$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa File: 854cc417-9964-39fb-bc3c-89da106824ca.roa (raw, json) Hash identifier: qZD1+ksE1alsZsauBcaP5pGa67Oqpse4VH7LyRWrUOE= Subject key identifier: 91:50:15:12:AF:C1:28:42:83:55:79:08:01:15:D4:3C:9C:81:6D:69 Certificate issuer: /CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Certificate serial: 010D0C9F43285848B62615A9AD77593740553480 Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 21777 IP address blocks: 199.33.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:15:a9:ad:77:59:37:40:55:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=c5dae34d-380f-4d57-8b5c-64d7aeb0910f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:14:d3:0b:5e:04:a9:8d:17:fb:20:61:48:dc: 46:25:65:71:ac:80:00:88:4c:f9:63:b7:f7:ac:d6: 63:07:6f:39:ac:9d:94:80:98:47:33:07:aa:90:e0: 2d:91:39:08:de:a4:17:73:de:0e:de:d7:6c:88:90: 2e:47:65:11:25:ee:a2:54:21:7c:7e:d7:da:d8:56: c0:9a:98:d3:28:5e:8c:ae:d4:8a:b2:23:e2:57:c1: 8a:bd:c9:17:1f:ce:f1:09:e3:0c:e4:55:f1:46:6e: fe:18:8b:22:1b:5b:0b:aa:43:a9:50:63:fd:08:14: f5:65:52:d9:70:bd:75:59:03:3d:c6:ad:78:60:bd: 75:2f:b4:22:d5:9d:d2:68:32:c5:0a:5d:a4:80:fe: 44:6b:a8:d4:ea:03:4e:50:6c:9c:b2:37:4e:97:44: aa:60:5f:51:7c:d4:37:48:4d:f9:1b:4c:05:91:4f: 95:28:13:0a:13:3e:2d:b6:bd:1f:0f:a7:55:27:61: 76:27:ae:ab:c1:87:d2:6b:22:64:0d:cf:0e:1f:c6: a8:2c:fd:56:00:ef:23:00:39:f4:31:71:91:c7:a4: b6:3e:6e:50:43:bd:d2:1f:86:d5:0f:f3:49:e8:dc: 57:fc:c6:a0:5d:25:99:78:65:0d:be:64:fa:d7:23: 2a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:50:15:12:AF:C1:28:42:83:55:79:08:01:15:D4:3C:9C:81:6D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl X509v3 Authority Key Identifier: keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer sbgp-ipAddrBlock: critical IPv4: 199.33.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:95:fc:8d:2a:dc:e4:f5:c2:4f:84:94:b4:ed:03:a2:37:ce: c5:6a:ea:5f:a4:5e:ac:e6:ca:b8:a4:cc:ef:f3:68:44:42:56: 43:95:6c:90:04:f5:c1:02:af:76:c1:a3:fc:c9:75:18:de:42: 89:b0:c3:ac:8a:44:c5:d2:ab:e0:70:a9:6e:e5:1a:f7:a3:a6: b2:06:21:10:70:4b:e9:0c:56:0a:32:ea:1b:dd:a3:ea:b3:7d: 14:93:c4:86:c7:f1:c2:86:51:36:70:f0:81:4d:90:19:e7:e1: 66:97:c3:27:f5:2a:8d:b8:43:7f:22:2a:47:d7:d1:08:40:89: 3a:d6:41:d0:fe:bf:74:55:76:09:52:72:36:8d:9c:78:69:16: f2:fe:a8:28:ed:e6:ab:a8:d5:4b:b1:7f:22:f4:8f:63:24:2e: 8f:27:c9:0d:40:5e:4f:e9:b0:c9:cb:ff:bb:ce:15:36:a9:af: 15:cf:7b:ac:2b:09:da:65:fc:38:18:b0:82:bd:00:9c:2b:86: 15:1d:f5:ab:66:f6:c9:b2:2e:c7:81:70:b9:28:53:a6:6b:80: 4c:c9:4d:37:c3:df:a7:7f:e6:0e:5a:e6:a4:0f:43:ef:8e:7f: 4d:4a:f8:bc:e9:2a:39:7a:a3:e6:51:e3:92:f3:e8:a0:38:ca: 4a:1f:9e:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2JhWprXdZN0BVNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg0ZWE1YzMtMzIyNi00OGFjLTgzOGItMGZkZjY5MTc2 ODU0MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk YzVkYWUzNGQtMzgwZi00ZDU3LThiNWMtNjRkN2FlYjA5MTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xTTC14EqY0X+yBhSNxGJWVxrIAAiEz5Y7f3 rNZjB285rJ2UgJhHMweqkOAtkTkI3qQXc94O3tdsiJAuR2URJe6iVCF8ftfa2FbA mpjTKF6MrtSKsiPiV8GKvckXH87xCeMM5FXxRm7+GIsiG1sLqkOpUGP9CBT1ZVLZ cL11WQM9xq14YL11L7Qi1Z3SaDLFCl2kgP5Ea6jU6gNOUGycsjdOl0SqYF9RfNQ3 SE35G0wFkU+VKBMKEz4ttr0fD6dVJ2F2J66rwYfSayJkDc8OH8aoLP1WAO8jADn0 MXGRx6S2Pm5QQ73SH4bVD/NJ6NxX/MagXSWZeGUNvmT61yMqdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFQFRKvwShCg1V5CAEV1DycgW1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODRl YTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRmNjkxNzY4NTQvODU0Y2M0MTctOTk2NC0z OWZiLWJjM2MtODlkYTEwNjgyNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg0ZWE1YzMtMzIyNi00OGFjLTgz OGItMGZkZjY5MTc2ODU0L2Y4NGVhNWMzLTMyMjYtNDhhYy04MzhiLTBmZGY2OTE3 Njg1NC5jcmwwHwYDVR0jBBgwFoAUgnGeZO77bFrpQf3uHVWoMhY77kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODRlYTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRm NjkxNzY4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWV/I0q3OT1wk+ElLTtA6I3zsVq6l+kXqzmyrikzO/zaERCVkOVbJAE 9cECr3bBo/zJdRjeQomww6yKRMXSq+BwqW7lGvejprIGIRBwS+kMVgoy6hvdo+qz fRSTxIbH8cKGUTZw8IFNkBnn4WaXwyf1Ko24Q38iKkfX0QhAiTrWQdD+v3RVdglS cjaNnHhpFvL+qCjt5quo1UuxfyL0j2MkLo8nyQ1AXk/psMnL/7vOFTaprxXPe6wr Cdpl/DgYsIK9AJwrhhUd9atm9smyLseBcLkoU6ZrgEzJTTfD36d/5g5a5qQPQ++O f01K+LzpKjl6o+ZR45Lz6KA4ykofnqo= -----END CERTIFICATE-----Generated at Sat Apr 12 00:25:59 2025 by rpki-client