEtoQk r+WftrYphUqHHp+tdwTpvvlgveErwCS7UnOd8SpOrk86BKadon2giNzmzTApiYhu Oi8Ons9/s0ulzx54PabBssH7sGJ2fLD+Wrdei9Vg940X90rtG99mMJIIz2v7LS4F MTWNFStUESXceivjy9wBQWZou3xs7SaDqM7Tt6/MnRSvmz2QcAj+iYryCDSGHc6f 7GByXXhzqa/d0O5/9/EH4ZNZMe4td7I= -----END CERTIFICATE-----Generated at Fri Apr 11 23:48:43 2025 by rpki-client